./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2970566955 <...> [ 97.178527][ T8] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.135' (ED25519) to the list of known hosts. execve("./syz-executor2970566955", ["./syz-executor2970566955"], 0x7fffc4499120 /* 10 vars */) = 0 brk(NULL) = 0x555563237000 brk(0x555563237d40) = 0x555563237d40 arch_prctl(ARCH_SET_FS, 0x5555632373c0) = 0 set_tid_address(0x555563237690) = 5831 set_robust_list(0x5555632376a0, 24) = 0 rseq(0x555563237ce0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2970566955", 4096) = 28 getrandom("\x3e\x86\x7c\x2c\x02\xd8\x06\x2c", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555563237d40 brk(0x555563258d40) = 0x555563258d40 brk(0x555563259000) = 0x555563259000 mprotect(0x7fa6acb40000, 16384, PROT_READ) = 0 mmap(0x3ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x3ffffffff000 mmap(0x400000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x400000000000 mmap(0x400001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x400001000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5832 attached , child_tidptr=0x555563237690) = 5832 [pid 5831] openat(AT_FDCWD, "/sys/kernel/debug/x86/nmi_longest_ns", O_WRONLY|O_CLOEXEC [pid 5832] set_robust_list(0x5555632376a0, 24 [pid 5831] <... openat resumed>) = 3 [pid 5832] <... set_robust_list resumed>) = 0 [pid 5831] write(3, "10000000000", 11) = 11 [pid 5831] close(3) = 0 [pid 5831] openat(AT_FDCWD, "/proc/sys/kernel/hung_task_check_interval_secs", O_WRONLY|O_CLOEXEC) = 3 [pid 5831] write(3, "20", 2) = 2 [pid 5831] close(3) = 0 [pid 5831] openat(AT_FDCWD, "/proc/sys/net/core/bpf_jit_kallsyms", O_WRONLY|O_CLOEXEC) = 3 [pid 5831] write(3, "1", 1) = 1 [pid 5831] close(3) = 0 [pid 5831] openat(AT_FDCWD, "/proc/sys/net/core/bpf_jit_harden", O_WRONLY|O_CLOEXEC) = 3 [pid 5831] write(3, "0", 1) = 1 [pid 5831] close(3) = 0 [pid 5831] openat(AT_FDCWD, "/proc/sys/kernel/kptr_restrict", O_WRONLY|O_CLOEXEC) = 3 [pid 5831] write(3, "0", 1) = 1 [pid 5831] close(3) = 0 [pid 5831] openat(AT_FDCWD, "/proc/sys/kernel/softlockup_all_cpu_backtrace", O_WRONLY|O_CLOEXEC) = 3 [pid 5831] write(3, "1", 1) = 1 [pid 5831] close(3) = 0 [pid 5831] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC) = 3 [pid 5831] write(3, "100", 3) = 3 [pid 5831] close(3) = 0 [pid 5831] openat(AT_FDCWD, "/proc/sys/vm/oom_dump_tasks", O_WRONLY|O_CLOEXEC) = 3 [pid 5831] write(3, "0", 1) = 1 [pid 5831] close(3) = 0 [pid 5831] openat(AT_FDCWD, "/proc/sys/debug/exception-trace", O_WRONLY|O_CLOEXEC) = 3 [pid 5831] write(3, "0", 1) = 1 [pid 5831] close(3) = 0 [pid 5831] openat(AT_FDCWD, "/proc/sys/kernel/printk", O_WRONLY|O_CLOEXEC) = 3 [pid 5831] write(3, "7 4 1 3", 7) = 7 [pid 5831] close(3) = 0 [pid 5831] openat(AT_FDCWD, "/proc/sys/kernel/keys/gc_delay", O_WRONLY|O_CLOEXEC) = 3 [pid 5831] write(3, "1", 1) = 1 [pid 5831] close(3) = 0 [pid 5831] openat(AT_FDCWD, "/proc/sys/vm/oom_kill_allocating_task", O_WRONLY|O_CLOEXEC) = 3 [pid 5831] write(3, "1", 1) = 1 [pid 5831] close(3) = 0 [pid 5831] openat(AT_FDCWD, "/proc/sys/kernel/ctrl-alt-del", O_WRONLY|O_CLOEXEC) = 3 [pid 5831] write(3, "0", 1) = 1 [pid 5831] close(3) = 0 [pid 5831] openat(AT_FDCWD, "/proc/sys/kernel/cad_pid", O_WRONLY|O_CLOEXEC) = 3 [pid 5831] write(3, "5832", 4) = 4 [pid 5831] close(3) = 0 [pid 5831] kill(5832, SIGKILL) = 0 [pid 5832] +++ killed by SIGKILL +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=5832, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- mkdir("/syzcgroup", 0777) = 0 mkdir("/syzcgroup/unified", 0777) = 0 mount("none", "/syzcgroup/unified", "cgroup2", 0, NULL) = 0 chmod("/syzcgroup/unified", 0777) = 0 openat(AT_FDCWD, "/syzcgroup/unified/cgroup.subtree_control", O_WRONLY) = 3 write(3, "+cpu", 4) = 4 write(3, "+io", 3) = 3 write(3, "+pids", 5) = 5 close(3) = 0 mkdir("/syzcgroup/net", 0777) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "net") = -1 EINVAL (Invalid argument) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio") = 0 umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "devices") = 0 umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "blkio") = 0 [ 99.348991][ T5831] cgroup: Unknown subsys name 'net' umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "freezer") = 0 umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = 0 chmod("/syzcgroup/net", 0777) = 0 mkdir("/syzcgroup/cpu", 0777) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset") = -1 EINVAL (Invalid argument) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuacct") = 0 umount2("/syzcgroup/cpu", 0) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "hugetlb") = 0 umount2("/syzcgroup/cpu", 0) = 0 [ 99.521073][ T5831] cgroup: Unknown subsys name 'cpuset' mount("none", "/syzcgroup/cpu", "cgroup", 0, "rlimit") = -1 EINVAL (Invalid argument) mount("none", "/syzcgroup/cpu", "cgroup", 0, "memory") = 0 umount2("/syzcgroup/cpu", 0) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuacct,hugetlb,memory") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuacct,hugetlb,memory") = ? ERESTARTNOINTR (To be restarted) [ 99.576908][ T5831] cgroup: Unknown subsys name 'rlimit' mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuacct,hugetlb,memory") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuacct,hugetlb,memory") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuacct,hugetlb,memory") = 0 chmod("/syzcgroup/cpu", 0777) = 0 openat(AT_FDCWD, "/syzcgroup/cpu/cgroup.clone_children", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/syzcgroup/cpu/cpuset.memory_pressure_enabled", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) swapoff("./swap-file") = -1 ENOENT (No such file or directory) unlink("./swap-file") = -1 ENOENT (No such file or directory) openat(AT_FDCWD, "./swap-file", O_WRONLY|O_CREAT|O_CLOEXEC, 0600) = 3 fallocate(3, FALLOC_FL_ZERO_RANGE, 0, 128000000) = 0 close(3) = 0 rt_sigaction(SIGINT, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6acadc320}, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 rt_sigaction(SIGQUIT, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6acadc320}, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, 8) = 0 rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0 mmap(NULL, 36864, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa6aca69000 rt_sigprocmask(SIG_BLOCK, ~[], [CHLD], 8) = 0 clone3({flags=CLONE_VM|CLONE_VFORK, exit_signal=SIGCHLD, stack=0x7fa6aca69000, stack_size=0x9000}, 88./strace-static-x86_64: Process 5833 attached [pid 5833] rt_sigprocmask(SIG_BLOCK, NULL, ~[KILL STOP], 8) = 0 [pid 5833] rt_sigaction(SIGHUP, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5833] rt_sigaction(SIGHUP, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6acadc320}, NULL, 8) = 0 [pid 5833] rt_sigaction(SIGINT, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6acadc320}, NULL, 8) = 0 [pid 5833] rt_sigaction(SIGQUIT, NULL, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6acadc320}, 8) = 0 [pid 5833] rt_sigaction(SIGILL, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5833] rt_sigaction(SIGILL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6acadc320}, NULL, 8) = 0 [pid 5833] rt_sigaction(SIGTRAP, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5833] rt_sigaction(SIGTRAP, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6acadc320}, NULL, 8) = 0 [pid 5833] rt_sigaction(SIGABRT, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5833] rt_sigaction(SIGABRT, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6acadc320}, NULL, 8) = 0 [pid 5833] rt_sigaction(SIGBUS, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5833] rt_sigaction(SIGBUS, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6acadc320}, NULL, 8) = 0 [pid 5833] rt_sigaction(SIGFPE, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5833] rt_sigaction(SIGFPE, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6acadc320}, NULL, 8) = 0 [pid 5833] rt_sigaction(SIGUSR1, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5833] rt_sigaction(SIGUSR1, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6acadc320}, NULL, 8) = 0 [pid 5833] rt_sigaction(SIGSEGV, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5833] rt_sigaction(SIGSEGV, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6acadc320}, NULL, 8) = 0 [pid 5833] rt_sigaction(SIGUSR2, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5833] rt_sigaction(SIGUSR2, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6acadc320}, NULL, 8) = 0 [pid 5833] rt_sigaction(SIGPIPE, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5833] rt_sigaction(SIGPIPE, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6acadc320}, NULL, 8) = 0 [pid 5833] rt_sigaction(SIGALRM, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5833] rt_sigaction(SIGALRM, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6acadc320}, NULL, 8) = 0 [pid 5833] rt_sigaction(SIGTERM, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5833] rt_sigaction(SIGTERM, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6acadc320}, NULL, 8) = 0 [pid 5833] rt_sigaction(SIGSTKFLT, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5833] rt_sigaction(SIGSTKFLT, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6acadc320}, NULL, 8) = 0 [pid 5833] rt_sigaction(SIGCHLD, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5833] rt_sigaction(SIGCHLD, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6acadc320}, NULL, 8) = 0 [pid 5833] rt_sigaction(SIGCONT, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5833] rt_sigaction(SIGCONT, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6acadc320}, NULL, 8) = 0 [pid 5833] rt_sigaction(SIGTSTP, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5833] rt_sigaction(SIGTSTP, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6acadc320}, NULL, 8) = 0 [pid 5833] rt_sigaction(SIGTTIN, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5833] rt_sigaction(SIGTTIN, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6acadc320}, NULL, 8) = 0 [pid 5833] rt_sigaction(SIGTTOU, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5833] rt_sigaction(SIGTTOU, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6acadc320}, NULL, 8) = 0 [pid 5833] rt_sigaction(SIGURG, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5833] rt_sigaction(SIGURG, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6acadc320}, NULL, 8) = 0 [pid 5833] rt_sigaction(SIGXCPU, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5833] rt_sigaction(SIGXCPU, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6acadc320}, NULL, 8) = 0 [pid 5833] rt_sigaction(SIGXFSZ, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5833] rt_sigaction(SIGXFSZ, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6acadc320}, NULL, 8) = 0 [pid 5833] rt_sigaction(SIGVTALRM, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5833] rt_sigaction(SIGVTALRM, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6acadc320}, NULL, 8) = 0 [pid 5833] rt_sigaction(SIGPROF, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5833] rt_sigaction(SIGPROF, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6acadc320}, NULL, 8) = 0 [pid 5833] rt_sigaction(SIGWINCH, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5833] rt_sigaction(SIGWINCH, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6acadc320}, NULL, 8) = 0 [pid 5833] rt_sigaction(SIGIO, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5833] rt_sigaction(SIGIO, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6acadc320}, NULL, 8) = 0 [pid 5833] rt_sigaction(SIGPWR, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5833] rt_sigaction(SIGPWR, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6acadc320}, NULL, 8) = 0 [pid 5833] rt_sigaction(SIGSYS, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5833] rt_sigaction(SIGSYS, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6acadc320}, NULL, 8) = 0 [pid 5833] rt_sigaction(SIGRTMIN, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6acadc320}, NULL, 8) = 0 [pid 5833] rt_sigaction(SIGRT_1, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6acadc320}, NULL, 8) = 0 [pid 5833] rt_sigaction(SIGRT_2, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5833] rt_sigaction(SIGRT_2, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6acadc320}, NULL, 8) = 0 [pid 5833] rt_sigaction(SIGRT_3, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5833] rt_sigaction(SIGRT_3, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6acadc320}, NULL, 8) = 0 [pid 5833] rt_sigaction(SIGRT_4, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5833] rt_sigaction(SIGRT_4, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6acadc320}, NULL, 8) = 0 [pid 5833] rt_sigaction(SIGRT_5, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5833] rt_sigaction(SIGRT_5, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6acadc320}, NULL, 8) = 0 [pid 5833] rt_sigaction(SIGRT_6, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5833] rt_sigaction(SIGRT_6, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6acadc320}, NULL, 8) = 0 [pid 5833] rt_sigaction(SIGRT_7, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5833] rt_sigaction(SIGRT_7, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6acadc320}, NULL, 8) = 0 [pid 5833] rt_sigaction(SIGRT_8, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5833] rt_sigaction(SIGRT_8, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6acadc320}, NULL, 8) = 0 [pid 5833] rt_sigaction(SIGRT_9, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5833] rt_sigaction(SIGRT_9, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6acadc320}, NULL, 8) = 0 [pid 5833] rt_sigaction(SIGRT_10, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5833] rt_sigaction(SIGRT_10, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6acadc320}, NULL, 8) = 0 [pid 5833] rt_sigaction(SIGRT_11, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5833] rt_sigaction(SIGRT_11, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6acadc320}, NULL, 8) = 0 [pid 5833] rt_sigaction(SIGRT_12, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5833] rt_sigaction(SIGRT_12, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6acadc320}, NULL, 8) = 0 [pid 5833] rt_sigaction(SIGRT_13, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5833] rt_sigaction(SIGRT_13, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6acadc320}, NULL, 8) = 0 [pid 5833] rt_sigaction(SIGRT_14, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5833] rt_sigaction(SIGRT_14, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6acadc320}, NULL, 8) = 0 [pid 5833] rt_sigaction(SIGRT_15, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5833] rt_sigaction(SIGRT_15, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6acadc320}, NULL, 8) = 0 [pid 5833] rt_sigaction(SIGRT_16, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5833] rt_sigaction(SIGRT_16, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6acadc320}, NULL, 8) = 0 [pid 5833] rt_sigaction(SIGRT_17, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5833] rt_sigaction(SIGRT_17, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6acadc320}, NULL, 8) = 0 [pid 5833] rt_sigaction(SIGRT_18, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5833] rt_sigaction(SIGRT_18, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6acadc320}, NULL, 8) = 0 [pid 5833] rt_sigaction(SIGRT_19, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5833] rt_sigaction(SIGRT_19, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6acadc320}, NULL, 8) = 0 [pid 5833] rt_sigaction(SIGRT_20, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5833] rt_sigaction(SIGRT_20, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6acadc320}, NULL, 8) = 0 [pid 5833] rt_sigaction(SIGRT_21, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5833] rt_sigaction(SIGRT_21, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6acadc320}, NULL, 8) = 0 [pid 5833] rt_sigaction(SIGRT_22, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5833] rt_sigaction(SIGRT_22, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6acadc320}, NULL, 8) = 0 [pid 5833] rt_sigaction(SIGRT_23, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5833] rt_sigaction(SIGRT_23, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6acadc320}, NULL, 8) = 0 [pid 5833] rt_sigaction(SIGRT_24, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5833] rt_sigaction(SIGRT_24, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6acadc320}, NULL, 8) = 0 [pid 5833] rt_sigaction(SIGRT_25, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5833] rt_sigaction(SIGRT_25, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6acadc320}, NULL, 8) = 0 [pid 5833] rt_sigaction(SIGRT_26, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5833] rt_sigaction(SIGRT_26, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6acadc320}, NULL, 8) = 0 [pid 5833] rt_sigaction(SIGRT_27, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5833] rt_sigaction(SIGRT_27, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6acadc320}, NULL, 8) = 0 [pid 5833] rt_sigaction(SIGRT_28, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5833] rt_sigaction(SIGRT_28, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6acadc320}, NULL, 8) = 0 [pid 5833] rt_sigaction(SIGRT_29, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5833] rt_sigaction(SIGRT_29, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6acadc320}, NULL, 8) = 0 [pid 5833] rt_sigaction(SIGRT_30, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5833] rt_sigaction(SIGRT_30, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6acadc320}, NULL, 8) = 0 [pid 5833] rt_sigaction(SIGRT_31, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5833] rt_sigaction(SIGRT_31, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6acadc320}, NULL, 8) = 0 [pid 5833] rt_sigaction(SIGRT_32, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5833] rt_sigaction(SIGRT_32, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6acadc320}, NULL, 8) = 0 [pid 5833] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5833] execve("/bin/sh", ["sh", "-c", "mkswap ./swap-file"], 0x7fffef719e28 /* 10 vars */ [pid 5831] <... clone3 resumed>) = 5833 [pid 5831] munmap(0x7fa6aca69000, 36864) = 0 [pid 5831] rt_sigprocmask(SIG_SETMASK, [CHLD], NULL, 8) = 0 [pid 5833] <... execve resumed>) = 0 [pid 5833] brk(NULL) = 0x55cb93607000 [pid 5833] mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6c23bca000 [pid 5833] access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory) [pid 5833] openat(AT_FDCWD, "/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5833] openat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v3/libbusybox.so.1.35.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5833] newfstatat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v3", 0x7ffe7eae9b30, 0) = -1 ENOENT (No such file or directory) [pid 5833] openat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v2/libbusybox.so.1.35.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5833] newfstatat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v2", 0x7ffe7eae9b30, 0) = -1 ENOENT (No such file or directory) [pid 5833] openat(AT_FDCWD, "/lib64/tls/haswell/x86_64/libbusybox.so.1.35.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5833] newfstatat(AT_FDCWD, "/lib64/tls/haswell/x86_64", 0x7ffe7eae9b30, 0) = -1 ENOENT (No such file or directory) [pid 5833] openat(AT_FDCWD, "/lib64/tls/haswell/libbusybox.so.1.35.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5833] newfstatat(AT_FDCWD, "/lib64/tls/haswell", 0x7ffe7eae9b30, 0) = -1 ENOENT (No such file or directory) [pid 5833] openat(AT_FDCWD, "/lib64/tls/x86_64/libbusybox.so.1.35.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5833] newfstatat(AT_FDCWD, "/lib64/tls/x86_64", 0x7ffe7eae9b30, 0) = -1 ENOENT (No such file or directory) [pid 5833] openat(AT_FDCWD, "/lib64/tls/libbusybox.so.1.35.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5833] newfstatat(AT_FDCWD, "/lib64/tls", 0x7ffe7eae9b30, 0) = -1 ENOENT (No such file or directory) [pid 5833] openat(AT_FDCWD, "/lib64/haswell/x86_64/libbusybox.so.1.35.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5833] newfstatat(AT_FDCWD, "/lib64/haswell/x86_64", 0x7ffe7eae9b30, 0) = -1 ENOENT (No such file or directory) [pid 5833] openat(AT_FDCWD, "/lib64/haswell/libbusybox.so.1.35.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5833] newfstatat(AT_FDCWD, "/lib64/haswell", 0x7ffe7eae9b30, 0) = -1 ENOENT (No such file or directory) [pid 5833] openat(AT_FDCWD, "/lib64/x86_64/libbusybox.so.1.35.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5833] newfstatat(AT_FDCWD, "/lib64/x86_64", 0x7ffe7eae9b30, 0) = -1 ENOENT (No such file or directory) [pid 5833] openat(AT_FDCWD, "/lib64/libbusybox.so.1.35.0", O_RDONLY|O_CLOEXEC) = 3 [pid 5833] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x70\x08\x01\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x28\x13\x0c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x09\x00\x40\x00\x19\x00\x18\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\xed\x00\x00"..., 832) = 832 [pid 5833] pread64(3, "\x04\x00\x00\x00\x20\x00\x00\x00\x05\x00\x00\x00\x47\x4e\x55\x00\x01\x00\x01\xc0\x04\x00\x00\x00\x09\x00\x00\x00\x00\x00\x00\x00\x02\x00\x01\xc0\x04\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00", 48, 778504) = 48 [pid 5833] newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=792936, ...}, AT_EMPTY_PATH) = 0 [pid 5833] mmap(NULL, 796968, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f6c23b07000 [pid 5833] mmap(0x7f6c23b16000, 557056, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xf000) = 0x7f6c23b16000 [pid 5833] mmap(0x7f6c23b9e000, 163840, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x97000) = 0x7f6c23b9e000 [pid 5833] mmap(0x7f6c23bc6000, 16384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xbe000) = 0x7f6c23bc6000 [pid 5833] close(3) = 0 [pid 5833] openat(AT_FDCWD, "/lib64/libc.so.6", O_RDONLY|O_CLOEXEC) = 3 [pid 5833] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x03\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x8c\x87\x02\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x28\x32\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0e\x00\x40\x00\x3c\x00\x3b\x00\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00"..., 832) = 832 [pid 5833] pread64(3, "\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x04\x00\x00\x00\xa0\xf3\x16\x00\x00\x00\x00\x00\xa0\xf3\x16\x00\x00\x00\x00\x00\xa0\xf3\x16\x00\x00\x00\x00\x00\x1c\x00\x00\x00\x00\x00\x00\x00\x1c\x00\x00\x00"..., 784, 64) = 784 [pid 5833] pread64(3, "\x04\x00\x00\x00\x30\x00\x00\x00\x05\x00\x00\x00\x47\x4e\x55\x00\x02\x80\x00\xc0\x04\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x01\x00\x01\xc0\x04\x00\x00\x00\x3b\x08\x00\x00\x00\x00\x00\x00\x02\x00\x01\xc0\x04\x00\x00\x00\x0f\x00\x00\x00\x00\x00\x00\x00", 64, 848) = 64 [pid 5833] pread64(3, "\x04\x00\x00\x00\x10\x00\x00\x00\x01\x00\x00\x00\x47\x4e\x55\x00\x00\x00\x00\x00\x04\x00\x00\x00\x13\x00\x00\x00\x00\x00\x00\x00", 32, 912) = 32 [pid 5833] newfstatat(3, "", {st_mode=S_IFREG|0755, st_size=1720616, ...}, AT_EMPTY_PATH) = 0 [pid 5833] pread64(3, "\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x04\x00\x00\x00\xa0\xf3\x16\x00\x00\x00\x00\x00\xa0\xf3\x16\x00\x00\x00\x00\x00\xa0\xf3\x16\x00\x00\x00\x00\x00\x1c\x00\x00\x00\x00\x00\x00\x00\x1c\x00\x00\x00"..., 784, 64) = 784 [pid 5833] mmap(NULL, 1773008, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f6c23956000 [pid 5833] mmap(0x7f6c2397e000, 1191936, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x28000) = 0x7f6c2397e000 [pid 5833] mmap(0x7f6c23aa1000, 339968, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x14b000) = 0x7f6c23aa1000 [pid 5833] mmap(0x7f6c23af4000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x19d000) = 0x7f6c23af4000 [pid 5833] mmap(0x7f6c23afa000, 52688, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f6c23afa000 [pid 5833] close(3) = 0 [pid 5833] openat(AT_FDCWD, "/lib64/libresolv.so.2", O_RDONLY|O_CLOEXEC) = 3 [pid 5833] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x58\x33\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x90\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0b\x00\x40\x00\x1c\x00\x1b\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe0\x2e\x00\x00"..., 832) = 832 [pid 5833] newfstatat(3, "", {st_mode=S_IFREG|0755, st_size=51344, ...}, AT_EMPTY_PATH) = 0 [pid 5833] mmap(NULL, 63624, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f6c23946000 [pid 5833] mmap(0x7f6c23949000, 24576, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7f6c23949000 [pid 5833] mmap(0x7f6c2394f000, 12288, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x9000) = 0x7f6c2394f000 [pid 5833] mmap(0x7f6c23952000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xb000) = 0x7f6c23952000 [pid 5833] mmap(0x7f6c23954000, 6280, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f6c23954000 [pid 5833] close(3) = 0 [pid 5833] openat(AT_FDCWD, "/lib64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5833] openat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v3/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5833] newfstatat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v3", 0x7ffe7eae9ad0, 0) = -1 ENOENT (No such file or directory) [pid 5833] openat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v2/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5833] newfstatat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v2", 0x7ffe7eae9ad0, 0) = -1 ENOENT (No such file or directory) [pid 5833] openat(AT_FDCWD, "/usr/lib64/tls/haswell/x86_64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5833] newfstatat(AT_FDCWD, "/usr/lib64/tls/haswell/x86_64", 0x7ffe7eae9ad0, 0) = -1 ENOENT (No such file or directory) [pid 5833] openat(AT_FDCWD, "/usr/lib64/tls/haswell/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5833] newfstatat(AT_FDCWD, "/usr/lib64/tls/haswell", 0x7ffe7eae9ad0, 0) = -1 ENOENT (No such file or directory) [pid 5833] openat(AT_FDCWD, "/usr/lib64/tls/x86_64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5833] newfstatat(AT_FDCWD, "/usr/lib64/tls/x86_64", 0x7ffe7eae9ad0, 0) = -1 ENOENT (No such file or directory) [pid 5833] openat(AT_FDCWD, "/usr/lib64/tls/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5833] newfstatat(AT_FDCWD, "/usr/lib64/tls", 0x7ffe7eae9ad0, 0) = -1 ENOENT (No such file or directory) [pid 5833] openat(AT_FDCWD, "/usr/lib64/haswell/x86_64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5833] newfstatat(AT_FDCWD, "/usr/lib64/haswell/x86_64", 0x7ffe7eae9ad0, 0) = -1 ENOENT (No such file or directory) [pid 5833] openat(AT_FDCWD, "/usr/lib64/haswell/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5833] newfstatat(AT_FDCWD, "/usr/lib64/haswell", 0x7ffe7eae9ad0, 0) = -1 ENOENT (No such file or directory) [pid 5833] openat(AT_FDCWD, "/usr/lib64/x86_64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5833] newfstatat(AT_FDCWD, "/usr/lib64/x86_64", 0x7ffe7eae9ad0, 0) = -1 ENOENT (No such file or directory) [pid 5833] openat(AT_FDCWD, "/usr/lib64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = 3 [pid 5833] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x88\x7f\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x70\x31\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0b\x00\x40\x00\x1f\x00\x1e\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x68\x6f\x00\x00"..., 832) = 832 [pid 5833] pread64(3, "\x04\x00\x00\x00\x20\x00\x00\x00\x05\x00\x00\x00\x47\x4e\x55\x00\x01\x00\x01\xc0\x04\x00\x00\x00\x09\x00\x00\x00\x00\x00\x00\x00\x02\x00\x01\xc0\x04\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00", 48, 138152) = 48 [pid 5833] newfstatat(3, "", {st_mode=S_IFREG|0755, st_size=145712, ...}, AT_EMPTY_PATH) = 0 [pid 5833] mmap(NULL, 157200, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f6c2391f000 [pid 5833] mprotect(0x7f6c23926000, 114688, PROT_NONE) = 0 [pid 5833] mmap(0x7f6c23926000, 81920, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x7000) = 0x7f6c23926000 [pid 5833] mmap(0x7f6c2393a000, 28672, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1b000) = 0x7f6c2393a000 [pid 5833] mmap(0x7f6c23942000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x22000) = 0x7f6c23942000 [pid 5833] mmap(0x7f6c23944000, 5648, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f6c23944000 [pid 5833] close(3) = 0 [pid 5833] openat(AT_FDCWD, "/lib64/libpcre2-8.so.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5833] openat(AT_FDCWD, "/usr/lib64/libpcre2-8.so.0", O_RDONLY|O_CLOEXEC) = 3 [pid 5833] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\xf8\x21\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x50\x32\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1a\x00\x19\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd8\x1f\x00\x00"..., 832) = 832 [pid 5833] pread64(3, "\x04\x00\x00\x00\x20\x00\x00\x00\x05\x00\x00\x00\x47\x4e\x55\x00\x01\x00\x01\xc0\x04\x00\x00\x00\x09\x00\x00\x00\x00\x00\x00\x00\x02\x00\x01\xc0\x04\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00", 48, 336112) = 48 [pid 5833] newfstatat(3, "", {st_mode=S_IFREG|0755, st_size=342224, ...}, AT_EMPTY_PATH) = 0 [pid 5833] mmap(NULL, 344456, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f6c238ca000 [pid 5833] mmap(0x7f6c238cc000, 180224, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7f6c238cc000 [pid 5833] mmap(0x7f6c238f8000, 151552, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2e000) = 0x7f6c238f8000 [pid 5833] mmap(0x7f6c2391d000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x52000) = 0x7f6c2391d000 [pid 5833] close(3) = 0 [pid 5833] mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6c238c8000 [pid 5833] arch_prctl(ARCH_SET_FS, 0x7f6c238c9380) = 0 [pid 5833] set_tid_address(0x7f6c238c9650) = 5833 [pid 5833] set_robust_list(0x7f6c238c9660, 24) = 0 [pid 5833] rseq(0x7f6c238c9d20, 0x20, 0, 0x53053053) = 0 [pid 5833] mprotect(0x7f6c23af4000, 16384, PROT_READ) = 0 [pid 5833] mprotect(0x7f6c2391d000, 4096, PROT_READ) = 0 [pid 5833] mprotect(0x7f6c23942000, 4096, PROT_READ) = 0 [pid 5833] mprotect(0x7f6c23952000, 4096, PROT_READ) = 0 [pid 5833] mprotect(0x7f6c23bc6000, 12288, PROT_READ) = 0 [pid 5833] mprotect(0x55cb56096000, 4096, PROT_READ) = 0 [pid 5833] mprotect(0x7f6c23bff000, 8192, PROT_READ) = 0 [pid 5833] prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 [pid 5833] statfs("/sys/fs/selinux", 0x7ffe7eaea880) = -1 ENOENT (No such file or directory) [pid 5833] statfs("/selinux", 0x7ffe7eaea880) = -1 ENOENT (No such file or directory) [pid 5833] getrandom("\x4e\xef\xcb\x4e\xe5\x55\xad\x32", 8, GRND_NONBLOCK) = 8 [pid 5833] brk(NULL) = 0x55cb93607000 [pid 5833] brk(0x55cb93628000) = 0x55cb93628000 [pid 5833] openat(AT_FDCWD, "/proc/filesystems", O_RDONLY|O_CLOEXEC) = 3 [pid 5833] newfstatat(3, "", {st_mode=S_IFREG|0444, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5833] read(3, "nodev\tsysfs\nnodev\ttmpfs\nnodev\tbdev\nnodev\tproc\nnodev\tcgroup\nnodev\tcgroup2\nnodev\tdevtmpfs\nnodev\tbinfmt"..., 1024) = 787 [pid 5833] read(3, "", 1024) = 0 [pid 5833] close(3) = 0 [pid 5833] access("/etc/selinux/config", F_OK) = 0 [pid 5833] getpid() = 5833 [pid 5833] rt_sigaction(SIGCHLD, {sa_handler=0x7f6c23b49c61, sa_mask=~[RTMIN RT_1], sa_flags=SA_RESTORER, sa_restorer=0x7f6c2398dad0}, NULL, 8) = 0 [pid 5833] getppid() = 5831 [pid 5833] uname({sysname="Linux", nodename="syzkaller", ...}) = 0 [pid 5833] newfstatat(AT_FDCWD, "/root", {st_mode=S_IFDIR|0700, st_size=4096, ...}, 0) = 0 [pid 5833] newfstatat(AT_FDCWD, ".", {st_mode=S_IFDIR|0700, st_size=4096, ...}, 0) = 0 [pid 5833] rt_sigaction(SIGINT, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5833] rt_sigaction(SIGINT, {sa_handler=0x7f6c23b49c61, sa_mask=~[RTMIN RT_1], sa_flags=SA_RESTORER, sa_restorer=0x7f6c2398dad0}, NULL, 8) = 0 [pid 5833] rt_sigaction(SIGQUIT, NULL, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5833] rt_sigaction(SIGTERM, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5833] newfstatat(AT_FDCWD, "/bin/mkswap", 0x7ffe7eaea3b8, 0) = -1 ENOENT (No such file or directory) [pid 5833] newfstatat(AT_FDCWD, "/sbin/mkswap", {st_mode=S_IFREG|0755, st_size=14248, ...}, 0) = 0 [pid 5833] execve("/sbin/mkswap", ["mkswap", "./swap-file"], 0x55cb93607d40 /* 10 vars */) = 0 [pid 5833] brk(NULL) = 0x55b6d95b3000 [pid 5833] mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1f41df7000 [pid 5833] access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory) [pid 5833] openat(AT_FDCWD, "/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5833] openat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v3/libbusybox.so.1.35.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5833] newfstatat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v3", 0x7ffd9df2a380, 0) = -1 ENOENT (No such file or directory) [pid 5833] openat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v2/libbusybox.so.1.35.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5833] newfstatat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v2", 0x7ffd9df2a380, 0) = -1 ENOENT (No such file or directory) [pid 5833] openat(AT_FDCWD, "/lib64/tls/haswell/x86_64/libbusybox.so.1.35.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5833] newfstatat(AT_FDCWD, "/lib64/tls/haswell/x86_64", 0x7ffd9df2a380, 0) = -1 ENOENT (No such file or directory) [pid 5833] openat(AT_FDCWD, "/lib64/tls/haswell/libbusybox.so.1.35.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5833] newfstatat(AT_FDCWD, "/lib64/tls/haswell", 0x7ffd9df2a380, 0) = -1 ENOENT (No such file or directory) [pid 5833] openat(AT_FDCWD, "/lib64/tls/x86_64/libbusybox.so.1.35.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5833] newfstatat(AT_FDCWD, "/lib64/tls/x86_64", 0x7ffd9df2a380, 0) = -1 ENOENT (No such file or directory) [pid 5833] openat(AT_FDCWD, "/lib64/tls/libbusybox.so.1.35.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5833] newfstatat(AT_FDCWD, "/lib64/tls", 0x7ffd9df2a380, 0) = -1 ENOENT (No such file or directory) [pid 5833] openat(AT_FDCWD, "/lib64/haswell/x86_64/libbusybox.so.1.35.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5833] newfstatat(AT_FDCWD, "/lib64/haswell/x86_64", 0x7ffd9df2a380, 0) = -1 ENOENT (No such file or directory) [pid 5833] openat(AT_FDCWD, "/lib64/haswell/libbusybox.so.1.35.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5833] newfstatat(AT_FDCWD, "/lib64/haswell", 0x7ffd9df2a380, 0) = -1 ENOENT (No such file or directory) [pid 5833] openat(AT_FDCWD, "/lib64/x86_64/libbusybox.so.1.35.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5833] newfstatat(AT_FDCWD, "/lib64/x86_64", 0x7ffd9df2a380, 0) = -1 ENOENT (No such file or directory) [pid 5833] openat(AT_FDCWD, "/lib64/libbusybox.so.1.35.0", O_RDONLY|O_CLOEXEC) = 3 [pid 5833] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x70\x08\x01\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x28\x13\x0c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x09\x00\x40\x00\x19\x00\x18\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\xed\x00\x00"..., 832) = 832 [pid 5833] pread64(3, "\x04\x00\x00\x00\x20\x00\x00\x00\x05\x00\x00\x00\x47\x4e\x55\x00\x01\x00\x01\xc0\x04\x00\x00\x00\x09\x00\x00\x00\x00\x00\x00\x00\x02\x00\x01\xc0\x04\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00", 48, 778504) = 48 [pid 5833] newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=792936, ...}, AT_EMPTY_PATH) = 0 [pid 5833] mmap(NULL, 796968, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f1f41d34000 [pid 5833] mmap(0x7f1f41d43000, 557056, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xf000) = 0x7f1f41d43000 [pid 5833] mmap(0x7f1f41dcb000, 163840, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x97000) = 0x7f1f41dcb000 [pid 5833] mmap(0x7f1f41df3000, 16384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xbe000) = 0x7f1f41df3000 [pid 5833] close(3) = 0 [pid 5833] openat(AT_FDCWD, "/lib64/libc.so.6", O_RDONLY|O_CLOEXEC) = 3 [pid 5833] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x03\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x8c\x87\x02\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x28\x32\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0e\x00\x40\x00\x3c\x00\x3b\x00\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00"..., 832) = 832 [pid 5833] pread64(3, "\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x04\x00\x00\x00\xa0\xf3\x16\x00\x00\x00\x00\x00\xa0\xf3\x16\x00\x00\x00\x00\x00\xa0\xf3\x16\x00\x00\x00\x00\x00\x1c\x00\x00\x00\x00\x00\x00\x00\x1c\x00\x00\x00"..., 784, 64) = 784 [pid 5833] pread64(3, "\x04\x00\x00\x00\x30\x00\x00\x00\x05\x00\x00\x00\x47\x4e\x55\x00\x02\x80\x00\xc0\x04\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x01\x00\x01\xc0\x04\x00\x00\x00\x3b\x08\x00\x00\x00\x00\x00\x00\x02\x00\x01\xc0\x04\x00\x00\x00\x0f\x00\x00\x00\x00\x00\x00\x00", 64, 848) = 64 [pid 5833] pread64(3, "\x04\x00\x00\x00\x10\x00\x00\x00\x01\x00\x00\x00\x47\x4e\x55\x00\x00\x00\x00\x00\x04\x00\x00\x00\x13\x00\x00\x00\x00\x00\x00\x00", 32, 912) = 32 [pid 5833] newfstatat(3, "", {st_mode=S_IFREG|0755, st_size=1720616, ...}, AT_EMPTY_PATH) = 0 [pid 5833] pread64(3, "\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x04\x00\x00\x00\xa0\xf3\x16\x00\x00\x00\x00\x00\xa0\xf3\x16\x00\x00\x00\x00\x00\xa0\xf3\x16\x00\x00\x00\x00\x00\x1c\x00\x00\x00\x00\x00\x00\x00\x1c\x00\x00\x00"..., 784, 64) = 784 [pid 5833] mmap(NULL, 1773008, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f1f41b83000 [pid 5833] mmap(0x7f1f41bab000, 1191936, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x28000) = 0x7f1f41bab000 [pid 5833] mmap(0x7f1f41cce000, 339968, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x14b000) = 0x7f1f41cce000 [pid 5833] mmap(0x7f1f41d21000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x19d000) = 0x7f1f41d21000 [pid 5833] mmap(0x7f1f41d27000, 52688, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f1f41d27000 [pid 5833] close(3) = 0 [pid 5833] openat(AT_FDCWD, "/lib64/libresolv.so.2", O_RDONLY|O_CLOEXEC) = 3 [pid 5833] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x58\x33\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x90\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0b\x00\x40\x00\x1c\x00\x1b\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe0\x2e\x00\x00"..., 832) = 832 [pid 5833] newfstatat(3, "", {st_mode=S_IFREG|0755, st_size=51344, ...}, AT_EMPTY_PATH) = 0 [pid 5833] mmap(NULL, 63624, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f1f41b73000 [pid 5833] mmap(0x7f1f41b76000, 24576, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7f1f41b76000 [pid 5833] mmap(0x7f1f41b7c000, 12288, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x9000) = 0x7f1f41b7c000 [pid 5833] mmap(0x7f1f41b7f000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xb000) = 0x7f1f41b7f000 [pid 5833] mmap(0x7f1f41b81000, 6280, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f1f41b81000 [pid 5833] close(3) = 0 [pid 5833] openat(AT_FDCWD, "/lib64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5833] openat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v3/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5833] newfstatat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v3", 0x7ffd9df2a320, 0) = -1 ENOENT (No such file or directory) [pid 5833] openat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v2/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5833] newfstatat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v2", 0x7ffd9df2a320, 0) = -1 ENOENT (No such file or directory) [pid 5833] openat(AT_FDCWD, "/usr/lib64/tls/haswell/x86_64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5833] newfstatat(AT_FDCWD, "/usr/lib64/tls/haswell/x86_64", 0x7ffd9df2a320, 0) = -1 ENOENT (No such file or directory) [pid 5833] openat(AT_FDCWD, "/usr/lib64/tls/haswell/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5833] newfstatat(AT_FDCWD, "/usr/lib64/tls/haswell", 0x7ffd9df2a320, 0) = -1 ENOENT (No such file or directory) [pid 5833] openat(AT_FDCWD, "/usr/lib64/tls/x86_64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5833] newfstatat(AT_FDCWD, "/usr/lib64/tls/x86_64", 0x7ffd9df2a320, 0) = -1 ENOENT (No such file or directory) [pid 5833] openat(AT_FDCWD, "/usr/lib64/tls/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5833] newfstatat(AT_FDCWD, "/usr/lib64/tls", 0x7ffd9df2a320, 0) = -1 ENOENT (No such file or directory) [pid 5833] openat(AT_FDCWD, "/usr/lib64/haswell/x86_64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5833] newfstatat(AT_FDCWD, "/usr/lib64/haswell/x86_64", 0x7ffd9df2a320, 0) = -1 ENOENT (No such file or directory) [pid 5833] openat(AT_FDCWD, "/usr/lib64/haswell/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5833] newfstatat(AT_FDCWD, "/usr/lib64/haswell", 0x7ffd9df2a320, 0) = -1 ENOENT (No such file or directory) [pid 5833] openat(AT_FDCWD, "/usr/lib64/x86_64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5833] newfstatat(AT_FDCWD, "/usr/lib64/x86_64", 0x7ffd9df2a320, 0) = -1 ENOENT (No such file or directory) [pid 5833] openat(AT_FDCWD, "/usr/lib64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = 3 [pid 5833] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x88\x7f\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x70\x31\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0b\x00\x40\x00\x1f\x00\x1e\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x68\x6f\x00\x00"..., 832) = 832 [pid 5833] pread64(3, "\x04\x00\x00\x00\x20\x00\x00\x00\x05\x00\x00\x00\x47\x4e\x55\x00\x01\x00\x01\xc0\x04\x00\x00\x00\x09\x00\x00\x00\x00\x00\x00\x00\x02\x00\x01\xc0\x04\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00", 48, 138152) = 48 [pid 5833] newfstatat(3, "", {st_mode=S_IFREG|0755, st_size=145712, ...}, AT_EMPTY_PATH) = 0 [pid 5833] mmap(NULL, 157200, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f1f41b4c000 [pid 5833] mprotect(0x7f1f41b53000, 114688, PROT_NONE) = 0 [pid 5833] mmap(0x7f1f41b53000, 81920, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x7000) = 0x7f1f41b53000 [pid 5833] mmap(0x7f1f41b67000, 28672, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1b000) = 0x7f1f41b67000 [pid 5833] mmap(0x7f1f41b6f000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x22000) = 0x7f1f41b6f000 [pid 5833] mmap(0x7f1f41b71000, 5648, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f1f41b71000 [pid 5833] close(3) = 0 [pid 5833] openat(AT_FDCWD, "/lib64/libpcre2-8.so.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5833] openat(AT_FDCWD, "/usr/lib64/libpcre2-8.so.0", O_RDONLY|O_CLOEXEC) = 3 [pid 5833] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\xf8\x21\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x50\x32\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1a\x00\x19\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd8\x1f\x00\x00"..., 832) = 832 [pid 5833] pread64(3, "\x04\x00\x00\x00\x20\x00\x00\x00\x05\x00\x00\x00\x47\x4e\x55\x00\x01\x00\x01\xc0\x04\x00\x00\x00\x09\x00\x00\x00\x00\x00\x00\x00\x02\x00\x01\xc0\x04\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00", 48, 336112) = 48 [pid 5833] newfstatat(3, "", {st_mode=S_IFREG|0755, st_size=342224, ...}, AT_EMPTY_PATH) = 0 [pid 5833] mmap(NULL, 344456, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f1f41af7000 [pid 5833] mmap(0x7f1f41af9000, 180224, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7f1f41af9000 [pid 5833] mmap(0x7f1f41b25000, 151552, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2e000) = 0x7f1f41b25000 [pid 5833] mmap(0x7f1f41b4a000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x52000) = 0x7f1f41b4a000 [pid 5833] close(3) = 0 [pid 5833] mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1f41af5000 [pid 5833] arch_prctl(ARCH_SET_FS, 0x7f1f41af6380) = 0 [pid 5833] set_tid_address(0x7f1f41af6650) = 5833 [pid 5833] set_robust_list(0x7f1f41af6660, 24) = 0 [pid 5833] rseq(0x7f1f41af6d20, 0x20, 0, 0x53053053) = 0 [pid 5833] mprotect(0x7f1f41d21000, 16384, PROT_READ) = 0 [pid 5833] mprotect(0x7f1f41b4a000, 4096, PROT_READ) = 0 [pid 5833] mprotect(0x7f1f41b6f000, 4096, PROT_READ) = 0 [pid 5833] mprotect(0x7f1f41b7f000, 4096, PROT_READ) = 0 [pid 5833] mprotect(0x7f1f41df3000, 12288, PROT_READ) = 0 [pid 5833] mprotect(0x55b6a9da7000, 4096, PROT_READ) = 0 [pid 5833] mprotect(0x7f1f41e2c000, 8192, PROT_READ) = 0 [pid 5833] prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 [pid 5833] statfs("/sys/fs/selinux", 0x7ffd9df2b0d0) = -1 ENOENT (No such file or directory) [pid 5833] statfs("/selinux", 0x7ffd9df2b0d0) = -1 ENOENT (No such file or directory) [pid 5833] getrandom("\x47\xaf\xce\x93\x6c\x93\xb1\x86", 8, GRND_NONBLOCK) = 8 [pid 5833] brk(NULL) = 0x55b6d95b3000 [pid 5833] brk(0x55b6d95d4000) = 0x55b6d95d4000 [pid 5833] openat(AT_FDCWD, "/proc/filesystems", O_RDONLY|O_CLOEXEC) = 3 [pid 5833] newfstatat(3, "", {st_mode=S_IFREG|0444, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5833] read(3, "nodev\tsysfs\nnodev\ttmpfs\nnodev\tbdev\nnodev\tproc\nnodev\tcgroup\nnodev\tcgroup2\nnodev\tdevtmpfs\nnodev\tbinfmt"..., 1024) = 787 [pid 5833] read(3, "", 1024) = 0 [pid 5833] close(3) = 0 [pid 5833] access("/etc/selinux/config", F_OK) = 0 [pid 5833] openat(AT_FDCWD, "./swap-file", O_WRONLY) = 3 [pid 5833] lseek(3, 0, SEEK_END) = 128000000 [pid 5833] lseek(3, 0, SEEK_SET) = 0 [pid 5833] newfstatat(1, "", {st_mode=S_IFIFO|0600, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5833] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1024) = 1024 [pid 5833] write(3, "\x01\x00\x00\x00\x11\x7a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 516) = 516 [pid 5833] lseek(3, 4086, SEEK_SET) = 4086 [pid 5833] write(3, "SWAPSPACE2", 10) = 10 [pid 5833] fsync(3) = 0 Setting up swapspace version 1, size = 127995904 bytes [pid 5833] write(1, "Setting up swapspace version 1, size = 127995904 bytes\n", 55) = 55 [pid 5833] exit_group(0) = ? [pid 5833] +++ exited with 0 +++ rt_sigaction(SIGINT, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6acadc320}, NULL, 8) = 0 rt_sigaction(SIGQUIT, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6acadc320}, NULL, 8) = 0 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5833, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=11 /* 0.11 s */} --- swapon("./swap-file", SWAP_FLAG_PREFER|0) = 0 mkdir("./syzkaller.Oe1NON", 0700) = 0 chmod("./syzkaller.Oe1NON", 0777) = 0 chdir("./syzkaller.Oe1NON") = 0 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5836 attached , child_tidptr=0x555563237690) = 5836 [pid 5836] set_robust_list(0x5555632376a0, 24) = 0 [pid 5836] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI) = 3 [pid 5836] openat(AT_FDCWD, "/dev/vhci", O_RDWR) = 4 [ 105.836312][ T5831] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [pid 5836] dup2(4, 202) = 202 [pid 5836] close(4) = 0 [pid 5836] write(202, "\xff\x00", 2) = 2 [pid 5836] read(202, "\xff\x00\x00\x00", 4) = 4 [pid 5836] rt_sigaction(SIGRT_1, {sa_handler=0x7fa6acaea9e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa6acadc320}, NULL, 8) = 0 [pid 5836] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5836] mmap(NULL, 8392704, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa6ac271000 [pid 5836] mprotect(0x7fa6ac272000, 8388608, PROT_READ|PROT_WRITE) = 0 [pid 5836] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5836] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa6aca71990, parent_tid=0x7fa6aca71990, exit_signal=0, stack=0x7fa6ac271000, stack_size=0x800300, tls=0x7fa6aca716c0}./strace-static-x86_64: Process 5838 attached => {parent_tid=[2]}, 88) = 2 [pid 5838] rseq(0x7fa6aca71fe0, 0x20, 0, 0x53053053) = 0 [pid 5838] set_robust_list(0x7fa6aca719a0, 24 [pid 5836] rt_sigprocmask(SIG_SETMASK, [], [pid 5838] <... set_robust_list resumed>) = 0 [pid 5836] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5838] rt_sigprocmask(SIG_SETMASK, [], [pid 5836] ioctl(3, HCIDEVUP [pid 5838] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5838] read(202, "\x01\x03\x0c\x00", 1024) = 4 [pid 5838] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x03\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 5838] read(202, "\x01\x03\x10\x00", 1024) = 4 [pid 5838] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x03\x10", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 5838] read(202, "\x01\x01\x10\x00", 1024) = 4 [ 106.003269][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 106.022718][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [pid 5838] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x01\x10", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 5838] read(202, "\x01\x09\x10\x00", 1024) = 4 [pid 5838] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x0a", iov_len=2}, {iov_base="\x01\x09\x10", iov_len=3}, {iov_base="\x00\xaa\xaa\xaa\xaa\xaa\xaa", iov_len=7}], 4) = 13 [pid 5838] read(202, "\x01\x05\x10\x00", 1024) = 4 [pid 5838] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x0b", iov_len=2}, {iov_base="\x01\x05\x10", iov_len=3}, {iov_base="\x00\xfd\x03\x60\x04\x00\x06\x00", iov_len=8}], 4) = 14 [pid 5838] read(202, "\x01\x23\x0c\x00", 1024) = 4 [ 106.053814][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [pid 5838] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x23\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 5838] read(202, "\x01\x14\x0c\x00", 1024) = 4 [pid 5838] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x14\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 5838] read(202, "\x01\x25\x0c\x00", 1024) = 4 [pid 5838] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x25\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 5838] read(202, "\x01\x38\x0c\x00", 1024) = 4 [pid 5838] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x38\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 5838] read(202, "\x01\x39\x0c\x00", 1024) = 4 [pid 5838] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x39\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 5838] read(202, "\x01\x16\x0c\x02\x00\x7d", 1024) = 6 [pid 5838] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x16\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 5838] read(202, [pid 5836] <... ioctl resumed>, 0) = -1 EALREADY (Operation already in progress) [ 106.105156][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 106.134503][ T5837] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 106.142650][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [pid 5836] ioctl(3, HCISETSCAN [pid 5838] <... read resumed>"\x01\x1a\x0c\x01\x02", 1024) = 5 [pid 5838] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x04", iov_len=2}, {iov_base="\x01\x1a\x0c", iov_len=3}, {iov_base="\x00", iov_len=1}], 4) = 7 [pid 5838] rt_sigprocmask(SIG_BLOCK, ~[RT_1], NULL, 8) = 0 [pid 5836] <... ioctl resumed>, 0x7fffef719ab0) = 0 [pid 5838] madvise(0x7fa6ac271000, 8372224, MADV_DONTNEED [pid 5836] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x04\x0a", iov_len=2}, {iov_base="\xaa\xaa\xaa\xaa\xaa\x10\x00\x00\x00\x01", iov_len=10}], 3 [pid 5838] <... madvise resumed>) = 0 [pid 5836] <... writev resumed>) = 13 [pid 5838] exit(0 [pid 5836] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x03\x0b", iov_len=2}, {iov_base="\x00\xc8\x00\xaa\xaa\xaa\xaa\xaa\x10\x01\x00", iov_len=11}], 3) = 14 [pid 5838] <... exit resumed>) = ? [pid 5838] +++ exited with 0 +++ [pid 5836] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\v\v", iov_len=2}, {iov_base="\x00\xc8\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=11}], 3) = 14 [pid 5836] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x3e\x13", iov_len=2}, {iov_base="\x01\x00\xc9\x00\x01\x00\xaa\xaa\xaa\xaa\xaa\x11\x00\x00\x00\x00\x00\x00\x00", iov_len=19}], 3) = 22 [pid 5836] close(3) = 0 [pid 5836] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5836] getppid() = 0 [pid 5836] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5836] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5836] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5836] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5836] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5836] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5836] unshare(CLONE_NEWNS) = 0 [pid 5836] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5836] unshare(CLONE_NEWIPC) = 0 [pid 5836] unshare(CLONE_NEWCGROUP) = 0 [pid 5836] unshare(CLONE_NEWUTS) = 0 [pid 5836] unshare(CLONE_SYSVSEM) = 0 [pid 5836] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5836] write(3, "16777216", 8) = 8 [pid 5836] close(3) = 0 [pid 5836] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5836] write(3, "536870912", 9) = 9 [pid 5836] close(3) = 0 [pid 5836] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5836] write(3, "1024", 4) = 4 [pid 5836] close(3) = 0 [pid 5836] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5836] write(3, "8192", 4) = 4 [pid 5836] close(3) = 0 [pid 5836] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5836] write(3, "1024", 4) = 4 [pid 5836] close(3) = 0 [pid 5836] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5836] write(3, "1024", 4) = 4 [pid 5836] close(3) = 0 [pid 5836] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5836] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5836] close(3) = 0 [pid 5836] getpid() = 1 [pid 5836] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5841] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 3 [pid 5841] <... set_robust_list resumed>) = 0 [pid 5841] chdir("./0") = 0 [pid 5841] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5841] setpgid(0, 0) = 0 [pid 5841] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5841] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [ 107.299113][ T5836] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [pid 5841] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5841] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5841] write(3, "1000", 4) = 4 [pid 5841] close(3) = 0 [pid 5841] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5841] write(1, "executing program\n", 18executing program ) = 18 [pid 5841] memfd_create("syzkaller", 0) = 3 [pid 5841] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5841] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5841] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5841] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5841] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5841] close(3) = 0 [pid 5841] close(4) = 0 [pid 5841] mkdir("./file2", 0777) = 0 [pid 5841] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5841] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5841] chdir("./file2") = 0 [pid 5841] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5841] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5841] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5841] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [ 107.447589][ T5841] loop0: detected capacity change from 0 to 128 [pid 5841] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5841] close(3) = 0 [pid 5841] close(4) = 0 [pid 5841] close(5) = -1 EBADF (Bad file descriptor) [pid 5841] close(6) = -1 EBADF (Bad file descriptor) [pid 5841] close(7) = -1 EBADF (Bad file descriptor) [pid 5841] close(8) = -1 EBADF (Bad file descriptor) [pid 5841] close(9) = -1 EBADF (Bad file descriptor) [pid 5841] close(10) = -1 EBADF (Bad file descriptor) [pid 5841] close(11) = -1 EBADF (Bad file descriptor) [pid 5841] close(12) = -1 EBADF (Bad file descriptor) [pid 5841] close(13) = -1 EBADF (Bad file descriptor) [pid 5841] close(14) = -1 EBADF (Bad file descriptor) [pid 5841] close(15) = -1 EBADF (Bad file descriptor) [pid 5841] close(16) = -1 EBADF (Bad file descriptor) [pid 5841] close(17) = -1 EBADF (Bad file descriptor) [pid 5841] close(18) = -1 EBADF (Bad file descriptor) [pid 5841] close(19) = -1 EBADF (Bad file descriptor) [pid 5841] close(20) = -1 EBADF (Bad file descriptor) [pid 5841] close(21) = -1 EBADF (Bad file descriptor) [pid 5841] close(22) = -1 EBADF (Bad file descriptor) [pid 5841] close(23) = -1 EBADF (Bad file descriptor) [pid 5841] close(24) = -1 EBADF (Bad file descriptor) [pid 5841] close(25) = -1 EBADF (Bad file descriptor) [pid 5841] close(26) = -1 EBADF (Bad file descriptor) [pid 5841] close(27) = -1 EBADF (Bad file descriptor) [pid 5841] close(28) = -1 EBADF (Bad file descriptor) [pid 5841] close(29) = -1 EBADF (Bad file descriptor) [pid 5841] exit_group(0) = ? [pid 5841] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./0/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./0/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./0/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./0/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./0/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./0/file2") = 0 [pid 5836] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./0/binderfs") = 0 [pid 5836] umount2("./0/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./0/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./0/cgroup.net") = 0 [pid 5836] umount2("./0/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./0/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./0/cgroup.cpu") = 0 [pid 5836] umount2("./0/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./0/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./0/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./0") = 0 [pid 5836] mkdir("./1", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5842 attached [pid 5842] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 4 [pid 5842] <... set_robust_list resumed>) = 0 [pid 5842] chdir("./1") = 0 [pid 5842] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5842] setpgid(0, 0) = 0 [pid 5842] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5842] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5842] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5842] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5842] write(3, "1000", 4) = 4 [pid 5842] close(3) = 0 [pid 5842] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5842] write(1, "executing program\n", 18executing program ) = 18 [pid 5842] memfd_create("syzkaller", 0) = 3 [pid 5842] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5842] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5842] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5842] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5842] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5842] close(3) = 0 [pid 5842] close(4) = 0 [pid 5842] mkdir("./file2", 0777) = 0 [pid 5842] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5842] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5842] chdir("./file2") = 0 [pid 5842] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5842] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5842] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5842] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5842] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5842] close(3) = 0 [ 108.053339][ T5842] loop0: detected capacity change from 0 to 128 [pid 5842] close(4) = 0 [pid 5842] close(5) = -1 EBADF (Bad file descriptor) [pid 5842] close(6) = -1 EBADF (Bad file descriptor) [pid 5842] close(7) = -1 EBADF (Bad file descriptor) [pid 5842] close(8) = -1 EBADF (Bad file descriptor) [pid 5842] close(9) = -1 EBADF (Bad file descriptor) [pid 5842] close(10) = -1 EBADF (Bad file descriptor) [pid 5842] close(11) = -1 EBADF (Bad file descriptor) [pid 5842] close(12) = -1 EBADF (Bad file descriptor) [pid 5842] close(13) = -1 EBADF (Bad file descriptor) [pid 5842] close(14) = -1 EBADF (Bad file descriptor) [pid 5842] close(15) = -1 EBADF (Bad file descriptor) [pid 5842] close(16) = -1 EBADF (Bad file descriptor) [pid 5842] close(17) = -1 EBADF (Bad file descriptor) [pid 5842] close(18) = -1 EBADF (Bad file descriptor) [pid 5842] close(19) = -1 EBADF (Bad file descriptor) [pid 5842] close(20) = -1 EBADF (Bad file descriptor) [pid 5842] close(21) = -1 EBADF (Bad file descriptor) [pid 5842] close(22) = -1 EBADF (Bad file descriptor) [pid 5842] close(23) = -1 EBADF (Bad file descriptor) [pid 5842] close(24) = -1 EBADF (Bad file descriptor) [pid 5842] close(25) = -1 EBADF (Bad file descriptor) [pid 5842] close(26) = -1 EBADF (Bad file descriptor) [pid 5842] close(27) = -1 EBADF (Bad file descriptor) [pid 5842] close(28) = -1 EBADF (Bad file descriptor) [pid 5842] close(29) = -1 EBADF (Bad file descriptor) [pid 5842] exit_group(0) = ? [pid 5842] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./1/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./1/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./1/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./1/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./1/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./1/file2") = 0 [pid 5836] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./1/binderfs") = 0 [pid 5836] umount2("./1/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./1/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./1/cgroup.net") = 0 [pid 5836] umount2("./1/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./1/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./1/cgroup.cpu") = 0 [pid 5836] umount2("./1/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./1/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./1/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./1") = 0 [pid 5836] mkdir("./2", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5843 attached [pid 5843] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 5 [pid 5843] <... set_robust_list resumed>) = 0 [pid 5843] chdir("./2") = 0 [pid 5843] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5843] setpgid(0, 0) = 0 [pid 5843] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5843] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5843] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5843] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5843] write(3, "1000", 4) = 4 [pid 5843] close(3) = 0 [pid 5843] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5843] write(1, "executing program\n", 18) = 18 [pid 5843] memfd_create("syzkaller", 0) = 3 [pid 5843] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5843] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5843] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5843] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5843] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5843] close(3) = 0 [pid 5843] close(4) = 0 [pid 5843] mkdir("./file2", 0777) = 0 [pid 5843] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5843] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5843] chdir("./file2") = 0 [pid 5843] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5843] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5843] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5843] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5843] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5843] close(3) = 0 [pid 5843] close(4) = 0 [pid 5843] close(5) = -1 EBADF (Bad file descriptor) [pid 5843] close(6) = -1 EBADF (Bad file descriptor) [pid 5843] close(7) = -1 EBADF (Bad file descriptor) [pid 5843] close(8) = -1 EBADF (Bad file descriptor) [pid 5843] close(9) = -1 EBADF (Bad file descriptor) [pid 5843] close(10) = -1 EBADF (Bad file descriptor) [pid 5843] close(11) = -1 EBADF (Bad file descriptor) [ 108.216683][ T5143] Bluetooth: hci0: command tx timeout [ 108.245893][ T5843] loop0: detected capacity change from 0 to 128 [pid 5843] close(12) = -1 EBADF (Bad file descriptor) [pid 5843] close(13) = -1 EBADF (Bad file descriptor) [pid 5843] close(14) = -1 EBADF (Bad file descriptor) [pid 5843] close(15) = -1 EBADF (Bad file descriptor) [pid 5843] close(16) = -1 EBADF (Bad file descriptor) [pid 5843] close(17) = -1 EBADF (Bad file descriptor) [pid 5843] close(18) = -1 EBADF (Bad file descriptor) [pid 5843] close(19) = -1 EBADF (Bad file descriptor) [pid 5843] close(20) = -1 EBADF (Bad file descriptor) [pid 5843] close(21) = -1 EBADF (Bad file descriptor) [pid 5843] close(22) = -1 EBADF (Bad file descriptor) [pid 5843] close(23) = -1 EBADF (Bad file descriptor) [pid 5843] close(24) = -1 EBADF (Bad file descriptor) [pid 5843] close(25) = -1 EBADF (Bad file descriptor) [pid 5843] close(26) = -1 EBADF (Bad file descriptor) [pid 5843] close(27) = -1 EBADF (Bad file descriptor) [pid 5843] close(28) = -1 EBADF (Bad file descriptor) [pid 5843] close(29) = -1 EBADF (Bad file descriptor) [pid 5843] exit_group(0) = ? [pid 5843] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./2/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./2/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./2/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./2/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./2/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./2/file2") = 0 [pid 5836] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./2/binderfs") = 0 [pid 5836] umount2("./2/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./2/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./2/cgroup.net") = 0 [pid 5836] umount2("./2/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./2/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./2/cgroup.cpu") = 0 [pid 5836] umount2("./2/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./2/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./2/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./2") = 0 [pid 5836] mkdir("./3", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5844 attached [pid 5844] set_robust_list(0x5555632376a0, 24) = 0 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 6 [pid 5844] chdir("./3") = 0 [pid 5844] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5844] setpgid(0, 0) = 0 [pid 5844] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5844] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5844] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5844] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5844] write(3, "1000", 4) = 4 [pid 5844] close(3) = 0 [pid 5844] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5844] write(1, "executing program\n", 18executing program ) = 18 [pid 5844] memfd_create("syzkaller", 0) = 3 [pid 5844] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5844] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5844] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5844] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5844] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5844] close(3) = 0 [pid 5844] close(4) = 0 [pid 5844] mkdir("./file2", 0777) = 0 [pid 5844] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5844] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5844] chdir("./file2") = 0 [ 108.858384][ T5844] loop0: detected capacity change from 0 to 128 [pid 5844] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5844] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5844] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5844] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5844] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5844] close(3) = 0 [pid 5844] close(4) = 0 [pid 5844] close(5) = -1 EBADF (Bad file descriptor) [pid 5844] close(6) = -1 EBADF (Bad file descriptor) [pid 5844] close(7) = -1 EBADF (Bad file descriptor) [pid 5844] close(8) = -1 EBADF (Bad file descriptor) [pid 5844] close(9) = -1 EBADF (Bad file descriptor) [pid 5844] close(10) = -1 EBADF (Bad file descriptor) [pid 5844] close(11) = -1 EBADF (Bad file descriptor) [pid 5844] close(12) = -1 EBADF (Bad file descriptor) [pid 5844] close(13) = -1 EBADF (Bad file descriptor) [pid 5844] close(14) = -1 EBADF (Bad file descriptor) [pid 5844] close(15) = -1 EBADF (Bad file descriptor) [pid 5844] close(16) = -1 EBADF (Bad file descriptor) [pid 5844] close(17) = -1 EBADF (Bad file descriptor) [pid 5844] close(18) = -1 EBADF (Bad file descriptor) [pid 5844] close(19) = -1 EBADF (Bad file descriptor) [pid 5844] close(20) = -1 EBADF (Bad file descriptor) [pid 5844] close(21) = -1 EBADF (Bad file descriptor) [pid 5844] close(22) = -1 EBADF (Bad file descriptor) [pid 5844] close(23) = -1 EBADF (Bad file descriptor) [pid 5844] close(24) = -1 EBADF (Bad file descriptor) [pid 5844] close(25) = -1 EBADF (Bad file descriptor) [pid 5844] close(26) = -1 EBADF (Bad file descriptor) [pid 5844] close(27) = -1 EBADF (Bad file descriptor) [pid 5844] close(28) = -1 EBADF (Bad file descriptor) [pid 5844] close(29) = -1 EBADF (Bad file descriptor) [pid 5844] exit_group(0) = ? [pid 5844] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./3/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./3/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./3/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./3/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./3/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./3/file2") = 0 [pid 5836] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./3/binderfs") = 0 [pid 5836] umount2("./3/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./3/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./3/cgroup.net") = 0 [pid 5836] umount2("./3/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./3/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./3/cgroup.cpu") = 0 [pid 5836] umount2("./3/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./3/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./3/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./3") = 0 [pid 5836] mkdir("./4", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5845 attached [pid 5845] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 7 [pid 5845] <... set_robust_list resumed>) = 0 [pid 5845] chdir("./4") = 0 [pid 5845] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5845] setpgid(0, 0) = 0 [pid 5845] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5845] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5845] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5845] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5845] write(3, "1000", 4) = 4 [pid 5845] close(3) = 0 [pid 5845] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5845] write(1, "executing program\n", 18) = 18 [pid 5845] memfd_create("syzkaller", 0) = 3 [pid 5845] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5845] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5845] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5845] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5845] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5845] close(3) = 0 [pid 5845] close(4) = 0 [pid 5845] mkdir("./file2", 0777) = 0 [pid 5845] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5845] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5845] chdir("./file2") = 0 [pid 5845] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5845] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5845] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5845] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [ 109.410414][ T5845] loop0: detected capacity change from 0 to 128 [pid 5845] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5845] close(3) = 0 [pid 5845] close(4) = 0 [pid 5845] close(5) = -1 EBADF (Bad file descriptor) [pid 5845] close(6) = -1 EBADF (Bad file descriptor) [pid 5845] close(7) = -1 EBADF (Bad file descriptor) [pid 5845] close(8) = -1 EBADF (Bad file descriptor) [pid 5845] close(9) = -1 EBADF (Bad file descriptor) [pid 5845] close(10) = -1 EBADF (Bad file descriptor) [pid 5845] close(11) = -1 EBADF (Bad file descriptor) [pid 5845] close(12) = -1 EBADF (Bad file descriptor) [pid 5845] close(13) = -1 EBADF (Bad file descriptor) [pid 5845] close(14) = -1 EBADF (Bad file descriptor) [pid 5845] close(15) = -1 EBADF (Bad file descriptor) [pid 5845] close(16) = -1 EBADF (Bad file descriptor) [pid 5845] close(17) = -1 EBADF (Bad file descriptor) [pid 5845] close(18) = -1 EBADF (Bad file descriptor) [pid 5845] close(19) = -1 EBADF (Bad file descriptor) [pid 5845] close(20) = -1 EBADF (Bad file descriptor) [pid 5845] close(21) = -1 EBADF (Bad file descriptor) [pid 5845] close(22) = -1 EBADF (Bad file descriptor) [pid 5845] close(23) = -1 EBADF (Bad file descriptor) [pid 5845] close(24) = -1 EBADF (Bad file descriptor) [pid 5845] close(25) = -1 EBADF (Bad file descriptor) [pid 5845] close(26) = -1 EBADF (Bad file descriptor) [pid 5845] close(27) = -1 EBADF (Bad file descriptor) [pid 5845] close(28) = -1 EBADF (Bad file descriptor) [pid 5845] close(29) = -1 EBADF (Bad file descriptor) [pid 5845] exit_group(0) = ? [pid 5845] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./4/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./4/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./4/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./4/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./4/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./4/file2") = 0 [pid 5836] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./4/binderfs") = 0 [pid 5836] umount2("./4/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./4/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./4/cgroup.net") = 0 [pid 5836] umount2("./4/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./4/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./4/cgroup.cpu") = 0 [pid 5836] umount2("./4/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./4/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./4/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./4") = 0 [pid 5836] mkdir("./5", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5846 attached , child_tidptr=0x555563237690) = 8 [pid 5846] set_robust_list(0x5555632376a0, 24) = 0 [pid 5846] chdir("./5") = 0 [pid 5846] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5846] setpgid(0, 0) = 0 [pid 5846] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5846] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5846] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5846] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5846] write(3, "1000", 4) = 4 [pid 5846] close(3) = 0 [pid 5846] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5846] write(1, "executing program\n", 18) = 18 [pid 5846] memfd_create("syzkaller", 0) = 3 [pid 5846] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5846] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5846] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5846] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5846] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5846] close(3) = 0 [pid 5846] close(4) = 0 [pid 5846] mkdir("./file2", 0777) = 0 [pid 5846] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5846] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5846] chdir("./file2") = 0 [ 109.996668][ T5846] loop0: detected capacity change from 0 to 128 [pid 5846] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5846] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5846] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5846] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5846] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5846] close(3) = 0 [pid 5846] close(4) = 0 [pid 5846] close(5) = -1 EBADF (Bad file descriptor) [pid 5846] close(6) = -1 EBADF (Bad file descriptor) [pid 5846] close(7) = -1 EBADF (Bad file descriptor) [pid 5846] close(8) = -1 EBADF (Bad file descriptor) [pid 5846] close(9) = -1 EBADF (Bad file descriptor) [pid 5846] close(10) = -1 EBADF (Bad file descriptor) [pid 5846] close(11) = -1 EBADF (Bad file descriptor) [pid 5846] close(12) = -1 EBADF (Bad file descriptor) [pid 5846] close(13) = -1 EBADF (Bad file descriptor) [pid 5846] close(14) = -1 EBADF (Bad file descriptor) [pid 5846] close(15) = -1 EBADF (Bad file descriptor) [pid 5846] close(16) = -1 EBADF (Bad file descriptor) [pid 5846] close(17) = -1 EBADF (Bad file descriptor) [pid 5846] close(18) = -1 EBADF (Bad file descriptor) [pid 5846] close(19) = -1 EBADF (Bad file descriptor) [pid 5846] close(20) = -1 EBADF (Bad file descriptor) [pid 5846] close(21) = -1 EBADF (Bad file descriptor) [pid 5846] close(22) = -1 EBADF (Bad file descriptor) [pid 5846] close(23) = -1 EBADF (Bad file descriptor) [pid 5846] close(24) = -1 EBADF (Bad file descriptor) [pid 5846] close(25) = -1 EBADF (Bad file descriptor) [pid 5846] close(26) = -1 EBADF (Bad file descriptor) [pid 5846] close(27) = -1 EBADF (Bad file descriptor) [pid 5846] close(28) = -1 EBADF (Bad file descriptor) [pid 5846] close(29) = -1 EBADF (Bad file descriptor) [pid 5846] exit_group(0) = ? [pid 5846] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./5/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./5/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./5/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./5/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./5/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./5/file2") = 0 [pid 5836] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./5/binderfs") = 0 [pid 5836] umount2("./5/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./5/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./5/cgroup.net") = 0 [pid 5836] umount2("./5/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./5/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 110.297045][ T5143] Bluetooth: hci0: command tx timeout [pid 5836] unlink("./5/cgroup.cpu") = 0 [pid 5836] umount2("./5/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./5/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./5/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./5") = 0 [pid 5836] mkdir("./6", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5847 attached [pid 5847] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 9 [pid 5847] <... set_robust_list resumed>) = 0 [pid 5847] chdir("./6") = 0 [pid 5847] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5847] setpgid(0, 0) = 0 [pid 5847] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5847] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5847] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5847] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5847] write(3, "1000", 4) = 4 [pid 5847] close(3) = 0 [pid 5847] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5847] write(1, "executing program\n", 18) = 18 [pid 5847] memfd_create("syzkaller", 0) = 3 [pid 5847] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5847] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5847] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5847] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5847] close(3) = 0 [pid 5847] close(4) = 0 [pid 5847] mkdir("./file2", 0777) = 0 [pid 5847] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5847] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5847] chdir("./file2") = 0 [ 110.469722][ T5847] loop0: detected capacity change from 0 to 128 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5847] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5847] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5847] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5847] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5847] close(3) = 0 [pid 5847] close(4) = 0 [pid 5847] close(5) = -1 EBADF (Bad file descriptor) [pid 5847] close(6) = -1 EBADF (Bad file descriptor) [pid 5847] close(7) = -1 EBADF (Bad file descriptor) [pid 5847] close(8) = -1 EBADF (Bad file descriptor) [pid 5847] close(9) = -1 EBADF (Bad file descriptor) [pid 5847] close(10) = -1 EBADF (Bad file descriptor) [pid 5847] close(11) = -1 EBADF (Bad file descriptor) [pid 5847] close(12) = -1 EBADF (Bad file descriptor) [pid 5847] close(13) = -1 EBADF (Bad file descriptor) [pid 5847] close(14) = -1 EBADF (Bad file descriptor) [pid 5847] close(15) = -1 EBADF (Bad file descriptor) [pid 5847] close(16) = -1 EBADF (Bad file descriptor) [pid 5847] close(17) = -1 EBADF (Bad file descriptor) [pid 5847] close(18) = -1 EBADF (Bad file descriptor) [pid 5847] close(19) = -1 EBADF (Bad file descriptor) [pid 5847] close(20) = -1 EBADF (Bad file descriptor) [pid 5847] close(21) = -1 EBADF (Bad file descriptor) [pid 5847] close(22) = -1 EBADF (Bad file descriptor) [pid 5847] close(23) = -1 EBADF (Bad file descriptor) [pid 5847] close(24) = -1 EBADF (Bad file descriptor) [pid 5847] close(25) = -1 EBADF (Bad file descriptor) [pid 5847] close(26) = -1 EBADF (Bad file descriptor) [pid 5847] close(27) = -1 EBADF (Bad file descriptor) [pid 5847] close(28) = -1 EBADF (Bad file descriptor) [pid 5847] close(29) = -1 EBADF (Bad file descriptor) [pid 5847] exit_group(0) = ? [pid 5847] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./6/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./6/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./6/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./6/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./6/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./6/file2") = 0 [pid 5836] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./6/binderfs") = 0 [pid 5836] umount2("./6/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./6/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./6/cgroup.net") = 0 [pid 5836] umount2("./6/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./6/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./6/cgroup.cpu") = 0 [pid 5836] umount2("./6/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./6/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./6/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./6") = 0 [pid 5836] mkdir("./7", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5848 attached [pid 5848] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 10 [pid 5848] <... set_robust_list resumed>) = 0 [pid 5848] chdir("./7") = 0 [pid 5848] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5848] setpgid(0, 0) = 0 [pid 5848] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5848] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5848] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5848] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5848] write(3, "1000", 4) = 4 [pid 5848] close(3) = 0 [pid 5848] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5848] write(1, "executing program\n", 18executing program ) = 18 [pid 5848] memfd_create("syzkaller", 0) = 3 [pid 5848] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5848] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5848] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5848] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5848] close(3) = 0 [pid 5848] close(4) = 0 [pid 5848] mkdir("./file2", 0777) = 0 [pid 5848] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5848] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5848] chdir("./file2") = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 111.074307][ T5848] loop0: detected capacity change from 0 to 128 [pid 5848] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5848] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5848] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5848] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5848] close(3) = 0 [pid 5848] close(4) = 0 [pid 5848] close(5) = -1 EBADF (Bad file descriptor) [pid 5848] close(6) = -1 EBADF (Bad file descriptor) [pid 5848] close(7) = -1 EBADF (Bad file descriptor) [pid 5848] close(8) = -1 EBADF (Bad file descriptor) [pid 5848] close(9) = -1 EBADF (Bad file descriptor) [pid 5848] close(10) = -1 EBADF (Bad file descriptor) [pid 5848] close(11) = -1 EBADF (Bad file descriptor) [pid 5848] close(12) = -1 EBADF (Bad file descriptor) [pid 5848] close(13) = -1 EBADF (Bad file descriptor) [pid 5848] close(14) = -1 EBADF (Bad file descriptor) [pid 5848] close(15) = -1 EBADF (Bad file descriptor) [pid 5848] close(16) = -1 EBADF (Bad file descriptor) [pid 5848] close(17) = -1 EBADF (Bad file descriptor) [pid 5848] close(18) = -1 EBADF (Bad file descriptor) [pid 5848] close(19) = -1 EBADF (Bad file descriptor) [pid 5848] close(20) = -1 EBADF (Bad file descriptor) [pid 5848] close(21) = -1 EBADF (Bad file descriptor) [pid 5848] close(22) = -1 EBADF (Bad file descriptor) [pid 5848] close(23) = -1 EBADF (Bad file descriptor) [pid 5848] close(24) = -1 EBADF (Bad file descriptor) [pid 5848] close(25) = -1 EBADF (Bad file descriptor) [pid 5848] close(26) = -1 EBADF (Bad file descriptor) [pid 5848] close(27) = -1 EBADF (Bad file descriptor) [pid 5848] close(28) = -1 EBADF (Bad file descriptor) [pid 5848] close(29) = -1 EBADF (Bad file descriptor) [pid 5848] exit_group(0) = ? [pid 5848] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./7/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./7/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./7/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./7/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./7/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./7/file2") = 0 [pid 5836] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./7/binderfs") = 0 [pid 5836] umount2("./7/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./7/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./7/cgroup.net") = 0 [pid 5836] umount2("./7/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./7/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./7/cgroup.cpu") = 0 [pid 5836] umount2("./7/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./7/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./7/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./7") = 0 [pid 5836] mkdir("./8", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5849 attached , child_tidptr=0x555563237690) = 11 [pid 5849] set_robust_list(0x5555632376a0, 24) = 0 [pid 5849] chdir("./8") = 0 [pid 5849] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5849] setpgid(0, 0) = 0 [pid 5849] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5849] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5849] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5849] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5849] write(3, "1000", 4) = 4 [pid 5849] close(3) = 0 [pid 5849] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5849] write(1, "executing program\n", 18) = 18 [pid 5849] memfd_create("syzkaller", 0) = 3 [pid 5849] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5849] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5849] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5849] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5849] close(3) = 0 [pid 5849] close(4) = 0 [pid 5849] mkdir("./file2", 0777) = 0 [pid 5849] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5849] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5849] chdir("./file2") = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5849] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5849] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5849] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5849] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5849] close(3) = 0 [pid 5849] close(4) = 0 [pid 5849] close(5) = -1 EBADF (Bad file descriptor) [pid 5849] close(6) = -1 EBADF (Bad file descriptor) [pid 5849] close(7) = -1 EBADF (Bad file descriptor) [pid 5849] close(8) = -1 EBADF (Bad file descriptor) [pid 5849] close(9) = -1 EBADF (Bad file descriptor) [ 111.351970][ T5849] loop0: detected capacity change from 0 to 128 [pid 5849] close(10) = -1 EBADF (Bad file descriptor) [pid 5849] close(11) = -1 EBADF (Bad file descriptor) [pid 5849] close(12) = -1 EBADF (Bad file descriptor) [pid 5849] close(13) = -1 EBADF (Bad file descriptor) [pid 5849] close(14) = -1 EBADF (Bad file descriptor) [pid 5849] close(15) = -1 EBADF (Bad file descriptor) [pid 5849] close(16) = -1 EBADF (Bad file descriptor) [pid 5849] close(17) = -1 EBADF (Bad file descriptor) [pid 5849] close(18) = -1 EBADF (Bad file descriptor) [pid 5849] close(19) = -1 EBADF (Bad file descriptor) [pid 5849] close(20) = -1 EBADF (Bad file descriptor) [pid 5849] close(21) = -1 EBADF (Bad file descriptor) [pid 5849] close(22) = -1 EBADF (Bad file descriptor) [pid 5849] close(23) = -1 EBADF (Bad file descriptor) [pid 5849] close(24) = -1 EBADF (Bad file descriptor) [pid 5849] close(25) = -1 EBADF (Bad file descriptor) [pid 5849] close(26) = -1 EBADF (Bad file descriptor) [pid 5849] close(27) = -1 EBADF (Bad file descriptor) [pid 5849] close(28) = -1 EBADF (Bad file descriptor) [pid 5849] close(29) = -1 EBADF (Bad file descriptor) [pid 5849] exit_group(0) = ? [pid 5849] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=11, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./8/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./8/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./8/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./8/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./8/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./8/file2") = 0 [pid 5836] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./8/binderfs") = 0 [pid 5836] umount2("./8/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./8/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./8/cgroup.net") = 0 [pid 5836] umount2("./8/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./8/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./8/cgroup.cpu") = 0 [pid 5836] umount2("./8/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./8/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./8/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./8") = 0 [pid 5836] mkdir("./9", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5850 attached [pid 5850] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 12 [pid 5850] <... set_robust_list resumed>) = 0 [pid 5850] chdir("./9") = 0 [pid 5850] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5850] setpgid(0, 0) = 0 [pid 5850] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5850] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5850] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5850] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5850] write(3, "1000", 4) = 4 [pid 5850] close(3) = 0 [pid 5850] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5850] write(1, "executing program\n", 18) = 18 [pid 5850] memfd_create("syzkaller", 0) = 3 [pid 5850] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5850] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5850] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5850] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5850] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5850] close(3) = 0 [pid 5850] close(4) = 0 [pid 5850] mkdir("./file2", 0777) = 0 [pid 5850] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5850] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5850] chdir("./file2") = 0 [pid 5850] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5850] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5850] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5850] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5850] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5850] close(3) = 0 [ 111.802654][ T5850] loop0: detected capacity change from 0 to 128 [pid 5850] close(4) = 0 [pid 5850] close(5) = -1 EBADF (Bad file descriptor) [pid 5850] close(6) = -1 EBADF (Bad file descriptor) [pid 5850] close(7) = -1 EBADF (Bad file descriptor) [pid 5850] close(8) = -1 EBADF (Bad file descriptor) [pid 5850] close(9) = -1 EBADF (Bad file descriptor) [pid 5850] close(10) = -1 EBADF (Bad file descriptor) [pid 5850] close(11) = -1 EBADF (Bad file descriptor) [pid 5850] close(12) = -1 EBADF (Bad file descriptor) [pid 5850] close(13) = -1 EBADF (Bad file descriptor) [pid 5850] close(14) = -1 EBADF (Bad file descriptor) [pid 5850] close(15) = -1 EBADF (Bad file descriptor) [pid 5850] close(16) = -1 EBADF (Bad file descriptor) [pid 5850] close(17) = -1 EBADF (Bad file descriptor) [pid 5850] close(18) = -1 EBADF (Bad file descriptor) [pid 5850] close(19) = -1 EBADF (Bad file descriptor) [pid 5850] close(20) = -1 EBADF (Bad file descriptor) [pid 5850] close(21) = -1 EBADF (Bad file descriptor) [pid 5850] close(22) = -1 EBADF (Bad file descriptor) [pid 5850] close(23) = -1 EBADF (Bad file descriptor) [pid 5850] close(24) = -1 EBADF (Bad file descriptor) [pid 5850] close(25) = -1 EBADF (Bad file descriptor) [pid 5850] close(26) = -1 EBADF (Bad file descriptor) [pid 5850] close(27) = -1 EBADF (Bad file descriptor) [pid 5850] close(28) = -1 EBADF (Bad file descriptor) [pid 5850] close(29) = -1 EBADF (Bad file descriptor) [pid 5850] exit_group(0) = ? [pid 5850] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./9/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./9/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./9/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./9/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./9/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./9/file2") = 0 [pid 5836] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./9/binderfs") = 0 [pid 5836] umount2("./9/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./9/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./9/cgroup.net") = 0 [pid 5836] umount2("./9/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./9/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./9/cgroup.cpu") = 0 [pid 5836] umount2("./9/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./9/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./9/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./9") = 0 [pid 5836] mkdir("./10", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5851 attached , child_tidptr=0x555563237690) = 13 [pid 5851] set_robust_list(0x5555632376a0, 24) = 0 [pid 5851] chdir("./10") = 0 [pid 5851] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5851] setpgid(0, 0) = 0 [pid 5851] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5851] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5851] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5851] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5851] write(3, "1000", 4) = 4 [pid 5851] close(3) = 0 [pid 5851] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5851] write(1, "executing program\n", 18) = 18 [pid 5851] memfd_create("syzkaller", 0) = 3 [pid 5851] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5851] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5851] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5851] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5851] close(3) = 0 [pid 5851] close(4) = 0 [pid 5851] mkdir("./file2", 0777) = 0 [pid 5851] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5851] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5851] chdir("./file2") = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5851] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5851] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5851] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5851] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5851] close(3) = 0 [pid 5851] close(4) = 0 [pid 5851] close(5) = -1 EBADF (Bad file descriptor) [pid 5851] close(6) = -1 EBADF (Bad file descriptor) [pid 5851] close(7) = -1 EBADF (Bad file descriptor) [pid 5851] close(8) = -1 EBADF (Bad file descriptor) [pid 5851] close(9) = -1 EBADF (Bad file descriptor) [pid 5851] close(10) = -1 EBADF (Bad file descriptor) [pid 5851] close(11) = -1 EBADF (Bad file descriptor) [pid 5851] close(12) = -1 EBADF (Bad file descriptor) [pid 5851] close(13) = -1 EBADF (Bad file descriptor) [pid 5851] close(14) = -1 EBADF (Bad file descriptor) [pid 5851] close(15) = -1 EBADF (Bad file descriptor) [pid 5851] close(16) = -1 EBADF (Bad file descriptor) [pid 5851] close(17) = -1 EBADF (Bad file descriptor) [pid 5851] close(18) = -1 EBADF (Bad file descriptor) [pid 5851] close(19) = -1 EBADF (Bad file descriptor) [pid 5851] close(20) = -1 EBADF (Bad file descriptor) [pid 5851] close(21) = -1 EBADF (Bad file descriptor) [pid 5851] close(22) = -1 EBADF (Bad file descriptor) [pid 5851] close(23) = -1 EBADF (Bad file descriptor) [pid 5851] close(24) = -1 EBADF (Bad file descriptor) [pid 5851] close(25) = -1 EBADF (Bad file descriptor) [pid 5851] close(26) = -1 EBADF (Bad file descriptor) [pid 5851] close(27) = -1 EBADF (Bad file descriptor) [ 112.099211][ T5851] loop0: detected capacity change from 0 to 128 [pid 5851] close(28) = -1 EBADF (Bad file descriptor) [pid 5851] close(29) = -1 EBADF (Bad file descriptor) [pid 5851] exit_group(0) = ? [pid 5851] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=13, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./10/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./10/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./10/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./10/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./10/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./10/file2") = 0 [pid 5836] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./10/binderfs") = 0 [pid 5836] umount2("./10/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./10/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./10/cgroup.net") = 0 [pid 5836] umount2("./10/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./10/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./10/cgroup.cpu") = 0 [pid 5836] umount2("./10/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./10/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./10/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./10") = 0 [pid 5836] mkdir("./11", 0777) = 0 [ 112.376129][ T5143] Bluetooth: hci0: command tx timeout [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5852 attached , child_tidptr=0x555563237690) = 14 [pid 5852] set_robust_list(0x5555632376a0, 24) = 0 [pid 5852] chdir("./11") = 0 [pid 5852] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5852] setpgid(0, 0) = 0 [pid 5852] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5852] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5852] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5852] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5852] write(3, "1000", 4) = 4 [pid 5852] close(3) = 0 [pid 5852] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5852] write(1, "executing program\n", 18) = 18 [pid 5852] memfd_create("syzkaller", 0) = 3 [pid 5852] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5852] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5852] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5852] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5852] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5852] close(3) = 0 [pid 5852] close(4) = 0 [pid 5852] mkdir("./file2", 0777) = 0 [pid 5852] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5852] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5852] chdir("./file2") = 0 [pid 5852] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5852] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [ 112.614066][ T5852] loop0: detected capacity change from 0 to 128 [pid 5852] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5852] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5852] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5852] close(3) = 0 [pid 5852] close(4) = 0 [pid 5852] close(5) = -1 EBADF (Bad file descriptor) [pid 5852] close(6) = -1 EBADF (Bad file descriptor) [pid 5852] close(7) = -1 EBADF (Bad file descriptor) [pid 5852] close(8) = -1 EBADF (Bad file descriptor) [pid 5852] close(9) = -1 EBADF (Bad file descriptor) [pid 5852] close(10) = -1 EBADF (Bad file descriptor) [pid 5852] close(11) = -1 EBADF (Bad file descriptor) [pid 5852] close(12) = -1 EBADF (Bad file descriptor) [pid 5852] close(13) = -1 EBADF (Bad file descriptor) [pid 5852] close(14) = -1 EBADF (Bad file descriptor) [pid 5852] close(15) = -1 EBADF (Bad file descriptor) [pid 5852] close(16) = -1 EBADF (Bad file descriptor) [pid 5852] close(17) = -1 EBADF (Bad file descriptor) [pid 5852] close(18) = -1 EBADF (Bad file descriptor) [pid 5852] close(19) = -1 EBADF (Bad file descriptor) [pid 5852] close(20) = -1 EBADF (Bad file descriptor) [pid 5852] close(21) = -1 EBADF (Bad file descriptor) [pid 5852] close(22) = -1 EBADF (Bad file descriptor) [pid 5852] close(23) = -1 EBADF (Bad file descriptor) [pid 5852] close(24) = -1 EBADF (Bad file descriptor) [pid 5852] close(25) = -1 EBADF (Bad file descriptor) [pid 5852] close(26) = -1 EBADF (Bad file descriptor) [pid 5852] close(27) = -1 EBADF (Bad file descriptor) [pid 5852] close(28) = -1 EBADF (Bad file descriptor) [pid 5852] close(29) = -1 EBADF (Bad file descriptor) [pid 5852] exit_group(0) = ? [pid 5852] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=14, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./11/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./11/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./11/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./11/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./11/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./11/file2") = 0 [pid 5836] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./11/binderfs") = 0 [pid 5836] umount2("./11/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./11/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./11/cgroup.net") = 0 [pid 5836] umount2("./11/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./11/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./11/cgroup.cpu") = 0 [pid 5836] umount2("./11/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./11/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./11/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./11") = 0 [pid 5836] mkdir("./12", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5853 attached [pid 5853] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 15 [pid 5853] <... set_robust_list resumed>) = 0 [pid 5853] chdir("./12") = 0 [pid 5853] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5853] setpgid(0, 0) = 0 [pid 5853] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5853] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5853] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5853] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5853] write(3, "1000", 4) = 4 [pid 5853] close(3) = 0 [pid 5853] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5853] write(1, "executing program\n", 18) = 18 [pid 5853] memfd_create("syzkaller", 0) = 3 [pid 5853] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5853] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5853] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5853] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5853] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5853] close(3) = 0 [pid 5853] close(4) = 0 [pid 5853] mkdir("./file2", 0777) = 0 [pid 5853] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5853] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5853] chdir("./file2") = 0 [pid 5853] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5853] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5853] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5853] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5853] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5853] close(3) = 0 [pid 5853] close(4) = 0 [pid 5853] close(5) = -1 EBADF (Bad file descriptor) [pid 5853] close(6) = -1 EBADF (Bad file descriptor) [pid 5853] close(7) = -1 EBADF (Bad file descriptor) [pid 5853] close(8) = -1 EBADF (Bad file descriptor) [pid 5853] close(9) = -1 EBADF (Bad file descriptor) [ 112.916328][ T5853] loop0: detected capacity change from 0 to 128 [pid 5853] close(10) = -1 EBADF (Bad file descriptor) [pid 5853] close(11) = -1 EBADF (Bad file descriptor) [pid 5853] close(12) = -1 EBADF (Bad file descriptor) [pid 5853] close(13) = -1 EBADF (Bad file descriptor) [pid 5853] close(14) = -1 EBADF (Bad file descriptor) [pid 5853] close(15) = -1 EBADF (Bad file descriptor) [pid 5853] close(16) = -1 EBADF (Bad file descriptor) [pid 5853] close(17) = -1 EBADF (Bad file descriptor) [pid 5853] close(18) = -1 EBADF (Bad file descriptor) [pid 5853] close(19) = -1 EBADF (Bad file descriptor) [pid 5853] close(20) = -1 EBADF (Bad file descriptor) [pid 5853] close(21) = -1 EBADF (Bad file descriptor) [pid 5853] close(22) = -1 EBADF (Bad file descriptor) [pid 5853] close(23) = -1 EBADF (Bad file descriptor) [pid 5853] close(24) = -1 EBADF (Bad file descriptor) [pid 5853] close(25) = -1 EBADF (Bad file descriptor) [pid 5853] close(26) = -1 EBADF (Bad file descriptor) [pid 5853] close(27) = -1 EBADF (Bad file descriptor) [pid 5853] close(28) = -1 EBADF (Bad file descriptor) [pid 5853] close(29) = -1 EBADF (Bad file descriptor) [pid 5853] exit_group(0) = ? [pid 5853] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=15, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./12/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./12/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./12/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./12/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./12/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./12/file2") = 0 [pid 5836] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./12/binderfs") = 0 [pid 5836] umount2("./12/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./12/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./12/cgroup.net") = 0 [pid 5836] umount2("./12/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./12/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./12/cgroup.cpu") = 0 [pid 5836] umount2("./12/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./12/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./12/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./12") = 0 [pid 5836] mkdir("./13", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5854 attached [pid 5854] set_robust_list(0x5555632376a0, 24) = 0 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 16 [pid 5854] chdir("./13") = 0 [pid 5854] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5854] setpgid(0, 0) = 0 [pid 5854] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5854] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5854] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5854] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5854] write(3, "1000", 4) = 4 [pid 5854] close(3) = 0 [pid 5854] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5854] write(1, "executing program\n", 18executing program ) = 18 [pid 5854] memfd_create("syzkaller", 0) = 3 [pid 5854] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5854] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5854] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5854] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5854] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5854] close(3) = 0 [pid 5854] close(4) = 0 [pid 5854] mkdir("./file2", 0777) = 0 [pid 5854] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5854] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5854] chdir("./file2") = 0 [pid 5854] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5854] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5854] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5854] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5854] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5854] close(3) = 0 [pid 5854] close(4) = 0 [pid 5854] close(5) = -1 EBADF (Bad file descriptor) [pid 5854] close(6) = -1 EBADF (Bad file descriptor) [pid 5854] close(7) = -1 EBADF (Bad file descriptor) [pid 5854] close(8) = -1 EBADF (Bad file descriptor) [pid 5854] close(9) = -1 EBADF (Bad file descriptor) [pid 5854] close(10) = -1 EBADF (Bad file descriptor) [pid 5854] close(11) = -1 EBADF (Bad file descriptor) [pid 5854] close(12) = -1 EBADF (Bad file descriptor) [pid 5854] close(13) = -1 EBADF (Bad file descriptor) [pid 5854] close(14) = -1 EBADF (Bad file descriptor) [pid 5854] close(15) = -1 EBADF (Bad file descriptor) [pid 5854] close(16) = -1 EBADF (Bad file descriptor) [pid 5854] close(17) = -1 EBADF (Bad file descriptor) [pid 5854] close(18) = -1 EBADF (Bad file descriptor) [pid 5854] close(19) = -1 EBADF (Bad file descriptor) [pid 5854] close(20) = -1 EBADF (Bad file descriptor) [pid 5854] close(21) = -1 EBADF (Bad file descriptor) [pid 5854] close(22) = -1 EBADF (Bad file descriptor) [pid 5854] close(23) = -1 EBADF (Bad file descriptor) [pid 5854] close(24) = -1 EBADF (Bad file descriptor) [pid 5854] close(25) = -1 EBADF (Bad file descriptor) [pid 5854] close(26) = -1 EBADF (Bad file descriptor) [pid 5854] close(27) = -1 EBADF (Bad file descriptor) [pid 5854] close(28) = -1 EBADF (Bad file descriptor) [pid 5854] close(29) = -1 EBADF (Bad file descriptor) [pid 5854] exit_group(0) = ? [pid 5854] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=16, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [ 113.056847][ T5854] loop0: detected capacity change from 0 to 128 [pid 5836] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./13/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./13/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./13/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./13/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./13/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./13/file2") = 0 [pid 5836] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./13/binderfs") = 0 [pid 5836] umount2("./13/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./13/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./13/cgroup.net") = 0 [pid 5836] umount2("./13/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./13/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./13/cgroup.cpu") = 0 [pid 5836] umount2("./13/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./13/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./13/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./13") = 0 [pid 5836] mkdir("./14", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5855 attached [pid 5855] set_robust_list(0x5555632376a0, 24) = 0 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 17 [pid 5855] chdir("./14") = 0 [pid 5855] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5855] setpgid(0, 0) = 0 [pid 5855] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5855] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5855] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5855] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5855] write(3, "1000", 4) = 4 [pid 5855] close(3) = 0 [pid 5855] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5855] write(1, "executing program\n", 18) = 18 executing program [pid 5855] memfd_create("syzkaller", 0) = 3 [pid 5855] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5855] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5855] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5855] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5855] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5855] close(3) = 0 [pid 5855] close(4) = 0 [pid 5855] mkdir("./file2", 0777) = 0 [pid 5855] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5855] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5855] chdir("./file2") = 0 [pid 5855] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5855] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5855] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5855] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5855] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5855] close(3) = 0 [pid 5855] close(4) = 0 [pid 5855] close(5) = -1 EBADF (Bad file descriptor) [pid 5855] close(6) = -1 EBADF (Bad file descriptor) [pid 5855] close(7) = -1 EBADF (Bad file descriptor) [pid 5855] close(8) = -1 EBADF (Bad file descriptor) [pid 5855] close(9) = -1 EBADF (Bad file descriptor) [pid 5855] close(10) = -1 EBADF (Bad file descriptor) [pid 5855] close(11) = -1 EBADF (Bad file descriptor) [pid 5855] close(12) = -1 EBADF (Bad file descriptor) [pid 5855] close(13) = -1 EBADF (Bad file descriptor) [pid 5855] close(14) = -1 EBADF (Bad file descriptor) [pid 5855] close(15) = -1 EBADF (Bad file descriptor) [pid 5855] close(16) = -1 EBADF (Bad file descriptor) [pid 5855] close(17) = -1 EBADF (Bad file descriptor) [pid 5855] close(18) = -1 EBADF (Bad file descriptor) [pid 5855] close(19) = -1 EBADF (Bad file descriptor) [pid 5855] close(20) = -1 EBADF (Bad file descriptor) [pid 5855] close(21) = -1 EBADF (Bad file descriptor) [pid 5855] close(22) = -1 EBADF (Bad file descriptor) [pid 5855] close(23) = -1 EBADF (Bad file descriptor) [pid 5855] close(24) = -1 EBADF (Bad file descriptor) [pid 5855] close(25) = -1 EBADF (Bad file descriptor) [pid 5855] close(26) = -1 EBADF (Bad file descriptor) [pid 5855] close(27) = -1 EBADF (Bad file descriptor) [pid 5855] close(28) = -1 EBADF (Bad file descriptor) [pid 5855] close(29) = -1 EBADF (Bad file descriptor) [pid 5855] exit_group(0) = ? [pid 5855] +++ exited with 0 +++ [ 113.183580][ T5855] loop0: detected capacity change from 0 to 128 [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=17, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./14/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./14/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./14/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./14/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./14/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./14/file2") = 0 [pid 5836] umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./14/binderfs") = 0 [pid 5836] umount2("./14/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./14/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./14/cgroup.net") = 0 [pid 5836] umount2("./14/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./14/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./14/cgroup.cpu") = 0 [pid 5836] umount2("./14/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./14/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./14/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./14") = 0 [pid 5836] mkdir("./15", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5857 attached [pid 5857] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 18 [pid 5857] <... set_robust_list resumed>) = 0 [pid 5857] chdir("./15") = 0 [pid 5857] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5857] setpgid(0, 0) = 0 [pid 5857] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5857] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5857] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5857] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5857] write(3, "1000", 4) = 4 [pid 5857] close(3) = 0 [pid 5857] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5857] write(1, "executing program\n", 18) = 18 [pid 5857] memfd_create("syzkaller", 0) = 3 [pid 5857] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5857] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5857] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5857] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5857] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5857] close(3) = 0 [pid 5857] close(4) = 0 [pid 5857] mkdir("./file2", 0777) = 0 [pid 5857] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5857] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5857] chdir("./file2") = 0 [pid 5857] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5857] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5857] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5857] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5857] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5857] close(3) = 0 [ 113.725550][ T5857] loop0: detected capacity change from 0 to 128 [pid 5857] close(4) = 0 [pid 5857] close(5) = -1 EBADF (Bad file descriptor) [pid 5857] close(6) = -1 EBADF (Bad file descriptor) [pid 5857] close(7) = -1 EBADF (Bad file descriptor) [pid 5857] close(8) = -1 EBADF (Bad file descriptor) [pid 5857] close(9) = -1 EBADF (Bad file descriptor) [pid 5857] close(10) = -1 EBADF (Bad file descriptor) [pid 5857] close(11) = -1 EBADF (Bad file descriptor) [pid 5857] close(12) = -1 EBADF (Bad file descriptor) [pid 5857] close(13) = -1 EBADF (Bad file descriptor) [pid 5857] close(14) = -1 EBADF (Bad file descriptor) [pid 5857] close(15) = -1 EBADF (Bad file descriptor) [pid 5857] close(16) = -1 EBADF (Bad file descriptor) [pid 5857] close(17) = -1 EBADF (Bad file descriptor) [pid 5857] close(18) = -1 EBADF (Bad file descriptor) [pid 5857] close(19) = -1 EBADF (Bad file descriptor) [pid 5857] close(20) = -1 EBADF (Bad file descriptor) [pid 5857] close(21) = -1 EBADF (Bad file descriptor) [pid 5857] close(22) = -1 EBADF (Bad file descriptor) [pid 5857] close(23) = -1 EBADF (Bad file descriptor) [pid 5857] close(24) = -1 EBADF (Bad file descriptor) [pid 5857] close(25) = -1 EBADF (Bad file descriptor) [pid 5857] close(26) = -1 EBADF (Bad file descriptor) [pid 5857] close(27) = -1 EBADF (Bad file descriptor) [pid 5857] close(28) = -1 EBADF (Bad file descriptor) [pid 5857] close(29) = -1 EBADF (Bad file descriptor) [pid 5857] exit_group(0) = ? [pid 5857] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=18, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5836] umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./15/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./15/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./15/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./15/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./15/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./15/file2") = 0 [pid 5836] umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./15/binderfs") = 0 [pid 5836] umount2("./15/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./15/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./15/cgroup.net") = 0 [pid 5836] umount2("./15/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./15/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./15/cgroup.cpu") = 0 [pid 5836] umount2("./15/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./15/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./15/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./15") = 0 [pid 5836] mkdir("./16", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5858 attached [pid 5858] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 19 [pid 5858] <... set_robust_list resumed>) = 0 [pid 5858] chdir("./16") = 0 [pid 5858] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5858] setpgid(0, 0) = 0 [pid 5858] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5858] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5858] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5858] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5858] write(3, "1000", 4) = 4 [pid 5858] close(3) = 0 [pid 5858] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5858] write(1, "executing program\n", 18executing program ) = 18 [pid 5858] memfd_create("syzkaller", 0) = 3 [pid 5858] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5858] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5858] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5858] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5858] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5858] close(3) = 0 [pid 5858] close(4) = 0 [pid 5858] mkdir("./file2", 0777) = 0 [pid 5858] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5858] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5858] chdir("./file2") = 0 [pid 5858] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5858] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5858] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5858] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5858] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5858] close(3) = 0 [pid 5858] close(4) = 0 [pid 5858] close(5) = -1 EBADF (Bad file descriptor) [pid 5858] close(6) = -1 EBADF (Bad file descriptor) [pid 5858] close(7) = -1 EBADF (Bad file descriptor) [pid 5858] close(8) = -1 EBADF (Bad file descriptor) [pid 5858] close(9) = -1 EBADF (Bad file descriptor) [pid 5858] close(10) = -1 EBADF (Bad file descriptor) [pid 5858] close(11) = -1 EBADF (Bad file descriptor) [pid 5858] close(12) = -1 EBADF (Bad file descriptor) [pid 5858] close(13) = -1 EBADF (Bad file descriptor) [pid 5858] close(14) = -1 EBADF (Bad file descriptor) [pid 5858] close(15) = -1 EBADF (Bad file descriptor) [pid 5858] close(16) = -1 EBADF (Bad file descriptor) [pid 5858] close(17) = -1 EBADF (Bad file descriptor) [pid 5858] close(18) = -1 EBADF (Bad file descriptor) [pid 5858] close(19) = -1 EBADF (Bad file descriptor) [pid 5858] close(20) = -1 EBADF (Bad file descriptor) [pid 5858] close(21) = -1 EBADF (Bad file descriptor) [ 114.306790][ T5858] loop0: detected capacity change from 0 to 128 [pid 5858] close(22) = -1 EBADF (Bad file descriptor) [pid 5858] close(23) = -1 EBADF (Bad file descriptor) [pid 5858] close(24) = -1 EBADF (Bad file descriptor) [pid 5858] close(25) = -1 EBADF (Bad file descriptor) [pid 5858] close(26) = -1 EBADF (Bad file descriptor) [pid 5858] close(27) = -1 EBADF (Bad file descriptor) [pid 5858] close(28) = -1 EBADF (Bad file descriptor) [pid 5858] close(29) = -1 EBADF (Bad file descriptor) [pid 5858] exit_group(0) = ? [pid 5858] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=19, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./16/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./16/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./16/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./16/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./16/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./16/file2") = 0 [pid 5836] umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 114.466561][ T5143] Bluetooth: hci0: command tx timeout [pid 5836] unlink("./16/binderfs") = 0 [pid 5836] umount2("./16/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./16/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./16/cgroup.net") = 0 [pid 5836] umount2("./16/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./16/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./16/cgroup.cpu") = 0 [pid 5836] umount2("./16/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./16/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./16/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./16") = 0 [pid 5836] mkdir("./17", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5859 attached [pid 5859] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 20 [pid 5859] <... set_robust_list resumed>) = 0 [pid 5859] chdir("./17") = 0 [pid 5859] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5859] setpgid(0, 0) = 0 [pid 5859] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5859] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5859] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5859] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5859] write(3, "1000", 4) = 4 [pid 5859] close(3) = 0 [pid 5859] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5859] write(1, "executing program\n", 18) = 18 [pid 5859] memfd_create("syzkaller", 0) = 3 [pid 5859] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5859] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5859] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5859] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5859] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5859] close(3) = 0 [pid 5859] close(4) = 0 [pid 5859] mkdir("./file2", 0777) = 0 [pid 5859] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5859] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5859] chdir("./file2") = 0 [pid 5859] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5859] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5859] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5859] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5859] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5859] close(3) = 0 [pid 5859] close(4) = 0 [ 114.828650][ T5859] loop0: detected capacity change from 0 to 128 [pid 5859] close(5) = -1 EBADF (Bad file descriptor) [pid 5859] close(6) = -1 EBADF (Bad file descriptor) [pid 5859] close(7) = -1 EBADF (Bad file descriptor) [pid 5859] close(8) = -1 EBADF (Bad file descriptor) [pid 5859] close(9) = -1 EBADF (Bad file descriptor) [pid 5859] close(10) = -1 EBADF (Bad file descriptor) [pid 5859] close(11) = -1 EBADF (Bad file descriptor) [pid 5859] close(12) = -1 EBADF (Bad file descriptor) [pid 5859] close(13) = -1 EBADF (Bad file descriptor) [pid 5859] close(14) = -1 EBADF (Bad file descriptor) [pid 5859] close(15) = -1 EBADF (Bad file descriptor) [pid 5859] close(16) = -1 EBADF (Bad file descriptor) [pid 5859] close(17) = -1 EBADF (Bad file descriptor) [pid 5859] close(18) = -1 EBADF (Bad file descriptor) [pid 5859] close(19) = -1 EBADF (Bad file descriptor) [pid 5859] close(20) = -1 EBADF (Bad file descriptor) [pid 5859] close(21) = -1 EBADF (Bad file descriptor) [pid 5859] close(22) = -1 EBADF (Bad file descriptor) [pid 5859] close(23) = -1 EBADF (Bad file descriptor) [pid 5859] close(24) = -1 EBADF (Bad file descriptor) [pid 5859] close(25) = -1 EBADF (Bad file descriptor) [pid 5859] close(26) = -1 EBADF (Bad file descriptor) [pid 5859] close(27) = -1 EBADF (Bad file descriptor) [pid 5859] close(28) = -1 EBADF (Bad file descriptor) [pid 5859] close(29) = -1 EBADF (Bad file descriptor) [pid 5859] exit_group(0) = ? [pid 5859] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=20, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./17", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./17/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./17/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./17/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./17/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./17/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./17/file2") = 0 [pid 5836] umount2("./17/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./17/binderfs") = 0 [pid 5836] umount2("./17/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./17/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./17/cgroup.net") = 0 [pid 5836] umount2("./17/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./17/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./17/cgroup.cpu") = 0 [pid 5836] umount2("./17/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./17/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./17/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./17") = 0 [pid 5836] mkdir("./18", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5860 attached [pid 5860] set_robust_list(0x5555632376a0, 24) = 0 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 21 [pid 5860] chdir("./18") = 0 [pid 5860] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5860] setpgid(0, 0) = 0 [pid 5860] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5860] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5860] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5860] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5860] write(3, "1000", 4) = 4 [pid 5860] close(3) = 0 [pid 5860] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5860] write(1, "executing program\n", 18executing program ) = 18 [pid 5860] memfd_create("syzkaller", 0) = 3 [pid 5860] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5860] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5860] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5860] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5860] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5860] close(3) = 0 [pid 5860] close(4) = 0 [pid 5860] mkdir("./file2", 0777) = 0 [pid 5860] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5860] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5860] chdir("./file2") = 0 [pid 5860] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5860] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5860] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5860] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5860] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5860] close(3) = 0 [ 115.307765][ T5860] loop0: detected capacity change from 0 to 128 [pid 5860] close(4) = 0 [pid 5860] close(5) = -1 EBADF (Bad file descriptor) [pid 5860] close(6) = -1 EBADF (Bad file descriptor) [pid 5860] close(7) = -1 EBADF (Bad file descriptor) [pid 5860] close(8) = -1 EBADF (Bad file descriptor) [pid 5860] close(9) = -1 EBADF (Bad file descriptor) [pid 5860] close(10) = -1 EBADF (Bad file descriptor) [pid 5860] close(11) = -1 EBADF (Bad file descriptor) [pid 5860] close(12) = -1 EBADF (Bad file descriptor) [pid 5860] close(13) = -1 EBADF (Bad file descriptor) [pid 5860] close(14) = -1 EBADF (Bad file descriptor) [pid 5860] close(15) = -1 EBADF (Bad file descriptor) [pid 5860] close(16) = -1 EBADF (Bad file descriptor) [pid 5860] close(17) = -1 EBADF (Bad file descriptor) [pid 5860] close(18) = -1 EBADF (Bad file descriptor) [pid 5860] close(19) = -1 EBADF (Bad file descriptor) [pid 5860] close(20) = -1 EBADF (Bad file descriptor) [pid 5860] close(21) = -1 EBADF (Bad file descriptor) [pid 5860] close(22) = -1 EBADF (Bad file descriptor) [pid 5860] close(23) = -1 EBADF (Bad file descriptor) [pid 5860] close(24) = -1 EBADF (Bad file descriptor) [pid 5860] close(25) = -1 EBADF (Bad file descriptor) [pid 5860] close(26) = -1 EBADF (Bad file descriptor) [pid 5860] close(27) = -1 EBADF (Bad file descriptor) [pid 5860] close(28) = -1 EBADF (Bad file descriptor) [pid 5860] close(29) = -1 EBADF (Bad file descriptor) [pid 5860] exit_group(0) = ? [pid 5860] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=21, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./18", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./18/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./18/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./18/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./18/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./18/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./18/file2") = 0 [pid 5836] umount2("./18/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./18/binderfs") = 0 [pid 5836] umount2("./18/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./18/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./18/cgroup.net") = 0 [pid 5836] umount2("./18/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./18/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./18/cgroup.cpu") = 0 [pid 5836] umount2("./18/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./18/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./18/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./18") = 0 [pid 5836] mkdir("./19", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5861 attached [pid 5861] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 22 [pid 5861] <... set_robust_list resumed>) = 0 [pid 5861] chdir("./19") = 0 [pid 5861] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5861] setpgid(0, 0) = 0 [pid 5861] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5861] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5861] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5861] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5861] write(3, "1000", 4) = 4 [pid 5861] close(3) = 0 [pid 5861] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5861] write(1, "executing program\n", 18) = 18 [pid 5861] memfd_create("syzkaller", 0) = 3 [pid 5861] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5861] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5861] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5861] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5861] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5861] close(3) = 0 [pid 5861] close(4) = 0 [pid 5861] mkdir("./file2", 0777) = 0 [pid 5861] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5861] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5861] chdir("./file2") = 0 [pid 5861] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 115.852333][ T5861] loop0: detected capacity change from 0 to 128 [pid 5861] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5861] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5861] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5861] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5861] close(3) = 0 [pid 5861] close(4) = 0 [pid 5861] close(5) = -1 EBADF (Bad file descriptor) [pid 5861] close(6) = -1 EBADF (Bad file descriptor) [pid 5861] close(7) = -1 EBADF (Bad file descriptor) [pid 5861] close(8) = -1 EBADF (Bad file descriptor) [pid 5861] close(9) = -1 EBADF (Bad file descriptor) [pid 5861] close(10) = -1 EBADF (Bad file descriptor) [pid 5861] close(11) = -1 EBADF (Bad file descriptor) [pid 5861] close(12) = -1 EBADF (Bad file descriptor) [pid 5861] close(13) = -1 EBADF (Bad file descriptor) [pid 5861] close(14) = -1 EBADF (Bad file descriptor) [pid 5861] close(15) = -1 EBADF (Bad file descriptor) [pid 5861] close(16) = -1 EBADF (Bad file descriptor) [pid 5861] close(17) = -1 EBADF (Bad file descriptor) [pid 5861] close(18) = -1 EBADF (Bad file descriptor) [pid 5861] close(19) = -1 EBADF (Bad file descriptor) [pid 5861] close(20) = -1 EBADF (Bad file descriptor) [pid 5861] close(21) = -1 EBADF (Bad file descriptor) [pid 5861] close(22) = -1 EBADF (Bad file descriptor) [pid 5861] close(23) = -1 EBADF (Bad file descriptor) [pid 5861] close(24) = -1 EBADF (Bad file descriptor) [pid 5861] close(25) = -1 EBADF (Bad file descriptor) [pid 5861] close(26) = -1 EBADF (Bad file descriptor) [pid 5861] close(27) = -1 EBADF (Bad file descriptor) [pid 5861] close(28) = -1 EBADF (Bad file descriptor) [pid 5861] close(29) = -1 EBADF (Bad file descriptor) [pid 5861] exit_group(0) = ? [pid 5861] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=22, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] umount2("./19", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./19/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./19/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./19/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./19/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./19/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./19/file2") = 0 [pid 5836] umount2("./19/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./19/binderfs") = 0 [pid 5836] umount2("./19/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./19/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./19/cgroup.net") = 0 [pid 5836] umount2("./19/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./19/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./19/cgroup.cpu") = 0 [pid 5836] umount2("./19/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./19/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./19/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./19") = 0 [pid 5836] mkdir("./20", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5862 attached [pid 5862] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 23 [pid 5862] <... set_robust_list resumed>) = 0 [pid 5862] chdir("./20") = 0 [pid 5862] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5862] setpgid(0, 0) = 0 [pid 5862] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5862] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5862] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5862] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5862] write(3, "1000", 4) = 4 [pid 5862] close(3) = 0 [pid 5862] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5862] write(1, "executing program\n", 18executing program ) = 18 [pid 5862] memfd_create("syzkaller", 0) = 3 [pid 5862] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5862] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5862] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5862] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5862] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5862] close(3) = 0 [pid 5862] close(4) = 0 [pid 5862] mkdir("./file2", 0777) = 0 [pid 5862] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5862] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [ 116.484418][ T5862] loop0: detected capacity change from 0 to 128 [pid 5862] chdir("./file2") = 0 [pid 5862] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5862] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5862] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5862] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5862] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5862] close(3) = 0 [pid 5862] close(4) = 0 [pid 5862] close(5) = -1 EBADF (Bad file descriptor) [pid 5862] close(6) = -1 EBADF (Bad file descriptor) [pid 5862] close(7) = -1 EBADF (Bad file descriptor) [pid 5862] close(8) = -1 EBADF (Bad file descriptor) [pid 5862] close(9) = -1 EBADF (Bad file descriptor) [pid 5862] close(10) = -1 EBADF (Bad file descriptor) [pid 5862] close(11) = -1 EBADF (Bad file descriptor) [pid 5862] close(12) = -1 EBADF (Bad file descriptor) [pid 5862] close(13) = -1 EBADF (Bad file descriptor) [pid 5862] close(14) = -1 EBADF (Bad file descriptor) [pid 5862] close(15) = -1 EBADF (Bad file descriptor) [pid 5862] close(16) = -1 EBADF (Bad file descriptor) [pid 5862] close(17) = -1 EBADF (Bad file descriptor) [pid 5862] close(18) = -1 EBADF (Bad file descriptor) [pid 5862] close(19) = -1 EBADF (Bad file descriptor) [pid 5862] close(20) = -1 EBADF (Bad file descriptor) [pid 5862] close(21) = -1 EBADF (Bad file descriptor) [pid 5862] close(22) = -1 EBADF (Bad file descriptor) [pid 5862] close(23) = -1 EBADF (Bad file descriptor) [pid 5862] close(24) = -1 EBADF (Bad file descriptor) [pid 5862] close(25) = -1 EBADF (Bad file descriptor) [pid 5862] close(26) = -1 EBADF (Bad file descriptor) [pid 5862] close(27) = -1 EBADF (Bad file descriptor) [pid 5862] close(28) = -1 EBADF (Bad file descriptor) [pid 5862] close(29) = -1 EBADF (Bad file descriptor) [pid 5862] exit_group(0) = ? [pid 5862] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=23, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./20", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./20/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./20/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./20/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./20/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./20/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./20/file2") = 0 [pid 5836] umount2("./20/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./20/binderfs") = 0 [pid 5836] umount2("./20/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./20/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./20/cgroup.net") = 0 [pid 5836] umount2("./20/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./20/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./20/cgroup.cpu") = 0 [pid 5836] umount2("./20/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./20/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./20/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./20") = 0 [pid 5836] mkdir("./21", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5863 attached [pid 5863] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 24 [pid 5863] <... set_robust_list resumed>) = 0 [pid 5863] chdir("./21") = 0 [pid 5863] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5863] setpgid(0, 0) = 0 [pid 5863] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5863] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5863] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5863] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5863] write(3, "1000", 4) = 4 [pid 5863] close(3) = 0 [pid 5863] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5863] write(1, "executing program\n", 18) = 18 [pid 5863] memfd_create("syzkaller", 0) = 3 [pid 5863] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5863] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5863] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5863] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5863] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5863] close(3) = 0 [pid 5863] close(4) = 0 [pid 5863] mkdir("./file2", 0777) = 0 [pid 5863] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5863] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5863] chdir("./file2") = 0 [pid 5863] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5863] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5863] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5863] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5863] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5863] close(3) = 0 [pid 5863] close(4) = 0 [pid 5863] close(5) = -1 EBADF (Bad file descriptor) [pid 5863] close(6) = -1 EBADF (Bad file descriptor) [pid 5863] close(7) = -1 EBADF (Bad file descriptor) [pid 5863] close(8) = -1 EBADF (Bad file descriptor) [pid 5863] close(9) = -1 EBADF (Bad file descriptor) [pid 5863] close(10) = -1 EBADF (Bad file descriptor) [pid 5863] close(11) = -1 EBADF (Bad file descriptor) [pid 5863] close(12) = -1 EBADF (Bad file descriptor) [pid 5863] close(13) = -1 EBADF (Bad file descriptor) [pid 5863] close(14) = -1 EBADF (Bad file descriptor) [pid 5863] close(15) = -1 EBADF (Bad file descriptor) [pid 5863] close(16) = -1 EBADF (Bad file descriptor) [ 117.096735][ T5863] loop0: detected capacity change from 0 to 128 [pid 5863] close(17) = -1 EBADF (Bad file descriptor) [pid 5863] close(18) = -1 EBADF (Bad file descriptor) [pid 5863] close(19) = -1 EBADF (Bad file descriptor) [pid 5863] close(20) = -1 EBADF (Bad file descriptor) [pid 5863] close(21) = -1 EBADF (Bad file descriptor) [pid 5863] close(22) = -1 EBADF (Bad file descriptor) [pid 5863] close(23) = -1 EBADF (Bad file descriptor) [pid 5863] close(24) = -1 EBADF (Bad file descriptor) [pid 5863] close(25) = -1 EBADF (Bad file descriptor) [pid 5863] close(26) = -1 EBADF (Bad file descriptor) [pid 5863] close(27) = -1 EBADF (Bad file descriptor) [pid 5863] close(28) = -1 EBADF (Bad file descriptor) [pid 5863] close(29) = -1 EBADF (Bad file descriptor) [pid 5863] exit_group(0) = ? [pid 5863] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=24, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./21", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./21/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./21/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./21/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./21/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./21/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./21/file2") = 0 [pid 5836] umount2("./21/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./21/binderfs") = 0 [pid 5836] umount2("./21/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./21/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./21/cgroup.net") = 0 [pid 5836] umount2("./21/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./21/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./21/cgroup.cpu") = 0 [pid 5836] umount2("./21/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./21/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./21/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./21") = 0 [pid 5836] mkdir("./22", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5864 attached [pid 5864] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 25 [pid 5864] <... set_robust_list resumed>) = 0 [pid 5864] chdir("./22") = 0 [pid 5864] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5864] setpgid(0, 0) = 0 [pid 5864] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5864] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5864] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5864] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5864] write(3, "1000", 4) = 4 [pid 5864] close(3) = 0 [pid 5864] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5864] write(1, "executing program\n", 18executing program ) = 18 [pid 5864] memfd_create("syzkaller", 0) = 3 [pid 5864] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5864] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5864] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5864] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5864] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5864] close(3) = 0 [pid 5864] close(4) = 0 [pid 5864] mkdir("./file2", 0777) = 0 [pid 5864] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5864] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5864] chdir("./file2") = 0 [ 117.644570][ T5864] loop0: detected capacity change from 0 to 128 [pid 5864] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5864] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5864] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5864] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5864] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5864] close(3) = 0 [pid 5864] close(4) = 0 [pid 5864] close(5) = -1 EBADF (Bad file descriptor) [pid 5864] close(6) = -1 EBADF (Bad file descriptor) [pid 5864] close(7) = -1 EBADF (Bad file descriptor) [pid 5864] close(8) = -1 EBADF (Bad file descriptor) [pid 5864] close(9) = -1 EBADF (Bad file descriptor) [pid 5864] close(10) = -1 EBADF (Bad file descriptor) [pid 5864] close(11) = -1 EBADF (Bad file descriptor) [pid 5864] close(12) = -1 EBADF (Bad file descriptor) [pid 5864] close(13) = -1 EBADF (Bad file descriptor) [pid 5864] close(14) = -1 EBADF (Bad file descriptor) [pid 5864] close(15) = -1 EBADF (Bad file descriptor) [pid 5864] close(16) = -1 EBADF (Bad file descriptor) [pid 5864] close(17) = -1 EBADF (Bad file descriptor) [pid 5864] close(18) = -1 EBADF (Bad file descriptor) [pid 5864] close(19) = -1 EBADF (Bad file descriptor) [pid 5864] close(20) = -1 EBADF (Bad file descriptor) [pid 5864] close(21) = -1 EBADF (Bad file descriptor) [pid 5864] close(22) = -1 EBADF (Bad file descriptor) [pid 5864] close(23) = -1 EBADF (Bad file descriptor) [pid 5864] close(24) = -1 EBADF (Bad file descriptor) [pid 5864] close(25) = -1 EBADF (Bad file descriptor) [pid 5864] close(26) = -1 EBADF (Bad file descriptor) [pid 5864] close(27) = -1 EBADF (Bad file descriptor) [pid 5864] close(28) = -1 EBADF (Bad file descriptor) [pid 5864] close(29) = -1 EBADF (Bad file descriptor) [pid 5864] exit_group(0) = ? [pid 5864] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=25, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] umount2("./22", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./22/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./22/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./22/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./22/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./22/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./22/file2") = 0 [pid 5836] umount2("./22/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./22/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./22/binderfs") = 0 [pid 5836] umount2("./22/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./22/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./22/cgroup.net") = 0 [pid 5836] umount2("./22/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./22/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./22/cgroup.cpu") = 0 [pid 5836] umount2("./22/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./22/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./22/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./22") = 0 [pid 5836] mkdir("./23", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5865 attached [pid 5865] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 26 [pid 5865] <... set_robust_list resumed>) = 0 [pid 5865] chdir("./23") = 0 [pid 5865] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5865] setpgid(0, 0) = 0 [pid 5865] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5865] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5865] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5865] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5865] write(3, "1000", 4) = 4 [pid 5865] close(3) = 0 [pid 5865] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5865] write(1, "executing program\n", 18executing program ) = 18 [pid 5865] memfd_create("syzkaller", 0) = 3 [pid 5865] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5865] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5865] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5865] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5865] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5865] close(3) = 0 [pid 5865] close(4) = 0 [pid 5865] mkdir("./file2", 0777) = 0 [pid 5865] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5865] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5865] chdir("./file2") = 0 [pid 5865] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5865] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5865] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5865] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5865] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5865] close(3) = 0 [ 118.236545][ T5865] loop0: detected capacity change from 0 to 128 [pid 5865] close(4) = 0 [pid 5865] close(5) = -1 EBADF (Bad file descriptor) [pid 5865] close(6) = -1 EBADF (Bad file descriptor) [pid 5865] close(7) = -1 EBADF (Bad file descriptor) [pid 5865] close(8) = -1 EBADF (Bad file descriptor) [pid 5865] close(9) = -1 EBADF (Bad file descriptor) [pid 5865] close(10) = -1 EBADF (Bad file descriptor) [pid 5865] close(11) = -1 EBADF (Bad file descriptor) [pid 5865] close(12) = -1 EBADF (Bad file descriptor) [pid 5865] close(13) = -1 EBADF (Bad file descriptor) [pid 5865] close(14) = -1 EBADF (Bad file descriptor) [pid 5865] close(15) = -1 EBADF (Bad file descriptor) [pid 5865] close(16) = -1 EBADF (Bad file descriptor) [pid 5865] close(17) = -1 EBADF (Bad file descriptor) [pid 5865] close(18) = -1 EBADF (Bad file descriptor) [pid 5865] close(19) = -1 EBADF (Bad file descriptor) [pid 5865] close(20) = -1 EBADF (Bad file descriptor) [pid 5865] close(21) = -1 EBADF (Bad file descriptor) [pid 5865] close(22) = -1 EBADF (Bad file descriptor) [pid 5865] close(23) = -1 EBADF (Bad file descriptor) [pid 5865] close(24) = -1 EBADF (Bad file descriptor) [pid 5865] close(25) = -1 EBADF (Bad file descriptor) [pid 5865] close(26) = -1 EBADF (Bad file descriptor) [pid 5865] close(27) = -1 EBADF (Bad file descriptor) [pid 5865] close(28) = -1 EBADF (Bad file descriptor) [pid 5865] close(29) = -1 EBADF (Bad file descriptor) [pid 5865] exit_group(0) = ? [pid 5865] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=26, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] umount2("./23", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./23/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./23/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./23/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./23/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./23/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./23/file2") = 0 [pid 5836] umount2("./23/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./23/binderfs") = 0 [pid 5836] umount2("./23/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./23/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./23/cgroup.net") = 0 [pid 5836] umount2("./23/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./23/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./23/cgroup.cpu") = 0 [pid 5836] umount2("./23/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./23/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./23/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./23") = 0 [pid 5836] mkdir("./24", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5866 attached [pid 5866] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 27 [pid 5866] <... set_robust_list resumed>) = 0 [pid 5866] chdir("./24") = 0 [pid 5866] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5866] setpgid(0, 0) = 0 [pid 5866] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5866] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5866] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5866] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5866] write(3, "1000", 4) = 4 [pid 5866] close(3) = 0 executing program [pid 5866] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5866] write(1, "executing program\n", 18) = 18 [pid 5866] memfd_create("syzkaller", 0) = 3 [pid 5866] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5866] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5866] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5866] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5866] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5866] close(3) = 0 [pid 5866] close(4) = 0 [pid 5866] mkdir("./file2", 0777) = 0 [pid 5866] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5866] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [ 118.471030][ T5866] loop0: detected capacity change from 0 to 128 [pid 5866] chdir("./file2") = 0 [pid 5866] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5866] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5866] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5866] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5866] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5866] close(3) = 0 [pid 5866] close(4) = 0 [pid 5866] close(5) = -1 EBADF (Bad file descriptor) [pid 5866] close(6) = -1 EBADF (Bad file descriptor) [pid 5866] close(7) = -1 EBADF (Bad file descriptor) [pid 5866] close(8) = -1 EBADF (Bad file descriptor) [pid 5866] close(9) = -1 EBADF (Bad file descriptor) [pid 5866] close(10) = -1 EBADF (Bad file descriptor) [pid 5866] close(11) = -1 EBADF (Bad file descriptor) [pid 5866] close(12) = -1 EBADF (Bad file descriptor) [pid 5866] close(13) = -1 EBADF (Bad file descriptor) [pid 5866] close(14) = -1 EBADF (Bad file descriptor) [pid 5866] close(15) = -1 EBADF (Bad file descriptor) [pid 5866] close(16) = -1 EBADF (Bad file descriptor) [pid 5866] close(17) = -1 EBADF (Bad file descriptor) [pid 5866] close(18) = -1 EBADF (Bad file descriptor) [pid 5866] close(19) = -1 EBADF (Bad file descriptor) [pid 5866] close(20) = -1 EBADF (Bad file descriptor) [pid 5866] close(21) = -1 EBADF (Bad file descriptor) [pid 5866] close(22) = -1 EBADF (Bad file descriptor) [pid 5866] close(23) = -1 EBADF (Bad file descriptor) [pid 5866] close(24) = -1 EBADF (Bad file descriptor) [pid 5866] close(25) = -1 EBADF (Bad file descriptor) [pid 5866] close(26) = -1 EBADF (Bad file descriptor) [pid 5866] close(27) = -1 EBADF (Bad file descriptor) [pid 5866] close(28) = -1 EBADF (Bad file descriptor) [pid 5866] close(29) = -1 EBADF (Bad file descriptor) [pid 5866] exit_group(0) = ? [pid 5866] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=27, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5836] umount2("./24", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./24/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./24/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./24/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./24/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./24/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./24/file2") = 0 [pid 5836] umount2("./24/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./24/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./24/binderfs") = 0 [pid 5836] umount2("./24/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./24/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./24/cgroup.net") = 0 [pid 5836] umount2("./24/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./24/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./24/cgroup.cpu") = 0 [pid 5836] umount2("./24/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./24/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./24/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./24") = 0 [pid 5836] mkdir("./25", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5867 attached [pid 5867] set_robust_list(0x5555632376a0, 24) = 0 [pid 5867] chdir("./25") = 0 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 28 [pid 5867] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5867] setpgid(0, 0) = 0 [pid 5867] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5867] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5867] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5867] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5867] write(3, "1000", 4) = 4 [pid 5867] close(3) = 0 [pid 5867] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5867] write(1, "executing program\n", 18) = 18 [pid 5867] memfd_create("syzkaller", 0) = 3 [pid 5867] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5867] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5867] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5867] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5867] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5867] close(3) = 0 [pid 5867] close(4) = 0 [pid 5867] mkdir("./file2", 0777) = 0 [pid 5867] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5867] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5867] chdir("./file2") = 0 [pid 5867] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5867] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5867] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5867] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5867] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5867] close(3) = 0 [pid 5867] close(4) = 0 [ 119.051148][ T5867] loop0: detected capacity change from 0 to 128 [pid 5867] close(5) = -1 EBADF (Bad file descriptor) [pid 5867] close(6) = -1 EBADF (Bad file descriptor) [pid 5867] close(7) = -1 EBADF (Bad file descriptor) [pid 5867] close(8) = -1 EBADF (Bad file descriptor) [pid 5867] close(9) = -1 EBADF (Bad file descriptor) [pid 5867] close(10) = -1 EBADF (Bad file descriptor) [pid 5867] close(11) = -1 EBADF (Bad file descriptor) [pid 5867] close(12) = -1 EBADF (Bad file descriptor) [pid 5867] close(13) = -1 EBADF (Bad file descriptor) [pid 5867] close(14) = -1 EBADF (Bad file descriptor) [pid 5867] close(15) = -1 EBADF (Bad file descriptor) [pid 5867] close(16) = -1 EBADF (Bad file descriptor) [pid 5867] close(17) = -1 EBADF (Bad file descriptor) [pid 5867] close(18) = -1 EBADF (Bad file descriptor) [pid 5867] close(19) = -1 EBADF (Bad file descriptor) [pid 5867] close(20) = -1 EBADF (Bad file descriptor) [pid 5867] close(21) = -1 EBADF (Bad file descriptor) [pid 5867] close(22) = -1 EBADF (Bad file descriptor) [pid 5867] close(23) = -1 EBADF (Bad file descriptor) [pid 5867] close(24) = -1 EBADF (Bad file descriptor) [pid 5867] close(25) = -1 EBADF (Bad file descriptor) [pid 5867] close(26) = -1 EBADF (Bad file descriptor) [pid 5867] close(27) = -1 EBADF (Bad file descriptor) [pid 5867] close(28) = -1 EBADF (Bad file descriptor) [pid 5867] close(29) = -1 EBADF (Bad file descriptor) [pid 5867] exit_group(0) = ? [pid 5867] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=28, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5836] umount2("./25", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./25/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./25/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./25/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./25/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./25/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./25/file2") = 0 [pid 5836] umount2("./25/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./25/binderfs") = 0 [pid 5836] umount2("./25/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./25/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./25/cgroup.net") = 0 [pid 5836] umount2("./25/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./25/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./25/cgroup.cpu") = 0 [pid 5836] umount2("./25/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./25/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./25/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./25") = 0 [pid 5836] mkdir("./26", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5868 attached [pid 5868] set_robust_list(0x5555632376a0, 24) = 0 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 29 [pid 5868] chdir("./26") = 0 [pid 5868] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5868] setpgid(0, 0) = 0 [pid 5868] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5868] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5868] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5868] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5868] write(3, "1000", 4) = 4 [pid 5868] close(3) = 0 [pid 5868] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5868] write(1, "executing program\n", 18executing program ) = 18 [pid 5868] memfd_create("syzkaller", 0) = 3 [pid 5868] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5868] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5868] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5868] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5868] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5868] close(3) = 0 [pid 5868] close(4) = 0 [pid 5868] mkdir("./file2", 0777) = 0 [pid 5868] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5868] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5868] chdir("./file2") = 0 [pid 5868] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5868] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5868] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5868] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5868] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [ 119.533638][ T5868] loop0: detected capacity change from 0 to 128 [pid 5868] close(3) = 0 [pid 5868] close(4) = 0 [pid 5868] close(5) = -1 EBADF (Bad file descriptor) [pid 5868] close(6) = -1 EBADF (Bad file descriptor) [pid 5868] close(7) = -1 EBADF (Bad file descriptor) [pid 5868] close(8) = -1 EBADF (Bad file descriptor) [pid 5868] close(9) = -1 EBADF (Bad file descriptor) [pid 5868] close(10) = -1 EBADF (Bad file descriptor) [pid 5868] close(11) = -1 EBADF (Bad file descriptor) [pid 5868] close(12) = -1 EBADF (Bad file descriptor) [pid 5868] close(13) = -1 EBADF (Bad file descriptor) [pid 5868] close(14) = -1 EBADF (Bad file descriptor) [pid 5868] close(15) = -1 EBADF (Bad file descriptor) [pid 5868] close(16) = -1 EBADF (Bad file descriptor) [pid 5868] close(17) = -1 EBADF (Bad file descriptor) [pid 5868] close(18) = -1 EBADF (Bad file descriptor) [pid 5868] close(19) = -1 EBADF (Bad file descriptor) [pid 5868] close(20) = -1 EBADF (Bad file descriptor) [pid 5868] close(21) = -1 EBADF (Bad file descriptor) [pid 5868] close(22) = -1 EBADF (Bad file descriptor) [pid 5868] close(23) = -1 EBADF (Bad file descriptor) [pid 5868] close(24) = -1 EBADF (Bad file descriptor) [pid 5868] close(25) = -1 EBADF (Bad file descriptor) [pid 5868] close(26) = -1 EBADF (Bad file descriptor) [pid 5868] close(27) = -1 EBADF (Bad file descriptor) [pid 5868] close(28) = -1 EBADF (Bad file descriptor) [pid 5868] close(29) = -1 EBADF (Bad file descriptor) [pid 5868] exit_group(0) = ? [pid 5868] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=29, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./26", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./26/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./26/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./26/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./26/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./26/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./26/file2") = 0 [pid 5836] umount2("./26/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./26/binderfs") = 0 [pid 5836] umount2("./26/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./26/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./26/cgroup.net") = 0 [pid 5836] umount2("./26/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./26/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./26/cgroup.cpu") = 0 [pid 5836] umount2("./26/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./26/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./26/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./26") = 0 [pid 5836] mkdir("./27", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5869 attached [pid 5869] set_robust_list(0x5555632376a0, 24) = 0 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 30 [pid 5869] chdir("./27") = 0 [pid 5869] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5869] setpgid(0, 0) = 0 [pid 5869] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5869] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5869] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5869] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5869] write(3, "1000", 4) = 4 [pid 5869] close(3) = 0 [pid 5869] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5869] write(1, "executing program\n", 18) = 18 [pid 5869] memfd_create("syzkaller", 0) = 3 [pid 5869] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5869] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5869] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5869] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5869] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5869] close(3) = 0 [pid 5869] close(4) = 0 [pid 5869] mkdir("./file2", 0777) = 0 [pid 5869] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5869] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5869] chdir("./file2") = 0 [pid 5869] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5869] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5869] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [ 120.104181][ T5869] loop0: detected capacity change from 0 to 128 [pid 5869] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5869] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5869] close(3) = 0 [pid 5869] close(4) = 0 [pid 5869] close(5) = -1 EBADF (Bad file descriptor) [pid 5869] close(6) = -1 EBADF (Bad file descriptor) [pid 5869] close(7) = -1 EBADF (Bad file descriptor) [pid 5869] close(8) = -1 EBADF (Bad file descriptor) [pid 5869] close(9) = -1 EBADF (Bad file descriptor) [pid 5869] close(10) = -1 EBADF (Bad file descriptor) [pid 5869] close(11) = -1 EBADF (Bad file descriptor) [pid 5869] close(12) = -1 EBADF (Bad file descriptor) [pid 5869] close(13) = -1 EBADF (Bad file descriptor) [pid 5869] close(14) = -1 EBADF (Bad file descriptor) [pid 5869] close(15) = -1 EBADF (Bad file descriptor) [pid 5869] close(16) = -1 EBADF (Bad file descriptor) [pid 5869] close(17) = -1 EBADF (Bad file descriptor) [pid 5869] close(18) = -1 EBADF (Bad file descriptor) [pid 5869] close(19) = -1 EBADF (Bad file descriptor) [pid 5869] close(20) = -1 EBADF (Bad file descriptor) [pid 5869] close(21) = -1 EBADF (Bad file descriptor) [pid 5869] close(22) = -1 EBADF (Bad file descriptor) [pid 5869] close(23) = -1 EBADF (Bad file descriptor) [pid 5869] close(24) = -1 EBADF (Bad file descriptor) [pid 5869] close(25) = -1 EBADF (Bad file descriptor) [pid 5869] close(26) = -1 EBADF (Bad file descriptor) [pid 5869] close(27) = -1 EBADF (Bad file descriptor) [pid 5869] close(28) = -1 EBADF (Bad file descriptor) [pid 5869] close(29) = -1 EBADF (Bad file descriptor) [pid 5869] exit_group(0) = ? [pid 5869] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=30, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./27", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./27/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./27/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./27/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./27/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./27/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./27/file2") = 0 [pid 5836] umount2("./27/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./27/binderfs") = 0 [pid 5836] umount2("./27/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./27/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./27/cgroup.net") = 0 [pid 5836] umount2("./27/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./27/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./27/cgroup.cpu") = 0 [pid 5836] umount2("./27/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./27/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./27/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./27") = 0 [pid 5836] mkdir("./28", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5870 attached [pid 5870] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 31 [pid 5870] <... set_robust_list resumed>) = 0 [pid 5870] chdir("./28") = 0 [pid 5870] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5870] setpgid(0, 0) = 0 [pid 5870] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5870] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5870] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5870] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5870] write(3, "1000", 4) = 4 [pid 5870] close(3) = 0 [pid 5870] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5870] write(1, "executing program\n", 18) = 18 [pid 5870] memfd_create("syzkaller", 0) = 3 [pid 5870] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5870] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5870] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5870] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5870] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5870] close(3) = 0 [pid 5870] close(4) = 0 [pid 5870] mkdir("./file2", 0777) = 0 [pid 5870] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5870] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5870] chdir("./file2") = 0 [ 120.713606][ T5870] loop0: detected capacity change from 0 to 128 [pid 5870] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5870] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5870] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5870] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5870] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5870] close(3) = 0 [pid 5870] close(4) = 0 [pid 5870] close(5) = -1 EBADF (Bad file descriptor) [pid 5870] close(6) = -1 EBADF (Bad file descriptor) [pid 5870] close(7) = -1 EBADF (Bad file descriptor) [pid 5870] close(8) = -1 EBADF (Bad file descriptor) [pid 5870] close(9) = -1 EBADF (Bad file descriptor) [pid 5870] close(10) = -1 EBADF (Bad file descriptor) [pid 5870] close(11) = -1 EBADF (Bad file descriptor) [pid 5870] close(12) = -1 EBADF (Bad file descriptor) [pid 5870] close(13) = -1 EBADF (Bad file descriptor) [pid 5870] close(14) = -1 EBADF (Bad file descriptor) [pid 5870] close(15) = -1 EBADF (Bad file descriptor) [pid 5870] close(16) = -1 EBADF (Bad file descriptor) [pid 5870] close(17) = -1 EBADF (Bad file descriptor) [pid 5870] close(18) = -1 EBADF (Bad file descriptor) [pid 5870] close(19) = -1 EBADF (Bad file descriptor) [pid 5870] close(20) = -1 EBADF (Bad file descriptor) [pid 5870] close(21) = -1 EBADF (Bad file descriptor) [pid 5870] close(22) = -1 EBADF (Bad file descriptor) [pid 5870] close(23) = -1 EBADF (Bad file descriptor) [pid 5870] close(24) = -1 EBADF (Bad file descriptor) [pid 5870] close(25) = -1 EBADF (Bad file descriptor) [pid 5870] close(26) = -1 EBADF (Bad file descriptor) [pid 5870] close(27) = -1 EBADF (Bad file descriptor) [pid 5870] close(28) = -1 EBADF (Bad file descriptor) [pid 5870] close(29) = -1 EBADF (Bad file descriptor) [pid 5870] exit_group(0) = ? [pid 5870] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=31, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./28", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./28/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./28/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./28/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./28/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./28/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./28/file2") = 0 [pid 5836] umount2("./28/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./28/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./28/binderfs") = 0 [pid 5836] umount2("./28/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./28/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./28/cgroup.net") = 0 [pid 5836] umount2("./28/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./28/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./28/cgroup.cpu") = 0 [pid 5836] umount2("./28/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./28/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./28/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./28") = 0 [pid 5836] mkdir("./29", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5871 attached [pid 5871] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 32 [pid 5871] <... set_robust_list resumed>) = 0 [pid 5871] chdir("./29") = 0 [pid 5871] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5871] setpgid(0, 0) = 0 [pid 5871] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5871] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5871] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5871] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5871] write(3, "1000", 4) = 4 [pid 5871] close(3) = 0 [pid 5871] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5871] write(1, "executing program\n", 18) = 18 [pid 5871] memfd_create("syzkaller", 0) = 3 [pid 5871] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5871] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5871] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5871] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5871] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5871] close(3) = 0 [pid 5871] close(4) = 0 [pid 5871] mkdir("./file2", 0777) = 0 [pid 5871] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5871] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5871] chdir("./file2") = 0 [ 121.270617][ T5871] loop0: detected capacity change from 0 to 128 [pid 5871] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5871] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5871] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5871] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5871] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5871] close(3) = 0 [pid 5871] close(4) = 0 [pid 5871] close(5) = -1 EBADF (Bad file descriptor) [pid 5871] close(6) = -1 EBADF (Bad file descriptor) [pid 5871] close(7) = -1 EBADF (Bad file descriptor) [pid 5871] close(8) = -1 EBADF (Bad file descriptor) [pid 5871] close(9) = -1 EBADF (Bad file descriptor) [pid 5871] close(10) = -1 EBADF (Bad file descriptor) [pid 5871] close(11) = -1 EBADF (Bad file descriptor) [pid 5871] close(12) = -1 EBADF (Bad file descriptor) [pid 5871] close(13) = -1 EBADF (Bad file descriptor) [pid 5871] close(14) = -1 EBADF (Bad file descriptor) [pid 5871] close(15) = -1 EBADF (Bad file descriptor) [pid 5871] close(16) = -1 EBADF (Bad file descriptor) [pid 5871] close(17) = -1 EBADF (Bad file descriptor) [pid 5871] close(18) = -1 EBADF (Bad file descriptor) [pid 5871] close(19) = -1 EBADF (Bad file descriptor) [pid 5871] close(20) = -1 EBADF (Bad file descriptor) [pid 5871] close(21) = -1 EBADF (Bad file descriptor) [pid 5871] close(22) = -1 EBADF (Bad file descriptor) [pid 5871] close(23) = -1 EBADF (Bad file descriptor) [pid 5871] close(24) = -1 EBADF (Bad file descriptor) [pid 5871] close(25) = -1 EBADF (Bad file descriptor) [pid 5871] close(26) = -1 EBADF (Bad file descriptor) [pid 5871] close(27) = -1 EBADF (Bad file descriptor) [pid 5871] close(28) = -1 EBADF (Bad file descriptor) [pid 5871] close(29) = -1 EBADF (Bad file descriptor) [pid 5871] exit_group(0) = ? [pid 5871] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=32, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./29", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./29/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./29/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./29/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./29/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./29/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./29/file2") = 0 [pid 5836] umount2("./29/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./29/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./29/binderfs") = 0 [pid 5836] umount2("./29/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./29/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./29/cgroup.net") = 0 [pid 5836] umount2("./29/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./29/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./29/cgroup.cpu") = 0 [pid 5836] umount2("./29/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./29/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./29/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./29") = 0 [pid 5836] mkdir("./30", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5872 attached , child_tidptr=0x555563237690) = 33 [pid 5872] set_robust_list(0x5555632376a0, 24) = 0 [pid 5872] chdir("./30") = 0 [pid 5872] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5872] setpgid(0, 0) = 0 [pid 5872] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5872] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5872] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5872] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5872] write(3, "1000", 4) = 4 [pid 5872] close(3) = 0 [pid 5872] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5872] write(1, "executing program\n", 18executing program ) = 18 [pid 5872] memfd_create("syzkaller", 0) = 3 [pid 5872] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5872] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5872] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5872] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5872] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5872] close(3) = 0 [pid 5872] close(4) = 0 [pid 5872] mkdir("./file2", 0777) = 0 [pid 5872] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5872] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5872] chdir("./file2") = 0 [pid 5872] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5872] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5872] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5872] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [ 121.865797][ T5872] loop0: detected capacity change from 0 to 128 [pid 5872] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5872] close(3) = 0 [pid 5872] close(4) = 0 [pid 5872] close(5) = -1 EBADF (Bad file descriptor) [pid 5872] close(6) = -1 EBADF (Bad file descriptor) [pid 5872] close(7) = -1 EBADF (Bad file descriptor) [pid 5872] close(8) = -1 EBADF (Bad file descriptor) [pid 5872] close(9) = -1 EBADF (Bad file descriptor) [pid 5872] close(10) = -1 EBADF (Bad file descriptor) [pid 5872] close(11) = -1 EBADF (Bad file descriptor) [pid 5872] close(12) = -1 EBADF (Bad file descriptor) [pid 5872] close(13) = -1 EBADF (Bad file descriptor) [pid 5872] close(14) = -1 EBADF (Bad file descriptor) [pid 5872] close(15) = -1 EBADF (Bad file descriptor) [pid 5872] close(16) = -1 EBADF (Bad file descriptor) [pid 5872] close(17) = -1 EBADF (Bad file descriptor) [pid 5872] close(18) = -1 EBADF (Bad file descriptor) [pid 5872] close(19) = -1 EBADF (Bad file descriptor) [pid 5872] close(20) = -1 EBADF (Bad file descriptor) [pid 5872] close(21) = -1 EBADF (Bad file descriptor) [pid 5872] close(22) = -1 EBADF (Bad file descriptor) [pid 5872] close(23) = -1 EBADF (Bad file descriptor) [pid 5872] close(24) = -1 EBADF (Bad file descriptor) [pid 5872] close(25) = -1 EBADF (Bad file descriptor) [pid 5872] close(26) = -1 EBADF (Bad file descriptor) [pid 5872] close(27) = -1 EBADF (Bad file descriptor) [pid 5872] close(28) = -1 EBADF (Bad file descriptor) [pid 5872] close(29) = -1 EBADF (Bad file descriptor) [pid 5872] exit_group(0) = ? [pid 5872] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=33, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./30", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./30/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./30/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./30/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./30/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./30/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./30/file2") = 0 [pid 5836] umount2("./30/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./30/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./30/binderfs") = 0 [pid 5836] umount2("./30/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./30/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./30/cgroup.net") = 0 [pid 5836] umount2("./30/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./30/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./30/cgroup.cpu") = 0 [pid 5836] umount2("./30/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./30/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./30/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./30") = 0 [pid 5836] mkdir("./31", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5873 attached [pid 5873] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 34 [pid 5873] <... set_robust_list resumed>) = 0 [pid 5873] chdir("./31") = 0 [pid 5873] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5873] setpgid(0, 0) = 0 [pid 5873] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5873] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5873] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5873] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5873] write(3, "1000", 4) = 4 [pid 5873] close(3) = 0 [pid 5873] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5873] write(1, "executing program\n", 18) = 18 [pid 5873] memfd_create("syzkaller", 0) = 3 [pid 5873] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5873] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5873] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5873] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5873] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5873] close(3) = 0 [pid 5873] close(4) = 0 [pid 5873] mkdir("./file2", 0777) = 0 [pid 5873] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5873] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5873] chdir("./file2") = 0 [pid 5873] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5873] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5873] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5873] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5873] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5873] close(3) = 0 [pid 5873] close(4) = 0 [pid 5873] close(5) = -1 EBADF (Bad file descriptor) [pid 5873] close(6) = -1 EBADF (Bad file descriptor) [pid 5873] close(7) = -1 EBADF (Bad file descriptor) [pid 5873] close(8) = -1 EBADF (Bad file descriptor) [pid 5873] close(9) = -1 EBADF (Bad file descriptor) [pid 5873] close(10) = -1 EBADF (Bad file descriptor) [pid 5873] close(11) = -1 EBADF (Bad file descriptor) [pid 5873] close(12) = -1 EBADF (Bad file descriptor) [pid 5873] close(13) = -1 EBADF (Bad file descriptor) [pid 5873] close(14) = -1 EBADF (Bad file descriptor) [pid 5873] close(15) = -1 EBADF (Bad file descriptor) [pid 5873] close(16) = -1 EBADF (Bad file descriptor) [pid 5873] close(17) = -1 EBADF (Bad file descriptor) [pid 5873] close(18) = -1 EBADF (Bad file descriptor) [pid 5873] close(19) = -1 EBADF (Bad file descriptor) [pid 5873] close(20) = -1 EBADF (Bad file descriptor) [pid 5873] close(21) = -1 EBADF (Bad file descriptor) [pid 5873] close(22) = -1 EBADF (Bad file descriptor) [pid 5873] close(23) = -1 EBADF (Bad file descriptor) [pid 5873] close(24) = -1 EBADF (Bad file descriptor) [pid 5873] close(25) = -1 EBADF (Bad file descriptor) [pid 5873] close(26) = -1 EBADF (Bad file descriptor) [pid 5873] close(27) = -1 EBADF (Bad file descriptor) [pid 5873] close(28) = -1 EBADF (Bad file descriptor) [pid 5873] close(29) = -1 EBADF (Bad file descriptor) [pid 5873] exit_group(0) = ? [pid 5873] +++ exited with 0 +++ [ 122.393743][ T5873] loop0: detected capacity change from 0 to 128 [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=34, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./31", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./31/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./31/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./31/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./31/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./31/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./31/file2") = 0 [pid 5836] umount2("./31/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./31/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./31/binderfs") = 0 [pid 5836] umount2("./31/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./31/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./31/cgroup.net") = 0 [pid 5836] umount2("./31/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./31/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./31/cgroup.cpu") = 0 [pid 5836] umount2("./31/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./31/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./31/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./31") = 0 [pid 5836] mkdir("./32", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5874 attached [pid 5874] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 35 [pid 5874] <... set_robust_list resumed>) = 0 [pid 5874] chdir("./32") = 0 [pid 5874] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5874] setpgid(0, 0) = 0 [pid 5874] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5874] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5874] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5874] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5874] write(3, "1000", 4) = 4 [pid 5874] close(3) = 0 [pid 5874] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5874] write(1, "executing program\n", 18) = 18 [pid 5874] memfd_create("syzkaller", 0) = 3 [pid 5874] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5874] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5874] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5874] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5874] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5874] close(3) = 0 [pid 5874] close(4) = 0 [pid 5874] mkdir("./file2", 0777) = 0 [pid 5874] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5874] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5874] chdir("./file2") = 0 [pid 5874] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5874] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5874] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5874] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5874] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5874] close(3) = 0 [pid 5874] close(4) = 0 [pid 5874] close(5) = -1 EBADF (Bad file descriptor) [pid 5874] close(6) = -1 EBADF (Bad file descriptor) [pid 5874] close(7) = -1 EBADF (Bad file descriptor) [pid 5874] close(8) = -1 EBADF (Bad file descriptor) [pid 5874] close(9) = -1 EBADF (Bad file descriptor) [pid 5874] close(10) = -1 EBADF (Bad file descriptor) [pid 5874] close(11) = -1 EBADF (Bad file descriptor) [pid 5874] close(12) = -1 EBADF (Bad file descriptor) [pid 5874] close(13) = -1 EBADF (Bad file descriptor) [pid 5874] close(14) = -1 EBADF (Bad file descriptor) [pid 5874] close(15) = -1 EBADF (Bad file descriptor) [pid 5874] close(16) = -1 EBADF (Bad file descriptor) [pid 5874] close(17) = -1 EBADF (Bad file descriptor) [pid 5874] close(18) = -1 EBADF (Bad file descriptor) [pid 5874] close(19) = -1 EBADF (Bad file descriptor) [pid 5874] close(20) = -1 EBADF (Bad file descriptor) [pid 5874] close(21) = -1 EBADF (Bad file descriptor) [pid 5874] close(22) = -1 EBADF (Bad file descriptor) [pid 5874] close(23) = -1 EBADF (Bad file descriptor) [pid 5874] close(24) = -1 EBADF (Bad file descriptor) [pid 5874] close(25) = -1 EBADF (Bad file descriptor) [pid 5874] close(26) = -1 EBADF (Bad file descriptor) [pid 5874] close(27) = -1 EBADF (Bad file descriptor) [pid 5874] close(28) = -1 EBADF (Bad file descriptor) [pid 5874] close(29) = -1 EBADF (Bad file descriptor) [pid 5874] exit_group(0) = ? [ 122.651197][ T5874] loop0: detected capacity change from 0 to 128 [pid 5874] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=35, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./32", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./32/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./32/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./32/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./32/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./32/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./32/file2") = 0 [pid 5836] umount2("./32/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./32/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./32/binderfs") = 0 [pid 5836] umount2("./32/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./32/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./32/cgroup.net") = 0 [pid 5836] umount2("./32/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./32/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./32/cgroup.cpu") = 0 [pid 5836] umount2("./32/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./32/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./32/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./32") = 0 [pid 5836] mkdir("./33", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5875 attached , child_tidptr=0x555563237690) = 36 [pid 5875] set_robust_list(0x5555632376a0, 24) = 0 [pid 5875] chdir("./33") = 0 [pid 5875] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5875] setpgid(0, 0) = 0 [pid 5875] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5875] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5875] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5875] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5875] write(3, "1000", 4) = 4 [pid 5875] close(3) = 0 [pid 5875] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5875] write(1, "executing program\n", 18) = 18 [pid 5875] memfd_create("syzkaller", 0) = 3 [pid 5875] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5875] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5875] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5875] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5875] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5875] close(3) = 0 [pid 5875] close(4) = 0 [pid 5875] mkdir("./file2", 0777) = 0 [pid 5875] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5875] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5875] chdir("./file2") = 0 [pid 5875] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5875] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5875] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5875] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5875] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5875] close(3) = 0 [pid 5875] close(4) = 0 [ 123.240536][ T5875] loop0: detected capacity change from 0 to 128 [pid 5875] close(5) = -1 EBADF (Bad file descriptor) [pid 5875] close(6) = -1 EBADF (Bad file descriptor) [pid 5875] close(7) = -1 EBADF (Bad file descriptor) [pid 5875] close(8) = -1 EBADF (Bad file descriptor) [pid 5875] close(9) = -1 EBADF (Bad file descriptor) [pid 5875] close(10) = -1 EBADF (Bad file descriptor) [pid 5875] close(11) = -1 EBADF (Bad file descriptor) [pid 5875] close(12) = -1 EBADF (Bad file descriptor) [pid 5875] close(13) = -1 EBADF (Bad file descriptor) [pid 5875] close(14) = -1 EBADF (Bad file descriptor) [pid 5875] close(15) = -1 EBADF (Bad file descriptor) [pid 5875] close(16) = -1 EBADF (Bad file descriptor) [pid 5875] close(17) = -1 EBADF (Bad file descriptor) [pid 5875] close(18) = -1 EBADF (Bad file descriptor) [pid 5875] close(19) = -1 EBADF (Bad file descriptor) [pid 5875] close(20) = -1 EBADF (Bad file descriptor) [pid 5875] close(21) = -1 EBADF (Bad file descriptor) [pid 5875] close(22) = -1 EBADF (Bad file descriptor) [pid 5875] close(23) = -1 EBADF (Bad file descriptor) [pid 5875] close(24) = -1 EBADF (Bad file descriptor) [pid 5875] close(25) = -1 EBADF (Bad file descriptor) [pid 5875] close(26) = -1 EBADF (Bad file descriptor) [pid 5875] close(27) = -1 EBADF (Bad file descriptor) [pid 5875] close(28) = -1 EBADF (Bad file descriptor) [pid 5875] close(29) = -1 EBADF (Bad file descriptor) [pid 5875] exit_group(0) = ? [pid 5875] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=36, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./33", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./33/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./33/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./33/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./33/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./33/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./33/file2") = 0 [pid 5836] umount2("./33/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./33/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./33/binderfs") = 0 [pid 5836] umount2("./33/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./33/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./33/cgroup.net") = 0 [pid 5836] umount2("./33/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./33/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./33/cgroup.cpu") = 0 [pid 5836] umount2("./33/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./33/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./33/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./33") = 0 [pid 5836] mkdir("./34", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5876 attached [pid 5876] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 37 [pid 5876] <... set_robust_list resumed>) = 0 [pid 5876] chdir("./34") = 0 [pid 5876] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5876] setpgid(0, 0) = 0 [pid 5876] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5876] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5876] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5876] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5876] write(3, "1000", 4) = 4 [pid 5876] close(3) = 0 [pid 5876] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5876] write(1, "executing program\n", 18) = 18 executing program [pid 5876] memfd_create("syzkaller", 0) = 3 [pid 5876] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5876] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5876] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5876] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5876] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5876] close(3) = 0 [pid 5876] close(4) = 0 [pid 5876] mkdir("./file2", 0777) = 0 [pid 5876] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5876] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5876] chdir("./file2") = 0 [ 123.782088][ T5876] loop0: detected capacity change from 0 to 128 [pid 5876] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5876] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5876] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5876] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5876] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5876] close(3) = 0 [pid 5876] close(4) = 0 [pid 5876] close(5) = -1 EBADF (Bad file descriptor) [pid 5876] close(6) = -1 EBADF (Bad file descriptor) [pid 5876] close(7) = -1 EBADF (Bad file descriptor) [pid 5876] close(8) = -1 EBADF (Bad file descriptor) [pid 5876] close(9) = -1 EBADF (Bad file descriptor) [pid 5876] close(10) = -1 EBADF (Bad file descriptor) [pid 5876] close(11) = -1 EBADF (Bad file descriptor) [pid 5876] close(12) = -1 EBADF (Bad file descriptor) [pid 5876] close(13) = -1 EBADF (Bad file descriptor) [pid 5876] close(14) = -1 EBADF (Bad file descriptor) [pid 5876] close(15) = -1 EBADF (Bad file descriptor) [pid 5876] close(16) = -1 EBADF (Bad file descriptor) [pid 5876] close(17) = -1 EBADF (Bad file descriptor) [pid 5876] close(18) = -1 EBADF (Bad file descriptor) [pid 5876] close(19) = -1 EBADF (Bad file descriptor) [pid 5876] close(20) = -1 EBADF (Bad file descriptor) [pid 5876] close(21) = -1 EBADF (Bad file descriptor) [pid 5876] close(22) = -1 EBADF (Bad file descriptor) [pid 5876] close(23) = -1 EBADF (Bad file descriptor) [pid 5876] close(24) = -1 EBADF (Bad file descriptor) [pid 5876] close(25) = -1 EBADF (Bad file descriptor) [pid 5876] close(26) = -1 EBADF (Bad file descriptor) [pid 5876] close(27) = -1 EBADF (Bad file descriptor) [pid 5876] close(28) = -1 EBADF (Bad file descriptor) [pid 5876] close(29) = -1 EBADF (Bad file descriptor) [pid 5876] exit_group(0) = ? [pid 5876] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=37, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./34", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./34/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./34/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./34/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./34/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./34/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./34/file2") = 0 [pid 5836] umount2("./34/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./34/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./34/binderfs") = 0 [pid 5836] umount2("./34/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./34/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./34/cgroup.net") = 0 [pid 5836] umount2("./34/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./34/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./34/cgroup.cpu") = 0 [pid 5836] umount2("./34/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./34/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./34/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./34") = 0 [pid 5836] mkdir("./35", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5877 attached [pid 5877] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 38 [pid 5877] <... set_robust_list resumed>) = 0 [pid 5877] chdir("./35") = 0 [pid 5877] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5877] setpgid(0, 0) = 0 [pid 5877] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5877] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5877] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5877] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5877] write(3, "1000", 4) = 4 [pid 5877] close(3) = 0 [pid 5877] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5877] write(1, "executing program\n", 18executing program ) = 18 [pid 5877] memfd_create("syzkaller", 0) = 3 [pid 5877] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5877] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5877] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5877] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5877] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5877] close(3) = 0 [pid 5877] close(4) = 0 [pid 5877] mkdir("./file2", 0777) = 0 [pid 5877] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5877] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5877] chdir("./file2") = 0 [pid 5877] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5877] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5877] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5877] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [ 124.423700][ T5877] loop0: detected capacity change from 0 to 128 [pid 5877] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5877] close(3) = 0 [pid 5877] close(4) = 0 [pid 5877] close(5) = -1 EBADF (Bad file descriptor) [pid 5877] close(6) = -1 EBADF (Bad file descriptor) [pid 5877] close(7) = -1 EBADF (Bad file descriptor) [pid 5877] close(8) = -1 EBADF (Bad file descriptor) [pid 5877] close(9) = -1 EBADF (Bad file descriptor) [pid 5877] close(10) = -1 EBADF (Bad file descriptor) [pid 5877] close(11) = -1 EBADF (Bad file descriptor) [pid 5877] close(12) = -1 EBADF (Bad file descriptor) [pid 5877] close(13) = -1 EBADF (Bad file descriptor) [pid 5877] close(14) = -1 EBADF (Bad file descriptor) [pid 5877] close(15) = -1 EBADF (Bad file descriptor) [pid 5877] close(16) = -1 EBADF (Bad file descriptor) [pid 5877] close(17) = -1 EBADF (Bad file descriptor) [pid 5877] close(18) = -1 EBADF (Bad file descriptor) [pid 5877] close(19) = -1 EBADF (Bad file descriptor) [pid 5877] close(20) = -1 EBADF (Bad file descriptor) [pid 5877] close(21) = -1 EBADF (Bad file descriptor) [pid 5877] close(22) = -1 EBADF (Bad file descriptor) [pid 5877] close(23) = -1 EBADF (Bad file descriptor) [pid 5877] close(24) = -1 EBADF (Bad file descriptor) [pid 5877] close(25) = -1 EBADF (Bad file descriptor) [pid 5877] close(26) = -1 EBADF (Bad file descriptor) [pid 5877] close(27) = -1 EBADF (Bad file descriptor) [pid 5877] close(28) = -1 EBADF (Bad file descriptor) [pid 5877] close(29) = -1 EBADF (Bad file descriptor) [pid 5877] exit_group(0) = ? [pid 5877] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=38, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5836] umount2("./35", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./35/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./35/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./35/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./35/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./35/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./35/file2") = 0 [pid 5836] umount2("./35/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./35/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./35/binderfs") = 0 [pid 5836] umount2("./35/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./35/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./35/cgroup.net") = 0 [pid 5836] umount2("./35/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./35/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./35/cgroup.cpu") = 0 [pid 5836] umount2("./35/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./35/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./35/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./35") = 0 [pid 5836] mkdir("./36", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5878 attached [pid 5878] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 39 [pid 5878] <... set_robust_list resumed>) = 0 [pid 5878] chdir("./36") = 0 [pid 5878] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5878] setpgid(0, 0) = 0 [pid 5878] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5878] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5878] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5878] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5878] write(3, "1000", 4) = 4 [pid 5878] close(3) = 0 [pid 5878] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5878] write(1, "executing program\n", 18) = 18 [pid 5878] memfd_create("syzkaller", 0) = 3 [pid 5878] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5878] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5878] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5878] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5878] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5878] close(3) = 0 [pid 5878] close(4) = 0 [pid 5878] mkdir("./file2", 0777) = 0 [pid 5878] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5878] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5878] chdir("./file2") = 0 [pid 5878] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5878] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [ 124.628535][ T5878] loop0: detected capacity change from 0 to 128 [pid 5878] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5878] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5878] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5878] close(3) = 0 [pid 5878] close(4) = 0 [pid 5878] close(5) = -1 EBADF (Bad file descriptor) [pid 5878] close(6) = -1 EBADF (Bad file descriptor) [pid 5878] close(7) = -1 EBADF (Bad file descriptor) [pid 5878] close(8) = -1 EBADF (Bad file descriptor) [pid 5878] close(9) = -1 EBADF (Bad file descriptor) [pid 5878] close(10) = -1 EBADF (Bad file descriptor) [pid 5878] close(11) = -1 EBADF (Bad file descriptor) [pid 5878] close(12) = -1 EBADF (Bad file descriptor) [pid 5878] close(13) = -1 EBADF (Bad file descriptor) [pid 5878] close(14) = -1 EBADF (Bad file descriptor) [pid 5878] close(15) = -1 EBADF (Bad file descriptor) [pid 5878] close(16) = -1 EBADF (Bad file descriptor) [pid 5878] close(17) = -1 EBADF (Bad file descriptor) [pid 5878] close(18) = -1 EBADF (Bad file descriptor) [pid 5878] close(19) = -1 EBADF (Bad file descriptor) [pid 5878] close(20) = -1 EBADF (Bad file descriptor) [pid 5878] close(21) = -1 EBADF (Bad file descriptor) [pid 5878] close(22) = -1 EBADF (Bad file descriptor) [pid 5878] close(23) = -1 EBADF (Bad file descriptor) [pid 5878] close(24) = -1 EBADF (Bad file descriptor) [pid 5878] close(25) = -1 EBADF (Bad file descriptor) [pid 5878] close(26) = -1 EBADF (Bad file descriptor) [pid 5878] close(27) = -1 EBADF (Bad file descriptor) [pid 5878] close(28) = -1 EBADF (Bad file descriptor) [pid 5878] close(29) = -1 EBADF (Bad file descriptor) [pid 5878] exit_group(0) = ? [pid 5878] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=39, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] umount2("./36", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./36/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./36/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./36/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./36/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./36/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./36/file2") = 0 [pid 5836] umount2("./36/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./36/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./36/binderfs") = 0 [pid 5836] umount2("./36/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./36/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./36/cgroup.net") = 0 [pid 5836] umount2("./36/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./36/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./36/cgroup.cpu") = 0 [pid 5836] umount2("./36/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./36/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./36/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./36") = 0 [pid 5836] mkdir("./37", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5879 attached [pid 5879] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 40 [pid 5879] <... set_robust_list resumed>) = 0 [pid 5879] chdir("./37") = 0 [pid 5879] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5879] setpgid(0, 0) = 0 [pid 5879] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5879] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5879] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5879] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5879] write(3, "1000", 4) = 4 [pid 5879] close(3) = 0 [pid 5879] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5879] write(1, "executing program\n", 18) = 18 executing program [pid 5879] memfd_create("syzkaller", 0) = 3 [pid 5879] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5879] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5879] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5879] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5879] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5879] close(3) = 0 [pid 5879] close(4) = 0 [pid 5879] mkdir("./file2", 0777) = 0 [pid 5879] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5879] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5879] chdir("./file2") = 0 [pid 5879] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 125.126580][ T5879] loop0: detected capacity change from 0 to 128 [pid 5879] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5879] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5879] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5879] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5879] close(3) = 0 [pid 5879] close(4) = 0 [pid 5879] close(5) = -1 EBADF (Bad file descriptor) [pid 5879] close(6) = -1 EBADF (Bad file descriptor) [pid 5879] close(7) = -1 EBADF (Bad file descriptor) [pid 5879] close(8) = -1 EBADF (Bad file descriptor) [pid 5879] close(9) = -1 EBADF (Bad file descriptor) [pid 5879] close(10) = -1 EBADF (Bad file descriptor) [pid 5879] close(11) = -1 EBADF (Bad file descriptor) [pid 5879] close(12) = -1 EBADF (Bad file descriptor) [pid 5879] close(13) = -1 EBADF (Bad file descriptor) [pid 5879] close(14) = -1 EBADF (Bad file descriptor) [pid 5879] close(15) = -1 EBADF (Bad file descriptor) [pid 5879] close(16) = -1 EBADF (Bad file descriptor) [pid 5879] close(17) = -1 EBADF (Bad file descriptor) [pid 5879] close(18) = -1 EBADF (Bad file descriptor) [pid 5879] close(19) = -1 EBADF (Bad file descriptor) [pid 5879] close(20) = -1 EBADF (Bad file descriptor) [pid 5879] close(21) = -1 EBADF (Bad file descriptor) [pid 5879] close(22) = -1 EBADF (Bad file descriptor) [pid 5879] close(23) = -1 EBADF (Bad file descriptor) [pid 5879] close(24) = -1 EBADF (Bad file descriptor) [pid 5879] close(25) = -1 EBADF (Bad file descriptor) [pid 5879] close(26) = -1 EBADF (Bad file descriptor) [pid 5879] close(27) = -1 EBADF (Bad file descriptor) [pid 5879] close(28) = -1 EBADF (Bad file descriptor) [pid 5879] close(29) = -1 EBADF (Bad file descriptor) [pid 5879] exit_group(0) = ? [pid 5879] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=40, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] umount2("./37", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./37/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./37/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./37/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./37/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./37/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./37/file2") = 0 [pid 5836] umount2("./37/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./37/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./37/binderfs") = 0 [pid 5836] umount2("./37/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./37/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./37/cgroup.net") = 0 [pid 5836] umount2("./37/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./37/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./37/cgroup.cpu") = 0 [pid 5836] umount2("./37/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./37/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./37/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./37") = 0 [pid 5836] mkdir("./38", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5880 attached [pid 5880] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 41 [pid 5880] <... set_robust_list resumed>) = 0 [pid 5880] chdir("./38") = 0 [pid 5880] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5880] setpgid(0, 0) = 0 [pid 5880] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5880] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5880] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5880] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5880] write(3, "1000", 4) = 4 [pid 5880] close(3) = 0 [pid 5880] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5880] write(1, "executing program\n", 18) = 18 [pid 5880] memfd_create("syzkaller", 0) = 3 [pid 5880] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5880] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5880] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5880] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5880] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5880] close(3) = 0 [pid 5880] close(4) = 0 [pid 5880] mkdir("./file2", 0777) = 0 [pid 5880] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5880] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5880] chdir("./file2") = 0 [pid 5880] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5880] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5880] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5880] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5880] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5880] close(3) = 0 [ 125.406611][ T5880] loop0: detected capacity change from 0 to 128 [pid 5880] close(4) = 0 [pid 5880] close(5) = -1 EBADF (Bad file descriptor) [pid 5880] close(6) = -1 EBADF (Bad file descriptor) [pid 5880] close(7) = -1 EBADF (Bad file descriptor) [pid 5880] close(8) = -1 EBADF (Bad file descriptor) [pid 5880] close(9) = -1 EBADF (Bad file descriptor) [pid 5880] close(10) = -1 EBADF (Bad file descriptor) [pid 5880] close(11) = -1 EBADF (Bad file descriptor) [pid 5880] close(12) = -1 EBADF (Bad file descriptor) [pid 5880] close(13) = -1 EBADF (Bad file descriptor) [pid 5880] close(14) = -1 EBADF (Bad file descriptor) [pid 5880] close(15) = -1 EBADF (Bad file descriptor) [pid 5880] close(16) = -1 EBADF (Bad file descriptor) [pid 5880] close(17) = -1 EBADF (Bad file descriptor) [pid 5880] close(18) = -1 EBADF (Bad file descriptor) [pid 5880] close(19) = -1 EBADF (Bad file descriptor) [pid 5880] close(20) = -1 EBADF (Bad file descriptor) [pid 5880] close(21) = -1 EBADF (Bad file descriptor) [pid 5880] close(22) = -1 EBADF (Bad file descriptor) [pid 5880] close(23) = -1 EBADF (Bad file descriptor) [pid 5880] close(24) = -1 EBADF (Bad file descriptor) [pid 5880] close(25) = -1 EBADF (Bad file descriptor) [pid 5880] close(26) = -1 EBADF (Bad file descriptor) [pid 5880] close(27) = -1 EBADF (Bad file descriptor) [pid 5880] close(28) = -1 EBADF (Bad file descriptor) [pid 5880] close(29) = -1 EBADF (Bad file descriptor) [pid 5880] exit_group(0) = ? [pid 5880] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=41, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./38/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./38/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./38/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./38/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./38/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./38/file2") = 0 [pid 5836] umount2("./38/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./38/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./38/binderfs") = 0 [pid 5836] umount2("./38/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./38/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./38/cgroup.net") = 0 [pid 5836] umount2("./38/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./38/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./38/cgroup.cpu") = 0 [pid 5836] umount2("./38/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./38/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./38/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./38") = 0 [pid 5836] mkdir("./39", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5881 attached , child_tidptr=0x555563237690) = 42 [pid 5881] set_robust_list(0x5555632376a0, 24) = 0 [pid 5881] chdir("./39") = 0 [pid 5881] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5881] setpgid(0, 0) = 0 [pid 5881] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5881] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5881] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5881] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5881] write(3, "1000", 4) = 4 [pid 5881] close(3) = 0 [pid 5881] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5881] write(1, "executing program\n", 18executing program ) = 18 [pid 5881] memfd_create("syzkaller", 0) = 3 [pid 5881] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5881] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5881] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5881] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5881] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5881] close(3) = 0 [pid 5881] close(4) = 0 [pid 5881] mkdir("./file2", 0777) = 0 [pid 5881] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5881] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5881] chdir("./file2") = 0 [pid 5881] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5881] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5881] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5881] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5881] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5881] close(3) = 0 [pid 5881] close(4) = 0 [pid 5881] close(5) = -1 EBADF (Bad file descriptor) [pid 5881] close(6) = -1 EBADF (Bad file descriptor) [pid 5881] close(7) = -1 EBADF (Bad file descriptor) [pid 5881] close(8) = -1 EBADF (Bad file descriptor) [pid 5881] close(9) = -1 EBADF (Bad file descriptor) [pid 5881] close(10) = -1 EBADF (Bad file descriptor) [pid 5881] close(11) = -1 EBADF (Bad file descriptor) [pid 5881] close(12) = -1 EBADF (Bad file descriptor) [pid 5881] close(13) = -1 EBADF (Bad file descriptor) [pid 5881] close(14) = -1 EBADF (Bad file descriptor) [pid 5881] close(15) = -1 EBADF (Bad file descriptor) [pid 5881] close(16) = -1 EBADF (Bad file descriptor) [pid 5881] close(17) = -1 EBADF (Bad file descriptor) [pid 5881] close(18) = -1 EBADF (Bad file descriptor) [pid 5881] close(19) = -1 EBADF (Bad file descriptor) [pid 5881] close(20) = -1 EBADF (Bad file descriptor) [pid 5881] close(21) = -1 EBADF (Bad file descriptor) [pid 5881] close(22) = -1 EBADF (Bad file descriptor) [pid 5881] close(23) = -1 EBADF (Bad file descriptor) [pid 5881] close(24) = -1 EBADF (Bad file descriptor) [pid 5881] close(25) = -1 EBADF (Bad file descriptor) [pid 5881] close(26) = -1 EBADF (Bad file descriptor) [pid 5881] close(27) = -1 EBADF (Bad file descriptor) [pid 5881] close(28) = -1 EBADF (Bad file descriptor) [pid 5881] close(29) = -1 EBADF (Bad file descriptor) [pid 5881] exit_group(0) = ? [pid 5881] +++ exited with 0 +++ [ 126.004513][ T5881] loop0: detected capacity change from 0 to 128 [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=42, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./39", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./39/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./39/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./39/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./39/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./39/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./39/file2") = 0 [pid 5836] umount2("./39/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./39/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./39/binderfs") = 0 [pid 5836] umount2("./39/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./39/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./39/cgroup.net") = 0 [pid 5836] umount2("./39/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./39/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./39/cgroup.cpu") = 0 [pid 5836] umount2("./39/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./39/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./39/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./39") = 0 [pid 5836] mkdir("./40", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5882 attached [pid 5882] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 43 [pid 5882] <... set_robust_list resumed>) = 0 [pid 5882] chdir("./40") = 0 [pid 5882] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5882] setpgid(0, 0) = 0 [pid 5882] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5882] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5882] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5882] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5882] write(3, "1000", 4) = 4 [pid 5882] close(3) = 0 [pid 5882] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5882] write(1, "executing program\n", 18executing program ) = 18 [pid 5882] memfd_create("syzkaller", 0) = 3 [pid 5882] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5882] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5882] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5882] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5882] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5882] close(3) = 0 [pid 5882] close(4) = 0 [pid 5882] mkdir("./file2", 0777) = 0 [pid 5882] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5882] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5882] chdir("./file2") = 0 [pid 5882] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5882] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5882] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5882] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5882] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5882] close(3) = 0 [pid 5882] close(4) = 0 [pid 5882] close(5) = -1 EBADF (Bad file descriptor) [pid 5882] close(6) = -1 EBADF (Bad file descriptor) [pid 5882] close(7) = -1 EBADF (Bad file descriptor) [pid 5882] close(8) = -1 EBADF (Bad file descriptor) [pid 5882] close(9) = -1 EBADF (Bad file descriptor) [pid 5882] close(10) = -1 EBADF (Bad file descriptor) [pid 5882] close(11) = -1 EBADF (Bad file descriptor) [pid 5882] close(12) = -1 EBADF (Bad file descriptor) [pid 5882] close(13) = -1 EBADF (Bad file descriptor) [pid 5882] close(14) = -1 EBADF (Bad file descriptor) [pid 5882] close(15) = -1 EBADF (Bad file descriptor) [pid 5882] close(16) = -1 EBADF (Bad file descriptor) [pid 5882] close(17) = -1 EBADF (Bad file descriptor) [pid 5882] close(18) = -1 EBADF (Bad file descriptor) [pid 5882] close(19) = -1 EBADF (Bad file descriptor) [pid 5882] close(20) = -1 EBADF (Bad file descriptor) [pid 5882] close(21) = -1 EBADF (Bad file descriptor) [pid 5882] close(22) = -1 EBADF (Bad file descriptor) [pid 5882] close(23) = -1 EBADF (Bad file descriptor) [pid 5882] close(24) = -1 EBADF (Bad file descriptor) [pid 5882] close(25) = -1 EBADF (Bad file descriptor) [pid 5882] close(26) = -1 EBADF (Bad file descriptor) [pid 5882] close(27) = -1 EBADF (Bad file descriptor) [pid 5882] close(28) = -1 EBADF (Bad file descriptor) [pid 5882] close(29) = -1 EBADF (Bad file descriptor) [pid 5882] exit_group(0) = ? [pid 5882] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=43, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [ 126.141143][ T5882] loop0: detected capacity change from 0 to 128 [pid 5836] umount2("./40", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./40/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./40/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./40/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./40/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./40/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./40/file2") = 0 [pid 5836] umount2("./40/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./40/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./40/binderfs") = 0 [pid 5836] umount2("./40/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./40/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./40/cgroup.net") = 0 [pid 5836] umount2("./40/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./40/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./40/cgroup.cpu") = 0 [pid 5836] umount2("./40/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./40/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./40/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./40") = 0 [pid 5836] mkdir("./41", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5883 attached [pid 5883] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 44 [pid 5883] <... set_robust_list resumed>) = 0 [pid 5883] chdir("./41") = 0 [pid 5883] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5883] setpgid(0, 0) = 0 [pid 5883] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5883] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5883] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5883] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5883] write(3, "1000", 4) = 4 [pid 5883] close(3) = 0 [pid 5883] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5883] write(1, "executing program\n", 18) = 18 [pid 5883] memfd_create("syzkaller", 0) = 3 [pid 5883] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5883] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5883] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5883] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5883] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5883] close(3) = 0 [pid 5883] close(4) = 0 [pid 5883] mkdir("./file2", 0777) = 0 [pid 5883] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5883] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5883] chdir("./file2") = 0 [pid 5883] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 126.368323][ T5883] loop0: detected capacity change from 0 to 128 [pid 5883] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5883] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5883] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5883] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5883] close(3) = 0 [pid 5883] close(4) = 0 [pid 5883] close(5) = -1 EBADF (Bad file descriptor) [pid 5883] close(6) = -1 EBADF (Bad file descriptor) [pid 5883] close(7) = -1 EBADF (Bad file descriptor) [pid 5883] close(8) = -1 EBADF (Bad file descriptor) [pid 5883] close(9) = -1 EBADF (Bad file descriptor) [pid 5883] close(10) = -1 EBADF (Bad file descriptor) [pid 5883] close(11) = -1 EBADF (Bad file descriptor) [pid 5883] close(12) = -1 EBADF (Bad file descriptor) [pid 5883] close(13) = -1 EBADF (Bad file descriptor) [pid 5883] close(14) = -1 EBADF (Bad file descriptor) [pid 5883] close(15) = -1 EBADF (Bad file descriptor) [pid 5883] close(16) = -1 EBADF (Bad file descriptor) [pid 5883] close(17) = -1 EBADF (Bad file descriptor) [pid 5883] close(18) = -1 EBADF (Bad file descriptor) [pid 5883] close(19) = -1 EBADF (Bad file descriptor) [pid 5883] close(20) = -1 EBADF (Bad file descriptor) [pid 5883] close(21) = -1 EBADF (Bad file descriptor) [pid 5883] close(22) = -1 EBADF (Bad file descriptor) [pid 5883] close(23) = -1 EBADF (Bad file descriptor) [pid 5883] close(24) = -1 EBADF (Bad file descriptor) [pid 5883] close(25) = -1 EBADF (Bad file descriptor) [pid 5883] close(26) = -1 EBADF (Bad file descriptor) [pid 5883] close(27) = -1 EBADF (Bad file descriptor) [pid 5883] close(28) = -1 EBADF (Bad file descriptor) [pid 5883] close(29) = -1 EBADF (Bad file descriptor) [pid 5883] exit_group(0) = ? [pid 5883] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=44, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5836] umount2("./41", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./41/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./41/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./41/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./41/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./41/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./41/file2") = 0 [pid 5836] umount2("./41/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./41/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./41/binderfs") = 0 [pid 5836] umount2("./41/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./41/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./41/cgroup.net") = 0 [pid 5836] umount2("./41/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./41/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./41/cgroup.cpu") = 0 [pid 5836] umount2("./41/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./41/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./41/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./41") = 0 [pid 5836] mkdir("./42", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5884 attached [pid 5884] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 45 [pid 5884] <... set_robust_list resumed>) = 0 [pid 5884] chdir("./42") = 0 [pid 5884] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5884] setpgid(0, 0) = 0 [pid 5884] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5884] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5884] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5884] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5884] write(3, "1000", 4) = 4 [pid 5884] close(3) = 0 [pid 5884] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5884] write(1, "executing program\n", 18executing program ) = 18 [pid 5884] memfd_create("syzkaller", 0) = 3 [pid 5884] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5884] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5884] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5884] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5884] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5884] close(3) = 0 [pid 5884] close(4) = 0 [pid 5884] mkdir("./file2", 0777) = 0 [pid 5884] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5884] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5884] chdir("./file2") = 0 [pid 5884] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5884] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5884] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5884] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5884] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5884] close(3) = 0 [pid 5884] close(4) = 0 [pid 5884] close(5) = -1 EBADF (Bad file descriptor) [ 126.857614][ T5884] loop0: detected capacity change from 0 to 128 [pid 5884] close(6) = -1 EBADF (Bad file descriptor) [pid 5884] close(7) = -1 EBADF (Bad file descriptor) [pid 5884] close(8) = -1 EBADF (Bad file descriptor) [pid 5884] close(9) = -1 EBADF (Bad file descriptor) [pid 5884] close(10) = -1 EBADF (Bad file descriptor) [pid 5884] close(11) = -1 EBADF (Bad file descriptor) [pid 5884] close(12) = -1 EBADF (Bad file descriptor) [pid 5884] close(13) = -1 EBADF (Bad file descriptor) [pid 5884] close(14) = -1 EBADF (Bad file descriptor) [pid 5884] close(15) = -1 EBADF (Bad file descriptor) [pid 5884] close(16) = -1 EBADF (Bad file descriptor) [pid 5884] close(17) = -1 EBADF (Bad file descriptor) [pid 5884] close(18) = -1 EBADF (Bad file descriptor) [pid 5884] close(19) = -1 EBADF (Bad file descriptor) [pid 5884] close(20) = -1 EBADF (Bad file descriptor) [pid 5884] close(21) = -1 EBADF (Bad file descriptor) [pid 5884] close(22) = -1 EBADF (Bad file descriptor) [pid 5884] close(23) = -1 EBADF (Bad file descriptor) [pid 5884] close(24) = -1 EBADF (Bad file descriptor) [pid 5884] close(25) = -1 EBADF (Bad file descriptor) [pid 5884] close(26) = -1 EBADF (Bad file descriptor) [pid 5884] close(27) = -1 EBADF (Bad file descriptor) [pid 5884] close(28) = -1 EBADF (Bad file descriptor) [pid 5884] close(29) = -1 EBADF (Bad file descriptor) [pid 5884] exit_group(0) = ? [pid 5884] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=45, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] umount2("./42", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./42/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./42/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./42/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./42/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./42/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./42/file2") = 0 [pid 5836] umount2("./42/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./42/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./42/binderfs") = 0 [pid 5836] umount2("./42/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./42/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./42/cgroup.net") = 0 [pid 5836] umount2("./42/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./42/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./42/cgroup.cpu") = 0 [pid 5836] umount2("./42/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./42/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./42/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./42") = 0 [pid 5836] mkdir("./43", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5885 attached [pid 5885] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 46 [pid 5885] <... set_robust_list resumed>) = 0 [pid 5885] chdir("./43") = 0 [pid 5885] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5885] setpgid(0, 0) = 0 [pid 5885] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5885] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5885] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5885] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5885] write(3, "1000", 4) = 4 [pid 5885] close(3) = 0 [pid 5885] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5885] write(1, "executing program\n", 18executing program ) = 18 [pid 5885] memfd_create("syzkaller", 0) = 3 [pid 5885] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5885] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5885] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5885] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5885] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5885] close(3) = 0 [pid 5885] close(4) = 0 [pid 5885] mkdir("./file2", 0777) = 0 [pid 5885] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5885] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5885] chdir("./file2") = 0 [pid 5885] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 127.404625][ T5885] loop0: detected capacity change from 0 to 128 [pid 5885] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5885] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5885] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5885] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5885] close(3) = 0 [pid 5885] close(4) = 0 [pid 5885] close(5) = -1 EBADF (Bad file descriptor) [pid 5885] close(6) = -1 EBADF (Bad file descriptor) [pid 5885] close(7) = -1 EBADF (Bad file descriptor) [pid 5885] close(8) = -1 EBADF (Bad file descriptor) [pid 5885] close(9) = -1 EBADF (Bad file descriptor) [pid 5885] close(10) = -1 EBADF (Bad file descriptor) [pid 5885] close(11) = -1 EBADF (Bad file descriptor) [pid 5885] close(12) = -1 EBADF (Bad file descriptor) [pid 5885] close(13) = -1 EBADF (Bad file descriptor) [pid 5885] close(14) = -1 EBADF (Bad file descriptor) [pid 5885] close(15) = -1 EBADF (Bad file descriptor) [pid 5885] close(16) = -1 EBADF (Bad file descriptor) [pid 5885] close(17) = -1 EBADF (Bad file descriptor) [pid 5885] close(18) = -1 EBADF (Bad file descriptor) [pid 5885] close(19) = -1 EBADF (Bad file descriptor) [pid 5885] close(20) = -1 EBADF (Bad file descriptor) [pid 5885] close(21) = -1 EBADF (Bad file descriptor) [pid 5885] close(22) = -1 EBADF (Bad file descriptor) [pid 5885] close(23) = -1 EBADF (Bad file descriptor) [pid 5885] close(24) = -1 EBADF (Bad file descriptor) [pid 5885] close(25) = -1 EBADF (Bad file descriptor) [pid 5885] close(26) = -1 EBADF (Bad file descriptor) [pid 5885] close(27) = -1 EBADF (Bad file descriptor) [pid 5885] close(28) = -1 EBADF (Bad file descriptor) [pid 5885] close(29) = -1 EBADF (Bad file descriptor) [pid 5885] exit_group(0) = ? [pid 5885] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=46, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./43", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./43/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./43/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./43/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./43/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./43/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./43/file2") = 0 [pid 5836] umount2("./43/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./43/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./43/binderfs") = 0 [pid 5836] umount2("./43/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./43/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./43/cgroup.net") = 0 [pid 5836] umount2("./43/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./43/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./43/cgroup.cpu") = 0 [pid 5836] umount2("./43/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./43/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./43/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./43") = 0 [pid 5836] mkdir("./44", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5886 attached [pid 5886] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 47 [pid 5886] <... set_robust_list resumed>) = 0 [pid 5886] chdir("./44") = 0 [pid 5886] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5886] setpgid(0, 0) = 0 [pid 5886] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5886] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5886] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5886] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5886] write(3, "1000", 4) = 4 [pid 5886] close(3) = 0 [pid 5886] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5886] write(1, "executing program\n", 18executing program ) = 18 [pid 5886] memfd_create("syzkaller", 0) = 3 [pid 5886] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5886] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5886] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5886] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5886] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5886] close(3) = 0 [pid 5886] close(4) = 0 [pid 5886] mkdir("./file2", 0777) = 0 [pid 5886] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5886] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5886] chdir("./file2") = 0 [pid 5886] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5886] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5886] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5886] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5886] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5886] close(3) = 0 [pid 5886] close(4) = 0 [pid 5886] close(5) = -1 EBADF (Bad file descriptor) [pid 5886] close(6) = -1 EBADF (Bad file descriptor) [pid 5886] close(7) = -1 EBADF (Bad file descriptor) [pid 5886] close(8) = -1 EBADF (Bad file descriptor) [pid 5886] close(9) = -1 EBADF (Bad file descriptor) [pid 5886] close(10) = -1 EBADF (Bad file descriptor) [pid 5886] close(11) = -1 EBADF (Bad file descriptor) [pid 5886] close(12) = -1 EBADF (Bad file descriptor) [pid 5886] close(13) = -1 EBADF (Bad file descriptor) [ 128.002798][ T5886] loop0: detected capacity change from 0 to 128 [pid 5886] close(14) = -1 EBADF (Bad file descriptor) [pid 5886] close(15) = -1 EBADF (Bad file descriptor) [pid 5886] close(16) = -1 EBADF (Bad file descriptor) [pid 5886] close(17) = -1 EBADF (Bad file descriptor) [pid 5886] close(18) = -1 EBADF (Bad file descriptor) [pid 5886] close(19) = -1 EBADF (Bad file descriptor) [pid 5886] close(20) = -1 EBADF (Bad file descriptor) [pid 5886] close(21) = -1 EBADF (Bad file descriptor) [pid 5886] close(22) = -1 EBADF (Bad file descriptor) [pid 5886] close(23) = -1 EBADF (Bad file descriptor) [pid 5886] close(24) = -1 EBADF (Bad file descriptor) [pid 5886] close(25) = -1 EBADF (Bad file descriptor) [pid 5886] close(26) = -1 EBADF (Bad file descriptor) [pid 5886] close(27) = -1 EBADF (Bad file descriptor) [pid 5886] close(28) = -1 EBADF (Bad file descriptor) [pid 5886] close(29) = -1 EBADF (Bad file descriptor) [pid 5886] exit_group(0) = ? [pid 5886] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=47, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./44", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./44/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./44/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./44/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./44/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./44/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./44/file2") = 0 [pid 5836] umount2("./44/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./44/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./44/binderfs") = 0 [pid 5836] umount2("./44/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./44/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./44/cgroup.net") = 0 [pid 5836] umount2("./44/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./44/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./44/cgroup.cpu") = 0 [pid 5836] umount2("./44/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./44/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./44/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./44") = 0 [pid 5836] mkdir("./45", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5887 attached [pid 5887] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 48 [pid 5887] <... set_robust_list resumed>) = 0 [pid 5887] chdir("./45") = 0 [pid 5887] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5887] setpgid(0, 0) = 0 [pid 5887] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5887] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5887] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5887] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5887] write(3, "1000", 4) = 4 [pid 5887] close(3) = 0 [pid 5887] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5887] write(1, "executing program\n", 18executing program ) = 18 [pid 5887] memfd_create("syzkaller", 0) = 3 [pid 5887] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5887] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5887] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5887] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5887] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5887] close(3) = 0 [pid 5887] close(4) = 0 [pid 5887] mkdir("./file2", 0777) = 0 [pid 5887] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5887] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5887] chdir("./file2") = 0 [pid 5887] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5887] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5887] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5887] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5887] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [ 128.232987][ T5887] loop0: detected capacity change from 0 to 128 [pid 5887] close(3) = 0 [pid 5887] close(4) = 0 [pid 5887] close(5) = -1 EBADF (Bad file descriptor) [pid 5887] close(6) = -1 EBADF (Bad file descriptor) [pid 5887] close(7) = -1 EBADF (Bad file descriptor) [pid 5887] close(8) = -1 EBADF (Bad file descriptor) [pid 5887] close(9) = -1 EBADF (Bad file descriptor) [pid 5887] close(10) = -1 EBADF (Bad file descriptor) [pid 5887] close(11) = -1 EBADF (Bad file descriptor) [pid 5887] close(12) = -1 EBADF (Bad file descriptor) [pid 5887] close(13) = -1 EBADF (Bad file descriptor) [pid 5887] close(14) = -1 EBADF (Bad file descriptor) [pid 5887] close(15) = -1 EBADF (Bad file descriptor) [pid 5887] close(16) = -1 EBADF (Bad file descriptor) [pid 5887] close(17) = -1 EBADF (Bad file descriptor) [pid 5887] close(18) = -1 EBADF (Bad file descriptor) [pid 5887] close(19) = -1 EBADF (Bad file descriptor) [pid 5887] close(20) = -1 EBADF (Bad file descriptor) [pid 5887] close(21) = -1 EBADF (Bad file descriptor) [pid 5887] close(22) = -1 EBADF (Bad file descriptor) [pid 5887] close(23) = -1 EBADF (Bad file descriptor) [pid 5887] close(24) = -1 EBADF (Bad file descriptor) [pid 5887] close(25) = -1 EBADF (Bad file descriptor) [pid 5887] close(26) = -1 EBADF (Bad file descriptor) [pid 5887] close(27) = -1 EBADF (Bad file descriptor) [pid 5887] close(28) = -1 EBADF (Bad file descriptor) [pid 5887] close(29) = -1 EBADF (Bad file descriptor) [pid 5887] exit_group(0) = ? [pid 5887] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=48, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] umount2("./45", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./45/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./45/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./45/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./45/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./45/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./45/file2") = 0 [pid 5836] umount2("./45/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./45/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./45/binderfs") = 0 [pid 5836] umount2("./45/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./45/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./45/cgroup.net") = 0 [pid 5836] umount2("./45/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./45/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./45/cgroup.cpu") = 0 [pid 5836] umount2("./45/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./45/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./45/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./45") = 0 [pid 5836] mkdir("./46", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5888 attached [pid 5888] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 49 [pid 5888] <... set_robust_list resumed>) = 0 [pid 5888] chdir("./46") = 0 [pid 5888] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5888] setpgid(0, 0) = 0 [pid 5888] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5888] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5888] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5888] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5888] write(3, "1000", 4) = 4 [pid 5888] close(3) = 0 [pid 5888] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5888] write(1, "executing program\n", 18) = 18 [pid 5888] memfd_create("syzkaller", 0) = 3 [pid 5888] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5888] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5888] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5888] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5888] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5888] close(3) = 0 [pid 5888] close(4) = 0 [pid 5888] mkdir("./file2", 0777) = 0 [pid 5888] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5888] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5888] chdir("./file2") = 0 [pid 5888] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5888] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5888] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5888] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5888] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5888] close(3) = 0 [pid 5888] close(4) = 0 [pid 5888] close(5) = -1 EBADF (Bad file descriptor) [pid 5888] close(6) = -1 EBADF (Bad file descriptor) [pid 5888] close(7) = -1 EBADF (Bad file descriptor) [pid 5888] close(8) = -1 EBADF (Bad file descriptor) [pid 5888] close(9) = -1 EBADF (Bad file descriptor) [pid 5888] close(10) = -1 EBADF (Bad file descriptor) [pid 5888] close(11) = -1 EBADF (Bad file descriptor) [pid 5888] close(12) = -1 EBADF (Bad file descriptor) [pid 5888] close(13) = -1 EBADF (Bad file descriptor) [pid 5888] close(14) = -1 EBADF (Bad file descriptor) [pid 5888] close(15) = -1 EBADF (Bad file descriptor) [pid 5888] close(16) = -1 EBADF (Bad file descriptor) [pid 5888] close(17) = -1 EBADF (Bad file descriptor) [pid 5888] close(18) = -1 EBADF (Bad file descriptor) [pid 5888] close(19) = -1 EBADF (Bad file descriptor) [pid 5888] close(20) = -1 EBADF (Bad file descriptor) [pid 5888] close(21) = -1 EBADF (Bad file descriptor) [pid 5888] close(22) = -1 EBADF (Bad file descriptor) [pid 5888] close(23) = -1 EBADF (Bad file descriptor) [pid 5888] close(24) = -1 EBADF (Bad file descriptor) [pid 5888] close(25) = -1 EBADF (Bad file descriptor) [pid 5888] close(26) = -1 EBADF (Bad file descriptor) [ 128.797207][ T5888] loop0: detected capacity change from 0 to 128 [pid 5888] close(27) = -1 EBADF (Bad file descriptor) [pid 5888] close(28) = -1 EBADF (Bad file descriptor) [pid 5888] close(29) = -1 EBADF (Bad file descriptor) [pid 5888] exit_group(0) = ? [pid 5888] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=49, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./46", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./46/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./46/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./46/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./46/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./46/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./46/file2") = 0 [pid 5836] umount2("./46/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./46/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./46/binderfs") = 0 [pid 5836] umount2("./46/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./46/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./46/cgroup.net") = 0 [pid 5836] umount2("./46/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./46/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./46/cgroup.cpu") = 0 [pid 5836] umount2("./46/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./46/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./46/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./46") = 0 [pid 5836] mkdir("./47", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5889 attached [pid 5889] set_robust_list(0x5555632376a0, 24) = 0 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 50 [pid 5889] chdir("./47") = 0 [pid 5889] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5889] setpgid(0, 0) = 0 [pid 5889] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5889] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5889] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5889] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5889] write(3, "1000", 4) = 4 [pid 5889] close(3) = 0 [pid 5889] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5889] write(1, "executing program\n", 18) = 18 [pid 5889] memfd_create("syzkaller", 0) = 3 [pid 5889] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5889] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5889] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5889] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5889] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5889] close(3) = 0 [pid 5889] close(4) = 0 [pid 5889] mkdir("./file2", 0777) = 0 [pid 5889] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5889] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5889] chdir("./file2") = 0 [pid 5889] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5889] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5889] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5889] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5889] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5889] close(3) = 0 [pid 5889] close(4) = 0 [pid 5889] close(5) = -1 EBADF (Bad file descriptor) [pid 5889] close(6) = -1 EBADF (Bad file descriptor) [pid 5889] close(7) = -1 EBADF (Bad file descriptor) [pid 5889] close(8) = -1 EBADF (Bad file descriptor) [pid 5889] close(9) = -1 EBADF (Bad file descriptor) [pid 5889] close(10) = -1 EBADF (Bad file descriptor) [pid 5889] close(11) = -1 EBADF (Bad file descriptor) [pid 5889] close(12) = -1 EBADF (Bad file descriptor) [pid 5889] close(13) = -1 EBADF (Bad file descriptor) [pid 5889] close(14) = -1 EBADF (Bad file descriptor) [pid 5889] close(15) = -1 EBADF (Bad file descriptor) [pid 5889] close(16) = -1 EBADF (Bad file descriptor) [pid 5889] close(17) = -1 EBADF (Bad file descriptor) [pid 5889] close(18) = -1 EBADF (Bad file descriptor) [pid 5889] close(19) = -1 EBADF (Bad file descriptor) [pid 5889] close(20) = -1 EBADF (Bad file descriptor) [pid 5889] close(21) = -1 EBADF (Bad file descriptor) [pid 5889] close(22) = -1 EBADF (Bad file descriptor) [pid 5889] close(23) = -1 EBADF (Bad file descriptor) [pid 5889] close(24) = -1 EBADF (Bad file descriptor) [pid 5889] close(25) = -1 EBADF (Bad file descriptor) [pid 5889] close(26) = -1 EBADF (Bad file descriptor) [pid 5889] close(27) = -1 EBADF (Bad file descriptor) [pid 5889] close(28) = -1 EBADF (Bad file descriptor) [pid 5889] close(29) = -1 EBADF (Bad file descriptor) [pid 5889] exit_group(0) = ? [pid 5889] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=50, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./47", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [ 129.020513][ T5889] loop0: detected capacity change from 0 to 128 [pid 5836] umount2("./47/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./47/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./47/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./47/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./47/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./47/file2") = 0 [pid 5836] umount2("./47/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./47/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./47/binderfs") = 0 [pid 5836] umount2("./47/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./47/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./47/cgroup.net") = 0 [pid 5836] umount2("./47/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./47/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./47/cgroup.cpu") = 0 [pid 5836] umount2("./47/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./47/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./47/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./47") = 0 [pid 5836] mkdir("./48", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555563237690) = 51 ./strace-static-x86_64: Process 5890 attached [pid 5890] set_robust_list(0x5555632376a0, 24) = 0 [pid 5890] chdir("./48") = 0 [pid 5890] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5890] setpgid(0, 0) = 0 [pid 5890] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5890] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5890] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5890] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5890] write(3, "1000", 4) = 4 [pid 5890] close(3) = 0 [pid 5890] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5890] write(1, "executing program\n", 18executing program ) = 18 [pid 5890] memfd_create("syzkaller", 0) = 3 [pid 5890] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5890] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5890] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5890] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5890] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5890] close(3) = 0 [pid 5890] close(4) = 0 [pid 5890] mkdir("./file2", 0777) = 0 [pid 5890] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [ 129.145747][ T5890] loop0: detected capacity change from 0 to 128 [pid 5890] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5890] chdir("./file2") = 0 [pid 5890] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5890] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5890] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5890] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5890] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5890] close(3) = 0 [pid 5890] close(4) = 0 [pid 5890] close(5) = -1 EBADF (Bad file descriptor) [pid 5890] close(6) = -1 EBADF (Bad file descriptor) [pid 5890] close(7) = -1 EBADF (Bad file descriptor) [pid 5890] close(8) = -1 EBADF (Bad file descriptor) [pid 5890] close(9) = -1 EBADF (Bad file descriptor) [pid 5890] close(10) = -1 EBADF (Bad file descriptor) [pid 5890] close(11) = -1 EBADF (Bad file descriptor) [pid 5890] close(12) = -1 EBADF (Bad file descriptor) [pid 5890] close(13) = -1 EBADF (Bad file descriptor) [pid 5890] close(14) = -1 EBADF (Bad file descriptor) [pid 5890] close(15) = -1 EBADF (Bad file descriptor) [pid 5890] close(16) = -1 EBADF (Bad file descriptor) [pid 5890] close(17) = -1 EBADF (Bad file descriptor) [pid 5890] close(18) = -1 EBADF (Bad file descriptor) [pid 5890] close(19) = -1 EBADF (Bad file descriptor) [pid 5890] close(20) = -1 EBADF (Bad file descriptor) [pid 5890] close(21) = -1 EBADF (Bad file descriptor) [pid 5890] close(22) = -1 EBADF (Bad file descriptor) [pid 5890] close(23) = -1 EBADF (Bad file descriptor) [pid 5890] close(24) = -1 EBADF (Bad file descriptor) [pid 5890] close(25) = -1 EBADF (Bad file descriptor) [pid 5890] close(26) = -1 EBADF (Bad file descriptor) [pid 5890] close(27) = -1 EBADF (Bad file descriptor) [pid 5890] close(28) = -1 EBADF (Bad file descriptor) [pid 5890] close(29) = -1 EBADF (Bad file descriptor) [pid 5890] exit_group(0) = ? [pid 5890] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=51, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] umount2("./48", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./48/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./48/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./48/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./48/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./48/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./48/file2") = 0 [pid 5836] umount2("./48/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./48/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./48/binderfs") = 0 [pid 5836] umount2("./48/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./48/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./48/cgroup.net") = 0 [pid 5836] umount2("./48/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./48/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./48/cgroup.cpu") = 0 [pid 5836] umount2("./48/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./48/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./48/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./48") = 0 [pid 5836] mkdir("./49", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5891 attached [pid 5891] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 52 [pid 5891] <... set_robust_list resumed>) = 0 [pid 5891] chdir("./49") = 0 [pid 5891] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5891] setpgid(0, 0) = 0 [pid 5891] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5891] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5891] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5891] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5891] write(3, "1000", 4) = 4 [pid 5891] close(3) = 0 [pid 5891] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5891] write(1, "executing program\n", 18) = 18 [pid 5891] memfd_create("syzkaller", 0) = 3 [pid 5891] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5891] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5891] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5891] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5891] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5891] close(3) = 0 [pid 5891] close(4) = 0 [pid 5891] mkdir("./file2", 0777) = 0 [pid 5891] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5891] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5891] chdir("./file2") = 0 [pid 5891] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5891] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5891] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5891] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5891] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5891] close(3) = 0 [pid 5891] close(4) = 0 [pid 5891] close(5) = -1 EBADF (Bad file descriptor) [pid 5891] close(6) = -1 EBADF (Bad file descriptor) [pid 5891] close(7) = -1 EBADF (Bad file descriptor) [pid 5891] close(8) = -1 EBADF (Bad file descriptor) [pid 5891] close(9) = -1 EBADF (Bad file descriptor) [pid 5891] close(10) = -1 EBADF (Bad file descriptor) [pid 5891] close(11) = -1 EBADF (Bad file descriptor) [pid 5891] close(12) = -1 EBADF (Bad file descriptor) [pid 5891] close(13) = -1 EBADF (Bad file descriptor) [pid 5891] close(14) = -1 EBADF (Bad file descriptor) [ 129.742653][ T5891] loop0: detected capacity change from 0 to 128 [pid 5891] close(15) = -1 EBADF (Bad file descriptor) [pid 5891] close(16) = -1 EBADF (Bad file descriptor) [pid 5891] close(17) = -1 EBADF (Bad file descriptor) [pid 5891] close(18) = -1 EBADF (Bad file descriptor) [pid 5891] close(19) = -1 EBADF (Bad file descriptor) [pid 5891] close(20) = -1 EBADF (Bad file descriptor) [pid 5891] close(21) = -1 EBADF (Bad file descriptor) [pid 5891] close(22) = -1 EBADF (Bad file descriptor) [pid 5891] close(23) = -1 EBADF (Bad file descriptor) [pid 5891] close(24) = -1 EBADF (Bad file descriptor) [pid 5891] close(25) = -1 EBADF (Bad file descriptor) [pid 5891] close(26) = -1 EBADF (Bad file descriptor) [pid 5891] close(27) = -1 EBADF (Bad file descriptor) [pid 5891] close(28) = -1 EBADF (Bad file descriptor) [pid 5891] close(29) = -1 EBADF (Bad file descriptor) [pid 5891] exit_group(0) = ? [pid 5891] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=52, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./49", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./49/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./49/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./49/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./49/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./49/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./49/file2") = 0 [pid 5836] umount2("./49/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./49/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./49/binderfs") = 0 [pid 5836] umount2("./49/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./49/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./49/cgroup.net") = 0 [pid 5836] umount2("./49/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./49/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./49/cgroup.cpu") = 0 [pid 5836] umount2("./49/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./49/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./49/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./49") = 0 [pid 5836] mkdir("./50", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5895 attached , child_tidptr=0x555563237690) = 53 [pid 5895] set_robust_list(0x5555632376a0, 24) = 0 [pid 5895] chdir("./50") = 0 [pid 5895] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5895] setpgid(0, 0) = 0 [pid 5895] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5895] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5895] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5895] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5895] write(3, "1000", 4) = 4 [pid 5895] close(3) = 0 [pid 5895] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5895] write(1, "executing program\n", 18executing program ) = 18 [pid 5895] memfd_create("syzkaller", 0) = 3 [pid 5895] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5895] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5895] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5895] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5895] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5895] close(3) = 0 [pid 5895] close(4) = 0 [pid 5895] mkdir("./file2", 0777) = 0 [pid 5895] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5895] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5895] chdir("./file2") = 0 [pid 5895] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5895] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5895] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5895] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [ 130.182108][ T5895] loop0: detected capacity change from 0 to 128 [pid 5895] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5895] close(3) = 0 [pid 5895] close(4) = 0 [pid 5895] close(5) = -1 EBADF (Bad file descriptor) [pid 5895] close(6) = -1 EBADF (Bad file descriptor) [pid 5895] close(7) = -1 EBADF (Bad file descriptor) [pid 5895] close(8) = -1 EBADF (Bad file descriptor) [pid 5895] close(9) = -1 EBADF (Bad file descriptor) [pid 5895] close(10) = -1 EBADF (Bad file descriptor) [pid 5895] close(11) = -1 EBADF (Bad file descriptor) [pid 5895] close(12) = -1 EBADF (Bad file descriptor) [pid 5895] close(13) = -1 EBADF (Bad file descriptor) [pid 5895] close(14) = -1 EBADF (Bad file descriptor) [pid 5895] close(15) = -1 EBADF (Bad file descriptor) [pid 5895] close(16) = -1 EBADF (Bad file descriptor) [pid 5895] close(17) = -1 EBADF (Bad file descriptor) [pid 5895] close(18) = -1 EBADF (Bad file descriptor) [pid 5895] close(19) = -1 EBADF (Bad file descriptor) [pid 5895] close(20) = -1 EBADF (Bad file descriptor) [pid 5895] close(21) = -1 EBADF (Bad file descriptor) [pid 5895] close(22) = -1 EBADF (Bad file descriptor) [pid 5895] close(23) = -1 EBADF (Bad file descriptor) [pid 5895] close(24) = -1 EBADF (Bad file descriptor) [pid 5895] close(25) = -1 EBADF (Bad file descriptor) [pid 5895] close(26) = -1 EBADF (Bad file descriptor) [pid 5895] close(27) = -1 EBADF (Bad file descriptor) [pid 5895] close(28) = -1 EBADF (Bad file descriptor) [pid 5895] close(29) = -1 EBADF (Bad file descriptor) [pid 5895] exit_group(0) = ? [pid 5895] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=53, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./50", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./50/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./50/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./50/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./50/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./50/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./50/file2") = 0 [pid 5836] umount2("./50/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./50/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./50/binderfs") = 0 [pid 5836] umount2("./50/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./50/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./50/cgroup.net") = 0 [pid 5836] umount2("./50/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./50/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./50/cgroup.cpu") = 0 [pid 5836] umount2("./50/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./50/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./50/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./50") = 0 [pid 5836] mkdir("./51", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5898 attached [pid 5898] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 54 [pid 5898] <... set_robust_list resumed>) = 0 [pid 5898] chdir("./51") = 0 [pid 5898] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5898] setpgid(0, 0) = 0 [pid 5898] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5898] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5898] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5898] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5898] write(3, "1000", 4) = 4 [pid 5898] close(3) = 0 [pid 5898] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5898] write(1, "executing program\n", 18executing program ) = 18 [pid 5898] memfd_create("syzkaller", 0) = 3 [pid 5898] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5898] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5898] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5898] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5898] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5898] close(3) = 0 [pid 5898] close(4) = 0 [pid 5898] mkdir("./file2", 0777) = 0 [pid 5898] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5898] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5898] chdir("./file2") = 0 [pid 5898] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5898] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5898] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5898] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5898] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5898] close(3) = 0 [pid 5898] close(4) = 0 [pid 5898] close(5) = -1 EBADF (Bad file descriptor) [pid 5898] close(6) = -1 EBADF (Bad file descriptor) [pid 5898] close(7) = -1 EBADF (Bad file descriptor) [pid 5898] close(8) = -1 EBADF (Bad file descriptor) [pid 5898] close(9) = -1 EBADF (Bad file descriptor) [pid 5898] close(10) = -1 EBADF (Bad file descriptor) [pid 5898] close(11) = -1 EBADF (Bad file descriptor) [pid 5898] close(12) = -1 EBADF (Bad file descriptor) [pid 5898] close(13) = -1 EBADF (Bad file descriptor) [pid 5898] close(14) = -1 EBADF (Bad file descriptor) [pid 5898] close(15) = -1 EBADF (Bad file descriptor) [pid 5898] close(16) = -1 EBADF (Bad file descriptor) [pid 5898] close(17) = -1 EBADF (Bad file descriptor) [pid 5898] close(18) = -1 EBADF (Bad file descriptor) [pid 5898] close(19) = -1 EBADF (Bad file descriptor) [pid 5898] close(20) = -1 EBADF (Bad file descriptor) [pid 5898] close(21) = -1 EBADF (Bad file descriptor) [pid 5898] close(22) = -1 EBADF (Bad file descriptor) [pid 5898] close(23) = -1 EBADF (Bad file descriptor) [pid 5898] close(24) = -1 EBADF (Bad file descriptor) [pid 5898] close(25) = -1 EBADF (Bad file descriptor) [pid 5898] close(26) = -1 EBADF (Bad file descriptor) [pid 5898] close(27) = -1 EBADF (Bad file descriptor) [pid 5898] close(28) = -1 EBADF (Bad file descriptor) [pid 5898] close(29) = -1 EBADF (Bad file descriptor) [pid 5898] exit_group(0) = ? [ 130.425110][ T5898] loop0: detected capacity change from 0 to 128 [pid 5898] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=54, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./51", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./51/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./51/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./51/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./51/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./51/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./51/file2") = 0 [pid 5836] umount2("./51/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./51/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./51/binderfs") = 0 [pid 5836] umount2("./51/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./51/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./51/cgroup.net") = 0 [pid 5836] umount2("./51/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./51/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./51/cgroup.cpu") = 0 [pid 5836] umount2("./51/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./51/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./51/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./51") = 0 [pid 5836] mkdir("./52", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5899 attached [pid 5899] set_robust_list(0x5555632376a0, 24) = 0 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 55 [pid 5899] chdir("./52") = 0 [pid 5899] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5899] setpgid(0, 0) = 0 [pid 5899] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5899] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5899] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5899] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5899] write(3, "1000", 4) = 4 [pid 5899] close(3) = 0 [pid 5899] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5899] write(1, "executing program\n", 18) = 18 [pid 5899] memfd_create("syzkaller", 0) = 3 [pid 5899] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5899] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5899] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5899] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5899] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5899] close(3) = 0 [pid 5899] close(4) = 0 [pid 5899] mkdir("./file2", 0777) = 0 [pid 5899] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5899] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5899] chdir("./file2") = 0 [pid 5899] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 130.628046][ T5899] loop0: detected capacity change from 0 to 128 [pid 5899] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5899] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5899] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5899] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5899] close(3) = 0 [pid 5899] close(4) = 0 [pid 5899] close(5) = -1 EBADF (Bad file descriptor) [pid 5899] close(6) = -1 EBADF (Bad file descriptor) [pid 5899] close(7) = -1 EBADF (Bad file descriptor) [pid 5899] close(8) = -1 EBADF (Bad file descriptor) [pid 5899] close(9) = -1 EBADF (Bad file descriptor) [pid 5899] close(10) = -1 EBADF (Bad file descriptor) [pid 5899] close(11) = -1 EBADF (Bad file descriptor) [pid 5899] close(12) = -1 EBADF (Bad file descriptor) [pid 5899] close(13) = -1 EBADF (Bad file descriptor) [pid 5899] close(14) = -1 EBADF (Bad file descriptor) [pid 5899] close(15) = -1 EBADF (Bad file descriptor) [pid 5899] close(16) = -1 EBADF (Bad file descriptor) [pid 5899] close(17) = -1 EBADF (Bad file descriptor) [pid 5899] close(18) = -1 EBADF (Bad file descriptor) [pid 5899] close(19) = -1 EBADF (Bad file descriptor) [pid 5899] close(20) = -1 EBADF (Bad file descriptor) [pid 5899] close(21) = -1 EBADF (Bad file descriptor) [pid 5899] close(22) = -1 EBADF (Bad file descriptor) [pid 5899] close(23) = -1 EBADF (Bad file descriptor) [pid 5899] close(24) = -1 EBADF (Bad file descriptor) [pid 5899] close(25) = -1 EBADF (Bad file descriptor) [pid 5899] close(26) = -1 EBADF (Bad file descriptor) [pid 5899] close(27) = -1 EBADF (Bad file descriptor) [pid 5899] close(28) = -1 EBADF (Bad file descriptor) [pid 5899] close(29) = -1 EBADF (Bad file descriptor) [pid 5899] exit_group(0) = ? [pid 5899] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=55, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./52", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./52/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./52/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./52/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./52/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./52/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./52/file2") = 0 [pid 5836] umount2("./52/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./52/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./52/binderfs") = 0 [pid 5836] umount2("./52/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./52/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./52/cgroup.net") = 0 [pid 5836] umount2("./52/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./52/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./52/cgroup.cpu") = 0 [pid 5836] umount2("./52/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./52/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./52/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./52") = 0 [pid 5836] mkdir("./53", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5900 attached [pid 5900] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 56 [pid 5900] <... set_robust_list resumed>) = 0 [pid 5900] chdir("./53") = 0 [pid 5900] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5900] setpgid(0, 0) = 0 [pid 5900] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5900] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5900] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5900] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5900] write(3, "1000", 4executing program ) = 4 [pid 5900] close(3) = 0 [pid 5900] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5900] write(1, "executing program\n", 18) = 18 [pid 5900] memfd_create("syzkaller", 0) = 3 [pid 5900] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5900] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5900] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5900] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5900] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5900] close(3) = 0 [pid 5900] close(4) = 0 [pid 5900] mkdir("./file2", 0777) = 0 [pid 5900] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5900] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5900] chdir("./file2") = 0 [pid 5900] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 130.818924][ T5900] loop0: detected capacity change from 0 to 128 [pid 5900] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5900] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5900] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5900] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5900] close(3) = 0 [pid 5900] close(4) = 0 [pid 5900] close(5) = -1 EBADF (Bad file descriptor) [pid 5900] close(6) = -1 EBADF (Bad file descriptor) [pid 5900] close(7) = -1 EBADF (Bad file descriptor) [pid 5900] close(8) = -1 EBADF (Bad file descriptor) [pid 5900] close(9) = -1 EBADF (Bad file descriptor) [pid 5900] close(10) = -1 EBADF (Bad file descriptor) [pid 5900] close(11) = -1 EBADF (Bad file descriptor) [pid 5900] close(12) = -1 EBADF (Bad file descriptor) [pid 5900] close(13) = -1 EBADF (Bad file descriptor) [pid 5900] close(14) = -1 EBADF (Bad file descriptor) [pid 5900] close(15) = -1 EBADF (Bad file descriptor) [pid 5900] close(16) = -1 EBADF (Bad file descriptor) [pid 5900] close(17) = -1 EBADF (Bad file descriptor) [pid 5900] close(18) = -1 EBADF (Bad file descriptor) [pid 5900] close(19) = -1 EBADF (Bad file descriptor) [pid 5900] close(20) = -1 EBADF (Bad file descriptor) [pid 5900] close(21) = -1 EBADF (Bad file descriptor) [pid 5900] close(22) = -1 EBADF (Bad file descriptor) [pid 5900] close(23) = -1 EBADF (Bad file descriptor) [pid 5900] close(24) = -1 EBADF (Bad file descriptor) [pid 5900] close(25) = -1 EBADF (Bad file descriptor) [pid 5900] close(26) = -1 EBADF (Bad file descriptor) [pid 5900] close(27) = -1 EBADF (Bad file descriptor) [pid 5900] close(28) = -1 EBADF (Bad file descriptor) [pid 5900] close(29) = -1 EBADF (Bad file descriptor) [pid 5900] exit_group(0) = ? [pid 5900] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=56, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] umount2("./53", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./53", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./53/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./53/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./53/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./53/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./53/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./53/file2") = 0 [pid 5836] umount2("./53/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./53/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./53/binderfs") = 0 [pid 5836] umount2("./53/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./53/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./53/cgroup.net") = 0 [pid 5836] umount2("./53/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./53/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./53/cgroup.cpu") = 0 [pid 5836] umount2("./53/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./53/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./53/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./53") = 0 [pid 5836] mkdir("./54", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5901 attached [pid 5901] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 57 [pid 5901] <... set_robust_list resumed>) = 0 [pid 5901] chdir("./54") = 0 [pid 5901] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5901] setpgid(0, 0) = 0 [pid 5901] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5901] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5901] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5901] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5901] write(3, "1000", 4) = 4 [pid 5901] close(3) = 0 [pid 5901] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5901] write(1, "executing program\n", 18) = 18 [pid 5901] memfd_create("syzkaller", 0) = 3 [pid 5901] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5901] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5901] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5901] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5901] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5901] close(3) = 0 [pid 5901] close(4) = 0 [pid 5901] mkdir("./file2", 0777) = 0 [pid 5901] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5901] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5901] chdir("./file2") = 0 [pid 5901] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5901] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [ 131.056527][ T5901] loop0: detected capacity change from 0 to 128 [pid 5901] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5901] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5901] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5901] close(3) = 0 [pid 5901] close(4) = 0 [pid 5901] close(5) = -1 EBADF (Bad file descriptor) [pid 5901] close(6) = -1 EBADF (Bad file descriptor) [pid 5901] close(7) = -1 EBADF (Bad file descriptor) [pid 5901] close(8) = -1 EBADF (Bad file descriptor) [pid 5901] close(9) = -1 EBADF (Bad file descriptor) [pid 5901] close(10) = -1 EBADF (Bad file descriptor) [pid 5901] close(11) = -1 EBADF (Bad file descriptor) [pid 5901] close(12) = -1 EBADF (Bad file descriptor) [pid 5901] close(13) = -1 EBADF (Bad file descriptor) [pid 5901] close(14) = -1 EBADF (Bad file descriptor) [pid 5901] close(15) = -1 EBADF (Bad file descriptor) [pid 5901] close(16) = -1 EBADF (Bad file descriptor) [pid 5901] close(17) = -1 EBADF (Bad file descriptor) [pid 5901] close(18) = -1 EBADF (Bad file descriptor) [pid 5901] close(19) = -1 EBADF (Bad file descriptor) [pid 5901] close(20) = -1 EBADF (Bad file descriptor) [pid 5901] close(21) = -1 EBADF (Bad file descriptor) [pid 5901] close(22) = -1 EBADF (Bad file descriptor) [pid 5901] close(23) = -1 EBADF (Bad file descriptor) [pid 5901] close(24) = -1 EBADF (Bad file descriptor) [pid 5901] close(25) = -1 EBADF (Bad file descriptor) [pid 5901] close(26) = -1 EBADF (Bad file descriptor) [pid 5901] close(27) = -1 EBADF (Bad file descriptor) [pid 5901] close(28) = -1 EBADF (Bad file descriptor) [pid 5901] close(29) = -1 EBADF (Bad file descriptor) [pid 5901] exit_group(0) = ? [pid 5901] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=57, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./54", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./54", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./54/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./54/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./54/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./54/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./54/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./54/file2") = 0 [pid 5836] umount2("./54/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./54/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./54/binderfs") = 0 [pid 5836] umount2("./54/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./54/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./54/cgroup.net") = 0 [pid 5836] umount2("./54/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./54/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./54/cgroup.cpu") = 0 [pid 5836] umount2("./54/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./54/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./54/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./54") = 0 [pid 5836] mkdir("./55", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5902 attached , child_tidptr=0x555563237690) = 58 [pid 5902] set_robust_list(0x5555632376a0, 24) = 0 [pid 5902] chdir("./55") = 0 [pid 5902] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5902] setpgid(0, 0) = 0 [pid 5902] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5902] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5902] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5902] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5902] write(3, "1000", 4) = 4 [pid 5902] close(3) = 0 [pid 5902] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5902] write(1, "executing program\n", 18executing program ) = 18 [pid 5902] memfd_create("syzkaller", 0) = 3 [pid 5902] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5902] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5902] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5902] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5902] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5902] close(3) = 0 [pid 5902] close(4) = 0 [pid 5902] mkdir("./file2", 0777) = 0 [pid 5902] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5902] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5902] chdir("./file2") = 0 [pid 5902] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5902] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5902] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5902] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [ 131.635664][ T5902] loop0: detected capacity change from 0 to 128 [pid 5902] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5902] close(3) = 0 [pid 5902] close(4) = 0 [pid 5902] close(5) = -1 EBADF (Bad file descriptor) [pid 5902] close(6) = -1 EBADF (Bad file descriptor) [pid 5902] close(7) = -1 EBADF (Bad file descriptor) [pid 5902] close(8) = -1 EBADF (Bad file descriptor) [pid 5902] close(9) = -1 EBADF (Bad file descriptor) [pid 5902] close(10) = -1 EBADF (Bad file descriptor) [pid 5902] close(11) = -1 EBADF (Bad file descriptor) [pid 5902] close(12) = -1 EBADF (Bad file descriptor) [pid 5902] close(13) = -1 EBADF (Bad file descriptor) [pid 5902] close(14) = -1 EBADF (Bad file descriptor) [pid 5902] close(15) = -1 EBADF (Bad file descriptor) [pid 5902] close(16) = -1 EBADF (Bad file descriptor) [pid 5902] close(17) = -1 EBADF (Bad file descriptor) [pid 5902] close(18) = -1 EBADF (Bad file descriptor) [pid 5902] close(19) = -1 EBADF (Bad file descriptor) [pid 5902] close(20) = -1 EBADF (Bad file descriptor) [pid 5902] close(21) = -1 EBADF (Bad file descriptor) [pid 5902] close(22) = -1 EBADF (Bad file descriptor) [pid 5902] close(23) = -1 EBADF (Bad file descriptor) [pid 5902] close(24) = -1 EBADF (Bad file descriptor) [pid 5902] close(25) = -1 EBADF (Bad file descriptor) [pid 5902] close(26) = -1 EBADF (Bad file descriptor) [pid 5902] close(27) = -1 EBADF (Bad file descriptor) [pid 5902] close(28) = -1 EBADF (Bad file descriptor) [pid 5902] close(29) = -1 EBADF (Bad file descriptor) [pid 5902] exit_group(0) = ? [pid 5902] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=58, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./55", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./55", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./55/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./55/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./55/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./55/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./55/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./55/file2") = 0 [pid 5836] umount2("./55/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./55/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./55/binderfs") = 0 [pid 5836] umount2("./55/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./55/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./55/cgroup.net") = 0 [pid 5836] umount2("./55/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./55/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./55/cgroup.cpu") = 0 [pid 5836] umount2("./55/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./55/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./55/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./55") = 0 [pid 5836] mkdir("./56", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5904 attached [pid 5904] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 59 [pid 5904] <... set_robust_list resumed>) = 0 [pid 5904] chdir("./56") = 0 [pid 5904] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5904] setpgid(0, 0) = 0 [pid 5904] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5904] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5904] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5904] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5904] write(3, "1000", 4) = 4 [pid 5904] close(3) = 0 [pid 5904] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5904] write(1, "executing program\n", 18executing program ) = 18 [pid 5904] memfd_create("syzkaller", 0) = 3 [pid 5904] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5904] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5904] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5904] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5904] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5904] close(3) = 0 [pid 5904] close(4) = 0 [pid 5904] mkdir("./file2", 0777) = 0 [pid 5904] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5904] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5904] chdir("./file2") = 0 [pid 5904] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5904] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5904] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5904] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [ 131.873296][ T5904] loop0: detected capacity change from 0 to 128 [pid 5904] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5904] close(3) = 0 [pid 5904] close(4) = 0 [pid 5904] close(5) = -1 EBADF (Bad file descriptor) [pid 5904] close(6) = -1 EBADF (Bad file descriptor) [pid 5904] close(7) = -1 EBADF (Bad file descriptor) [pid 5904] close(8) = -1 EBADF (Bad file descriptor) [pid 5904] close(9) = -1 EBADF (Bad file descriptor) [pid 5904] close(10) = -1 EBADF (Bad file descriptor) [pid 5904] close(11) = -1 EBADF (Bad file descriptor) [pid 5904] close(12) = -1 EBADF (Bad file descriptor) [pid 5904] close(13) = -1 EBADF (Bad file descriptor) [pid 5904] close(14) = -1 EBADF (Bad file descriptor) [pid 5904] close(15) = -1 EBADF (Bad file descriptor) [pid 5904] close(16) = -1 EBADF (Bad file descriptor) [pid 5904] close(17) = -1 EBADF (Bad file descriptor) [pid 5904] close(18) = -1 EBADF (Bad file descriptor) [pid 5904] close(19) = -1 EBADF (Bad file descriptor) [pid 5904] close(20) = -1 EBADF (Bad file descriptor) [pid 5904] close(21) = -1 EBADF (Bad file descriptor) [pid 5904] close(22) = -1 EBADF (Bad file descriptor) [pid 5904] close(23) = -1 EBADF (Bad file descriptor) [pid 5904] close(24) = -1 EBADF (Bad file descriptor) [pid 5904] close(25) = -1 EBADF (Bad file descriptor) [pid 5904] close(26) = -1 EBADF (Bad file descriptor) [pid 5904] close(27) = -1 EBADF (Bad file descriptor) [pid 5904] close(28) = -1 EBADF (Bad file descriptor) [pid 5904] close(29) = -1 EBADF (Bad file descriptor) [pid 5904] exit_group(0) = ? [pid 5904] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=59, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] umount2("./56", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./56", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./56/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./56/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./56/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./56/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./56/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./56/file2") = 0 [pid 5836] umount2("./56/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./56/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./56/binderfs") = 0 [pid 5836] umount2("./56/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./56/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./56/cgroup.net") = 0 [pid 5836] umount2("./56/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./56/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./56/cgroup.cpu") = 0 [pid 5836] umount2("./56/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./56/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./56/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./56") = 0 [pid 5836] mkdir("./57", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5905 attached [pid 5905] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 60 [pid 5905] <... set_robust_list resumed>) = 0 [pid 5905] chdir("./57") = 0 [pid 5905] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5905] setpgid(0, 0) = 0 [pid 5905] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5905] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5905] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5905] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5905] write(3, "1000", 4) = 4 [pid 5905] close(3) = 0 [pid 5905] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5905] write(1, "executing program\n", 18) = 18 [pid 5905] memfd_create("syzkaller", 0) = 3 [pid 5905] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5905] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5905] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5905] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5905] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5905] close(3) = 0 [pid 5905] close(4) = 0 [pid 5905] mkdir("./file2", 0777) = 0 [pid 5905] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5905] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5905] chdir("./file2") = 0 [pid 5905] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5905] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5905] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [ 132.418339][ T5905] loop0: detected capacity change from 0 to 128 [pid 5905] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5905] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5905] close(3) = 0 [pid 5905] close(4) = 0 [pid 5905] close(5) = -1 EBADF (Bad file descriptor) [pid 5905] close(6) = -1 EBADF (Bad file descriptor) [pid 5905] close(7) = -1 EBADF (Bad file descriptor) [pid 5905] close(8) = -1 EBADF (Bad file descriptor) [pid 5905] close(9) = -1 EBADF (Bad file descriptor) [pid 5905] close(10) = -1 EBADF (Bad file descriptor) [pid 5905] close(11) = -1 EBADF (Bad file descriptor) [pid 5905] close(12) = -1 EBADF (Bad file descriptor) [pid 5905] close(13) = -1 EBADF (Bad file descriptor) [pid 5905] close(14) = -1 EBADF (Bad file descriptor) [pid 5905] close(15) = -1 EBADF (Bad file descriptor) [pid 5905] close(16) = -1 EBADF (Bad file descriptor) [pid 5905] close(17) = -1 EBADF (Bad file descriptor) [pid 5905] close(18) = -1 EBADF (Bad file descriptor) [pid 5905] close(19) = -1 EBADF (Bad file descriptor) [pid 5905] close(20) = -1 EBADF (Bad file descriptor) [pid 5905] close(21) = -1 EBADF (Bad file descriptor) [pid 5905] close(22) = -1 EBADF (Bad file descriptor) [pid 5905] close(23) = -1 EBADF (Bad file descriptor) [pid 5905] close(24) = -1 EBADF (Bad file descriptor) [pid 5905] close(25) = -1 EBADF (Bad file descriptor) [pid 5905] close(26) = -1 EBADF (Bad file descriptor) [pid 5905] close(27) = -1 EBADF (Bad file descriptor) [pid 5905] close(28) = -1 EBADF (Bad file descriptor) [pid 5905] close(29) = -1 EBADF (Bad file descriptor) [pid 5905] exit_group(0) = ? [pid 5905] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=60, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] umount2("./57", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./57", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./57/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./57/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./57/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./57/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./57/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./57/file2") = 0 [pid 5836] umount2("./57/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./57/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./57/binderfs") = 0 [pid 5836] umount2("./57/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./57/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./57/cgroup.net") = 0 [pid 5836] umount2("./57/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./57/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./57/cgroup.cpu") = 0 [pid 5836] umount2("./57/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./57/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./57/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./57") = 0 [pid 5836] mkdir("./58", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5906 attached [pid 5906] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 61 [pid 5906] <... set_robust_list resumed>) = 0 [pid 5906] chdir("./58") = 0 [pid 5906] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5906] setpgid(0, 0) = 0 [pid 5906] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5906] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5906] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5906] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5906] write(3, "1000", 4) = 4 [pid 5906] close(3) = 0 [pid 5906] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5906] write(1, "executing program\n", 18executing program ) = 18 [pid 5906] memfd_create("syzkaller", 0) = 3 [pid 5906] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5906] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5906] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5906] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5906] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5906] close(3) = 0 [pid 5906] close(4) = 0 [pid 5906] mkdir("./file2", 0777) = 0 [pid 5906] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5906] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5906] chdir("./file2") = 0 [pid 5906] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 133.024445][ T5906] loop0: detected capacity change from 0 to 128 [pid 5906] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5906] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5906] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5906] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5906] close(3) = 0 [pid 5906] close(4) = 0 [pid 5906] close(5) = -1 EBADF (Bad file descriptor) [pid 5906] close(6) = -1 EBADF (Bad file descriptor) [pid 5906] close(7) = -1 EBADF (Bad file descriptor) [pid 5906] close(8) = -1 EBADF (Bad file descriptor) [pid 5906] close(9) = -1 EBADF (Bad file descriptor) [pid 5906] close(10) = -1 EBADF (Bad file descriptor) [pid 5906] close(11) = -1 EBADF (Bad file descriptor) [pid 5906] close(12) = -1 EBADF (Bad file descriptor) [pid 5906] close(13) = -1 EBADF (Bad file descriptor) [pid 5906] close(14) = -1 EBADF (Bad file descriptor) [pid 5906] close(15) = -1 EBADF (Bad file descriptor) [pid 5906] close(16) = -1 EBADF (Bad file descriptor) [pid 5906] close(17) = -1 EBADF (Bad file descriptor) [pid 5906] close(18) = -1 EBADF (Bad file descriptor) [pid 5906] close(19) = -1 EBADF (Bad file descriptor) [pid 5906] close(20) = -1 EBADF (Bad file descriptor) [pid 5906] close(21) = -1 EBADF (Bad file descriptor) [pid 5906] close(22) = -1 EBADF (Bad file descriptor) [pid 5906] close(23) = -1 EBADF (Bad file descriptor) [pid 5906] close(24) = -1 EBADF (Bad file descriptor) [pid 5906] close(25) = -1 EBADF (Bad file descriptor) [pid 5906] close(26) = -1 EBADF (Bad file descriptor) [pid 5906] close(27) = -1 EBADF (Bad file descriptor) [pid 5906] close(28) = -1 EBADF (Bad file descriptor) [pid 5906] close(29) = -1 EBADF (Bad file descriptor) [pid 5906] exit_group(0) = ? [pid 5906] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=61, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] umount2("./58", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./58/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./58/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./58/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./58/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./58/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./58/file2") = 0 [pid 5836] umount2("./58/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./58/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./58/binderfs") = 0 [pid 5836] umount2("./58/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./58/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./58/cgroup.net") = 0 [pid 5836] umount2("./58/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./58/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./58/cgroup.cpu") = 0 [pid 5836] umount2("./58/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./58/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./58/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./58") = 0 [pid 5836] mkdir("./59", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5907 attached [pid 5907] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 62 [pid 5907] <... set_robust_list resumed>) = 0 [pid 5907] chdir("./59") = 0 [pid 5907] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5907] setpgid(0, 0) = 0 [pid 5907] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5907] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5907] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5907] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5907] write(3, "1000", 4) = 4 [pid 5907] close(3) = 0 [pid 5907] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5907] write(1, "executing program\n", 18) = 18 [pid 5907] memfd_create("syzkaller", 0) = 3 [pid 5907] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5907] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5907] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5907] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5907] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5907] close(3) = 0 [pid 5907] close(4) = 0 [pid 5907] mkdir("./file2", 0777) = 0 [pid 5907] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5907] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5907] chdir("./file2") = 0 [pid 5907] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5907] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5907] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5907] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5907] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5907] close(3) = 0 [pid 5907] close(4) = 0 [pid 5907] close(5) = -1 EBADF (Bad file descriptor) [pid 5907] close(6) = -1 EBADF (Bad file descriptor) [pid 5907] close(7) = -1 EBADF (Bad file descriptor) [pid 5907] close(8) = -1 EBADF (Bad file descriptor) [pid 5907] close(9) = -1 EBADF (Bad file descriptor) [pid 5907] close(10) = -1 EBADF (Bad file descriptor) [pid 5907] close(11) = -1 EBADF (Bad file descriptor) [pid 5907] close(12) = -1 EBADF (Bad file descriptor) [pid 5907] close(13) = -1 EBADF (Bad file descriptor) [pid 5907] close(14) = -1 EBADF (Bad file descriptor) [pid 5907] close(15) = -1 EBADF (Bad file descriptor) [pid 5907] close(16) = -1 EBADF (Bad file descriptor) [pid 5907] close(17) = -1 EBADF (Bad file descriptor) [pid 5907] close(18) = -1 EBADF (Bad file descriptor) [pid 5907] close(19) = -1 EBADF (Bad file descriptor) [pid 5907] close(20) = -1 EBADF (Bad file descriptor) [pid 5907] close(21) = -1 EBADF (Bad file descriptor) [pid 5907] close(22) = -1 EBADF (Bad file descriptor) [pid 5907] close(23) = -1 EBADF (Bad file descriptor) [pid 5907] close(24) = -1 EBADF (Bad file descriptor) [pid 5907] close(25) = -1 EBADF (Bad file descriptor) [pid 5907] close(26) = -1 EBADF (Bad file descriptor) [pid 5907] close(27) = -1 EBADF (Bad file descriptor) [pid 5907] close(28) = -1 EBADF (Bad file descriptor) [pid 5907] close(29) = -1 EBADF (Bad file descriptor) [pid 5907] exit_group(0) = ? [ 133.504353][ T5907] loop0: detected capacity change from 0 to 128 [pid 5907] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=62, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./59", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./59/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./59/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./59/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./59/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./59/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./59/file2") = 0 [pid 5836] umount2("./59/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./59/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./59/binderfs") = 0 [pid 5836] umount2("./59/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./59/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./59/cgroup.net") = 0 [pid 5836] umount2("./59/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./59/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./59/cgroup.cpu") = 0 [pid 5836] umount2("./59/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./59/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./59/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./59") = 0 [pid 5836] mkdir("./60", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5908 attached [pid 5908] set_robust_list(0x5555632376a0, 24) = 0 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 63 [pid 5908] chdir("./60") = 0 [pid 5908] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5908] setpgid(0, 0) = 0 [pid 5908] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5908] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5908] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5908] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5908] write(3, "1000", 4) = 4 [pid 5908] close(3) = 0 [pid 5908] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5908] write(1, "executing program\n", 18executing program ) = 18 [pid 5908] memfd_create("syzkaller", 0) = 3 [pid 5908] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5908] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5908] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5908] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5908] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5908] close(3) = 0 [pid 5908] close(4) = 0 [pid 5908] mkdir("./file2", 0777) = 0 [pid 5908] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5908] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5908] chdir("./file2") = 0 [pid 5908] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5908] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5908] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5908] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5908] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5908] close(3) = 0 [pid 5908] close(4) = 0 [ 134.046293][ T5908] loop0: detected capacity change from 0 to 128 [pid 5908] close(5) = -1 EBADF (Bad file descriptor) [pid 5908] close(6) = -1 EBADF (Bad file descriptor) [pid 5908] close(7) = -1 EBADF (Bad file descriptor) [pid 5908] close(8) = -1 EBADF (Bad file descriptor) [pid 5908] close(9) = -1 EBADF (Bad file descriptor) [pid 5908] close(10) = -1 EBADF (Bad file descriptor) [pid 5908] close(11) = -1 EBADF (Bad file descriptor) [pid 5908] close(12) = -1 EBADF (Bad file descriptor) [pid 5908] close(13) = -1 EBADF (Bad file descriptor) [pid 5908] close(14) = -1 EBADF (Bad file descriptor) [pid 5908] close(15) = -1 EBADF (Bad file descriptor) [pid 5908] close(16) = -1 EBADF (Bad file descriptor) [pid 5908] close(17) = -1 EBADF (Bad file descriptor) [pid 5908] close(18) = -1 EBADF (Bad file descriptor) [pid 5908] close(19) = -1 EBADF (Bad file descriptor) [pid 5908] close(20) = -1 EBADF (Bad file descriptor) [pid 5908] close(21) = -1 EBADF (Bad file descriptor) [pid 5908] close(22) = -1 EBADF (Bad file descriptor) [pid 5908] close(23) = -1 EBADF (Bad file descriptor) [pid 5908] close(24) = -1 EBADF (Bad file descriptor) [pid 5908] close(25) = -1 EBADF (Bad file descriptor) [pid 5908] close(26) = -1 EBADF (Bad file descriptor) [pid 5908] close(27) = -1 EBADF (Bad file descriptor) [pid 5908] close(28) = -1 EBADF (Bad file descriptor) [pid 5908] close(29) = -1 EBADF (Bad file descriptor) [pid 5908] exit_group(0) = ? [pid 5908] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=63, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5836] umount2("./60", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./60/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./60/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./60/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./60/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./60/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./60/file2") = 0 [pid 5836] umount2("./60/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./60/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./60/binderfs") = 0 [pid 5836] umount2("./60/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./60/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./60/cgroup.net") = 0 [pid 5836] umount2("./60/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./60/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./60/cgroup.cpu") = 0 [pid 5836] umount2("./60/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./60/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./60/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./60") = 0 [pid 5836] mkdir("./61", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5909 attached [pid 5909] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 64 [pid 5909] <... set_robust_list resumed>) = 0 [pid 5909] chdir("./61") = 0 [pid 5909] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5909] setpgid(0, 0) = 0 [pid 5909] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5909] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5909] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5909] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5909] write(3, "1000", 4) = 4 [pid 5909] close(3) = 0 [pid 5909] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5909] write(1, "executing program\n", 18executing program ) = 18 [pid 5909] memfd_create("syzkaller", 0) = 3 [pid 5909] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5909] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5909] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5909] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5909] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5909] close(3) = 0 [pid 5909] close(4) = 0 [pid 5909] mkdir("./file2", 0777) = 0 [pid 5909] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5909] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5909] chdir("./file2") = 0 [pid 5909] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5909] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5909] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5909] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [ 134.675566][ T5909] loop0: detected capacity change from 0 to 128 [pid 5909] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5909] close(3) = 0 [pid 5909] close(4) = 0 [pid 5909] close(5) = -1 EBADF (Bad file descriptor) [pid 5909] close(6) = -1 EBADF (Bad file descriptor) [pid 5909] close(7) = -1 EBADF (Bad file descriptor) [pid 5909] close(8) = -1 EBADF (Bad file descriptor) [pid 5909] close(9) = -1 EBADF (Bad file descriptor) [pid 5909] close(10) = -1 EBADF (Bad file descriptor) [pid 5909] close(11) = -1 EBADF (Bad file descriptor) [pid 5909] close(12) = -1 EBADF (Bad file descriptor) [pid 5909] close(13) = -1 EBADF (Bad file descriptor) [pid 5909] close(14) = -1 EBADF (Bad file descriptor) [pid 5909] close(15) = -1 EBADF (Bad file descriptor) [pid 5909] close(16) = -1 EBADF (Bad file descriptor) [pid 5909] close(17) = -1 EBADF (Bad file descriptor) [pid 5909] close(18) = -1 EBADF (Bad file descriptor) [pid 5909] close(19) = -1 EBADF (Bad file descriptor) [pid 5909] close(20) = -1 EBADF (Bad file descriptor) [pid 5909] close(21) = -1 EBADF (Bad file descriptor) [pid 5909] close(22) = -1 EBADF (Bad file descriptor) [pid 5909] close(23) = -1 EBADF (Bad file descriptor) [pid 5909] close(24) = -1 EBADF (Bad file descriptor) [pid 5909] close(25) = -1 EBADF (Bad file descriptor) [pid 5909] close(26) = -1 EBADF (Bad file descriptor) [pid 5909] close(27) = -1 EBADF (Bad file descriptor) [pid 5909] close(28) = -1 EBADF (Bad file descriptor) [pid 5909] close(29) = -1 EBADF (Bad file descriptor) [pid 5909] exit_group(0) = ? [pid 5909] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=64, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5836] umount2("./61", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./61/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./61/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./61/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./61/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./61/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./61/file2") = 0 [pid 5836] umount2("./61/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./61/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./61/binderfs") = 0 [pid 5836] umount2("./61/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./61/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./61/cgroup.net") = 0 [pid 5836] umount2("./61/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./61/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./61/cgroup.cpu") = 0 [pid 5836] umount2("./61/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./61/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./61/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./61") = 0 [pid 5836] mkdir("./62", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5910 attached [pid 5910] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 65 [pid 5910] <... set_robust_list resumed>) = 0 [pid 5910] chdir("./62") = 0 [pid 5910] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5910] setpgid(0, 0) = 0 [pid 5910] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5910] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5910] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5910] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5910] write(3, "1000", 4) = 4 [pid 5910] close(3) = 0 [pid 5910] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5910] write(1, "executing program\n", 18) = 18 [pid 5910] memfd_create("syzkaller", 0) = 3 [pid 5910] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5910] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5910] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5910] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5910] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5910] close(3) = 0 [pid 5910] close(4) = 0 [pid 5910] mkdir("./file2", 0777) = 0 [pid 5910] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5910] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5910] chdir("./file2") = 0 [pid 5910] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5910] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5910] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5910] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5910] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5910] close(3) = 0 [pid 5910] close(4) = 0 [pid 5910] close(5) = -1 EBADF (Bad file descriptor) [pid 5910] close(6) = -1 EBADF (Bad file descriptor) [pid 5910] close(7) = -1 EBADF (Bad file descriptor) [pid 5910] close(8) = -1 EBADF (Bad file descriptor) [pid 5910] close(9) = -1 EBADF (Bad file descriptor) [pid 5910] close(10) = -1 EBADF (Bad file descriptor) [pid 5910] close(11) = -1 EBADF (Bad file descriptor) [pid 5910] close(12) = -1 EBADF (Bad file descriptor) [pid 5910] close(13) = -1 EBADF (Bad file descriptor) [pid 5910] close(14) = -1 EBADF (Bad file descriptor) [pid 5910] close(15) = -1 EBADF (Bad file descriptor) [pid 5910] close(16) = -1 EBADF (Bad file descriptor) [pid 5910] close(17) = -1 EBADF (Bad file descriptor) [pid 5910] close(18) = -1 EBADF (Bad file descriptor) [pid 5910] close(19) = -1 EBADF (Bad file descriptor) [pid 5910] close(20) = -1 EBADF (Bad file descriptor) [pid 5910] close(21) = -1 EBADF (Bad file descriptor) [pid 5910] close(22) = -1 EBADF (Bad file descriptor) [pid 5910] close(23) = -1 EBADF (Bad file descriptor) [pid 5910] close(24) = -1 EBADF (Bad file descriptor) [pid 5910] close(25) = -1 EBADF (Bad file descriptor) [pid 5910] close(26) = -1 EBADF (Bad file descriptor) [pid 5910] close(27) = -1 EBADF (Bad file descriptor) [pid 5910] close(28) = -1 EBADF (Bad file descriptor) [pid 5910] close(29) = -1 EBADF (Bad file descriptor) [pid 5910] exit_group(0) = ? [pid 5910] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=65, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./62", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [ 134.866020][ T5910] loop0: detected capacity change from 0 to 128 [pid 5836] umount2("./62/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./62/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./62/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./62/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./62/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./62/file2") = 0 [pid 5836] umount2("./62/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./62/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./62/binderfs") = 0 [pid 5836] umount2("./62/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./62/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./62/cgroup.net") = 0 [pid 5836] umount2("./62/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./62/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./62/cgroup.cpu") = 0 [pid 5836] umount2("./62/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./62/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./62/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./62") = 0 [pid 5836] mkdir("./63", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5911 attached [pid 5911] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 66 [pid 5911] <... set_robust_list resumed>) = 0 [pid 5911] chdir("./63") = 0 [pid 5911] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5911] setpgid(0, 0) = 0 [pid 5911] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5911] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5911] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5911] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5911] write(3, "1000", 4) = 4 [pid 5911] close(3) = 0 [pid 5911] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5911] write(1, "executing program\n", 18executing program ) = 18 [pid 5911] memfd_create("syzkaller", 0) = 3 [pid 5911] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5911] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5911] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5911] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5911] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5911] close(3) = 0 [pid 5911] close(4) = 0 [pid 5911] mkdir("./file2", 0777) = 0 [pid 5911] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5911] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5911] chdir("./file2") = 0 [pid 5911] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5911] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5911] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5911] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5911] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5911] close(3) = 0 [pid 5911] close(4) = 0 [pid 5911] close(5) = -1 EBADF (Bad file descriptor) [pid 5911] close(6) = -1 EBADF (Bad file descriptor) [pid 5911] close(7) = -1 EBADF (Bad file descriptor) [pid 5911] close(8) = -1 EBADF (Bad file descriptor) [pid 5911] close(9) = -1 EBADF (Bad file descriptor) [pid 5911] close(10) = -1 EBADF (Bad file descriptor) [pid 5911] close(11) = -1 EBADF (Bad file descriptor) [pid 5911] close(12) = -1 EBADF (Bad file descriptor) [pid 5911] close(13) = -1 EBADF (Bad file descriptor) [pid 5911] close(14) = -1 EBADF (Bad file descriptor) [pid 5911] close(15) = -1 EBADF (Bad file descriptor) [pid 5911] close(16) = -1 EBADF (Bad file descriptor) [pid 5911] close(17) = -1 EBADF (Bad file descriptor) [pid 5911] close(18) = -1 EBADF (Bad file descriptor) [pid 5911] close(19) = -1 EBADF (Bad file descriptor) [pid 5911] close(20) = -1 EBADF (Bad file descriptor) [pid 5911] close(21) = -1 EBADF (Bad file descriptor) [pid 5911] close(22) = -1 EBADF (Bad file descriptor) [pid 5911] close(23) = -1 EBADF (Bad file descriptor) [pid 5911] close(24) = -1 EBADF (Bad file descriptor) [pid 5911] close(25) = -1 EBADF (Bad file descriptor) [pid 5911] close(26) = -1 EBADF (Bad file descriptor) [pid 5911] close(27) = -1 EBADF (Bad file descriptor) [pid 5911] close(28) = -1 EBADF (Bad file descriptor) [pid 5911] close(29) = -1 EBADF (Bad file descriptor) [pid 5911] exit_group(0) = ? [pid 5911] +++ exited with 0 +++ [ 135.226288][ T5911] loop0: detected capacity change from 0 to 128 [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=66, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./63", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./63/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./63/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./63/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./63/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./63/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./63/file2") = 0 [pid 5836] umount2("./63/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./63/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./63/binderfs") = 0 [pid 5836] umount2("./63/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./63/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./63/cgroup.net") = 0 [pid 5836] umount2("./63/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./63/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./63/cgroup.cpu") = 0 [pid 5836] umount2("./63/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./63/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./63/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./63") = 0 [pid 5836] mkdir("./64", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5912 attached [pid 5912] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 67 [pid 5912] <... set_robust_list resumed>) = 0 [pid 5912] chdir("./64") = 0 [pid 5912] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5912] setpgid(0, 0) = 0 [pid 5912] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5912] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5912] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5912] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5912] write(3, "1000", 4) = 4 [pid 5912] close(3) = 0 [pid 5912] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5912] write(1, "executing program\n", 18) = 18 [pid 5912] memfd_create("syzkaller", 0) = 3 [pid 5912] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5912] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5912] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5912] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5912] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5912] close(3) = 0 [pid 5912] close(4) = 0 [pid 5912] mkdir("./file2", 0777) = 0 [pid 5912] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5912] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [ 135.741284][ T5912] loop0: detected capacity change from 0 to 128 [pid 5912] chdir("./file2") = 0 [pid 5912] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5912] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5912] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5912] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5912] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5912] close(3) = 0 [pid 5912] close(4) = 0 [pid 5912] close(5) = -1 EBADF (Bad file descriptor) [pid 5912] close(6) = -1 EBADF (Bad file descriptor) [pid 5912] close(7) = -1 EBADF (Bad file descriptor) [pid 5912] close(8) = -1 EBADF (Bad file descriptor) [pid 5912] close(9) = -1 EBADF (Bad file descriptor) [pid 5912] close(10) = -1 EBADF (Bad file descriptor) [pid 5912] close(11) = -1 EBADF (Bad file descriptor) [pid 5912] close(12) = -1 EBADF (Bad file descriptor) [pid 5912] close(13) = -1 EBADF (Bad file descriptor) [pid 5912] close(14) = -1 EBADF (Bad file descriptor) [pid 5912] close(15) = -1 EBADF (Bad file descriptor) [pid 5912] close(16) = -1 EBADF (Bad file descriptor) [pid 5912] close(17) = -1 EBADF (Bad file descriptor) [pid 5912] close(18) = -1 EBADF (Bad file descriptor) [pid 5912] close(19) = -1 EBADF (Bad file descriptor) [pid 5912] close(20) = -1 EBADF (Bad file descriptor) [pid 5912] close(21) = -1 EBADF (Bad file descriptor) [pid 5912] close(22) = -1 EBADF (Bad file descriptor) [pid 5912] close(23) = -1 EBADF (Bad file descriptor) [pid 5912] close(24) = -1 EBADF (Bad file descriptor) [pid 5912] close(25) = -1 EBADF (Bad file descriptor) [pid 5912] close(26) = -1 EBADF (Bad file descriptor) [pid 5912] close(27) = -1 EBADF (Bad file descriptor) [pid 5912] close(28) = -1 EBADF (Bad file descriptor) [pid 5912] close(29) = -1 EBADF (Bad file descriptor) [pid 5912] exit_group(0) = ? [pid 5912] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=67, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./64", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./64/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./64/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./64/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./64/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./64/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./64/file2") = 0 [pid 5836] umount2("./64/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./64/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./64/binderfs") = 0 [pid 5836] umount2("./64/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./64/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./64/cgroup.net") = 0 [pid 5836] umount2("./64/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./64/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./64/cgroup.cpu") = 0 [pid 5836] umount2("./64/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./64/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./64/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./64") = 0 [pid 5836] mkdir("./65", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5913 attached [pid 5913] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 68 [pid 5913] <... set_robust_list resumed>) = 0 [pid 5913] chdir("./65") = 0 [pid 5913] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5913] setpgid(0, 0) = 0 [pid 5913] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5913] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5913] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5913] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5913] write(3, "1000", 4) = 4 [pid 5913] close(3) = 0 [pid 5913] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5913] write(1, "executing program\n", 18) = 18 [pid 5913] memfd_create("syzkaller", 0) = 3 [pid 5913] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5913] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5913] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5913] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5913] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5913] close(3) = 0 [pid 5913] close(4) = 0 [pid 5913] mkdir("./file2", 0777) = 0 [pid 5913] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5913] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5913] chdir("./file2") = 0 [pid 5913] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5913] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5913] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5913] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5913] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5913] close(3) = 0 [pid 5913] close(4) = 0 [pid 5913] close(5) = -1 EBADF (Bad file descriptor) [pid 5913] close(6) = -1 EBADF (Bad file descriptor) [pid 5913] close(7) = -1 EBADF (Bad file descriptor) [pid 5913] close(8) = -1 EBADF (Bad file descriptor) [pid 5913] close(9) = -1 EBADF (Bad file descriptor) [pid 5913] close(10) = -1 EBADF (Bad file descriptor) [pid 5913] close(11) = -1 EBADF (Bad file descriptor) [pid 5913] close(12) = -1 EBADF (Bad file descriptor) [pid 5913] close(13) = -1 EBADF (Bad file descriptor) [pid 5913] close(14) = -1 EBADF (Bad file descriptor) [pid 5913] close(15) = -1 EBADF (Bad file descriptor) [pid 5913] close(16) = -1 EBADF (Bad file descriptor) [pid 5913] close(17) = -1 EBADF (Bad file descriptor) [pid 5913] close(18) = -1 EBADF (Bad file descriptor) [pid 5913] close(19) = -1 EBADF (Bad file descriptor) [pid 5913] close(20) = -1 EBADF (Bad file descriptor) [pid 5913] close(21) = -1 EBADF (Bad file descriptor) [pid 5913] close(22) = -1 EBADF (Bad file descriptor) [pid 5913] close(23) = -1 EBADF (Bad file descriptor) [pid 5913] close(24) = -1 EBADF (Bad file descriptor) [pid 5913] close(25) = -1 EBADF (Bad file descriptor) [pid 5913] close(26) = -1 EBADF (Bad file descriptor) [pid 5913] close(27) = -1 EBADF (Bad file descriptor) [pid 5913] close(28) = -1 EBADF (Bad file descriptor) [pid 5913] close(29) = -1 EBADF (Bad file descriptor) [ 136.344119][ T5913] loop0: detected capacity change from 0 to 128 [pid 5913] exit_group(0) = ? [pid 5913] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=68, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./65", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./65/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./65/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./65/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./65/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./65/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./65/file2") = 0 [pid 5836] umount2("./65/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./65/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./65/binderfs") = 0 [pid 5836] umount2("./65/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./65/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./65/cgroup.net") = 0 [pid 5836] umount2("./65/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./65/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./65/cgroup.cpu") = 0 [pid 5836] umount2("./65/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./65/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./65/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./65") = 0 [pid 5836] mkdir("./66", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5914 attached [pid 5914] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 69 [pid 5914] <... set_robust_list resumed>) = 0 [pid 5914] chdir("./66") = 0 [pid 5914] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5914] setpgid(0, 0) = 0 [pid 5914] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5914] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5914] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5914] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5914] write(3, "1000", 4) = 4 [pid 5914] close(3) = 0 [pid 5914] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5914] write(1, "executing program\n", 18) = 18 [pid 5914] memfd_create("syzkaller", 0) = 3 [pid 5914] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5914] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5914] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5914] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5914] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5914] close(3) = 0 [pid 5914] close(4) = 0 [pid 5914] mkdir("./file2", 0777) = 0 [pid 5914] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5914] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5914] chdir("./file2") = 0 [pid 5914] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5914] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5914] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5914] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [ 136.807563][ T5914] loop0: detected capacity change from 0 to 128 [pid 5914] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5914] close(3) = 0 [pid 5914] close(4) = 0 [pid 5914] close(5) = -1 EBADF (Bad file descriptor) [pid 5914] close(6) = -1 EBADF (Bad file descriptor) [pid 5914] close(7) = -1 EBADF (Bad file descriptor) [pid 5914] close(8) = -1 EBADF (Bad file descriptor) [pid 5914] close(9) = -1 EBADF (Bad file descriptor) [pid 5914] close(10) = -1 EBADF (Bad file descriptor) [pid 5914] close(11) = -1 EBADF (Bad file descriptor) [pid 5914] close(12) = -1 EBADF (Bad file descriptor) [pid 5914] close(13) = -1 EBADF (Bad file descriptor) [pid 5914] close(14) = -1 EBADF (Bad file descriptor) [pid 5914] close(15) = -1 EBADF (Bad file descriptor) [pid 5914] close(16) = -1 EBADF (Bad file descriptor) [pid 5914] close(17) = -1 EBADF (Bad file descriptor) [pid 5914] close(18) = -1 EBADF (Bad file descriptor) [pid 5914] close(19) = -1 EBADF (Bad file descriptor) [pid 5914] close(20) = -1 EBADF (Bad file descriptor) [pid 5914] close(21) = -1 EBADF (Bad file descriptor) [pid 5914] close(22) = -1 EBADF (Bad file descriptor) [pid 5914] close(23) = -1 EBADF (Bad file descriptor) [pid 5914] close(24) = -1 EBADF (Bad file descriptor) [pid 5914] close(25) = -1 EBADF (Bad file descriptor) [pid 5914] close(26) = -1 EBADF (Bad file descriptor) [pid 5914] close(27) = -1 EBADF (Bad file descriptor) [pid 5914] close(28) = -1 EBADF (Bad file descriptor) [pid 5914] close(29) = -1 EBADF (Bad file descriptor) [pid 5914] exit_group(0) = ? [pid 5914] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=69, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./66", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./66/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./66/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./66/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./66/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./66/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./66/file2") = 0 [pid 5836] umount2("./66/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./66/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./66/binderfs") = 0 [pid 5836] umount2("./66/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./66/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./66/cgroup.net") = 0 [pid 5836] umount2("./66/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./66/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./66/cgroup.cpu") = 0 [pid 5836] umount2("./66/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./66/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./66/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./66") = 0 [pid 5836] mkdir("./67", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5915 attached [pid 5915] set_robust_list(0x5555632376a0, 24) = 0 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 70 [pid 5915] chdir("./67") = 0 [pid 5915] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5915] setpgid(0, 0) = 0 [pid 5915] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5915] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5915] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5915] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5915] write(3, "1000", 4) = 4 [pid 5915] close(3) = 0 [pid 5915] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5915] write(1, "executing program\n", 18executing program ) = 18 [pid 5915] memfd_create("syzkaller", 0) = 3 [pid 5915] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5915] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5915] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5915] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5915] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5915] close(3) = 0 [pid 5915] close(4) = 0 [pid 5915] mkdir("./file2", 0777) = 0 [pid 5915] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5915] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5915] chdir("./file2") = 0 [pid 5915] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5915] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5915] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5915] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5915] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5915] close(3) = 0 [pid 5915] close(4) = 0 [pid 5915] close(5) = -1 EBADF (Bad file descriptor) [pid 5915] close(6) = -1 EBADF (Bad file descriptor) [pid 5915] close(7) = -1 EBADF (Bad file descriptor) [pid 5915] close(8) = -1 EBADF (Bad file descriptor) [pid 5915] close(9) = -1 EBADF (Bad file descriptor) [pid 5915] close(10) = -1 EBADF (Bad file descriptor) [pid 5915] close(11) = -1 EBADF (Bad file descriptor) [pid 5915] close(12) = -1 EBADF (Bad file descriptor) [pid 5915] close(13) = -1 EBADF (Bad file descriptor) [pid 5915] close(14) = -1 EBADF (Bad file descriptor) [pid 5915] close(15) = -1 EBADF (Bad file descriptor) [pid 5915] close(16) = -1 EBADF (Bad file descriptor) [pid 5915] close(17) = -1 EBADF (Bad file descriptor) [pid 5915] close(18) = -1 EBADF (Bad file descriptor) [pid 5915] close(19) = -1 EBADF (Bad file descriptor) [pid 5915] close(20) = -1 EBADF (Bad file descriptor) [pid 5915] close(21) = -1 EBADF (Bad file descriptor) [pid 5915] close(22) = -1 EBADF (Bad file descriptor) [pid 5915] close(23) = -1 EBADF (Bad file descriptor) [pid 5915] close(24) = -1 EBADF (Bad file descriptor) [pid 5915] close(25) = -1 EBADF (Bad file descriptor) [pid 5915] close(26) = -1 EBADF (Bad file descriptor) [pid 5915] close(27) = -1 EBADF (Bad file descriptor) [pid 5915] close(28) = -1 EBADF (Bad file descriptor) [pid 5915] close(29) = -1 EBADF (Bad file descriptor) [pid 5915] exit_group(0) = ? [pid 5915] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=70, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [ 137.438356][ T5915] loop0: detected capacity change from 0 to 128 [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./67", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./67/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./67/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./67/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./67/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./67/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./67/file2") = 0 [pid 5836] umount2("./67/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./67/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./67/binderfs") = 0 [pid 5836] umount2("./67/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./67/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./67/cgroup.net") = 0 [pid 5836] umount2("./67/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./67/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./67/cgroup.cpu") = 0 [pid 5836] umount2("./67/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./67/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./67/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./67") = 0 [pid 5836] mkdir("./68", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5916 attached [pid 5916] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 71 [pid 5916] <... set_robust_list resumed>) = 0 [pid 5916] chdir("./68") = 0 [pid 5916] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5916] setpgid(0, 0) = 0 [pid 5916] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5916] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5916] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5916] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5916] write(3, "1000", 4) = 4 [pid 5916] close(3) = 0 [pid 5916] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5916] write(1, "executing program\n", 18) = 18 [pid 5916] memfd_create("syzkaller", 0executing program ) = 3 [pid 5916] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5916] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5916] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5916] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5916] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5916] close(3) = 0 [pid 5916] close(4) = 0 [pid 5916] mkdir("./file2", 0777) = 0 [pid 5916] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5916] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5916] chdir("./file2") = 0 [pid 5916] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5916] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5916] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5916] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5916] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5916] close(3) = 0 [ 137.565695][ T5916] loop0: detected capacity change from 0 to 128 [pid 5916] close(4) = 0 [pid 5916] close(5) = -1 EBADF (Bad file descriptor) [pid 5916] close(6) = -1 EBADF (Bad file descriptor) [pid 5916] close(7) = -1 EBADF (Bad file descriptor) [pid 5916] close(8) = -1 EBADF (Bad file descriptor) [pid 5916] close(9) = -1 EBADF (Bad file descriptor) [pid 5916] close(10) = -1 EBADF (Bad file descriptor) [pid 5916] close(11) = -1 EBADF (Bad file descriptor) [pid 5916] close(12) = -1 EBADF (Bad file descriptor) [pid 5916] close(13) = -1 EBADF (Bad file descriptor) [pid 5916] close(14) = -1 EBADF (Bad file descriptor) [pid 5916] close(15) = -1 EBADF (Bad file descriptor) [pid 5916] close(16) = -1 EBADF (Bad file descriptor) [pid 5916] close(17) = -1 EBADF (Bad file descriptor) [pid 5916] close(18) = -1 EBADF (Bad file descriptor) [pid 5916] close(19) = -1 EBADF (Bad file descriptor) [pid 5916] close(20) = -1 EBADF (Bad file descriptor) [pid 5916] close(21) = -1 EBADF (Bad file descriptor) [pid 5916] close(22) = -1 EBADF (Bad file descriptor) [pid 5916] close(23) = -1 EBADF (Bad file descriptor) [pid 5916] close(24) = -1 EBADF (Bad file descriptor) [pid 5916] close(25) = -1 EBADF (Bad file descriptor) [pid 5916] close(26) = -1 EBADF (Bad file descriptor) [pid 5916] close(27) = -1 EBADF (Bad file descriptor) [pid 5916] close(28) = -1 EBADF (Bad file descriptor) [pid 5916] close(29) = -1 EBADF (Bad file descriptor) [pid 5916] exit_group(0) = ? [pid 5916] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=71, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./68", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./68/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./68/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./68/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./68/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./68/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./68/file2") = 0 [pid 5836] umount2("./68/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./68/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./68/binderfs") = 0 [pid 5836] umount2("./68/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./68/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./68/cgroup.net") = 0 [pid 5836] umount2("./68/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./68/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./68/cgroup.cpu") = 0 [pid 5836] umount2("./68/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./68/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./68/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./68") = 0 [pid 5836] mkdir("./69", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5917 attached , child_tidptr=0x555563237690) = 72 [pid 5917] set_robust_list(0x5555632376a0, 24) = 0 [pid 5917] chdir("./69") = 0 [pid 5917] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5917] setpgid(0, 0) = 0 [pid 5917] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5917] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5917] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5917] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5917] write(3, "1000", 4) = 4 [pid 5917] close(3) = 0 [pid 5917] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5917] write(1, "executing program\n", 18executing program ) = 18 [pid 5917] memfd_create("syzkaller", 0) = 3 [pid 5917] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5917] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5917] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5917] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5917] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5917] close(3) = 0 [pid 5917] close(4) = 0 [pid 5917] mkdir("./file2", 0777) = 0 [pid 5917] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5917] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5917] chdir("./file2") = 0 [ 137.823239][ T5917] loop0: detected capacity change from 0 to 128 [pid 5917] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5917] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5917] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5917] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5917] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5917] close(3) = 0 [pid 5917] close(4) = 0 [pid 5917] close(5) = -1 EBADF (Bad file descriptor) [pid 5917] close(6) = -1 EBADF (Bad file descriptor) [pid 5917] close(7) = -1 EBADF (Bad file descriptor) [pid 5917] close(8) = -1 EBADF (Bad file descriptor) [pid 5917] close(9) = -1 EBADF (Bad file descriptor) [pid 5917] close(10) = -1 EBADF (Bad file descriptor) [pid 5917] close(11) = -1 EBADF (Bad file descriptor) [pid 5917] close(12) = -1 EBADF (Bad file descriptor) [pid 5917] close(13) = -1 EBADF (Bad file descriptor) [pid 5917] close(14) = -1 EBADF (Bad file descriptor) [pid 5917] close(15) = -1 EBADF (Bad file descriptor) [pid 5917] close(16) = -1 EBADF (Bad file descriptor) [pid 5917] close(17) = -1 EBADF (Bad file descriptor) [pid 5917] close(18) = -1 EBADF (Bad file descriptor) [pid 5917] close(19) = -1 EBADF (Bad file descriptor) [pid 5917] close(20) = -1 EBADF (Bad file descriptor) [pid 5917] close(21) = -1 EBADF (Bad file descriptor) [pid 5917] close(22) = -1 EBADF (Bad file descriptor) [pid 5917] close(23) = -1 EBADF (Bad file descriptor) [pid 5917] close(24) = -1 EBADF (Bad file descriptor) [pid 5917] close(25) = -1 EBADF (Bad file descriptor) [pid 5917] close(26) = -1 EBADF (Bad file descriptor) [pid 5917] close(27) = -1 EBADF (Bad file descriptor) [pid 5917] close(28) = -1 EBADF (Bad file descriptor) [pid 5917] close(29) = -1 EBADF (Bad file descriptor) [pid 5917] exit_group(0) = ? [pid 5917] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=72, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./69", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./69", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./69/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./69/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./69/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./69/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./69/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./69/file2") = 0 [pid 5836] umount2("./69/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./69/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./69/binderfs") = 0 [pid 5836] umount2("./69/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./69/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./69/cgroup.net") = 0 [pid 5836] umount2("./69/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./69/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./69/cgroup.cpu") = 0 [pid 5836] umount2("./69/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./69/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./69/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./69") = 0 [pid 5836] mkdir("./70", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5918 attached [pid 5918] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 73 [pid 5918] <... set_robust_list resumed>) = 0 [pid 5918] chdir("./70") = 0 [pid 5918] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5918] setpgid(0, 0) = 0 [pid 5918] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5918] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5918] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5918] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5918] write(3, "1000", 4) = 4 [pid 5918] close(3) = 0 [pid 5918] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5918] write(1, "executing program\n", 18) = 18 [pid 5918] memfd_create("syzkaller", 0) = 3 [pid 5918] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5918] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5918] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5918] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5918] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5918] close(3) = 0 [pid 5918] close(4) = 0 [pid 5918] mkdir("./file2", 0777) = 0 [pid 5918] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5918] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5918] chdir("./file2") = 0 [pid 5918] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5918] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5918] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5918] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5918] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5918] close(3) = 0 [pid 5918] close(4) = 0 [pid 5918] close(5) = -1 EBADF (Bad file descriptor) [pid 5918] close(6) = -1 EBADF (Bad file descriptor) [pid 5918] close(7) = -1 EBADF (Bad file descriptor) [pid 5918] close(8) = -1 EBADF (Bad file descriptor) [pid 5918] close(9) = -1 EBADF (Bad file descriptor) [pid 5918] close(10) = -1 EBADF (Bad file descriptor) [pid 5918] close(11) = -1 EBADF (Bad file descriptor) [pid 5918] close(12) = -1 EBADF (Bad file descriptor) [pid 5918] close(13) = -1 EBADF (Bad file descriptor) [pid 5918] close(14) = -1 EBADF (Bad file descriptor) [pid 5918] close(15) = -1 EBADF (Bad file descriptor) [pid 5918] close(16) = -1 EBADF (Bad file descriptor) [pid 5918] close(17) = -1 EBADF (Bad file descriptor) [pid 5918] close(18) = -1 EBADF (Bad file descriptor) [pid 5918] close(19) = -1 EBADF (Bad file descriptor) [pid 5918] close(20) = -1 EBADF (Bad file descriptor) [pid 5918] close(21) = -1 EBADF (Bad file descriptor) [pid 5918] close(22) = -1 EBADF (Bad file descriptor) [pid 5918] close(23) = -1 EBADF (Bad file descriptor) [pid 5918] close(24) = -1 EBADF (Bad file descriptor) [pid 5918] close(25) = -1 EBADF (Bad file descriptor) [pid 5918] close(26) = -1 EBADF (Bad file descriptor) [pid 5918] close(27) = -1 EBADF (Bad file descriptor) [pid 5918] close(28) = -1 EBADF (Bad file descriptor) [pid 5918] close(29) = -1 EBADF (Bad file descriptor) [pid 5918] exit_group(0) = ? [pid 5918] +++ exited with 0 +++ [ 138.331036][ T5918] loop0: detected capacity change from 0 to 128 [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=73, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./70", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./70", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./70/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./70/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./70/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./70/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./70/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./70/file2") = 0 [pid 5836] umount2("./70/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./70/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./70/binderfs") = 0 [pid 5836] umount2("./70/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./70/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./70/cgroup.net") = 0 [pid 5836] umount2("./70/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./70/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./70/cgroup.cpu") = 0 [pid 5836] umount2("./70/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./70/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./70/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./70") = 0 [pid 5836] mkdir("./71", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5919 attached , child_tidptr=0x555563237690) = 74 [pid 5919] set_robust_list(0x5555632376a0, 24) = 0 [pid 5919] chdir("./71") = 0 [pid 5919] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5919] setpgid(0, 0) = 0 [pid 5919] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5919] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5919] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5919] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5919] write(3, "1000", 4) = 4 [pid 5919] close(3) = 0 [pid 5919] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5919] write(1, "executing program\n", 18) = 18 [pid 5919] memfd_create("syzkaller", 0) = 3 [pid 5919] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5919] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5919] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5919] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5919] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5919] close(3) = 0 [pid 5919] close(4) = 0 [pid 5919] mkdir("./file2", 0777) = 0 [pid 5919] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5919] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5919] chdir("./file2") = 0 [pid 5919] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5919] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5919] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5919] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5919] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5919] close(3) = 0 [ 138.529106][ T5919] loop0: detected capacity change from 0 to 128 [pid 5919] close(4) = 0 [pid 5919] close(5) = -1 EBADF (Bad file descriptor) [pid 5919] close(6) = -1 EBADF (Bad file descriptor) [pid 5919] close(7) = -1 EBADF (Bad file descriptor) [pid 5919] close(8) = -1 EBADF (Bad file descriptor) [pid 5919] close(9) = -1 EBADF (Bad file descriptor) [pid 5919] close(10) = -1 EBADF (Bad file descriptor) [pid 5919] close(11) = -1 EBADF (Bad file descriptor) [pid 5919] close(12) = -1 EBADF (Bad file descriptor) [pid 5919] close(13) = -1 EBADF (Bad file descriptor) [pid 5919] close(14) = -1 EBADF (Bad file descriptor) [pid 5919] close(15) = -1 EBADF (Bad file descriptor) [pid 5919] close(16) = -1 EBADF (Bad file descriptor) [pid 5919] close(17) = -1 EBADF (Bad file descriptor) [pid 5919] close(18) = -1 EBADF (Bad file descriptor) [pid 5919] close(19) = -1 EBADF (Bad file descriptor) [pid 5919] close(20) = -1 EBADF (Bad file descriptor) [pid 5919] close(21) = -1 EBADF (Bad file descriptor) [pid 5919] close(22) = -1 EBADF (Bad file descriptor) [pid 5919] close(23) = -1 EBADF (Bad file descriptor) [pid 5919] close(24) = -1 EBADF (Bad file descriptor) [pid 5919] close(25) = -1 EBADF (Bad file descriptor) [pid 5919] close(26) = -1 EBADF (Bad file descriptor) [pid 5919] close(27) = -1 EBADF (Bad file descriptor) [pid 5919] close(28) = -1 EBADF (Bad file descriptor) [pid 5919] close(29) = -1 EBADF (Bad file descriptor) [pid 5919] exit_group(0) = ? [pid 5919] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=74, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./71", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./71", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./71/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./71/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./71/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./71/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./71/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./71/file2") = 0 [pid 5836] umount2("./71/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./71/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./71/binderfs") = 0 [pid 5836] umount2("./71/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./71/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./71/cgroup.net") = 0 [pid 5836] umount2("./71/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./71/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./71/cgroup.cpu") = 0 [pid 5836] umount2("./71/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./71/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./71/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./71") = 0 [pid 5836] mkdir("./72", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5920 attached [pid 5920] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 75 [pid 5920] <... set_robust_list resumed>) = 0 [pid 5920] chdir("./72") = 0 [pid 5920] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5920] setpgid(0, 0) = 0 [pid 5920] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5920] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5920] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5920] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5920] write(3, "1000", 4) = 4 [pid 5920] close(3) = 0 [pid 5920] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5920] write(1, "executing program\n", 18) = 18 [pid 5920] memfd_create("syzkaller", 0) = 3 [pid 5920] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5920] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5920] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5920] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5920] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5920] close(3) = 0 [pid 5920] close(4) = 0 [pid 5920] mkdir("./file2", 0777) = 0 [pid 5920] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5920] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5920] chdir("./file2") = 0 [pid 5920] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5920] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5920] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5920] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5920] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5920] close(3) = 0 [ 139.062715][ T5920] loop0: detected capacity change from 0 to 128 [pid 5920] close(4) = 0 [pid 5920] close(5) = -1 EBADF (Bad file descriptor) [pid 5920] close(6) = -1 EBADF (Bad file descriptor) [pid 5920] close(7) = -1 EBADF (Bad file descriptor) [pid 5920] close(8) = -1 EBADF (Bad file descriptor) [pid 5920] close(9) = -1 EBADF (Bad file descriptor) [pid 5920] close(10) = -1 EBADF (Bad file descriptor) [pid 5920] close(11) = -1 EBADF (Bad file descriptor) [pid 5920] close(12) = -1 EBADF (Bad file descriptor) [pid 5920] close(13) = -1 EBADF (Bad file descriptor) [pid 5920] close(14) = -1 EBADF (Bad file descriptor) [pid 5920] close(15) = -1 EBADF (Bad file descriptor) [pid 5920] close(16) = -1 EBADF (Bad file descriptor) [pid 5920] close(17) = -1 EBADF (Bad file descriptor) [pid 5920] close(18) = -1 EBADF (Bad file descriptor) [pid 5920] close(19) = -1 EBADF (Bad file descriptor) [pid 5920] close(20) = -1 EBADF (Bad file descriptor) [pid 5920] close(21) = -1 EBADF (Bad file descriptor) [pid 5920] close(22) = -1 EBADF (Bad file descriptor) [pid 5920] close(23) = -1 EBADF (Bad file descriptor) [pid 5920] close(24) = -1 EBADF (Bad file descriptor) [pid 5920] close(25) = -1 EBADF (Bad file descriptor) [pid 5920] close(26) = -1 EBADF (Bad file descriptor) [pid 5920] close(27) = -1 EBADF (Bad file descriptor) [pid 5920] close(28) = -1 EBADF (Bad file descriptor) [pid 5920] close(29) = -1 EBADF (Bad file descriptor) [pid 5920] exit_group(0) = ? [pid 5920] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=75, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./72", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./72", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./72/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./72/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./72/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./72/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./72/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./72/file2") = 0 [pid 5836] umount2("./72/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./72/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./72/binderfs") = 0 [pid 5836] umount2("./72/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./72/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./72/cgroup.net") = 0 [pid 5836] umount2("./72/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./72/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./72/cgroup.cpu") = 0 [pid 5836] umount2("./72/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./72/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./72/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./72") = 0 [pid 5836] mkdir("./73", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5921 attached [pid 5921] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 76 [pid 5921] <... set_robust_list resumed>) = 0 [pid 5921] chdir("./73") = 0 [pid 5921] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5921] setpgid(0, 0) = 0 [pid 5921] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5921] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5921] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5921] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5921] write(3, "1000", 4) = 4 [pid 5921] close(3) = 0 [pid 5921] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5921] write(1, "executing program\n", 18) = 18 [pid 5921] memfd_create("syzkaller", 0) = 3 [pid 5921] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5921] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5921] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5921] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5921] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5921] close(3) = 0 [pid 5921] close(4) = 0 [pid 5921] mkdir("./file2", 0777) = 0 [pid 5921] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5921] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5921] chdir("./file2") = 0 [pid 5921] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5921] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5921] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [ 139.243965][ T5921] loop0: detected capacity change from 0 to 128 [pid 5921] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5921] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5921] close(3) = 0 [pid 5921] close(4) = 0 [pid 5921] close(5) = -1 EBADF (Bad file descriptor) [pid 5921] close(6) = -1 EBADF (Bad file descriptor) [pid 5921] close(7) = -1 EBADF (Bad file descriptor) [pid 5921] close(8) = -1 EBADF (Bad file descriptor) [pid 5921] close(9) = -1 EBADF (Bad file descriptor) [pid 5921] close(10) = -1 EBADF (Bad file descriptor) [pid 5921] close(11) = -1 EBADF (Bad file descriptor) [pid 5921] close(12) = -1 EBADF (Bad file descriptor) [pid 5921] close(13) = -1 EBADF (Bad file descriptor) [pid 5921] close(14) = -1 EBADF (Bad file descriptor) [pid 5921] close(15) = -1 EBADF (Bad file descriptor) [pid 5921] close(16) = -1 EBADF (Bad file descriptor) [pid 5921] close(17) = -1 EBADF (Bad file descriptor) [pid 5921] close(18) = -1 EBADF (Bad file descriptor) [pid 5921] close(19) = -1 EBADF (Bad file descriptor) [pid 5921] close(20) = -1 EBADF (Bad file descriptor) [pid 5921] close(21) = -1 EBADF (Bad file descriptor) [pid 5921] close(22) = -1 EBADF (Bad file descriptor) [pid 5921] close(23) = -1 EBADF (Bad file descriptor) [pid 5921] close(24) = -1 EBADF (Bad file descriptor) [pid 5921] close(25) = -1 EBADF (Bad file descriptor) [pid 5921] close(26) = -1 EBADF (Bad file descriptor) [pid 5921] close(27) = -1 EBADF (Bad file descriptor) [pid 5921] close(28) = -1 EBADF (Bad file descriptor) [pid 5921] close(29) = -1 EBADF (Bad file descriptor) [pid 5921] exit_group(0) = ? [pid 5921] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=76, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5836] umount2("./73", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./73", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./73/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./73/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./73/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./73/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./73/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./73/file2") = 0 [pid 5836] umount2("./73/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./73/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./73/binderfs") = 0 [pid 5836] umount2("./73/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./73/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./73/cgroup.net") = 0 [pid 5836] umount2("./73/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./73/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./73/cgroup.cpu") = 0 [pid 5836] umount2("./73/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./73/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./73/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./73") = 0 [pid 5836] mkdir("./74", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5922 attached , child_tidptr=0x555563237690) = 77 [pid 5922] set_robust_list(0x5555632376a0, 24) = 0 [pid 5922] chdir("./74") = 0 [pid 5922] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5922] setpgid(0, 0) = 0 [pid 5922] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5922] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5922] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5922] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5922] write(3, "1000", 4) = 4 [pid 5922] close(3) = 0 [pid 5922] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5922] write(1, "executing program\n", 18) = 18 [pid 5922] memfd_create("syzkaller", 0) = 3 [pid 5922] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5922] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5922] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5922] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5922] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5922] close(3) = 0 [pid 5922] close(4) = 0 [pid 5922] mkdir("./file2", 0777) = 0 [pid 5922] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5922] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5922] chdir("./file2") = 0 [pid 5922] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5922] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5922] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5922] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5922] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5922] close(3) = 0 [pid 5922] close(4) = 0 [ 139.776886][ T5922] loop0: detected capacity change from 0 to 128 [pid 5922] close(5) = -1 EBADF (Bad file descriptor) [pid 5922] close(6) = -1 EBADF (Bad file descriptor) [pid 5922] close(7) = -1 EBADF (Bad file descriptor) [pid 5922] close(8) = -1 EBADF (Bad file descriptor) [pid 5922] close(9) = -1 EBADF (Bad file descriptor) [pid 5922] close(10) = -1 EBADF (Bad file descriptor) [pid 5922] close(11) = -1 EBADF (Bad file descriptor) [pid 5922] close(12) = -1 EBADF (Bad file descriptor) [pid 5922] close(13) = -1 EBADF (Bad file descriptor) [pid 5922] close(14) = -1 EBADF (Bad file descriptor) [pid 5922] close(15) = -1 EBADF (Bad file descriptor) [pid 5922] close(16) = -1 EBADF (Bad file descriptor) [pid 5922] close(17) = -1 EBADF (Bad file descriptor) [pid 5922] close(18) = -1 EBADF (Bad file descriptor) [pid 5922] close(19) = -1 EBADF (Bad file descriptor) [pid 5922] close(20) = -1 EBADF (Bad file descriptor) [pid 5922] close(21) = -1 EBADF (Bad file descriptor) [pid 5922] close(22) = -1 EBADF (Bad file descriptor) [pid 5922] close(23) = -1 EBADF (Bad file descriptor) [pid 5922] close(24) = -1 EBADF (Bad file descriptor) [pid 5922] close(25) = -1 EBADF (Bad file descriptor) [pid 5922] close(26) = -1 EBADF (Bad file descriptor) [pid 5922] close(27) = -1 EBADF (Bad file descriptor) [pid 5922] close(28) = -1 EBADF (Bad file descriptor) [pid 5922] close(29) = -1 EBADF (Bad file descriptor) [pid 5922] exit_group(0) = ? [pid 5922] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=77, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./74", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./74", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./74/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./74/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./74/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./74/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./74/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./74/file2") = 0 [pid 5836] umount2("./74/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./74/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./74/binderfs") = 0 [pid 5836] umount2("./74/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./74/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./74/cgroup.net") = 0 [pid 5836] umount2("./74/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./74/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./74/cgroup.cpu") = 0 [pid 5836] umount2("./74/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./74/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./74/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./74") = 0 [pid 5836] mkdir("./75", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5923 attached [pid 5923] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 78 [pid 5923] <... set_robust_list resumed>) = 0 [pid 5923] chdir("./75") = 0 [pid 5923] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5923] setpgid(0, 0) = 0 [pid 5923] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5923] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5923] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5923] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5923] write(3, "1000", 4) = 4 [pid 5923] close(3) = 0 [pid 5923] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5923] write(1, "executing program\n", 18) = 18 [pid 5923] memfd_create("syzkaller", 0) = 3 [pid 5923] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5923] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5923] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5923] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5923] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5923] close(3) = 0 [pid 5923] close(4) = 0 [pid 5923] mkdir("./file2", 0777) = 0 [pid 5923] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5923] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5923] chdir("./file2") = 0 [pid 5923] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5923] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5923] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5923] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5923] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5923] close(3) = 0 [pid 5923] close(4) = 0 [pid 5923] close(5) = -1 EBADF (Bad file descriptor) [pid 5923] close(6) = -1 EBADF (Bad file descriptor) [pid 5923] close(7) = -1 EBADF (Bad file descriptor) [pid 5923] close(8) = -1 EBADF (Bad file descriptor) [pid 5923] close(9) = -1 EBADF (Bad file descriptor) [pid 5923] close(10) = -1 EBADF (Bad file descriptor) [pid 5923] close(11) = -1 EBADF (Bad file descriptor) [pid 5923] close(12) = -1 EBADF (Bad file descriptor) [pid 5923] close(13) = -1 EBADF (Bad file descriptor) [pid 5923] close(14) = -1 EBADF (Bad file descriptor) [pid 5923] close(15) = -1 EBADF (Bad file descriptor) [pid 5923] close(16) = -1 EBADF (Bad file descriptor) [pid 5923] close(17) = -1 EBADF (Bad file descriptor) [pid 5923] close(18) = -1 EBADF (Bad file descriptor) [pid 5923] close(19) = -1 EBADF (Bad file descriptor) [pid 5923] close(20) = -1 EBADF (Bad file descriptor) [pid 5923] close(21) = -1 EBADF (Bad file descriptor) [pid 5923] close(22) = -1 EBADF (Bad file descriptor) [pid 5923] close(23) = -1 EBADF (Bad file descriptor) [pid 5923] close(24) = -1 EBADF (Bad file descriptor) [pid 5923] close(25) = -1 EBADF (Bad file descriptor) [pid 5923] close(26) = -1 EBADF (Bad file descriptor) [pid 5923] close(27) = -1 EBADF (Bad file descriptor) [pid 5923] close(28) = -1 EBADF (Bad file descriptor) [pid 5923] close(29) = -1 EBADF (Bad file descriptor) [pid 5923] exit_group(0) = ? [pid 5923] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=78, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [ 140.260131][ T5923] loop0: detected capacity change from 0 to 128 [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./75", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./75", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./75/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./75/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./75/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./75/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./75/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./75/file2") = 0 [pid 5836] umount2("./75/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./75/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./75/binderfs") = 0 [pid 5836] umount2("./75/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./75/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./75/cgroup.net") = 0 [pid 5836] umount2("./75/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./75/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./75/cgroup.cpu") = 0 [pid 5836] umount2("./75/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./75/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./75/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./75") = 0 [pid 5836] mkdir("./76", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5924 attached [pid 5924] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 79 [pid 5924] <... set_robust_list resumed>) = 0 [pid 5924] chdir("./76") = 0 [pid 5924] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5924] setpgid(0, 0) = 0 [pid 5924] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5924] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5924] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5924] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5924] write(3, "1000", 4) = 4 [pid 5924] close(3) = 0 [pid 5924] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5924] write(1, "executing program\n", 18) = 18 [pid 5924] memfd_create("syzkaller", 0) = 3 [pid 5924] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5924] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5924] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5924] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5924] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5924] close(3) = 0 [pid 5924] close(4) = 0 [pid 5924] mkdir("./file2", 0777) = 0 [pid 5924] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5924] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5924] chdir("./file2") = 0 [pid 5924] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5924] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5924] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5924] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5924] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5924] close(3) = 0 [pid 5924] close(4) = 0 [pid 5924] close(5) = -1 EBADF (Bad file descriptor) [pid 5924] close(6) = -1 EBADF (Bad file descriptor) [pid 5924] close(7) = -1 EBADF (Bad file descriptor) [pid 5924] close(8) = -1 EBADF (Bad file descriptor) [pid 5924] close(9) = -1 EBADF (Bad file descriptor) [pid 5924] close(10) = -1 EBADF (Bad file descriptor) [pid 5924] close(11) = -1 EBADF (Bad file descriptor) [pid 5924] close(12) = -1 EBADF (Bad file descriptor) [pid 5924] close(13) = -1 EBADF (Bad file descriptor) [pid 5924] close(14) = -1 EBADF (Bad file descriptor) [pid 5924] close(15) = -1 EBADF (Bad file descriptor) [pid 5924] close(16) = -1 EBADF (Bad file descriptor) [pid 5924] close(17) = -1 EBADF (Bad file descriptor) [pid 5924] close(18) = -1 EBADF (Bad file descriptor) [pid 5924] close(19) = -1 EBADF (Bad file descriptor) [pid 5924] close(20) = -1 EBADF (Bad file descriptor) [pid 5924] close(21) = -1 EBADF (Bad file descriptor) [pid 5924] close(22) = -1 EBADF (Bad file descriptor) [pid 5924] close(23) = -1 EBADF (Bad file descriptor) [pid 5924] close(24) = -1 EBADF (Bad file descriptor) [pid 5924] close(25) = -1 EBADF (Bad file descriptor) [pid 5924] close(26) = -1 EBADF (Bad file descriptor) [pid 5924] close(27) = -1 EBADF (Bad file descriptor) [pid 5924] close(28) = -1 EBADF (Bad file descriptor) [pid 5924] close(29) = -1 EBADF (Bad file descriptor) [pid 5924] exit_group(0) = ? [ 140.820698][ T5924] loop0: detected capacity change from 0 to 128 [pid 5924] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=79, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5836] umount2("./76", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./76", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./76/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./76/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./76/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./76/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./76/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./76/file2") = 0 [pid 5836] umount2("./76/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./76/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./76/binderfs") = 0 [pid 5836] umount2("./76/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./76/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./76/cgroup.net") = 0 [pid 5836] umount2("./76/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./76/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./76/cgroup.cpu") = 0 [pid 5836] umount2("./76/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./76/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./76/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./76") = 0 [pid 5836] mkdir("./77", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5925 attached [pid 5925] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 80 [pid 5925] <... set_robust_list resumed>) = 0 [pid 5925] chdir("./77") = 0 [pid 5925] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5925] setpgid(0, 0) = 0 [pid 5925] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5925] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5925] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5925] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5925] write(3, "1000", 4) = 4 [pid 5925] close(3) = 0 [pid 5925] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5925] write(1, "executing program\n", 18executing program ) = 18 [pid 5925] memfd_create("syzkaller", 0) = 3 [pid 5925] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5925] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5925] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5925] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5925] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5925] close(3) = 0 [pid 5925] close(4) = 0 [pid 5925] mkdir("./file2", 0777) = 0 [pid 5925] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5925] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5925] chdir("./file2") = 0 [pid 5925] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 141.361689][ T5925] loop0: detected capacity change from 0 to 128 [pid 5925] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5925] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5925] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5925] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5925] close(3) = 0 [pid 5925] close(4) = 0 [pid 5925] close(5) = -1 EBADF (Bad file descriptor) [pid 5925] close(6) = -1 EBADF (Bad file descriptor) [pid 5925] close(7) = -1 EBADF (Bad file descriptor) [pid 5925] close(8) = -1 EBADF (Bad file descriptor) [pid 5925] close(9) = -1 EBADF (Bad file descriptor) [pid 5925] close(10) = -1 EBADF (Bad file descriptor) [pid 5925] close(11) = -1 EBADF (Bad file descriptor) [pid 5925] close(12) = -1 EBADF (Bad file descriptor) [pid 5925] close(13) = -1 EBADF (Bad file descriptor) [pid 5925] close(14) = -1 EBADF (Bad file descriptor) [pid 5925] close(15) = -1 EBADF (Bad file descriptor) [pid 5925] close(16) = -1 EBADF (Bad file descriptor) [pid 5925] close(17) = -1 EBADF (Bad file descriptor) [pid 5925] close(18) = -1 EBADF (Bad file descriptor) [pid 5925] close(19) = -1 EBADF (Bad file descriptor) [pid 5925] close(20) = -1 EBADF (Bad file descriptor) [pid 5925] close(21) = -1 EBADF (Bad file descriptor) [pid 5925] close(22) = -1 EBADF (Bad file descriptor) [pid 5925] close(23) = -1 EBADF (Bad file descriptor) [pid 5925] close(24) = -1 EBADF (Bad file descriptor) [pid 5925] close(25) = -1 EBADF (Bad file descriptor) [pid 5925] close(26) = -1 EBADF (Bad file descriptor) [pid 5925] close(27) = -1 EBADF (Bad file descriptor) [pid 5925] close(28) = -1 EBADF (Bad file descriptor) [pid 5925] close(29) = -1 EBADF (Bad file descriptor) [pid 5925] exit_group(0) = ? [pid 5925] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=80, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5836] umount2("./77", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./77", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./77/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./77/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./77/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./77/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./77/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./77/file2") = 0 [pid 5836] umount2("./77/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./77/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./77/binderfs") = 0 [pid 5836] umount2("./77/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./77/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./77/cgroup.net") = 0 [pid 5836] umount2("./77/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./77/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./77/cgroup.cpu") = 0 [pid 5836] umount2("./77/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./77/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./77/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./77") = 0 [pid 5836] mkdir("./78", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5926 attached , child_tidptr=0x555563237690) = 81 [pid 5926] set_robust_list(0x5555632376a0, 24) = 0 [pid 5926] chdir("./78") = 0 [pid 5926] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5926] setpgid(0, 0) = 0 [pid 5926] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5926] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5926] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5926] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5926] write(3, "1000", 4) = 4 [pid 5926] close(3) = 0 [pid 5926] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5926] write(1, "executing program\n", 18executing program ) = 18 [pid 5926] memfd_create("syzkaller", 0) = 3 [pid 5926] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5926] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5926] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5926] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5926] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5926] close(3) = 0 [pid 5926] close(4) = 0 [pid 5926] mkdir("./file2", 0777) = 0 [pid 5926] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5926] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5926] chdir("./file2") = 0 [pid 5926] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5926] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5926] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5926] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5926] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5926] close(3) = 0 [pid 5926] close(4) = 0 [ 141.887758][ T5926] loop0: detected capacity change from 0 to 128 [pid 5926] close(5) = -1 EBADF (Bad file descriptor) [pid 5926] close(6) = -1 EBADF (Bad file descriptor) [pid 5926] close(7) = -1 EBADF (Bad file descriptor) [pid 5926] close(8) = -1 EBADF (Bad file descriptor) [pid 5926] close(9) = -1 EBADF (Bad file descriptor) [pid 5926] close(10) = -1 EBADF (Bad file descriptor) [pid 5926] close(11) = -1 EBADF (Bad file descriptor) [pid 5926] close(12) = -1 EBADF (Bad file descriptor) [pid 5926] close(13) = -1 EBADF (Bad file descriptor) [pid 5926] close(14) = -1 EBADF (Bad file descriptor) [pid 5926] close(15) = -1 EBADF (Bad file descriptor) [pid 5926] close(16) = -1 EBADF (Bad file descriptor) [pid 5926] close(17) = -1 EBADF (Bad file descriptor) [pid 5926] close(18) = -1 EBADF (Bad file descriptor) [pid 5926] close(19) = -1 EBADF (Bad file descriptor) [pid 5926] close(20) = -1 EBADF (Bad file descriptor) [pid 5926] close(21) = -1 EBADF (Bad file descriptor) [pid 5926] close(22) = -1 EBADF (Bad file descriptor) [pid 5926] close(23) = -1 EBADF (Bad file descriptor) [pid 5926] close(24) = -1 EBADF (Bad file descriptor) [pid 5926] close(25) = -1 EBADF (Bad file descriptor) [pid 5926] close(26) = -1 EBADF (Bad file descriptor) [pid 5926] close(27) = -1 EBADF (Bad file descriptor) [pid 5926] close(28) = -1 EBADF (Bad file descriptor) [pid 5926] close(29) = -1 EBADF (Bad file descriptor) [pid 5926] exit_group(0) = ? [pid 5926] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=81, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./78", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./78", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./78/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./78/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./78/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./78/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./78/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./78/file2") = 0 [pid 5836] umount2("./78/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./78/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./78/binderfs") = 0 [pid 5836] umount2("./78/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./78/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./78/cgroup.net") = 0 [pid 5836] umount2("./78/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./78/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./78/cgroup.cpu") = 0 [pid 5836] umount2("./78/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./78/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./78/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./78") = 0 [pid 5836] mkdir("./79", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5927 attached , child_tidptr=0x555563237690) = 82 [pid 5927] set_robust_list(0x5555632376a0, 24) = 0 [pid 5927] chdir("./79") = 0 [pid 5927] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5927] setpgid(0, 0) = 0 [pid 5927] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5927] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5927] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5927] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5927] write(3, "1000", 4) = 4 [pid 5927] close(3) = 0 [pid 5927] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5927] write(1, "executing program\n", 18executing program ) = 18 [pid 5927] memfd_create("syzkaller", 0) = 3 [pid 5927] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5927] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5927] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5927] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5927] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5927] close(3) = 0 [pid 5927] close(4) = 0 [pid 5927] mkdir("./file2", 0777) = 0 [pid 5927] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5927] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5927] chdir("./file2") = 0 [ 142.433616][ T5927] loop0: detected capacity change from 0 to 128 [pid 5927] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5927] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5927] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5927] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5927] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5927] close(3) = 0 [pid 5927] close(4) = 0 [pid 5927] close(5) = -1 EBADF (Bad file descriptor) [pid 5927] close(6) = -1 EBADF (Bad file descriptor) [pid 5927] close(7) = -1 EBADF (Bad file descriptor) [pid 5927] close(8) = -1 EBADF (Bad file descriptor) [pid 5927] close(9) = -1 EBADF (Bad file descriptor) [pid 5927] close(10) = -1 EBADF (Bad file descriptor) [pid 5927] close(11) = -1 EBADF (Bad file descriptor) [pid 5927] close(12) = -1 EBADF (Bad file descriptor) [pid 5927] close(13) = -1 EBADF (Bad file descriptor) [pid 5927] close(14) = -1 EBADF (Bad file descriptor) [pid 5927] close(15) = -1 EBADF (Bad file descriptor) [pid 5927] close(16) = -1 EBADF (Bad file descriptor) [pid 5927] close(17) = -1 EBADF (Bad file descriptor) [pid 5927] close(18) = -1 EBADF (Bad file descriptor) [pid 5927] close(19) = -1 EBADF (Bad file descriptor) [pid 5927] close(20) = -1 EBADF (Bad file descriptor) [pid 5927] close(21) = -1 EBADF (Bad file descriptor) [pid 5927] close(22) = -1 EBADF (Bad file descriptor) [pid 5927] close(23) = -1 EBADF (Bad file descriptor) [pid 5927] close(24) = -1 EBADF (Bad file descriptor) [pid 5927] close(25) = -1 EBADF (Bad file descriptor) [pid 5927] close(26) = -1 EBADF (Bad file descriptor) [pid 5927] close(27) = -1 EBADF (Bad file descriptor) [pid 5927] close(28) = -1 EBADF (Bad file descriptor) [pid 5927] close(29) = -1 EBADF (Bad file descriptor) [pid 5927] exit_group(0) = ? [pid 5927] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=82, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] umount2("./79", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./79", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./79/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./79/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./79/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./79/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./79/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./79/file2") = 0 [pid 5836] umount2("./79/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./79/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./79/binderfs") = 0 [pid 5836] umount2("./79/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./79/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./79/cgroup.net") = 0 [pid 5836] umount2("./79/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./79/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./79/cgroup.cpu") = 0 [pid 5836] umount2("./79/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./79/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./79/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./79") = 0 [pid 5836] mkdir("./80", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5928 attached [pid 5928] set_robust_list(0x5555632376a0, 24) = 0 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 83 [pid 5928] chdir("./80") = 0 [pid 5928] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5928] setpgid(0, 0) = 0 [pid 5928] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5928] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5928] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5928] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5928] write(3, "1000", 4) = 4 [pid 5928] close(3) = 0 [pid 5928] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5928] write(1, "executing program\n", 18executing program ) = 18 [pid 5928] memfd_create("syzkaller", 0) = 3 [pid 5928] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5928] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5928] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5928] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5928] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5928] close(3) = 0 [pid 5928] close(4) = 0 [pid 5928] mkdir("./file2", 0777) = 0 [pid 5928] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5928] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5928] chdir("./file2") = 0 [pid 5928] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5928] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5928] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5928] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5928] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5928] close(3) = 0 [pid 5928] close(4) = 0 [ 143.010653][ T5928] loop0: detected capacity change from 0 to 128 [pid 5928] close(5) = -1 EBADF (Bad file descriptor) [pid 5928] close(6) = -1 EBADF (Bad file descriptor) [pid 5928] close(7) = -1 EBADF (Bad file descriptor) [pid 5928] close(8) = -1 EBADF (Bad file descriptor) [pid 5928] close(9) = -1 EBADF (Bad file descriptor) [pid 5928] close(10) = -1 EBADF (Bad file descriptor) [pid 5928] close(11) = -1 EBADF (Bad file descriptor) [pid 5928] close(12) = -1 EBADF (Bad file descriptor) [pid 5928] close(13) = -1 EBADF (Bad file descriptor) [pid 5928] close(14) = -1 EBADF (Bad file descriptor) [pid 5928] close(15) = -1 EBADF (Bad file descriptor) [pid 5928] close(16) = -1 EBADF (Bad file descriptor) [pid 5928] close(17) = -1 EBADF (Bad file descriptor) [pid 5928] close(18) = -1 EBADF (Bad file descriptor) [pid 5928] close(19) = -1 EBADF (Bad file descriptor) [pid 5928] close(20) = -1 EBADF (Bad file descriptor) [pid 5928] close(21) = -1 EBADF (Bad file descriptor) [pid 5928] close(22) = -1 EBADF (Bad file descriptor) [pid 5928] close(23) = -1 EBADF (Bad file descriptor) [pid 5928] close(24) = -1 EBADF (Bad file descriptor) [pid 5928] close(25) = -1 EBADF (Bad file descriptor) [pid 5928] close(26) = -1 EBADF (Bad file descriptor) [pid 5928] close(27) = -1 EBADF (Bad file descriptor) [pid 5928] close(28) = -1 EBADF (Bad file descriptor) [pid 5928] close(29) = -1 EBADF (Bad file descriptor) [pid 5928] exit_group(0) = ? [pid 5928] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=83, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./80", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./80", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./80/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./80/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./80/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./80/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./80/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./80/file2") = 0 [pid 5836] umount2("./80/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./80/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./80/binderfs") = 0 [pid 5836] umount2("./80/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./80/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./80/cgroup.net") = 0 [pid 5836] umount2("./80/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./80/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./80/cgroup.cpu") = 0 [pid 5836] umount2("./80/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./80/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./80/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./80") = 0 [pid 5836] mkdir("./81", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5929 attached [pid 5929] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 84 [pid 5929] <... set_robust_list resumed>) = 0 [pid 5929] chdir("./81") = 0 [pid 5929] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5929] setpgid(0, 0) = 0 [pid 5929] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5929] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5929] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5929] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5929] write(3, "1000", 4) = 4 [pid 5929] close(3) = 0 [pid 5929] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5929] write(1, "executing program\n", 18executing program ) = 18 [pid 5929] memfd_create("syzkaller", 0) = 3 [pid 5929] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5929] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5929] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5929] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5929] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5929] close(3) = 0 [pid 5929] close(4) = 0 [pid 5929] mkdir("./file2", 0777) = 0 [pid 5929] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5929] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5929] chdir("./file2") = 0 [pid 5929] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5929] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5929] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [ 143.534030][ T5929] loop0: detected capacity change from 0 to 128 [pid 5929] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5929] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5929] close(3) = 0 [pid 5929] close(4) = 0 [pid 5929] close(5) = -1 EBADF (Bad file descriptor) [pid 5929] close(6) = -1 EBADF (Bad file descriptor) [pid 5929] close(7) = -1 EBADF (Bad file descriptor) [pid 5929] close(8) = -1 EBADF (Bad file descriptor) [pid 5929] close(9) = -1 EBADF (Bad file descriptor) [pid 5929] close(10) = -1 EBADF (Bad file descriptor) [pid 5929] close(11) = -1 EBADF (Bad file descriptor) [pid 5929] close(12) = -1 EBADF (Bad file descriptor) [pid 5929] close(13) = -1 EBADF (Bad file descriptor) [pid 5929] close(14) = -1 EBADF (Bad file descriptor) [pid 5929] close(15) = -1 EBADF (Bad file descriptor) [pid 5929] close(16) = -1 EBADF (Bad file descriptor) [pid 5929] close(17) = -1 EBADF (Bad file descriptor) [pid 5929] close(18) = -1 EBADF (Bad file descriptor) [pid 5929] close(19) = -1 EBADF (Bad file descriptor) [pid 5929] close(20) = -1 EBADF (Bad file descriptor) [pid 5929] close(21) = -1 EBADF (Bad file descriptor) [pid 5929] close(22) = -1 EBADF (Bad file descriptor) [pid 5929] close(23) = -1 EBADF (Bad file descriptor) [pid 5929] close(24) = -1 EBADF (Bad file descriptor) [pid 5929] close(25) = -1 EBADF (Bad file descriptor) [pid 5929] close(26) = -1 EBADF (Bad file descriptor) [pid 5929] close(27) = -1 EBADF (Bad file descriptor) [pid 5929] close(28) = -1 EBADF (Bad file descriptor) [pid 5929] close(29) = -1 EBADF (Bad file descriptor) [pid 5929] exit_group(0) = ? [pid 5929] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=84, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] umount2("./81", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./81", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./81/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./81/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./81/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./81/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./81/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./81/file2") = 0 [pid 5836] umount2("./81/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./81/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./81/binderfs") = 0 [pid 5836] umount2("./81/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./81/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./81/cgroup.net") = 0 [pid 5836] umount2("./81/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./81/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./81/cgroup.cpu") = 0 [pid 5836] umount2("./81/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./81/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./81/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./81") = 0 [pid 5836] mkdir("./82", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5930 attached [pid 5930] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 85 [pid 5930] <... set_robust_list resumed>) = 0 [pid 5930] chdir("./82") = 0 [pid 5930] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5930] setpgid(0, 0) = 0 [pid 5930] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5930] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5930] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5930] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5930] write(3, "1000", 4) = 4 [pid 5930] close(3) = 0 [pid 5930] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5930] write(1, "executing program\n", 18executing program ) = 18 [pid 5930] memfd_create("syzkaller", 0) = 3 [pid 5930] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5930] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5930] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5930] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5930] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5930] close(3) = 0 [pid 5930] close(4) = 0 [pid 5930] mkdir("./file2", 0777) = 0 [pid 5930] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5930] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5930] chdir("./file2") = 0 [pid 5930] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5930] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5930] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5930] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [ 144.184478][ T5930] loop0: detected capacity change from 0 to 128 [pid 5930] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5930] close(3) = 0 [pid 5930] close(4) = 0 [pid 5930] close(5) = -1 EBADF (Bad file descriptor) [pid 5930] close(6) = -1 EBADF (Bad file descriptor) [pid 5930] close(7) = -1 EBADF (Bad file descriptor) [pid 5930] close(8) = -1 EBADF (Bad file descriptor) [pid 5930] close(9) = -1 EBADF (Bad file descriptor) [pid 5930] close(10) = -1 EBADF (Bad file descriptor) [pid 5930] close(11) = -1 EBADF (Bad file descriptor) [pid 5930] close(12) = -1 EBADF (Bad file descriptor) [pid 5930] close(13) = -1 EBADF (Bad file descriptor) [pid 5930] close(14) = -1 EBADF (Bad file descriptor) [pid 5930] close(15) = -1 EBADF (Bad file descriptor) [pid 5930] close(16) = -1 EBADF (Bad file descriptor) [pid 5930] close(17) = -1 EBADF (Bad file descriptor) [pid 5930] close(18) = -1 EBADF (Bad file descriptor) [pid 5930] close(19) = -1 EBADF (Bad file descriptor) [pid 5930] close(20) = -1 EBADF (Bad file descriptor) [pid 5930] close(21) = -1 EBADF (Bad file descriptor) [pid 5930] close(22) = -1 EBADF (Bad file descriptor) [pid 5930] close(23) = -1 EBADF (Bad file descriptor) [pid 5930] close(24) = -1 EBADF (Bad file descriptor) [pid 5930] close(25) = -1 EBADF (Bad file descriptor) [pid 5930] close(26) = -1 EBADF (Bad file descriptor) [pid 5930] close(27) = -1 EBADF (Bad file descriptor) [pid 5930] close(28) = -1 EBADF (Bad file descriptor) [pid 5930] close(29) = -1 EBADF (Bad file descriptor) [pid 5930] exit_group(0) = ? [pid 5930] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=85, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./82", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./82", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./82/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./82/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./82/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./82/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./82/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./82/file2") = 0 [pid 5836] umount2("./82/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./82/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./82/binderfs") = 0 [pid 5836] umount2("./82/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./82/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./82/cgroup.net") = 0 [pid 5836] umount2("./82/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./82/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./82/cgroup.cpu") = 0 [pid 5836] umount2("./82/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./82/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./82/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./82") = 0 [pid 5836] mkdir("./83", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5931 attached [pid 5931] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 86 [pid 5931] <... set_robust_list resumed>) = 0 [pid 5931] chdir("./83") = 0 [pid 5931] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5931] setpgid(0, 0) = 0 [pid 5931] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5931] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5931] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5931] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5931] write(3, "1000", 4) = 4 [pid 5931] close(3) = 0 [pid 5931] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5931] write(1, "executing program\n", 18) = 18 [pid 5931] memfd_create("syzkaller", 0) = 3 [pid 5931] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5931] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5931] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5931] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5931] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5931] close(3) = 0 [pid 5931] close(4) = 0 [pid 5931] mkdir("./file2", 0777) = 0 [pid 5931] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5931] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5931] chdir("./file2") = 0 [pid 5931] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5931] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5931] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5931] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5931] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5931] close(3) = 0 [pid 5931] close(4) = 0 [pid 5931] close(5) = -1 EBADF (Bad file descriptor) [pid 5931] close(6) = -1 EBADF (Bad file descriptor) [pid 5931] close(7) = -1 EBADF (Bad file descriptor) [pid 5931] close(8) = -1 EBADF (Bad file descriptor) [pid 5931] close(9) = -1 EBADF (Bad file descriptor) [pid 5931] close(10) = -1 EBADF (Bad file descriptor) [pid 5931] close(11) = -1 EBADF (Bad file descriptor) [pid 5931] close(12) = -1 EBADF (Bad file descriptor) [pid 5931] close(13) = -1 EBADF (Bad file descriptor) [pid 5931] close(14) = -1 EBADF (Bad file descriptor) [pid 5931] close(15) = -1 EBADF (Bad file descriptor) [pid 5931] close(16) = -1 EBADF (Bad file descriptor) [pid 5931] close(17) = -1 EBADF (Bad file descriptor) [pid 5931] close(18) = -1 EBADF (Bad file descriptor) [pid 5931] close(19) = -1 EBADF (Bad file descriptor) [pid 5931] close(20) = -1 EBADF (Bad file descriptor) [pid 5931] close(21) = -1 EBADF (Bad file descriptor) [pid 5931] close(22) = -1 EBADF (Bad file descriptor) [pid 5931] close(23) = -1 EBADF (Bad file descriptor) [pid 5931] close(24) = -1 EBADF (Bad file descriptor) [pid 5931] close(25) = -1 EBADF (Bad file descriptor) [pid 5931] close(26) = -1 EBADF (Bad file descriptor) [pid 5931] close(27) = -1 EBADF (Bad file descriptor) [pid 5931] close(28) = -1 EBADF (Bad file descriptor) [pid 5931] close(29) = -1 EBADF (Bad file descriptor) [ 144.758810][ T5931] loop0: detected capacity change from 0 to 128 [pid 5931] exit_group(0) = ? [pid 5931] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=86, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5836] umount2("./83", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./83", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./83/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./83/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./83/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./83/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./83/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./83/file2") = 0 [pid 5836] umount2("./83/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./83/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./83/binderfs") = 0 [pid 5836] umount2("./83/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./83/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./83/cgroup.net") = 0 [pid 5836] umount2("./83/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./83/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./83/cgroup.cpu") = 0 [pid 5836] umount2("./83/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./83/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./83/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./83") = 0 [pid 5836] mkdir("./84", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5932 attached [pid 5932] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 87 [pid 5932] <... set_robust_list resumed>) = 0 [pid 5932] chdir("./84") = 0 [pid 5932] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5932] setpgid(0, 0) = 0 [pid 5932] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5932] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5932] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5932] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5932] write(3, "1000", 4) = 4 [pid 5932] close(3) = 0 [pid 5932] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5932] write(1, "executing program\n", 18executing program ) = 18 [pid 5932] memfd_create("syzkaller", 0) = 3 [pid 5932] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5932] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5932] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5932] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5932] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5932] close(3) = 0 [pid 5932] close(4) = 0 [pid 5932] mkdir("./file2", 0777) = 0 [pid 5932] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5932] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5932] chdir("./file2") = 0 [pid 5932] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5932] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5932] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5932] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5932] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [ 145.035467][ T5932] loop0: detected capacity change from 0 to 128 [pid 5932] close(3) = 0 [pid 5932] close(4) = 0 [pid 5932] close(5) = -1 EBADF (Bad file descriptor) [pid 5932] close(6) = -1 EBADF (Bad file descriptor) [pid 5932] close(7) = -1 EBADF (Bad file descriptor) [pid 5932] close(8) = -1 EBADF (Bad file descriptor) [pid 5932] close(9) = -1 EBADF (Bad file descriptor) [pid 5932] close(10) = -1 EBADF (Bad file descriptor) [pid 5932] close(11) = -1 EBADF (Bad file descriptor) [pid 5932] close(12) = -1 EBADF (Bad file descriptor) [pid 5932] close(13) = -1 EBADF (Bad file descriptor) [pid 5932] close(14) = -1 EBADF (Bad file descriptor) [pid 5932] close(15) = -1 EBADF (Bad file descriptor) [pid 5932] close(16) = -1 EBADF (Bad file descriptor) [pid 5932] close(17) = -1 EBADF (Bad file descriptor) [pid 5932] close(18) = -1 EBADF (Bad file descriptor) [pid 5932] close(19) = -1 EBADF (Bad file descriptor) [pid 5932] close(20) = -1 EBADF (Bad file descriptor) [pid 5932] close(21) = -1 EBADF (Bad file descriptor) [pid 5932] close(22) = -1 EBADF (Bad file descriptor) [pid 5932] close(23) = -1 EBADF (Bad file descriptor) [pid 5932] close(24) = -1 EBADF (Bad file descriptor) [pid 5932] close(25) = -1 EBADF (Bad file descriptor) [pid 5932] close(26) = -1 EBADF (Bad file descriptor) [pid 5932] close(27) = -1 EBADF (Bad file descriptor) [pid 5932] close(28) = -1 EBADF (Bad file descriptor) [pid 5932] close(29) = -1 EBADF (Bad file descriptor) [pid 5932] exit_group(0) = ? [pid 5932] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=87, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5836] umount2("./84", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./84", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./84/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./84/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./84/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./84/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./84/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./84/file2") = 0 [pid 5836] umount2("./84/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./84/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./84/binderfs") = 0 [pid 5836] umount2("./84/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./84/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./84/cgroup.net") = 0 [pid 5836] umount2("./84/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./84/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./84/cgroup.cpu") = 0 [pid 5836] umount2("./84/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./84/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./84/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./84") = 0 [pid 5836] mkdir("./85", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5933 attached [pid 5933] set_robust_list(0x5555632376a0, 24) = 0 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 88 [pid 5933] chdir("./85") = 0 [pid 5933] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5933] setpgid(0, 0) = 0 [pid 5933] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5933] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5933] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5933] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5933] write(3, "1000", 4) = 4 [pid 5933] close(3) = 0 [pid 5933] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5933] write(1, "executing program\n", 18) = 18 [pid 5933] memfd_create("syzkaller", 0) = 3 [pid 5933] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5933] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5933] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5933] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5933] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5933] close(3) = 0 [pid 5933] close(4) = 0 [pid 5933] mkdir("./file2", 0777) = 0 [pid 5933] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5933] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5933] chdir("./file2") = 0 [pid 5933] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5933] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5933] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5933] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5933] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5933] close(3) = 0 [pid 5933] close(4) = 0 [pid 5933] close(5) = -1 EBADF (Bad file descriptor) [pid 5933] close(6) = -1 EBADF (Bad file descriptor) [pid 5933] close(7) = -1 EBADF (Bad file descriptor) [pid 5933] close(8) = -1 EBADF (Bad file descriptor) [pid 5933] close(9) = -1 EBADF (Bad file descriptor) [pid 5933] close(10) = -1 EBADF (Bad file descriptor) [pid 5933] close(11) = -1 EBADF (Bad file descriptor) [pid 5933] close(12) = -1 EBADF (Bad file descriptor) [pid 5933] close(13) = -1 EBADF (Bad file descriptor) [pid 5933] close(14) = -1 EBADF (Bad file descriptor) [pid 5933] close(15) = -1 EBADF (Bad file descriptor) [pid 5933] close(16) = -1 EBADF (Bad file descriptor) [pid 5933] close(17) = -1 EBADF (Bad file descriptor) [pid 5933] close(18) = -1 EBADF (Bad file descriptor) [pid 5933] close(19) = -1 EBADF (Bad file descriptor) [pid 5933] close(20) = -1 EBADF (Bad file descriptor) [pid 5933] close(21) = -1 EBADF (Bad file descriptor) [pid 5933] close(22) = -1 EBADF (Bad file descriptor) [pid 5933] close(23) = -1 EBADF (Bad file descriptor) [pid 5933] close(24) = -1 EBADF (Bad file descriptor) [pid 5933] close(25) = -1 EBADF (Bad file descriptor) [pid 5933] close(26) = -1 EBADF (Bad file descriptor) [pid 5933] close(27) = -1 EBADF (Bad file descriptor) [pid 5933] close(28) = -1 EBADF (Bad file descriptor) [pid 5933] close(29) = -1 EBADF (Bad file descriptor) [pid 5933] exit_group(0) = ? [pid 5933] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=88, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5836] umount2("./85", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./85", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [ 145.214270][ T5933] loop0: detected capacity change from 0 to 128 [pid 5836] umount2("./85/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./85/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./85/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./85/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./85/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./85/file2") = 0 [pid 5836] umount2("./85/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./85/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./85/binderfs") = 0 [pid 5836] umount2("./85/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./85/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./85/cgroup.net") = 0 [pid 5836] umount2("./85/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./85/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./85/cgroup.cpu") = 0 [pid 5836] umount2("./85/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./85/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./85/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./85") = 0 [pid 5836] mkdir("./86", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5934 attached [pid 5934] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 89 [pid 5934] <... set_robust_list resumed>) = 0 [pid 5934] chdir("./86") = 0 [pid 5934] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5934] setpgid(0, 0) = 0 [pid 5934] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5934] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5934] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5934] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5934] write(3, "1000", 4) = 4 [pid 5934] close(3) = 0 executing program [pid 5934] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5934] write(1, "executing program\n", 18) = 18 [pid 5934] memfd_create("syzkaller", 0) = 3 [pid 5934] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5934] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5934] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5934] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5934] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5934] close(3) = 0 [pid 5934] close(4) = 0 [pid 5934] mkdir("./file2", 0777) = 0 [pid 5934] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5934] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5934] chdir("./file2") = 0 [pid 5934] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 145.413915][ T5934] loop0: detected capacity change from 0 to 128 [pid 5934] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5934] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5934] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5934] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5934] close(3) = 0 [pid 5934] close(4) = 0 [pid 5934] close(5) = -1 EBADF (Bad file descriptor) [pid 5934] close(6) = -1 EBADF (Bad file descriptor) [pid 5934] close(7) = -1 EBADF (Bad file descriptor) [pid 5934] close(8) = -1 EBADF (Bad file descriptor) [pid 5934] close(9) = -1 EBADF (Bad file descriptor) [pid 5934] close(10) = -1 EBADF (Bad file descriptor) [pid 5934] close(11) = -1 EBADF (Bad file descriptor) [pid 5934] close(12) = -1 EBADF (Bad file descriptor) [pid 5934] close(13) = -1 EBADF (Bad file descriptor) [pid 5934] close(14) = -1 EBADF (Bad file descriptor) [pid 5934] close(15) = -1 EBADF (Bad file descriptor) [pid 5934] close(16) = -1 EBADF (Bad file descriptor) [pid 5934] close(17) = -1 EBADF (Bad file descriptor) [pid 5934] close(18) = -1 EBADF (Bad file descriptor) [pid 5934] close(19) = -1 EBADF (Bad file descriptor) [pid 5934] close(20) = -1 EBADF (Bad file descriptor) [pid 5934] close(21) = -1 EBADF (Bad file descriptor) [pid 5934] close(22) = -1 EBADF (Bad file descriptor) [pid 5934] close(23) = -1 EBADF (Bad file descriptor) [pid 5934] close(24) = -1 EBADF (Bad file descriptor) [pid 5934] close(25) = -1 EBADF (Bad file descriptor) [pid 5934] close(26) = -1 EBADF (Bad file descriptor) [pid 5934] close(27) = -1 EBADF (Bad file descriptor) [pid 5934] close(28) = -1 EBADF (Bad file descriptor) [pid 5934] close(29) = -1 EBADF (Bad file descriptor) [pid 5934] exit_group(0) = ? [pid 5934] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=89, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./86", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./86", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./86/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./86/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./86/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./86/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./86/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./86/file2") = 0 [pid 5836] umount2("./86/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./86/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./86/binderfs") = 0 [pid 5836] umount2("./86/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./86/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./86/cgroup.net") = 0 [pid 5836] umount2("./86/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./86/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./86/cgroup.cpu") = 0 [pid 5836] umount2("./86/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./86/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./86/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./86") = 0 [pid 5836] mkdir("./87", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5935 attached [pid 5935] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 90 [pid 5935] <... set_robust_list resumed>) = 0 [pid 5935] chdir("./87") = 0 [pid 5935] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5935] setpgid(0, 0) = 0 [pid 5935] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5935] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5935] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5935] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5935] write(3, "1000", 4) = 4 [pid 5935] close(3) = 0 [pid 5935] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5935] write(1, "executing program\n", 18executing program ) = 18 [pid 5935] memfd_create("syzkaller", 0) = 3 [pid 5935] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5935] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5935] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5935] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5935] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5935] close(3) = 0 [pid 5935] close(4) = 0 [pid 5935] mkdir("./file2", 0777) = 0 [pid 5935] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5935] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5935] chdir("./file2") = 0 [pid 5935] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5935] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5935] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5935] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5935] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5935] close(3) = 0 [pid 5935] close(4) = 0 [ 145.623776][ T5935] loop0: detected capacity change from 0 to 128 [pid 5935] close(5) = -1 EBADF (Bad file descriptor) [pid 5935] close(6) = -1 EBADF (Bad file descriptor) [pid 5935] close(7) = -1 EBADF (Bad file descriptor) [pid 5935] close(8) = -1 EBADF (Bad file descriptor) [pid 5935] close(9) = -1 EBADF (Bad file descriptor) [pid 5935] close(10) = -1 EBADF (Bad file descriptor) [pid 5935] close(11) = -1 EBADF (Bad file descriptor) [pid 5935] close(12) = -1 EBADF (Bad file descriptor) [pid 5935] close(13) = -1 EBADF (Bad file descriptor) [pid 5935] close(14) = -1 EBADF (Bad file descriptor) [pid 5935] close(15) = -1 EBADF (Bad file descriptor) [pid 5935] close(16) = -1 EBADF (Bad file descriptor) [pid 5935] close(17) = -1 EBADF (Bad file descriptor) [pid 5935] close(18) = -1 EBADF (Bad file descriptor) [pid 5935] close(19) = -1 EBADF (Bad file descriptor) [pid 5935] close(20) = -1 EBADF (Bad file descriptor) [pid 5935] close(21) = -1 EBADF (Bad file descriptor) [pid 5935] close(22) = -1 EBADF (Bad file descriptor) [pid 5935] close(23) = -1 EBADF (Bad file descriptor) [pid 5935] close(24) = -1 EBADF (Bad file descriptor) [pid 5935] close(25) = -1 EBADF (Bad file descriptor) [pid 5935] close(26) = -1 EBADF (Bad file descriptor) [pid 5935] close(27) = -1 EBADF (Bad file descriptor) [pid 5935] close(28) = -1 EBADF (Bad file descriptor) [pid 5935] close(29) = -1 EBADF (Bad file descriptor) [pid 5935] exit_group(0) = ? [pid 5935] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=90, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./87", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./87", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./87/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./87/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./87/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./87/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./87/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./87/file2") = 0 [pid 5836] umount2("./87/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./87/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./87/binderfs") = 0 [pid 5836] umount2("./87/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./87/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./87/cgroup.net") = 0 [pid 5836] umount2("./87/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./87/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./87/cgroup.cpu") = 0 [pid 5836] umount2("./87/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./87/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./87/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./87") = 0 [pid 5836] mkdir("./88", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5936 attached [pid 5936] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 91 [pid 5936] <... set_robust_list resumed>) = 0 [pid 5936] chdir("./88") = 0 [pid 5936] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5936] setpgid(0, 0) = 0 [pid 5936] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5936] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5936] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5936] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5936] write(3, "1000", 4) = 4 [pid 5936] close(3) = 0 [pid 5936] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5936] write(1, "executing program\n", 18) = 18 [pid 5936] memfd_create("syzkaller", 0) = 3 [pid 5936] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5936] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5936] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5936] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5936] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5936] close(3) = 0 [pid 5936] close(4) = 0 [pid 5936] mkdir("./file2", 0777) = 0 [pid 5936] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5936] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5936] chdir("./file2") = 0 [pid 5936] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5936] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5936] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5936] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5936] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5936] close(3) = 0 [pid 5936] close(4) = 0 [pid 5936] close(5) = -1 EBADF (Bad file descriptor) [pid 5936] close(6) = -1 EBADF (Bad file descriptor) [pid 5936] close(7) = -1 EBADF (Bad file descriptor) [pid 5936] close(8) = -1 EBADF (Bad file descriptor) [pid 5936] close(9) = -1 EBADF (Bad file descriptor) [pid 5936] close(10) = -1 EBADF (Bad file descriptor) [pid 5936] close(11) = -1 EBADF (Bad file descriptor) [pid 5936] close(12) = -1 EBADF (Bad file descriptor) [pid 5936] close(13) = -1 EBADF (Bad file descriptor) [pid 5936] close(14) = -1 EBADF (Bad file descriptor) [pid 5936] close(15) = -1 EBADF (Bad file descriptor) [pid 5936] close(16) = -1 EBADF (Bad file descriptor) [pid 5936] close(17) = -1 EBADF (Bad file descriptor) [pid 5936] close(18) = -1 EBADF (Bad file descriptor) [pid 5936] close(19) = -1 EBADF (Bad file descriptor) [pid 5936] close(20) = -1 EBADF (Bad file descriptor) [pid 5936] close(21) = -1 EBADF (Bad file descriptor) [pid 5936] close(22) = -1 EBADF (Bad file descriptor) [pid 5936] close(23) = -1 EBADF (Bad file descriptor) [pid 5936] close(24) = -1 EBADF (Bad file descriptor) [pid 5936] close(25) = -1 EBADF (Bad file descriptor) [pid 5936] close(26) = -1 EBADF (Bad file descriptor) [pid 5936] close(27) = -1 EBADF (Bad file descriptor) [pid 5936] close(28) = -1 EBADF (Bad file descriptor) [pid 5936] close(29) = -1 EBADF (Bad file descriptor) [pid 5936] exit_group(0) = ? [pid 5936] +++ exited with 0 +++ [ 146.127640][ T5936] loop0: detected capacity change from 0 to 128 [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=91, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./88", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./88", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./88/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./88/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./88/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./88/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./88/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./88/file2") = 0 [pid 5836] umount2("./88/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./88/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./88/binderfs") = 0 [pid 5836] umount2("./88/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./88/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./88/cgroup.net") = 0 [pid 5836] umount2("./88/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./88/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./88/cgroup.cpu") = 0 [pid 5836] umount2("./88/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./88/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./88/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./88") = 0 [pid 5836] mkdir("./89", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5937 attached [pid 5937] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 92 [pid 5937] <... set_robust_list resumed>) = 0 [pid 5937] chdir("./89") = 0 [pid 5937] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5937] setpgid(0, 0) = 0 [pid 5937] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5937] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5937] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5937] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5937] write(3, "1000", 4) = 4 [pid 5937] close(3) = 0 [pid 5937] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5937] write(1, "executing program\n", 18) = 18 [pid 5937] memfd_create("syzkaller", 0) = 3 [pid 5937] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5937] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5937] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5937] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5937] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5937] close(3) = 0 [pid 5937] close(4) = 0 [pid 5937] mkdir("./file2", 0777) = 0 [pid 5937] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5937] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5937] chdir("./file2") = 0 [pid 5937] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5937] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5937] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5937] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5937] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5937] close(3) = 0 [pid 5937] close(4) = 0 [ 146.724932][ T5937] loop0: detected capacity change from 0 to 128 [pid 5937] close(5) = -1 EBADF (Bad file descriptor) [pid 5937] close(6) = -1 EBADF (Bad file descriptor) [pid 5937] close(7) = -1 EBADF (Bad file descriptor) [pid 5937] close(8) = -1 EBADF (Bad file descriptor) [pid 5937] close(9) = -1 EBADF (Bad file descriptor) [pid 5937] close(10) = -1 EBADF (Bad file descriptor) [pid 5937] close(11) = -1 EBADF (Bad file descriptor) [pid 5937] close(12) = -1 EBADF (Bad file descriptor) [pid 5937] close(13) = -1 EBADF (Bad file descriptor) [pid 5937] close(14) = -1 EBADF (Bad file descriptor) [pid 5937] close(15) = -1 EBADF (Bad file descriptor) [pid 5937] close(16) = -1 EBADF (Bad file descriptor) [pid 5937] close(17) = -1 EBADF (Bad file descriptor) [pid 5937] close(18) = -1 EBADF (Bad file descriptor) [pid 5937] close(19) = -1 EBADF (Bad file descriptor) [pid 5937] close(20) = -1 EBADF (Bad file descriptor) [pid 5937] close(21) = -1 EBADF (Bad file descriptor) [pid 5937] close(22) = -1 EBADF (Bad file descriptor) [pid 5937] close(23) = -1 EBADF (Bad file descriptor) [pid 5937] close(24) = -1 EBADF (Bad file descriptor) [pid 5937] close(25) = -1 EBADF (Bad file descriptor) [pid 5937] close(26) = -1 EBADF (Bad file descriptor) [pid 5937] close(27) = -1 EBADF (Bad file descriptor) [pid 5937] close(28) = -1 EBADF (Bad file descriptor) [pid 5937] close(29) = -1 EBADF (Bad file descriptor) [pid 5937] exit_group(0) = ? [pid 5937] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=92, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./89", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./89", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./89/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./89/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./89/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./89/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./89/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./89/file2") = 0 [pid 5836] umount2("./89/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./89/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./89/binderfs") = 0 [pid 5836] umount2("./89/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./89/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./89/cgroup.net") = 0 [pid 5836] umount2("./89/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./89/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./89/cgroup.cpu") = 0 [pid 5836] umount2("./89/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./89/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./89/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./89") = 0 [pid 5836] mkdir("./90", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5938 attached [pid 5938] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 93 [pid 5938] <... set_robust_list resumed>) = 0 [pid 5938] chdir("./90") = 0 [pid 5938] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5938] setpgid(0, 0) = 0 [pid 5938] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5938] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5938] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5938] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5938] write(3, "1000", 4) = 4 [pid 5938] close(3) = 0 [pid 5938] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5938] write(1, "executing program\n", 18executing program ) = 18 [pid 5938] memfd_create("syzkaller", 0) = 3 [pid 5938] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5938] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5938] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5938] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5938] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5938] close(3) = 0 [pid 5938] close(4) = 0 [pid 5938] mkdir("./file2", 0777) = 0 [pid 5938] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5938] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5938] chdir("./file2") = 0 [pid 5938] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5938] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5938] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5938] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [ 146.913156][ T5938] loop0: detected capacity change from 0 to 128 [pid 5938] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5938] close(3) = 0 [pid 5938] close(4) = 0 [pid 5938] close(5) = -1 EBADF (Bad file descriptor) [pid 5938] close(6) = -1 EBADF (Bad file descriptor) [pid 5938] close(7) = -1 EBADF (Bad file descriptor) [pid 5938] close(8) = -1 EBADF (Bad file descriptor) [pid 5938] close(9) = -1 EBADF (Bad file descriptor) [pid 5938] close(10) = -1 EBADF (Bad file descriptor) [pid 5938] close(11) = -1 EBADF (Bad file descriptor) [pid 5938] close(12) = -1 EBADF (Bad file descriptor) [pid 5938] close(13) = -1 EBADF (Bad file descriptor) [pid 5938] close(14) = -1 EBADF (Bad file descriptor) [pid 5938] close(15) = -1 EBADF (Bad file descriptor) [pid 5938] close(16) = -1 EBADF (Bad file descriptor) [pid 5938] close(17) = -1 EBADF (Bad file descriptor) [pid 5938] close(18) = -1 EBADF (Bad file descriptor) [pid 5938] close(19) = -1 EBADF (Bad file descriptor) [pid 5938] close(20) = -1 EBADF (Bad file descriptor) [pid 5938] close(21) = -1 EBADF (Bad file descriptor) [pid 5938] close(22) = -1 EBADF (Bad file descriptor) [pid 5938] close(23) = -1 EBADF (Bad file descriptor) [pid 5938] close(24) = -1 EBADF (Bad file descriptor) [pid 5938] close(25) = -1 EBADF (Bad file descriptor) [pid 5938] close(26) = -1 EBADF (Bad file descriptor) [pid 5938] close(27) = -1 EBADF (Bad file descriptor) [pid 5938] close(28) = -1 EBADF (Bad file descriptor) [pid 5938] close(29) = -1 EBADF (Bad file descriptor) [pid 5938] exit_group(0) = ? [pid 5938] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=93, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./90", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./90", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./90/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./90/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./90/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./90/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./90/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./90/file2") = 0 [pid 5836] umount2("./90/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./90/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./90/binderfs") = 0 [pid 5836] umount2("./90/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./90/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./90/cgroup.net") = 0 [pid 5836] umount2("./90/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./90/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./90/cgroup.cpu") = 0 [pid 5836] umount2("./90/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./90/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./90/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./90") = 0 [pid 5836] mkdir("./91", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5939 attached [pid 5939] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 94 [pid 5939] <... set_robust_list resumed>) = 0 [pid 5939] chdir("./91") = 0 [pid 5939] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5939] setpgid(0, 0) = 0 [pid 5939] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5939] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5939] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5939] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5939] write(3, "1000", 4) = 4 [pid 5939] close(3) = 0 [pid 5939] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5939] write(1, "executing program\n", 18) = 18 [pid 5939] memfd_create("syzkaller", 0) = 3 [pid 5939] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5939] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5939] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5939] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5939] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5939] close(3) = 0 [pid 5939] close(4) = 0 [pid 5939] mkdir("./file2", 0777) = 0 [pid 5939] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5939] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5939] chdir("./file2") = 0 [pid 5939] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5939] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5939] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5939] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5939] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5939] close(3) = 0 [pid 5939] close(4) = 0 [pid 5939] close(5) = -1 EBADF (Bad file descriptor) [pid 5939] close(6) = -1 EBADF (Bad file descriptor) [pid 5939] close(7) = -1 EBADF (Bad file descriptor) [pid 5939] close(8) = -1 EBADF (Bad file descriptor) [pid 5939] close(9) = -1 EBADF (Bad file descriptor) [pid 5939] close(10) = -1 EBADF (Bad file descriptor) [pid 5939] close(11) = -1 EBADF (Bad file descriptor) [pid 5939] close(12) = -1 EBADF (Bad file descriptor) [pid 5939] close(13) = -1 EBADF (Bad file descriptor) [pid 5939] close(14) = -1 EBADF (Bad file descriptor) [pid 5939] close(15) = -1 EBADF (Bad file descriptor) [pid 5939] close(16) = -1 EBADF (Bad file descriptor) [ 147.445598][ T5939] loop0: detected capacity change from 0 to 128 [pid 5939] close(17) = -1 EBADF (Bad file descriptor) [pid 5939] close(18) = -1 EBADF (Bad file descriptor) [pid 5939] close(19) = -1 EBADF (Bad file descriptor) [pid 5939] close(20) = -1 EBADF (Bad file descriptor) [pid 5939] close(21) = -1 EBADF (Bad file descriptor) [pid 5939] close(22) = -1 EBADF (Bad file descriptor) [pid 5939] close(23) = -1 EBADF (Bad file descriptor) [pid 5939] close(24) = -1 EBADF (Bad file descriptor) [pid 5939] close(25) = -1 EBADF (Bad file descriptor) [pid 5939] close(26) = -1 EBADF (Bad file descriptor) [pid 5939] close(27) = -1 EBADF (Bad file descriptor) [pid 5939] close(28) = -1 EBADF (Bad file descriptor) [pid 5939] close(29) = -1 EBADF (Bad file descriptor) [pid 5939] exit_group(0) = ? [pid 5939] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=94, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] umount2("./91", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./91", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./91/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./91/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./91/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./91/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./91/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./91/file2") = 0 [pid 5836] umount2("./91/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./91/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./91/binderfs") = 0 [pid 5836] umount2("./91/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./91/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./91/cgroup.net") = 0 [pid 5836] umount2("./91/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./91/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./91/cgroup.cpu") = 0 [pid 5836] umount2("./91/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./91/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./91/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./91") = 0 [pid 5836] mkdir("./92", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5940 attached [pid 5940] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 95 [pid 5940] <... set_robust_list resumed>) = 0 [pid 5940] chdir("./92") = 0 [pid 5940] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5940] setpgid(0, 0) = 0 [pid 5940] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5940] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5940] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5940] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5940] write(3, "1000", 4) = 4 [pid 5940] close(3) = 0 [pid 5940] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5940] write(1, "executing program\n", 18) = 18 [pid 5940] memfd_create("syzkaller", 0) = 3 [pid 5940] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5940] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5940] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5940] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5940] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5940] close(3) = 0 [pid 5940] close(4) = 0 [pid 5940] mkdir("./file2", 0777) = 0 [pid 5940] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5940] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5940] chdir("./file2") = 0 [pid 5940] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5940] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5940] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5940] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5940] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [ 147.968255][ T5940] loop0: detected capacity change from 0 to 128 [pid 5940] close(3) = 0 [pid 5940] close(4) = 0 [pid 5940] close(5) = -1 EBADF (Bad file descriptor) [pid 5940] close(6) = -1 EBADF (Bad file descriptor) [pid 5940] close(7) = -1 EBADF (Bad file descriptor) [pid 5940] close(8) = -1 EBADF (Bad file descriptor) [pid 5940] close(9) = -1 EBADF (Bad file descriptor) [pid 5940] close(10) = -1 EBADF (Bad file descriptor) [pid 5940] close(11) = -1 EBADF (Bad file descriptor) [pid 5940] close(12) = -1 EBADF (Bad file descriptor) [pid 5940] close(13) = -1 EBADF (Bad file descriptor) [pid 5940] close(14) = -1 EBADF (Bad file descriptor) [pid 5940] close(15) = -1 EBADF (Bad file descriptor) [pid 5940] close(16) = -1 EBADF (Bad file descriptor) [pid 5940] close(17) = -1 EBADF (Bad file descriptor) [pid 5940] close(18) = -1 EBADF (Bad file descriptor) [pid 5940] close(19) = -1 EBADF (Bad file descriptor) [pid 5940] close(20) = -1 EBADF (Bad file descriptor) [pid 5940] close(21) = -1 EBADF (Bad file descriptor) [pid 5940] close(22) = -1 EBADF (Bad file descriptor) [pid 5940] close(23) = -1 EBADF (Bad file descriptor) [pid 5940] close(24) = -1 EBADF (Bad file descriptor) [pid 5940] close(25) = -1 EBADF (Bad file descriptor) [pid 5940] close(26) = -1 EBADF (Bad file descriptor) [pid 5940] close(27) = -1 EBADF (Bad file descriptor) [pid 5940] close(28) = -1 EBADF (Bad file descriptor) [pid 5940] close(29) = -1 EBADF (Bad file descriptor) [pid 5940] exit_group(0) = ? [pid 5940] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=95, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./92", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./92", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./92/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./92/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./92/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./92/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./92/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./92/file2") = 0 [pid 5836] umount2("./92/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./92/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./92/binderfs") = 0 [pid 5836] umount2("./92/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./92/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./92/cgroup.net") = 0 [pid 5836] umount2("./92/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./92/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./92/cgroup.cpu") = 0 [pid 5836] umount2("./92/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./92/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./92/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./92") = 0 [pid 5836] mkdir("./93", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5941 attached [pid 5941] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 96 [pid 5941] <... set_robust_list resumed>) = 0 [pid 5941] chdir("./93") = 0 [pid 5941] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5941] setpgid(0, 0) = 0 [pid 5941] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5941] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5941] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5941] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5941] write(3, "1000", 4) = 4 [pid 5941] close(3) = 0 [pid 5941] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5941] write(1, "executing program\n", 18) = 18 [pid 5941] memfd_create("syzkaller", 0) = 3 [pid 5941] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5941] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5941] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5941] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5941] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5941] close(3) = 0 [pid 5941] close(4) = 0 [pid 5941] mkdir("./file2", 0777) = 0 [pid 5941] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5941] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5941] chdir("./file2") = 0 [pid 5941] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5941] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5941] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5941] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [ 148.557912][ T5941] loop0: detected capacity change from 0 to 128 [pid 5941] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5941] close(3) = 0 [pid 5941] close(4) = 0 [pid 5941] close(5) = -1 EBADF (Bad file descriptor) [pid 5941] close(6) = -1 EBADF (Bad file descriptor) [pid 5941] close(7) = -1 EBADF (Bad file descriptor) [pid 5941] close(8) = -1 EBADF (Bad file descriptor) [pid 5941] close(9) = -1 EBADF (Bad file descriptor) [pid 5941] close(10) = -1 EBADF (Bad file descriptor) [pid 5941] close(11) = -1 EBADF (Bad file descriptor) [pid 5941] close(12) = -1 EBADF (Bad file descriptor) [pid 5941] close(13) = -1 EBADF (Bad file descriptor) [pid 5941] close(14) = -1 EBADF (Bad file descriptor) [pid 5941] close(15) = -1 EBADF (Bad file descriptor) [pid 5941] close(16) = -1 EBADF (Bad file descriptor) [pid 5941] close(17) = -1 EBADF (Bad file descriptor) [pid 5941] close(18) = -1 EBADF (Bad file descriptor) [pid 5941] close(19) = -1 EBADF (Bad file descriptor) [pid 5941] close(20) = -1 EBADF (Bad file descriptor) [pid 5941] close(21) = -1 EBADF (Bad file descriptor) [pid 5941] close(22) = -1 EBADF (Bad file descriptor) [pid 5941] close(23) = -1 EBADF (Bad file descriptor) [pid 5941] close(24) = -1 EBADF (Bad file descriptor) [pid 5941] close(25) = -1 EBADF (Bad file descriptor) [pid 5941] close(26) = -1 EBADF (Bad file descriptor) [pid 5941] close(27) = -1 EBADF (Bad file descriptor) [pid 5941] close(28) = -1 EBADF (Bad file descriptor) [pid 5941] close(29) = -1 EBADF (Bad file descriptor) [pid 5941] exit_group(0) = ? [pid 5941] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=96, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./93", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./93", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./93/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./93/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./93/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./93/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./93/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./93/file2") = 0 [pid 5836] umount2("./93/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./93/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./93/binderfs") = 0 [pid 5836] umount2("./93/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./93/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./93/cgroup.net") = 0 [pid 5836] umount2("./93/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./93/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./93/cgroup.cpu") = 0 [pid 5836] umount2("./93/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./93/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./93/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./93") = 0 [pid 5836] mkdir("./94", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5942 attached [pid 5942] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 97 [pid 5942] <... set_robust_list resumed>) = 0 [pid 5942] chdir("./94") = 0 [pid 5942] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5942] setpgid(0, 0) = 0 [pid 5942] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5942] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5942] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5942] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5942] write(3, "1000", 4) = 4 [pid 5942] close(3) = 0 [pid 5942] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5942] write(1, "executing program\n", 18executing program ) = 18 [pid 5942] memfd_create("syzkaller", 0) = 3 [pid 5942] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5942] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5942] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5942] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5942] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5942] close(3) = 0 [pid 5942] close(4) = 0 [pid 5942] mkdir("./file2", 0777) = 0 [pid 5942] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5942] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5942] chdir("./file2") = 0 [pid 5942] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5942] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5942] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5942] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5942] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [ 149.059238][ T5942] loop0: detected capacity change from 0 to 128 [pid 5942] close(3) = 0 [pid 5942] close(4) = 0 [pid 5942] close(5) = -1 EBADF (Bad file descriptor) [pid 5942] close(6) = -1 EBADF (Bad file descriptor) [pid 5942] close(7) = -1 EBADF (Bad file descriptor) [pid 5942] close(8) = -1 EBADF (Bad file descriptor) [pid 5942] close(9) = -1 EBADF (Bad file descriptor) [pid 5942] close(10) = -1 EBADF (Bad file descriptor) [pid 5942] close(11) = -1 EBADF (Bad file descriptor) [pid 5942] close(12) = -1 EBADF (Bad file descriptor) [pid 5942] close(13) = -1 EBADF (Bad file descriptor) [pid 5942] close(14) = -1 EBADF (Bad file descriptor) [pid 5942] close(15) = -1 EBADF (Bad file descriptor) [pid 5942] close(16) = -1 EBADF (Bad file descriptor) [pid 5942] close(17) = -1 EBADF (Bad file descriptor) [pid 5942] close(18) = -1 EBADF (Bad file descriptor) [pid 5942] close(19) = -1 EBADF (Bad file descriptor) [pid 5942] close(20) = -1 EBADF (Bad file descriptor) [pid 5942] close(21) = -1 EBADF (Bad file descriptor) [pid 5942] close(22) = -1 EBADF (Bad file descriptor) [pid 5942] close(23) = -1 EBADF (Bad file descriptor) [pid 5942] close(24) = -1 EBADF (Bad file descriptor) [pid 5942] close(25) = -1 EBADF (Bad file descriptor) [pid 5942] close(26) = -1 EBADF (Bad file descriptor) [pid 5942] close(27) = -1 EBADF (Bad file descriptor) [pid 5942] close(28) = -1 EBADF (Bad file descriptor) [pid 5942] close(29) = -1 EBADF (Bad file descriptor) [pid 5942] exit_group(0) = ? [pid 5942] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=97, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] umount2("./94", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./94", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./94/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./94/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./94/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./94/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./94/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./94/file2") = 0 [pid 5836] umount2("./94/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./94/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./94/binderfs") = 0 [pid 5836] umount2("./94/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./94/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./94/cgroup.net") = 0 [pid 5836] umount2("./94/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./94/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./94/cgroup.cpu") = 0 [pid 5836] umount2("./94/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./94/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./94/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./94") = 0 [pid 5836] mkdir("./95", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5943 attached [pid 5943] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 98 [pid 5943] <... set_robust_list resumed>) = 0 [pid 5943] chdir("./95") = 0 [pid 5943] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5943] setpgid(0, 0) = 0 [pid 5943] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5943] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5943] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5943] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5943] write(3, "1000", 4) = 4 [pid 5943] close(3) = 0 [pid 5943] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5943] write(1, "executing program\n", 18executing program ) = 18 [pid 5943] memfd_create("syzkaller", 0) = 3 [pid 5943] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5943] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5943] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5943] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5943] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5943] close(3) = 0 [pid 5943] close(4) = 0 [pid 5943] mkdir("./file2", 0777) = 0 [pid 5943] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5943] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5943] chdir("./file2") = 0 [pid 5943] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5943] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5943] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5943] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5943] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5943] close(3) = 0 [pid 5943] close(4) = 0 [pid 5943] close(5) = -1 EBADF (Bad file descriptor) [pid 5943] close(6) = -1 EBADF (Bad file descriptor) [pid 5943] close(7) = -1 EBADF (Bad file descriptor) [pid 5943] close(8) = -1 EBADF (Bad file descriptor) [pid 5943] close(9) = -1 EBADF (Bad file descriptor) [pid 5943] close(10) = -1 EBADF (Bad file descriptor) [pid 5943] close(11) = -1 EBADF (Bad file descriptor) [pid 5943] close(12) = -1 EBADF (Bad file descriptor) [pid 5943] close(13) = -1 EBADF (Bad file descriptor) [pid 5943] close(14) = -1 EBADF (Bad file descriptor) [pid 5943] close(15) = -1 EBADF (Bad file descriptor) [pid 5943] close(16) = -1 EBADF (Bad file descriptor) [pid 5943] close(17) = -1 EBADF (Bad file descriptor) [pid 5943] close(18) = -1 EBADF (Bad file descriptor) [pid 5943] close(19) = -1 EBADF (Bad file descriptor) [pid 5943] close(20) = -1 EBADF (Bad file descriptor) [pid 5943] close(21) = -1 EBADF (Bad file descriptor) [pid 5943] close(22) = -1 EBADF (Bad file descriptor) [pid 5943] close(23) = -1 EBADF (Bad file descriptor) [pid 5943] close(24) = -1 EBADF (Bad file descriptor) [pid 5943] close(25) = -1 EBADF (Bad file descriptor) [pid 5943] close(26) = -1 EBADF (Bad file descriptor) [pid 5943] close(27) = -1 EBADF (Bad file descriptor) [pid 5943] close(28) = -1 EBADF (Bad file descriptor) [pid 5943] close(29) = -1 EBADF (Bad file descriptor) [ 149.340713][ T5943] loop0: detected capacity change from 0 to 128 [pid 5943] exit_group(0) = ? [pid 5943] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=98, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./95", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./95", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./95/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./95/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./95/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./95/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./95/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./95/file2") = 0 [pid 5836] umount2("./95/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./95/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./95/binderfs") = 0 [pid 5836] umount2("./95/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./95/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./95/cgroup.net") = 0 [pid 5836] umount2("./95/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./95/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./95/cgroup.cpu") = 0 [pid 5836] umount2("./95/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./95/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./95/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./95") = 0 [pid 5836] mkdir("./96", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5944 attached [pid 5944] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 99 [pid 5944] <... set_robust_list resumed>) = 0 [pid 5944] chdir("./96") = 0 [pid 5944] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5944] setpgid(0, 0) = 0 [pid 5944] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5944] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5944] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5944] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5944] write(3, "1000", 4) = 4 [pid 5944] close(3) = 0 [pid 5944] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5944] write(1, "executing program\n", 18executing program ) = 18 [pid 5944] memfd_create("syzkaller", 0) = 3 [pid 5944] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5944] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5944] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5944] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5944] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5944] close(3) = 0 [pid 5944] close(4) = 0 [pid 5944] mkdir("./file2", 0777) = 0 [pid 5944] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5944] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5944] chdir("./file2") = 0 [pid 5944] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5944] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5944] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5944] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5944] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5944] close(3) = 0 [pid 5944] close(4) = 0 [pid 5944] close(5) = -1 EBADF (Bad file descriptor) [pid 5944] close(6) = -1 EBADF (Bad file descriptor) [pid 5944] close(7) = -1 EBADF (Bad file descriptor) [pid 5944] close(8) = -1 EBADF (Bad file descriptor) [pid 5944] close(9) = -1 EBADF (Bad file descriptor) [pid 5944] close(10) = -1 EBADF (Bad file descriptor) [pid 5944] close(11) = -1 EBADF (Bad file descriptor) [pid 5944] close(12) = -1 EBADF (Bad file descriptor) [pid 5944] close(13) = -1 EBADF (Bad file descriptor) [pid 5944] close(14) = -1 EBADF (Bad file descriptor) [pid 5944] close(15) = -1 EBADF (Bad file descriptor) [pid 5944] close(16) = -1 EBADF (Bad file descriptor) [pid 5944] close(17) = -1 EBADF (Bad file descriptor) [pid 5944] close(18) = -1 EBADF (Bad file descriptor) [pid 5944] close(19) = -1 EBADF (Bad file descriptor) [pid 5944] close(20) = -1 EBADF (Bad file descriptor) [pid 5944] close(21) = -1 EBADF (Bad file descriptor) [pid 5944] close(22) = -1 EBADF (Bad file descriptor) [pid 5944] close(23) = -1 EBADF (Bad file descriptor) [pid 5944] close(24) = -1 EBADF (Bad file descriptor) [pid 5944] close(25) = -1 EBADF (Bad file descriptor) [ 149.730547][ T5944] loop0: detected capacity change from 0 to 128 [pid 5944] close(26) = -1 EBADF (Bad file descriptor) [pid 5944] close(27) = -1 EBADF (Bad file descriptor) [pid 5944] close(28) = -1 EBADF (Bad file descriptor) [pid 5944] close(29) = -1 EBADF (Bad file descriptor) [pid 5944] exit_group(0) = ? [pid 5944] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=99, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] umount2("./96", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./96", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./96/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./96/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./96/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./96/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./96/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./96/file2") = 0 [pid 5836] umount2("./96/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./96/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./96/binderfs") = 0 [pid 5836] umount2("./96/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./96/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./96/cgroup.net") = 0 [pid 5836] umount2("./96/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./96/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./96/cgroup.cpu") = 0 [pid 5836] umount2("./96/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./96/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./96/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./96") = 0 [pid 5836] mkdir("./97", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5945 attached , child_tidptr=0x555563237690) = 100 [pid 5945] set_robust_list(0x5555632376a0, 24) = 0 [pid 5945] chdir("./97") = 0 [pid 5945] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5945] setpgid(0, 0) = 0 [pid 5945] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5945] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5945] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5945] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5945] write(3, "1000", 4) = 4 [pid 5945] close(3) = 0 [pid 5945] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5945] write(1, "executing program\n", 18) = 18 [pid 5945] memfd_create("syzkaller", 0) = 3 [pid 5945] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5945] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5945] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5945] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5945] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5945] close(3) = 0 [pid 5945] close(4) = 0 [pid 5945] mkdir("./file2", 0777) = 0 [pid 5945] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5945] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5945] chdir("./file2") = 0 [pid 5945] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5945] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5945] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5945] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5945] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5945] close(3) = 0 [pid 5945] close(4) = 0 [pid 5945] close(5) = -1 EBADF (Bad file descriptor) [pid 5945] close(6) = -1 EBADF (Bad file descriptor) [ 149.905170][ T5945] loop0: detected capacity change from 0 to 128 [pid 5945] close(7) = -1 EBADF (Bad file descriptor) [pid 5945] close(8) = -1 EBADF (Bad file descriptor) [pid 5945] close(9) = -1 EBADF (Bad file descriptor) [pid 5945] close(10) = -1 EBADF (Bad file descriptor) [pid 5945] close(11) = -1 EBADF (Bad file descriptor) [pid 5945] close(12) = -1 EBADF (Bad file descriptor) [pid 5945] close(13) = -1 EBADF (Bad file descriptor) [pid 5945] close(14) = -1 EBADF (Bad file descriptor) [pid 5945] close(15) = -1 EBADF (Bad file descriptor) [pid 5945] close(16) = -1 EBADF (Bad file descriptor) [pid 5945] close(17) = -1 EBADF (Bad file descriptor) [pid 5945] close(18) = -1 EBADF (Bad file descriptor) [pid 5945] close(19) = -1 EBADF (Bad file descriptor) [pid 5945] close(20) = -1 EBADF (Bad file descriptor) [pid 5945] close(21) = -1 EBADF (Bad file descriptor) [pid 5945] close(22) = -1 EBADF (Bad file descriptor) [pid 5945] close(23) = -1 EBADF (Bad file descriptor) [pid 5945] close(24) = -1 EBADF (Bad file descriptor) [pid 5945] close(25) = -1 EBADF (Bad file descriptor) [pid 5945] close(26) = -1 EBADF (Bad file descriptor) [pid 5945] close(27) = -1 EBADF (Bad file descriptor) [pid 5945] close(28) = -1 EBADF (Bad file descriptor) [pid 5945] close(29) = -1 EBADF (Bad file descriptor) [pid 5945] exit_group(0) = ? [pid 5945] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=100, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5836] umount2("./97", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./97", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./97/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./97/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./97/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./97/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./97/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./97/file2") = 0 [pid 5836] umount2("./97/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./97/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./97/binderfs") = 0 [pid 5836] umount2("./97/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./97/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./97/cgroup.net") = 0 [pid 5836] umount2("./97/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./97/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./97/cgroup.cpu") = 0 [pid 5836] umount2("./97/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./97/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./97/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./97") = 0 [pid 5836] mkdir("./98", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5946 attached [pid 5946] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 101 [pid 5946] <... set_robust_list resumed>) = 0 [pid 5946] chdir("./98") = 0 [pid 5946] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5946] setpgid(0, 0) = 0 [pid 5946] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5946] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5946] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5946] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5946] write(3, "1000", 4) = 4 [pid 5946] close(3) = 0 [pid 5946] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5946] write(1, "executing program\n", 18) = 18 [pid 5946] memfd_create("syzkaller", 0) = 3 [pid 5946] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5946] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5946] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5946] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5946] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5946] close(3) = 0 [pid 5946] close(4) = 0 [pid 5946] mkdir("./file2", 0777) = 0 [pid 5946] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5946] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5946] chdir("./file2") = 0 [pid 5946] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 150.468411][ T5946] loop0: detected capacity change from 0 to 128 [pid 5946] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5946] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5946] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5946] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5946] close(3) = 0 [pid 5946] close(4) = 0 [pid 5946] close(5) = -1 EBADF (Bad file descriptor) [pid 5946] close(6) = -1 EBADF (Bad file descriptor) [pid 5946] close(7) = -1 EBADF (Bad file descriptor) [pid 5946] close(8) = -1 EBADF (Bad file descriptor) [pid 5946] close(9) = -1 EBADF (Bad file descriptor) [pid 5946] close(10) = -1 EBADF (Bad file descriptor) [pid 5946] close(11) = -1 EBADF (Bad file descriptor) [pid 5946] close(12) = -1 EBADF (Bad file descriptor) [pid 5946] close(13) = -1 EBADF (Bad file descriptor) [pid 5946] close(14) = -1 EBADF (Bad file descriptor) [pid 5946] close(15) = -1 EBADF (Bad file descriptor) [pid 5946] close(16) = -1 EBADF (Bad file descriptor) [pid 5946] close(17) = -1 EBADF (Bad file descriptor) [pid 5946] close(18) = -1 EBADF (Bad file descriptor) [pid 5946] close(19) = -1 EBADF (Bad file descriptor) [pid 5946] close(20) = -1 EBADF (Bad file descriptor) [pid 5946] close(21) = -1 EBADF (Bad file descriptor) [pid 5946] close(22) = -1 EBADF (Bad file descriptor) [pid 5946] close(23) = -1 EBADF (Bad file descriptor) [pid 5946] close(24) = -1 EBADF (Bad file descriptor) [pid 5946] close(25) = -1 EBADF (Bad file descriptor) [pid 5946] close(26) = -1 EBADF (Bad file descriptor) [pid 5946] close(27) = -1 EBADF (Bad file descriptor) [pid 5946] close(28) = -1 EBADF (Bad file descriptor) [pid 5946] close(29) = -1 EBADF (Bad file descriptor) [pid 5946] exit_group(0) = ? [pid 5946] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=101, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] umount2("./98", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./98", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./98/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./98/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./98/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./98/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./98/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./98/file2") = 0 [pid 5836] umount2("./98/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./98/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./98/binderfs") = 0 [pid 5836] umount2("./98/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./98/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./98/cgroup.net") = 0 [pid 5836] umount2("./98/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./98/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./98/cgroup.cpu") = 0 [pid 5836] umount2("./98/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./98/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./98/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./98") = 0 [pid 5836] mkdir("./99", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5947 attached [pid 5947] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 102 [pid 5947] <... set_robust_list resumed>) = 0 [pid 5947] chdir("./99") = 0 [pid 5947] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5947] setpgid(0, 0) = 0 [pid 5947] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5947] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5947] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5947] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5947] write(3, "1000", 4) = 4 [pid 5947] close(3) = 0 [pid 5947] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5947] write(1, "executing program\n", 18executing program ) = 18 [pid 5947] memfd_create("syzkaller", 0) = 3 [pid 5947] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5947] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5947] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5947] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5947] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5947] close(3) = 0 [pid 5947] close(4) = 0 [pid 5947] mkdir("./file2", 0777) = 0 [pid 5947] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5947] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5947] chdir("./file2") = 0 [pid 5947] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5947] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5947] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5947] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5947] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5947] close(3) = 0 [pid 5947] close(4) = 0 [pid 5947] close(5) = -1 EBADF (Bad file descriptor) [pid 5947] close(6) = -1 EBADF (Bad file descriptor) [pid 5947] close(7) = -1 EBADF (Bad file descriptor) [pid 5947] close(8) = -1 EBADF (Bad file descriptor) [pid 5947] close(9) = -1 EBADF (Bad file descriptor) [pid 5947] close(10) = -1 EBADF (Bad file descriptor) [pid 5947] close(11) = -1 EBADF (Bad file descriptor) [pid 5947] close(12) = -1 EBADF (Bad file descriptor) [pid 5947] close(13) = -1 EBADF (Bad file descriptor) [pid 5947] close(14) = -1 EBADF (Bad file descriptor) [pid 5947] close(15) = -1 EBADF (Bad file descriptor) [pid 5947] close(16) = -1 EBADF (Bad file descriptor) [pid 5947] close(17) = -1 EBADF (Bad file descriptor) [pid 5947] close(18) = -1 EBADF (Bad file descriptor) [pid 5947] close(19) = -1 EBADF (Bad file descriptor) [pid 5947] close(20) = -1 EBADF (Bad file descriptor) [pid 5947] close(21) = -1 EBADF (Bad file descriptor) [pid 5947] close(22) = -1 EBADF (Bad file descriptor) [ 151.067994][ T5947] loop0: detected capacity change from 0 to 128 [pid 5947] close(23) = -1 EBADF (Bad file descriptor) [pid 5947] close(24) = -1 EBADF (Bad file descriptor) [pid 5947] close(25) = -1 EBADF (Bad file descriptor) [pid 5947] close(26) = -1 EBADF (Bad file descriptor) [pid 5947] close(27) = -1 EBADF (Bad file descriptor) [pid 5947] close(28) = -1 EBADF (Bad file descriptor) [pid 5947] close(29) = -1 EBADF (Bad file descriptor) [pid 5947] exit_group(0) = ? [pid 5947] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=102, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./99", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./99", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./99/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./99/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./99/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./99/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./99/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./99/file2") = 0 [pid 5836] umount2("./99/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./99/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./99/binderfs") = 0 [pid 5836] umount2("./99/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./99/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./99/cgroup.net") = 0 [pid 5836] umount2("./99/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./99/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./99/cgroup.cpu") = 0 [pid 5836] umount2("./99/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./99/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./99/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./99") = 0 [pid 5836] mkdir("./100", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5948 attached [pid 5948] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 103 [pid 5948] <... set_robust_list resumed>) = 0 [pid 5948] chdir("./100") = 0 [pid 5948] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5948] setpgid(0, 0) = 0 [pid 5948] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5948] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5948] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5948] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5948] write(3, "1000", 4) = 4 [pid 5948] close(3) = 0 [pid 5948] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5948] write(1, "executing program\n", 18executing program ) = 18 [pid 5948] memfd_create("syzkaller", 0) = 3 [pid 5948] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5948] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5948] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5948] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5948] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5948] close(3) = 0 [pid 5948] close(4) = 0 [pid 5948] mkdir("./file2", 0777) = 0 [pid 5948] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5948] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [ 151.337551][ T5948] loop0: detected capacity change from 0 to 128 [pid 5948] chdir("./file2") = 0 [pid 5948] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5948] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5948] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5948] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5948] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5948] close(3) = 0 [pid 5948] close(4) = 0 [pid 5948] close(5) = -1 EBADF (Bad file descriptor) [pid 5948] close(6) = -1 EBADF (Bad file descriptor) [pid 5948] close(7) = -1 EBADF (Bad file descriptor) [pid 5948] close(8) = -1 EBADF (Bad file descriptor) [pid 5948] close(9) = -1 EBADF (Bad file descriptor) [pid 5948] close(10) = -1 EBADF (Bad file descriptor) [pid 5948] close(11) = -1 EBADF (Bad file descriptor) [pid 5948] close(12) = -1 EBADF (Bad file descriptor) [pid 5948] close(13) = -1 EBADF (Bad file descriptor) [pid 5948] close(14) = -1 EBADF (Bad file descriptor) [pid 5948] close(15) = -1 EBADF (Bad file descriptor) [pid 5948] close(16) = -1 EBADF (Bad file descriptor) [pid 5948] close(17) = -1 EBADF (Bad file descriptor) [pid 5948] close(18) = -1 EBADF (Bad file descriptor) [pid 5948] close(19) = -1 EBADF (Bad file descriptor) [pid 5948] close(20) = -1 EBADF (Bad file descriptor) [pid 5948] close(21) = -1 EBADF (Bad file descriptor) [pid 5948] close(22) = -1 EBADF (Bad file descriptor) [pid 5948] close(23) = -1 EBADF (Bad file descriptor) [pid 5948] close(24) = -1 EBADF (Bad file descriptor) [pid 5948] close(25) = -1 EBADF (Bad file descriptor) [pid 5948] close(26) = -1 EBADF (Bad file descriptor) [pid 5948] close(27) = -1 EBADF (Bad file descriptor) [pid 5948] close(28) = -1 EBADF (Bad file descriptor) [pid 5948] close(29) = -1 EBADF (Bad file descriptor) [pid 5948] exit_group(0) = ? [pid 5948] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=103, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5836] umount2("./100", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./100", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./100/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./100/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./100/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./100/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./100/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./100/file2") = 0 [pid 5836] umount2("./100/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./100/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./100/binderfs") = 0 [pid 5836] umount2("./100/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./100/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./100/cgroup.net") = 0 [pid 5836] umount2("./100/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./100/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./100/cgroup.cpu") = 0 [pid 5836] umount2("./100/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./100/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./100/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./100") = 0 [pid 5836] mkdir("./101", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5949 attached [pid 5949] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 104 [pid 5949] <... set_robust_list resumed>) = 0 [pid 5949] chdir("./101") = 0 [pid 5949] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5949] setpgid(0, 0) = 0 [pid 5949] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5949] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5949] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5949] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5949] write(3, "1000", 4) = 4 [pid 5949] close(3) = 0 [pid 5949] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5949] write(1, "executing program\n", 18) = 18 [pid 5949] memfd_create("syzkaller", 0) = 3 [pid 5949] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5949] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5949] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5949] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5949] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5949] close(3) = 0 [pid 5949] close(4) = 0 [pid 5949] mkdir("./file2", 0777) = 0 [pid 5949] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5949] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5949] chdir("./file2") = 0 [pid 5949] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5949] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5949] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5949] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5949] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5949] close(3) = 0 [ 151.951836][ T5949] loop0: detected capacity change from 0 to 128 [pid 5949] close(4) = 0 [pid 5949] close(5) = -1 EBADF (Bad file descriptor) [pid 5949] close(6) = -1 EBADF (Bad file descriptor) [pid 5949] close(7) = -1 EBADF (Bad file descriptor) [pid 5949] close(8) = -1 EBADF (Bad file descriptor) [pid 5949] close(9) = -1 EBADF (Bad file descriptor) [pid 5949] close(10) = -1 EBADF (Bad file descriptor) [pid 5949] close(11) = -1 EBADF (Bad file descriptor) [pid 5949] close(12) = -1 EBADF (Bad file descriptor) [pid 5949] close(13) = -1 EBADF (Bad file descriptor) [pid 5949] close(14) = -1 EBADF (Bad file descriptor) [pid 5949] close(15) = -1 EBADF (Bad file descriptor) [pid 5949] close(16) = -1 EBADF (Bad file descriptor) [pid 5949] close(17) = -1 EBADF (Bad file descriptor) [pid 5949] close(18) = -1 EBADF (Bad file descriptor) [pid 5949] close(19) = -1 EBADF (Bad file descriptor) [pid 5949] close(20) = -1 EBADF (Bad file descriptor) [pid 5949] close(21) = -1 EBADF (Bad file descriptor) [pid 5949] close(22) = -1 EBADF (Bad file descriptor) [pid 5949] close(23) = -1 EBADF (Bad file descriptor) [pid 5949] close(24) = -1 EBADF (Bad file descriptor) [pid 5949] close(25) = -1 EBADF (Bad file descriptor) [pid 5949] close(26) = -1 EBADF (Bad file descriptor) [pid 5949] close(27) = -1 EBADF (Bad file descriptor) [pid 5949] close(28) = -1 EBADF (Bad file descriptor) [pid 5949] close(29) = -1 EBADF (Bad file descriptor) [pid 5949] exit_group(0) = ? [pid 5949] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=104, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5836] umount2("./101", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./101", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./101/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./101/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./101/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./101/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./101/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./101/file2") = 0 [pid 5836] umount2("./101/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./101/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./101/binderfs") = 0 [pid 5836] umount2("./101/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./101/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./101/cgroup.net") = 0 [pid 5836] umount2("./101/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./101/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./101/cgroup.cpu") = 0 [pid 5836] umount2("./101/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./101/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./101/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./101") = 0 [pid 5836] mkdir("./102", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5950 attached [pid 5950] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 105 [pid 5950] <... set_robust_list resumed>) = 0 [pid 5950] chdir("./102") = 0 [pid 5950] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5950] setpgid(0, 0) = 0 [pid 5950] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5950] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5950] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5950] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5950] write(3, "1000", 4) = 4 [pid 5950] close(3) = 0 [pid 5950] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5950] write(1, "executing program\n", 18executing program ) = 18 [pid 5950] memfd_create("syzkaller", 0) = 3 [pid 5950] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5950] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5950] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5950] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5950] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5950] close(3) = 0 [pid 5950] close(4) = 0 [pid 5950] mkdir("./file2", 0777) = 0 [pid 5950] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5950] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5950] chdir("./file2") = 0 [pid 5950] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5950] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5950] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5950] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5950] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5950] close(3) = 0 [pid 5950] close(4) = 0 [ 152.520297][ T5950] loop0: detected capacity change from 0 to 128 [pid 5950] close(5) = -1 EBADF (Bad file descriptor) [pid 5950] close(6) = -1 EBADF (Bad file descriptor) [pid 5950] close(7) = -1 EBADF (Bad file descriptor) [pid 5950] close(8) = -1 EBADF (Bad file descriptor) [pid 5950] close(9) = -1 EBADF (Bad file descriptor) [pid 5950] close(10) = -1 EBADF (Bad file descriptor) [pid 5950] close(11) = -1 EBADF (Bad file descriptor) [pid 5950] close(12) = -1 EBADF (Bad file descriptor) [pid 5950] close(13) = -1 EBADF (Bad file descriptor) [pid 5950] close(14) = -1 EBADF (Bad file descriptor) [pid 5950] close(15) = -1 EBADF (Bad file descriptor) [pid 5950] close(16) = -1 EBADF (Bad file descriptor) [pid 5950] close(17) = -1 EBADF (Bad file descriptor) [pid 5950] close(18) = -1 EBADF (Bad file descriptor) [pid 5950] close(19) = -1 EBADF (Bad file descriptor) [pid 5950] close(20) = -1 EBADF (Bad file descriptor) [pid 5950] close(21) = -1 EBADF (Bad file descriptor) [pid 5950] close(22) = -1 EBADF (Bad file descriptor) [pid 5950] close(23) = -1 EBADF (Bad file descriptor) [pid 5950] close(24) = -1 EBADF (Bad file descriptor) [pid 5950] close(25) = -1 EBADF (Bad file descriptor) [pid 5950] close(26) = -1 EBADF (Bad file descriptor) [pid 5950] close(27) = -1 EBADF (Bad file descriptor) [pid 5950] close(28) = -1 EBADF (Bad file descriptor) [pid 5950] close(29) = -1 EBADF (Bad file descriptor) [pid 5950] exit_group(0) = ? [pid 5950] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=105, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] umount2("./102", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./102", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./102/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./102/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./102/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./102/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./102/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./102/file2") = 0 [pid 5836] umount2("./102/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./102/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./102/binderfs") = 0 [pid 5836] umount2("./102/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./102/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./102/cgroup.net") = 0 [pid 5836] umount2("./102/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./102/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./102/cgroup.cpu") = 0 [pid 5836] umount2("./102/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./102/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./102/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./102") = 0 [pid 5836] mkdir("./103", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5951 attached [pid 5951] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 106 [pid 5951] <... set_robust_list resumed>) = 0 [pid 5951] chdir("./103") = 0 [pid 5951] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5951] setpgid(0, 0) = 0 [pid 5951] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5951] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5951] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5951] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5951] write(3, "1000", 4) = 4 [pid 5951] close(3) = 0 [pid 5951] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5951] write(1, "executing program\n", 18) = 18 [pid 5951] memfd_create("syzkaller", 0) = 3 [pid 5951] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5951] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5951] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5951] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5951] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5951] close(3) = 0 [pid 5951] close(4) = 0 [pid 5951] mkdir("./file2", 0777) = 0 [pid 5951] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5951] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5951] chdir("./file2") = 0 [pid 5951] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 153.057073][ T5951] loop0: detected capacity change from 0 to 128 [pid 5951] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5951] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5951] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5951] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5951] close(3) = 0 [pid 5951] close(4) = 0 [pid 5951] close(5) = -1 EBADF (Bad file descriptor) [pid 5951] close(6) = -1 EBADF (Bad file descriptor) [pid 5951] close(7) = -1 EBADF (Bad file descriptor) [pid 5951] close(8) = -1 EBADF (Bad file descriptor) [pid 5951] close(9) = -1 EBADF (Bad file descriptor) [pid 5951] close(10) = -1 EBADF (Bad file descriptor) [pid 5951] close(11) = -1 EBADF (Bad file descriptor) [pid 5951] close(12) = -1 EBADF (Bad file descriptor) [pid 5951] close(13) = -1 EBADF (Bad file descriptor) [pid 5951] close(14) = -1 EBADF (Bad file descriptor) [pid 5951] close(15) = -1 EBADF (Bad file descriptor) [pid 5951] close(16) = -1 EBADF (Bad file descriptor) [pid 5951] close(17) = -1 EBADF (Bad file descriptor) [pid 5951] close(18) = -1 EBADF (Bad file descriptor) [pid 5951] close(19) = -1 EBADF (Bad file descriptor) [pid 5951] close(20) = -1 EBADF (Bad file descriptor) [pid 5951] close(21) = -1 EBADF (Bad file descriptor) [pid 5951] close(22) = -1 EBADF (Bad file descriptor) [pid 5951] close(23) = -1 EBADF (Bad file descriptor) [pid 5951] close(24) = -1 EBADF (Bad file descriptor) [pid 5951] close(25) = -1 EBADF (Bad file descriptor) [pid 5951] close(26) = -1 EBADF (Bad file descriptor) [pid 5951] close(27) = -1 EBADF (Bad file descriptor) [pid 5951] close(28) = -1 EBADF (Bad file descriptor) [pid 5951] close(29) = -1 EBADF (Bad file descriptor) [pid 5951] exit_group(0) = ? [pid 5951] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=106, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] umount2("./103", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./103", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./103/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./103/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./103/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./103/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./103/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./103/file2") = 0 [pid 5836] umount2("./103/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./103/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./103/binderfs") = 0 [pid 5836] umount2("./103/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./103/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./103/cgroup.net") = 0 [pid 5836] umount2("./103/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./103/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./103/cgroup.cpu") = 0 [pid 5836] umount2("./103/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./103/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./103/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./103") = 0 [pid 5836] mkdir("./104", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5952 attached [pid 5952] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 107 [pid 5952] <... set_robust_list resumed>) = 0 [pid 5952] chdir("./104") = 0 [pid 5952] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5952] setpgid(0, 0) = 0 [pid 5952] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5952] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5952] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5952] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5952] write(3, "1000", 4) = 4 [pid 5952] close(3) = 0 [pid 5952] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5952] write(1, "executing program\n", 18executing program ) = 18 [pid 5952] memfd_create("syzkaller", 0) = 3 [pid 5952] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5952] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5952] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5952] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5952] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5952] close(3) = 0 [pid 5952] close(4) = 0 [pid 5952] mkdir("./file2", 0777) = 0 [pid 5952] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [ 153.589290][ T5952] loop0: detected capacity change from 0 to 128 [pid 5952] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5952] chdir("./file2") = 0 [pid 5952] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5952] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5952] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5952] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5952] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5952] close(3) = 0 [pid 5952] close(4) = 0 [pid 5952] close(5) = -1 EBADF (Bad file descriptor) [pid 5952] close(6) = -1 EBADF (Bad file descriptor) [pid 5952] close(7) = -1 EBADF (Bad file descriptor) [pid 5952] close(8) = -1 EBADF (Bad file descriptor) [pid 5952] close(9) = -1 EBADF (Bad file descriptor) [pid 5952] close(10) = -1 EBADF (Bad file descriptor) [pid 5952] close(11) = -1 EBADF (Bad file descriptor) [pid 5952] close(12) = -1 EBADF (Bad file descriptor) [pid 5952] close(13) = -1 EBADF (Bad file descriptor) [pid 5952] close(14) = -1 EBADF (Bad file descriptor) [pid 5952] close(15) = -1 EBADF (Bad file descriptor) [pid 5952] close(16) = -1 EBADF (Bad file descriptor) [pid 5952] close(17) = -1 EBADF (Bad file descriptor) [pid 5952] close(18) = -1 EBADF (Bad file descriptor) [pid 5952] close(19) = -1 EBADF (Bad file descriptor) [pid 5952] close(20) = -1 EBADF (Bad file descriptor) [pid 5952] close(21) = -1 EBADF (Bad file descriptor) [pid 5952] close(22) = -1 EBADF (Bad file descriptor) [pid 5952] close(23) = -1 EBADF (Bad file descriptor) [pid 5952] close(24) = -1 EBADF (Bad file descriptor) [pid 5952] close(25) = -1 EBADF (Bad file descriptor) [pid 5952] close(26) = -1 EBADF (Bad file descriptor) [pid 5952] close(27) = -1 EBADF (Bad file descriptor) [pid 5952] close(28) = -1 EBADF (Bad file descriptor) [pid 5952] close(29) = -1 EBADF (Bad file descriptor) [pid 5952] exit_group(0) = ? [pid 5952] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=107, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./104", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./104", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./104/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./104/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./104/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./104/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./104/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./104/file2") = 0 [pid 5836] umount2("./104/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./104/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./104/binderfs") = 0 [pid 5836] umount2("./104/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./104/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./104/cgroup.net") = 0 [pid 5836] umount2("./104/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./104/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./104/cgroup.cpu") = 0 [pid 5836] umount2("./104/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./104/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./104/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./104") = 0 [pid 5836] mkdir("./105", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5953 attached , child_tidptr=0x555563237690) = 108 [pid 5953] set_robust_list(0x5555632376a0, 24) = 0 [pid 5953] chdir("./105") = 0 [pid 5953] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5953] setpgid(0, 0) = 0 [pid 5953] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5953] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5953] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5953] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5953] write(3, "1000", 4) = 4 [pid 5953] close(3) = 0 [pid 5953] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5953] write(1, "executing program\n", 18) = 18 [pid 5953] memfd_create("syzkaller", 0executing program ) = 3 [pid 5953] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5953] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5953] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5953] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5953] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5953] close(3) = 0 [pid 5953] close(4) = 0 [pid 5953] mkdir("./file2", 0777) = 0 [pid 5953] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5953] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5953] chdir("./file2") = 0 [pid 5953] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5953] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5953] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5953] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5953] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5953] close(3) = 0 [pid 5953] close(4) = 0 [pid 5953] close(5) = -1 EBADF (Bad file descriptor) [pid 5953] close(6) = -1 EBADF (Bad file descriptor) [pid 5953] close(7) = -1 EBADF (Bad file descriptor) [pid 5953] close(8) = -1 EBADF (Bad file descriptor) [pid 5953] close(9) = -1 EBADF (Bad file descriptor) [pid 5953] close(10) = -1 EBADF (Bad file descriptor) [pid 5953] close(11) = -1 EBADF (Bad file descriptor) [pid 5953] close(12) = -1 EBADF (Bad file descriptor) [pid 5953] close(13) = -1 EBADF (Bad file descriptor) [pid 5953] close(14) = -1 EBADF (Bad file descriptor) [pid 5953] close(15) = -1 EBADF (Bad file descriptor) [pid 5953] close(16) = -1 EBADF (Bad file descriptor) [pid 5953] close(17) = -1 EBADF (Bad file descriptor) [pid 5953] close(18) = -1 EBADF (Bad file descriptor) [pid 5953] close(19) = -1 EBADF (Bad file descriptor) [pid 5953] close(20) = -1 EBADF (Bad file descriptor) [pid 5953] close(21) = -1 EBADF (Bad file descriptor) [pid 5953] close(22) = -1 EBADF (Bad file descriptor) [pid 5953] close(23) = -1 EBADF (Bad file descriptor) [pid 5953] close(24) = -1 EBADF (Bad file descriptor) [pid 5953] close(25) = -1 EBADF (Bad file descriptor) [pid 5953] close(26) = -1 EBADF (Bad file descriptor) [pid 5953] close(27) = -1 EBADF (Bad file descriptor) [pid 5953] close(28) = -1 EBADF (Bad file descriptor) [pid 5953] close(29) = -1 EBADF (Bad file descriptor) [pid 5953] exit_group(0) = ? [ 154.172406][ T5953] loop0: detected capacity change from 0 to 128 [pid 5953] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=108, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] umount2("./105", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./105", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./105/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./105/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./105/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./105/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./105/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./105/file2") = 0 [pid 5836] umount2("./105/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./105/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./105/binderfs") = 0 [pid 5836] umount2("./105/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./105/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./105/cgroup.net") = 0 [pid 5836] umount2("./105/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./105/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./105/cgroup.cpu") = 0 [pid 5836] umount2("./105/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./105/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./105/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./105") = 0 [pid 5836] mkdir("./106", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5954 attached [pid 5954] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 109 [pid 5954] <... set_robust_list resumed>) = 0 [pid 5954] chdir("./106") = 0 [pid 5954] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5954] setpgid(0, 0) = 0 [pid 5954] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5954] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5954] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5954] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5954] write(3, "1000", 4) = 4 [pid 5954] close(3) = 0 [pid 5954] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5954] write(1, "executing program\n", 18) = 18 [pid 5954] memfd_create("syzkaller", 0) = 3 [pid 5954] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5954] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5954] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5954] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5954] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5954] close(3) = 0 [pid 5954] close(4) = 0 [pid 5954] mkdir("./file2", 0777) = 0 [pid 5954] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5954] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5954] chdir("./file2") = 0 [pid 5954] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5954] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5954] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5954] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5954] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5954] close(3) = 0 [pid 5954] close(4) = 0 [pid 5954] close(5) = -1 EBADF (Bad file descriptor) [pid 5954] close(6) = -1 EBADF (Bad file descriptor) [pid 5954] close(7) = -1 EBADF (Bad file descriptor) [pid 5954] close(8) = -1 EBADF (Bad file descriptor) [pid 5954] close(9) = -1 EBADF (Bad file descriptor) [pid 5954] close(10) = -1 EBADF (Bad file descriptor) [pid 5954] close(11) = -1 EBADF (Bad file descriptor) [pid 5954] close(12) = -1 EBADF (Bad file descriptor) [pid 5954] close(13) = -1 EBADF (Bad file descriptor) [pid 5954] close(14) = -1 EBADF (Bad file descriptor) [pid 5954] close(15) = -1 EBADF (Bad file descriptor) [pid 5954] close(16) = -1 EBADF (Bad file descriptor) [pid 5954] close(17) = -1 EBADF (Bad file descriptor) [pid 5954] close(18) = -1 EBADF (Bad file descriptor) [pid 5954] close(19) = -1 EBADF (Bad file descriptor) [pid 5954] close(20) = -1 EBADF (Bad file descriptor) [pid 5954] close(21) = -1 EBADF (Bad file descriptor) [pid 5954] close(22) = -1 EBADF (Bad file descriptor) [pid 5954] close(23) = -1 EBADF (Bad file descriptor) [pid 5954] close(24) = -1 EBADF (Bad file descriptor) [pid 5954] close(25) = -1 EBADF (Bad file descriptor) [pid 5954] close(26) = -1 EBADF (Bad file descriptor) [pid 5954] close(27) = -1 EBADF (Bad file descriptor) [pid 5954] close(28) = -1 EBADF (Bad file descriptor) [pid 5954] close(29) = -1 EBADF (Bad file descriptor) [ 154.696258][ T5954] loop0: detected capacity change from 0 to 128 [pid 5954] exit_group(0) = ? [pid 5954] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=109, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./106", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./106", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./106/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./106/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./106/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./106/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./106/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./106/file2") = 0 [pid 5836] umount2("./106/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./106/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./106/binderfs") = 0 [pid 5836] umount2("./106/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./106/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./106/cgroup.net") = 0 [pid 5836] umount2("./106/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./106/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./106/cgroup.cpu") = 0 [pid 5836] umount2("./106/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./106/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./106/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./106") = 0 [pid 5836] mkdir("./107", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5955 attached [pid 5955] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 110 [pid 5955] <... set_robust_list resumed>) = 0 [pid 5955] chdir("./107") = 0 [pid 5955] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5955] setpgid(0, 0) = 0 [pid 5955] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5955] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5955] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5955] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5955] write(3, "1000", 4) = 4 [pid 5955] close(3) = 0 [pid 5955] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5955] write(1, "executing program\n", 18) = 18 [pid 5955] memfd_create("syzkaller", 0) = 3 [pid 5955] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5955] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5955] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5955] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5955] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5955] close(3) = 0 [pid 5955] close(4) = 0 [pid 5955] mkdir("./file2", 0777) = 0 [pid 5955] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5955] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5955] chdir("./file2") = 0 [ 155.180566][ T5955] loop0: detected capacity change from 0 to 128 [pid 5955] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5955] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5955] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5955] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5955] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5955] close(3) = 0 [pid 5955] close(4) = 0 [pid 5955] close(5) = -1 EBADF (Bad file descriptor) [pid 5955] close(6) = -1 EBADF (Bad file descriptor) [pid 5955] close(7) = -1 EBADF (Bad file descriptor) [pid 5955] close(8) = -1 EBADF (Bad file descriptor) [pid 5955] close(9) = -1 EBADF (Bad file descriptor) [pid 5955] close(10) = -1 EBADF (Bad file descriptor) [pid 5955] close(11) = -1 EBADF (Bad file descriptor) [pid 5955] close(12) = -1 EBADF (Bad file descriptor) [pid 5955] close(13) = -1 EBADF (Bad file descriptor) [pid 5955] close(14) = -1 EBADF (Bad file descriptor) [pid 5955] close(15) = -1 EBADF (Bad file descriptor) [pid 5955] close(16) = -1 EBADF (Bad file descriptor) [pid 5955] close(17) = -1 EBADF (Bad file descriptor) [pid 5955] close(18) = -1 EBADF (Bad file descriptor) [pid 5955] close(19) = -1 EBADF (Bad file descriptor) [pid 5955] close(20) = -1 EBADF (Bad file descriptor) [pid 5955] close(21) = -1 EBADF (Bad file descriptor) [pid 5955] close(22) = -1 EBADF (Bad file descriptor) [pid 5955] close(23) = -1 EBADF (Bad file descriptor) [pid 5955] close(24) = -1 EBADF (Bad file descriptor) [pid 5955] close(25) = -1 EBADF (Bad file descriptor) [pid 5955] close(26) = -1 EBADF (Bad file descriptor) [pid 5955] close(27) = -1 EBADF (Bad file descriptor) [pid 5955] close(28) = -1 EBADF (Bad file descriptor) [pid 5955] close(29) = -1 EBADF (Bad file descriptor) [pid 5955] exit_group(0) = ? [pid 5955] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=110, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5836] umount2("./107", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./107", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./107/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./107/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./107/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./107/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./107/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./107/file2") = 0 [pid 5836] umount2("./107/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./107/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./107/binderfs") = 0 [pid 5836] umount2("./107/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./107/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./107/cgroup.net") = 0 [pid 5836] umount2("./107/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./107/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./107/cgroup.cpu") = 0 [pid 5836] umount2("./107/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./107/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./107/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./107") = 0 [pid 5836] mkdir("./108", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5956 attached [pid 5956] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 111 [pid 5956] <... set_robust_list resumed>) = 0 [pid 5956] chdir("./108") = 0 [pid 5956] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5956] setpgid(0, 0) = 0 [pid 5956] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5956] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5956] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5956] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5956] write(3, "1000", 4) = 4 [pid 5956] close(3) = 0 [pid 5956] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5956] write(1, "executing program\n", 18) = 18 [pid 5956] memfd_create("syzkaller", 0) = 3 [pid 5956] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5956] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5956] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5956] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5956] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5956] close(3) = 0 [pid 5956] close(4) = 0 [pid 5956] mkdir("./file2", 0777) = 0 [pid 5956] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5956] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5956] chdir("./file2") = 0 [pid 5956] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 155.776842][ T5956] loop0: detected capacity change from 0 to 128 [pid 5956] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5956] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5956] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5956] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5956] close(3) = 0 [pid 5956] close(4) = 0 [pid 5956] close(5) = -1 EBADF (Bad file descriptor) [pid 5956] close(6) = -1 EBADF (Bad file descriptor) [pid 5956] close(7) = -1 EBADF (Bad file descriptor) [pid 5956] close(8) = -1 EBADF (Bad file descriptor) [pid 5956] close(9) = -1 EBADF (Bad file descriptor) [pid 5956] close(10) = -1 EBADF (Bad file descriptor) [pid 5956] close(11) = -1 EBADF (Bad file descriptor) [pid 5956] close(12) = -1 EBADF (Bad file descriptor) [pid 5956] close(13) = -1 EBADF (Bad file descriptor) [pid 5956] close(14) = -1 EBADF (Bad file descriptor) [pid 5956] close(15) = -1 EBADF (Bad file descriptor) [pid 5956] close(16) = -1 EBADF (Bad file descriptor) [pid 5956] close(17) = -1 EBADF (Bad file descriptor) [pid 5956] close(18) = -1 EBADF (Bad file descriptor) [pid 5956] close(19) = -1 EBADF (Bad file descriptor) [pid 5956] close(20) = -1 EBADF (Bad file descriptor) [pid 5956] close(21) = -1 EBADF (Bad file descriptor) [pid 5956] close(22) = -1 EBADF (Bad file descriptor) [pid 5956] close(23) = -1 EBADF (Bad file descriptor) [pid 5956] close(24) = -1 EBADF (Bad file descriptor) [pid 5956] close(25) = -1 EBADF (Bad file descriptor) [pid 5956] close(26) = -1 EBADF (Bad file descriptor) [pid 5956] close(27) = -1 EBADF (Bad file descriptor) [pid 5956] close(28) = -1 EBADF (Bad file descriptor) [pid 5956] close(29) = -1 EBADF (Bad file descriptor) [pid 5956] exit_group(0) = ? [pid 5956] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=111, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./108", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./108", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./108/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./108/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./108/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./108/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./108/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./108/file2") = 0 [pid 5836] umount2("./108/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./108/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./108/binderfs") = 0 [pid 5836] umount2("./108/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./108/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./108/cgroup.net") = 0 [pid 5836] umount2("./108/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./108/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./108/cgroup.cpu") = 0 [pid 5836] umount2("./108/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./108/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./108/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./108") = 0 [pid 5836] mkdir("./109", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5957 attached , child_tidptr=0x555563237690) = 112 [pid 5957] set_robust_list(0x5555632376a0, 24) = 0 [pid 5957] chdir("./109") = 0 [pid 5957] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5957] setpgid(0, 0) = 0 [pid 5957] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5957] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5957] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5957] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5957] write(3, "1000", 4) = 4 [pid 5957] close(3) = 0 [pid 5957] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5957] write(1, "executing program\n", 18executing program ) = 18 [pid 5957] memfd_create("syzkaller", 0) = 3 [pid 5957] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5957] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5957] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5957] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5957] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5957] close(3) = 0 [pid 5957] close(4) = 0 [pid 5957] mkdir("./file2", 0777) = 0 [pid 5957] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5957] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5957] chdir("./file2") = 0 [pid 5957] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 156.389729][ T5957] loop0: detected capacity change from 0 to 128 [pid 5957] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5957] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5957] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5957] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5957] close(3) = 0 [pid 5957] close(4) = 0 [pid 5957] close(5) = -1 EBADF (Bad file descriptor) [pid 5957] close(6) = -1 EBADF (Bad file descriptor) [pid 5957] close(7) = -1 EBADF (Bad file descriptor) [pid 5957] close(8) = -1 EBADF (Bad file descriptor) [pid 5957] close(9) = -1 EBADF (Bad file descriptor) [pid 5957] close(10) = -1 EBADF (Bad file descriptor) [pid 5957] close(11) = -1 EBADF (Bad file descriptor) [pid 5957] close(12) = -1 EBADF (Bad file descriptor) [pid 5957] close(13) = -1 EBADF (Bad file descriptor) [pid 5957] close(14) = -1 EBADF (Bad file descriptor) [pid 5957] close(15) = -1 EBADF (Bad file descriptor) [pid 5957] close(16) = -1 EBADF (Bad file descriptor) [pid 5957] close(17) = -1 EBADF (Bad file descriptor) [pid 5957] close(18) = -1 EBADF (Bad file descriptor) [pid 5957] close(19) = -1 EBADF (Bad file descriptor) [pid 5957] close(20) = -1 EBADF (Bad file descriptor) [pid 5957] close(21) = -1 EBADF (Bad file descriptor) [pid 5957] close(22) = -1 EBADF (Bad file descriptor) [pid 5957] close(23) = -1 EBADF (Bad file descriptor) [pid 5957] close(24) = -1 EBADF (Bad file descriptor) [pid 5957] close(25) = -1 EBADF (Bad file descriptor) [pid 5957] close(26) = -1 EBADF (Bad file descriptor) [pid 5957] close(27) = -1 EBADF (Bad file descriptor) [pid 5957] close(28) = -1 EBADF (Bad file descriptor) [pid 5957] close(29) = -1 EBADF (Bad file descriptor) [pid 5957] exit_group(0) = ? [pid 5957] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=112, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5836] umount2("./109", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./109", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./109/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./109/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./109/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./109/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./109/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./109/file2") = 0 [pid 5836] umount2("./109/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./109/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./109/binderfs") = 0 [pid 5836] umount2("./109/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./109/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./109/cgroup.net") = 0 [pid 5836] umount2("./109/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./109/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./109/cgroup.cpu") = 0 [pid 5836] umount2("./109/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./109/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./109/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./109") = 0 [pid 5836] mkdir("./110", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5958 attached [pid 5958] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 113 [pid 5958] <... set_robust_list resumed>) = 0 [pid 5958] chdir("./110") = 0 [pid 5958] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5958] setpgid(0, 0) = 0 [pid 5958] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5958] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5958] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5958] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5958] write(3, "1000", 4) = 4 [pid 5958] close(3) = 0 [pid 5958] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5958] write(1, "executing program\n", 18) = 18 [pid 5958] memfd_create("syzkaller", 0) = 3 [pid 5958] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5958] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5958] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5958] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5958] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5958] close(3) = 0 [pid 5958] close(4) = 0 [pid 5958] mkdir("./file2", 0777) = 0 [pid 5958] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5958] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5958] chdir("./file2") = 0 [pid 5958] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5958] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5958] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5958] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5958] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5958] close(3) = 0 [pid 5958] close(4) = 0 [pid 5958] close(5) = -1 EBADF (Bad file descriptor) [pid 5958] close(6) = -1 EBADF (Bad file descriptor) [pid 5958] close(7) = -1 EBADF (Bad file descriptor) [pid 5958] close(8) = -1 EBADF (Bad file descriptor) [pid 5958] close(9) = -1 EBADF (Bad file descriptor) [pid 5958] close(10) = -1 EBADF (Bad file descriptor) [pid 5958] close(11) = -1 EBADF (Bad file descriptor) [pid 5958] close(12) = -1 EBADF (Bad file descriptor) [pid 5958] close(13) = -1 EBADF (Bad file descriptor) [pid 5958] close(14) = -1 EBADF (Bad file descriptor) [pid 5958] close(15) = -1 EBADF (Bad file descriptor) [pid 5958] close(16) = -1 EBADF (Bad file descriptor) [pid 5958] close(17) = -1 EBADF (Bad file descriptor) [pid 5958] close(18) = -1 EBADF (Bad file descriptor) [pid 5958] close(19) = -1 EBADF (Bad file descriptor) [pid 5958] close(20) = -1 EBADF (Bad file descriptor) [pid 5958] close(21) = -1 EBADF (Bad file descriptor) [pid 5958] close(22) = -1 EBADF (Bad file descriptor) [pid 5958] close(23) = -1 EBADF (Bad file descriptor) [pid 5958] close(24) = -1 EBADF (Bad file descriptor) [pid 5958] close(25) = -1 EBADF (Bad file descriptor) [pid 5958] close(26) = -1 EBADF (Bad file descriptor) [pid 5958] close(27) = -1 EBADF (Bad file descriptor) [pid 5958] close(28) = -1 EBADF (Bad file descriptor) [pid 5958] close(29) = -1 EBADF (Bad file descriptor) [pid 5958] exit_group(0) = ? [ 157.046979][ T5958] loop0: detected capacity change from 0 to 128 [pid 5958] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=113, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5836] umount2("./110", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./110", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./110/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./110/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./110/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./110/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./110/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./110/file2") = 0 [pid 5836] umount2("./110/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./110/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./110/binderfs") = 0 [pid 5836] umount2("./110/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./110/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./110/cgroup.net") = 0 [pid 5836] umount2("./110/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./110/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./110/cgroup.cpu") = 0 [pid 5836] umount2("./110/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./110/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./110/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./110") = 0 [pid 5836] mkdir("./111", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5959 attached [pid 5959] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 114 [pid 5959] <... set_robust_list resumed>) = 0 [pid 5959] chdir("./111") = 0 [pid 5959] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5959] setpgid(0, 0) = 0 [pid 5959] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5959] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5959] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5959] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5959] write(3, "1000", 4) = 4 [pid 5959] close(3) = 0 [pid 5959] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5959] write(1, "executing program\n", 18) = 18 [pid 5959] memfd_create("syzkaller", 0) = 3 [pid 5959] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5959] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5959] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5959] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5959] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5959] close(3) = 0 [pid 5959] close(4) = 0 [pid 5959] mkdir("./file2", 0777) = 0 [pid 5959] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5959] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5959] chdir("./file2") = 0 [pid 5959] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5959] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5959] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5959] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5959] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5959] close(3) = 0 [pid 5959] close(4) = 0 [pid 5959] close(5) = -1 EBADF (Bad file descriptor) [pid 5959] close(6) = -1 EBADF (Bad file descriptor) [pid 5959] close(7) = -1 EBADF (Bad file descriptor) [pid 5959] close(8) = -1 EBADF (Bad file descriptor) [pid 5959] close(9) = -1 EBADF (Bad file descriptor) [pid 5959] close(10) = -1 EBADF (Bad file descriptor) [ 157.474151][ T5959] loop0: detected capacity change from 0 to 128 [pid 5959] close(11) = -1 EBADF (Bad file descriptor) [pid 5959] close(12) = -1 EBADF (Bad file descriptor) [pid 5959] close(13) = -1 EBADF (Bad file descriptor) [pid 5959] close(14) = -1 EBADF (Bad file descriptor) [pid 5959] close(15) = -1 EBADF (Bad file descriptor) [pid 5959] close(16) = -1 EBADF (Bad file descriptor) [pid 5959] close(17) = -1 EBADF (Bad file descriptor) [pid 5959] close(18) = -1 EBADF (Bad file descriptor) [pid 5959] close(19) = -1 EBADF (Bad file descriptor) [pid 5959] close(20) = -1 EBADF (Bad file descriptor) [pid 5959] close(21) = -1 EBADF (Bad file descriptor) [pid 5959] close(22) = -1 EBADF (Bad file descriptor) [pid 5959] close(23) = -1 EBADF (Bad file descriptor) [pid 5959] close(24) = -1 EBADF (Bad file descriptor) [pid 5959] close(25) = -1 EBADF (Bad file descriptor) [pid 5959] close(26) = -1 EBADF (Bad file descriptor) [pid 5959] close(27) = -1 EBADF (Bad file descriptor) [pid 5959] close(28) = -1 EBADF (Bad file descriptor) [pid 5959] close(29) = -1 EBADF (Bad file descriptor) [pid 5959] exit_group(0) = ? [pid 5959] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=114, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] umount2("./111", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./111", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./111/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./111/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./111/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./111/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./111/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./111/file2") = 0 [pid 5836] umount2("./111/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./111/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./111/binderfs") = 0 [pid 5836] umount2("./111/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./111/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./111/cgroup.net") = 0 [pid 5836] umount2("./111/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./111/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./111/cgroup.cpu") = 0 [pid 5836] umount2("./111/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./111/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./111/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./111") = 0 [pid 5836] mkdir("./112", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5960 attached [pid 5960] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 115 [pid 5960] <... set_robust_list resumed>) = 0 [pid 5960] chdir("./112") = 0 [pid 5960] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5960] setpgid(0, 0) = 0 [pid 5960] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5960] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5960] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5960] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5960] write(3, "1000", 4) = 4 [pid 5960] close(3) = 0 [pid 5960] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5960] write(1, "executing program\n", 18) = 18 [pid 5960] memfd_create("syzkaller", 0) = 3 [pid 5960] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5960] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5960] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5960] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5960] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5960] close(3) = 0 [pid 5960] close(4) = 0 [pid 5960] mkdir("./file2", 0777) = 0 [pid 5960] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5960] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [ 158.052694][ T5960] loop0: detected capacity change from 0 to 128 [pid 5960] chdir("./file2") = 0 [pid 5960] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5960] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5960] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5960] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5960] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5960] close(3) = 0 [pid 5960] close(4) = 0 [pid 5960] close(5) = -1 EBADF (Bad file descriptor) [pid 5960] close(6) = -1 EBADF (Bad file descriptor) [pid 5960] close(7) = -1 EBADF (Bad file descriptor) [pid 5960] close(8) = -1 EBADF (Bad file descriptor) [pid 5960] close(9) = -1 EBADF (Bad file descriptor) [pid 5960] close(10) = -1 EBADF (Bad file descriptor) [pid 5960] close(11) = -1 EBADF (Bad file descriptor) [pid 5960] close(12) = -1 EBADF (Bad file descriptor) [pid 5960] close(13) = -1 EBADF (Bad file descriptor) [pid 5960] close(14) = -1 EBADF (Bad file descriptor) [pid 5960] close(15) = -1 EBADF (Bad file descriptor) [pid 5960] close(16) = -1 EBADF (Bad file descriptor) [pid 5960] close(17) = -1 EBADF (Bad file descriptor) [pid 5960] close(18) = -1 EBADF (Bad file descriptor) [pid 5960] close(19) = -1 EBADF (Bad file descriptor) [pid 5960] close(20) = -1 EBADF (Bad file descriptor) [pid 5960] close(21) = -1 EBADF (Bad file descriptor) [pid 5960] close(22) = -1 EBADF (Bad file descriptor) [pid 5960] close(23) = -1 EBADF (Bad file descriptor) [pid 5960] close(24) = -1 EBADF (Bad file descriptor) [pid 5960] close(25) = -1 EBADF (Bad file descriptor) [pid 5960] close(26) = -1 EBADF (Bad file descriptor) [pid 5960] close(27) = -1 EBADF (Bad file descriptor) [pid 5960] close(28) = -1 EBADF (Bad file descriptor) [pid 5960] close(29) = -1 EBADF (Bad file descriptor) [pid 5960] exit_group(0) = ? [pid 5960] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=115, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./112", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./112", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./112/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./112/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./112/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./112/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./112/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./112/file2") = 0 [pid 5836] umount2("./112/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./112/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./112/binderfs") = 0 [pid 5836] umount2("./112/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./112/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./112/cgroup.net") = 0 [pid 5836] umount2("./112/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./112/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./112/cgroup.cpu") = 0 [pid 5836] umount2("./112/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./112/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./112/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./112") = 0 [pid 5836] mkdir("./113", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5961 attached , child_tidptr=0x555563237690) = 116 [pid 5961] set_robust_list(0x5555632376a0, 24) = 0 [pid 5961] chdir("./113") = 0 [pid 5961] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5961] setpgid(0, 0) = 0 [pid 5961] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5961] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5961] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5961] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5961] write(3, "1000", 4) = 4 [pid 5961] close(3) = 0 [pid 5961] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5961] write(1, "executing program\n", 18) = 18 [pid 5961] memfd_create("syzkaller", 0) = 3 [pid 5961] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5961] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5961] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5961] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5961] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5961] close(3) = 0 [pid 5961] close(4) = 0 [pid 5961] mkdir("./file2", 0777) = 0 [pid 5961] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5961] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5961] chdir("./file2") = 0 [pid 5961] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 158.598561][ T5961] loop0: detected capacity change from 0 to 128 [pid 5961] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5961] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5961] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5961] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5961] close(3) = 0 [pid 5961] close(4) = 0 [pid 5961] close(5) = -1 EBADF (Bad file descriptor) [pid 5961] close(6) = -1 EBADF (Bad file descriptor) [pid 5961] close(7) = -1 EBADF (Bad file descriptor) [pid 5961] close(8) = -1 EBADF (Bad file descriptor) [pid 5961] close(9) = -1 EBADF (Bad file descriptor) [pid 5961] close(10) = -1 EBADF (Bad file descriptor) [pid 5961] close(11) = -1 EBADF (Bad file descriptor) [pid 5961] close(12) = -1 EBADF (Bad file descriptor) [pid 5961] close(13) = -1 EBADF (Bad file descriptor) [pid 5961] close(14) = -1 EBADF (Bad file descriptor) [pid 5961] close(15) = -1 EBADF (Bad file descriptor) [pid 5961] close(16) = -1 EBADF (Bad file descriptor) [pid 5961] close(17) = -1 EBADF (Bad file descriptor) [pid 5961] close(18) = -1 EBADF (Bad file descriptor) [pid 5961] close(19) = -1 EBADF (Bad file descriptor) [pid 5961] close(20) = -1 EBADF (Bad file descriptor) [pid 5961] close(21) = -1 EBADF (Bad file descriptor) [pid 5961] close(22) = -1 EBADF (Bad file descriptor) [pid 5961] close(23) = -1 EBADF (Bad file descriptor) [pid 5961] close(24) = -1 EBADF (Bad file descriptor) [pid 5961] close(25) = -1 EBADF (Bad file descriptor) [pid 5961] close(26) = -1 EBADF (Bad file descriptor) [pid 5961] close(27) = -1 EBADF (Bad file descriptor) [pid 5961] close(28) = -1 EBADF (Bad file descriptor) [pid 5961] close(29) = -1 EBADF (Bad file descriptor) [pid 5961] exit_group(0) = ? [pid 5961] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=116, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5836] umount2("./113", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./113", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./113/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./113/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./113/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./113/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./113/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./113/file2") = 0 [pid 5836] umount2("./113/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./113/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./113/binderfs") = 0 [pid 5836] umount2("./113/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./113/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./113/cgroup.net") = 0 [pid 5836] umount2("./113/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./113/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./113/cgroup.cpu") = 0 [pid 5836] umount2("./113/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./113/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./113/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./113") = 0 [pid 5836] mkdir("./114", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5962 attached [pid 5962] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 117 [pid 5962] <... set_robust_list resumed>) = 0 [pid 5962] chdir("./114") = 0 [pid 5962] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5962] setpgid(0, 0) = 0 [pid 5962] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5962] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5962] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5962] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5962] write(3, "1000", 4) = 4 [pid 5962] close(3) = 0 [pid 5962] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5962] write(1, "executing program\n", 18executing program ) = 18 [pid 5962] memfd_create("syzkaller", 0) = 3 [pid 5962] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5962] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5962] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5962] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5962] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5962] close(3) = 0 [pid 5962] close(4) = 0 [pid 5962] mkdir("./file2", 0777) = 0 [pid 5962] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5962] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5962] chdir("./file2") = 0 [pid 5962] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5962] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5962] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5962] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5962] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5962] close(3) = 0 [ 159.222129][ T5962] loop0: detected capacity change from 0 to 128 [pid 5962] close(4) = 0 [pid 5962] close(5) = -1 EBADF (Bad file descriptor) [pid 5962] close(6) = -1 EBADF (Bad file descriptor) [pid 5962] close(7) = -1 EBADF (Bad file descriptor) [pid 5962] close(8) = -1 EBADF (Bad file descriptor) [pid 5962] close(9) = -1 EBADF (Bad file descriptor) [pid 5962] close(10) = -1 EBADF (Bad file descriptor) [pid 5962] close(11) = -1 EBADF (Bad file descriptor) [pid 5962] close(12) = -1 EBADF (Bad file descriptor) [pid 5962] close(13) = -1 EBADF (Bad file descriptor) [pid 5962] close(14) = -1 EBADF (Bad file descriptor) [pid 5962] close(15) = -1 EBADF (Bad file descriptor) [pid 5962] close(16) = -1 EBADF (Bad file descriptor) [pid 5962] close(17) = -1 EBADF (Bad file descriptor) [pid 5962] close(18) = -1 EBADF (Bad file descriptor) [pid 5962] close(19) = -1 EBADF (Bad file descriptor) [pid 5962] close(20) = -1 EBADF (Bad file descriptor) [pid 5962] close(21) = -1 EBADF (Bad file descriptor) [pid 5962] close(22) = -1 EBADF (Bad file descriptor) [pid 5962] close(23) = -1 EBADF (Bad file descriptor) [pid 5962] close(24) = -1 EBADF (Bad file descriptor) [pid 5962] close(25) = -1 EBADF (Bad file descriptor) [pid 5962] close(26) = -1 EBADF (Bad file descriptor) [pid 5962] close(27) = -1 EBADF (Bad file descriptor) [pid 5962] close(28) = -1 EBADF (Bad file descriptor) [pid 5962] close(29) = -1 EBADF (Bad file descriptor) [pid 5962] exit_group(0) = ? [pid 5962] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=117, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./114", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./114", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./114/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./114/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./114/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./114/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./114/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./114/file2") = 0 [pid 5836] umount2("./114/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./114/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./114/binderfs") = 0 [pid 5836] umount2("./114/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./114/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./114/cgroup.net") = 0 [pid 5836] umount2("./114/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./114/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./114/cgroup.cpu") = 0 [pid 5836] umount2("./114/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./114/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./114/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./114") = 0 [pid 5836] mkdir("./115", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5963 attached [pid 5963] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 118 [pid 5963] <... set_robust_list resumed>) = 0 [pid 5963] chdir("./115") = 0 [pid 5963] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5963] setpgid(0, 0) = 0 [pid 5963] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5963] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5963] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5963] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5963] write(3, "1000", 4) = 4 [pid 5963] close(3) = 0 [pid 5963] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5963] write(1, "executing program\n", 18executing program ) = 18 [pid 5963] memfd_create("syzkaller", 0) = 3 [pid 5963] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5963] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5963] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5963] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5963] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5963] close(3) = 0 [pid 5963] close(4) = 0 [pid 5963] mkdir("./file2", 0777) = 0 [pid 5963] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5963] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5963] chdir("./file2") = 0 [pid 5963] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5963] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5963] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5963] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5963] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5963] close(3) = 0 [ 159.446890][ T5963] loop0: detected capacity change from 0 to 128 [pid 5963] close(4) = 0 [pid 5963] close(5) = -1 EBADF (Bad file descriptor) [pid 5963] close(6) = -1 EBADF (Bad file descriptor) [pid 5963] close(7) = -1 EBADF (Bad file descriptor) [pid 5963] close(8) = -1 EBADF (Bad file descriptor) [pid 5963] close(9) = -1 EBADF (Bad file descriptor) [pid 5963] close(10) = -1 EBADF (Bad file descriptor) [pid 5963] close(11) = -1 EBADF (Bad file descriptor) [pid 5963] close(12) = -1 EBADF (Bad file descriptor) [pid 5963] close(13) = -1 EBADF (Bad file descriptor) [pid 5963] close(14) = -1 EBADF (Bad file descriptor) [pid 5963] close(15) = -1 EBADF (Bad file descriptor) [pid 5963] close(16) = -1 EBADF (Bad file descriptor) [pid 5963] close(17) = -1 EBADF (Bad file descriptor) [pid 5963] close(18) = -1 EBADF (Bad file descriptor) [pid 5963] close(19) = -1 EBADF (Bad file descriptor) [pid 5963] close(20) = -1 EBADF (Bad file descriptor) [pid 5963] close(21) = -1 EBADF (Bad file descriptor) [pid 5963] close(22) = -1 EBADF (Bad file descriptor) [pid 5963] close(23) = -1 EBADF (Bad file descriptor) [pid 5963] close(24) = -1 EBADF (Bad file descriptor) [pid 5963] close(25) = -1 EBADF (Bad file descriptor) [pid 5963] close(26) = -1 EBADF (Bad file descriptor) [pid 5963] close(27) = -1 EBADF (Bad file descriptor) [pid 5963] close(28) = -1 EBADF (Bad file descriptor) [pid 5963] close(29) = -1 EBADF (Bad file descriptor) [pid 5963] exit_group(0) = ? [pid 5963] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=118, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] umount2("./115", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./115", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./115/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./115/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./115/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./115/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./115/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./115/file2") = 0 [pid 5836] umount2("./115/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./115/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./115/binderfs") = 0 [pid 5836] umount2("./115/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./115/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./115/cgroup.net") = 0 [pid 5836] umount2("./115/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./115/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./115/cgroup.cpu") = 0 [pid 5836] umount2("./115/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./115/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./115/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./115") = 0 [pid 5836] mkdir("./116", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5964 attached [pid 5964] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 119 [pid 5964] <... set_robust_list resumed>) = 0 [pid 5964] chdir("./116") = 0 [pid 5964] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5964] setpgid(0, 0) = 0 [pid 5964] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5964] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5964] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5964] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5964] write(3, "1000", 4) = 4 [pid 5964] close(3) = 0 [pid 5964] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5964] write(1, "executing program\n", 18executing program ) = 18 [pid 5964] memfd_create("syzkaller", 0) = 3 [pid 5964] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5964] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5964] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5964] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5964] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5964] close(3) = 0 [pid 5964] close(4) = 0 [pid 5964] mkdir("./file2", 0777) = 0 [pid 5964] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5964] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5964] chdir("./file2") = 0 [pid 5964] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 159.987814][ T5964] loop0: detected capacity change from 0 to 128 [pid 5964] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5964] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5964] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5964] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5964] close(3) = 0 [pid 5964] close(4) = 0 [pid 5964] close(5) = -1 EBADF (Bad file descriptor) [pid 5964] close(6) = -1 EBADF (Bad file descriptor) [pid 5964] close(7) = -1 EBADF (Bad file descriptor) [pid 5964] close(8) = -1 EBADF (Bad file descriptor) [pid 5964] close(9) = -1 EBADF (Bad file descriptor) [pid 5964] close(10) = -1 EBADF (Bad file descriptor) [pid 5964] close(11) = -1 EBADF (Bad file descriptor) [pid 5964] close(12) = -1 EBADF (Bad file descriptor) [pid 5964] close(13) = -1 EBADF (Bad file descriptor) [pid 5964] close(14) = -1 EBADF (Bad file descriptor) [pid 5964] close(15) = -1 EBADF (Bad file descriptor) [pid 5964] close(16) = -1 EBADF (Bad file descriptor) [pid 5964] close(17) = -1 EBADF (Bad file descriptor) [pid 5964] close(18) = -1 EBADF (Bad file descriptor) [pid 5964] close(19) = -1 EBADF (Bad file descriptor) [pid 5964] close(20) = -1 EBADF (Bad file descriptor) [pid 5964] close(21) = -1 EBADF (Bad file descriptor) [pid 5964] close(22) = -1 EBADF (Bad file descriptor) [pid 5964] close(23) = -1 EBADF (Bad file descriptor) [pid 5964] close(24) = -1 EBADF (Bad file descriptor) [pid 5964] close(25) = -1 EBADF (Bad file descriptor) [pid 5964] close(26) = -1 EBADF (Bad file descriptor) [pid 5964] close(27) = -1 EBADF (Bad file descriptor) [pid 5964] close(28) = -1 EBADF (Bad file descriptor) [pid 5964] close(29) = -1 EBADF (Bad file descriptor) [pid 5964] exit_group(0) = ? [pid 5964] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=119, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./116", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./116", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./116/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./116/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./116/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./116/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./116/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./116/file2") = 0 [pid 5836] umount2("./116/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./116/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./116/binderfs") = 0 [pid 5836] umount2("./116/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./116/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./116/cgroup.net") = 0 [pid 5836] umount2("./116/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./116/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./116/cgroup.cpu") = 0 [pid 5836] umount2("./116/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./116/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./116/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./116") = 0 [pid 5836] mkdir("./117", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5965 attached [pid 5965] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 120 [pid 5965] <... set_robust_list resumed>) = 0 [pid 5965] chdir("./117") = 0 [pid 5965] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5965] setpgid(0, 0) = 0 [pid 5965] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5965] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5965] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5965] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5965] write(3, "1000", 4) = 4 [pid 5965] close(3) = 0 [pid 5965] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5965] write(1, "executing program\n", 18executing program ) = 18 [pid 5965] memfd_create("syzkaller", 0) = 3 [pid 5965] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5965] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5965] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5965] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5965] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5965] close(3) = 0 [pid 5965] close(4) = 0 [pid 5965] mkdir("./file2", 0777) = 0 [pid 5965] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5965] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5965] chdir("./file2") = 0 [pid 5965] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5965] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5965] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5965] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5965] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5965] close(3) = 0 [ 160.530429][ T5965] loop0: detected capacity change from 0 to 128 [pid 5965] close(4) = 0 [pid 5965] close(5) = -1 EBADF (Bad file descriptor) [pid 5965] close(6) = -1 EBADF (Bad file descriptor) [pid 5965] close(7) = -1 EBADF (Bad file descriptor) [pid 5965] close(8) = -1 EBADF (Bad file descriptor) [pid 5965] close(9) = -1 EBADF (Bad file descriptor) [pid 5965] close(10) = -1 EBADF (Bad file descriptor) [pid 5965] close(11) = -1 EBADF (Bad file descriptor) [pid 5965] close(12) = -1 EBADF (Bad file descriptor) [pid 5965] close(13) = -1 EBADF (Bad file descriptor) [pid 5965] close(14) = -1 EBADF (Bad file descriptor) [pid 5965] close(15) = -1 EBADF (Bad file descriptor) [pid 5965] close(16) = -1 EBADF (Bad file descriptor) [pid 5965] close(17) = -1 EBADF (Bad file descriptor) [pid 5965] close(18) = -1 EBADF (Bad file descriptor) [pid 5965] close(19) = -1 EBADF (Bad file descriptor) [pid 5965] close(20) = -1 EBADF (Bad file descriptor) [pid 5965] close(21) = -1 EBADF (Bad file descriptor) [pid 5965] close(22) = -1 EBADF (Bad file descriptor) [pid 5965] close(23) = -1 EBADF (Bad file descriptor) [pid 5965] close(24) = -1 EBADF (Bad file descriptor) [pid 5965] close(25) = -1 EBADF (Bad file descriptor) [pid 5965] close(26) = -1 EBADF (Bad file descriptor) [pid 5965] close(27) = -1 EBADF (Bad file descriptor) [pid 5965] close(28) = -1 EBADF (Bad file descriptor) [pid 5965] close(29) = -1 EBADF (Bad file descriptor) [pid 5965] exit_group(0) = ? [pid 5965] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=120, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] umount2("./117", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./117", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./117/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./117/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./117/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./117/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./117/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./117/file2") = 0 [pid 5836] umount2("./117/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./117/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./117/binderfs") = 0 [pid 5836] umount2("./117/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./117/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./117/cgroup.net") = 0 [pid 5836] umount2("./117/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./117/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./117/cgroup.cpu") = 0 [pid 5836] umount2("./117/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./117/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./117/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./117") = 0 [pid 5836] mkdir("./118", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5966 attached , child_tidptr=0x555563237690) = 121 [pid 5966] set_robust_list(0x5555632376a0, 24) = 0 [pid 5966] chdir("./118") = 0 [pid 5966] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5966] setpgid(0, 0) = 0 [pid 5966] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5966] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5966] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5966] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5966] write(3, "1000", 4) = 4 [pid 5966] close(3) = 0 [pid 5966] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5966] write(1, "executing program\n", 18) = 18 [pid 5966] memfd_create("syzkaller", 0) = 3 [pid 5966] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5966] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5966] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5966] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5966] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5966] close(3) = 0 [pid 5966] close(4) = 0 [pid 5966] mkdir("./file2", 0777) = 0 [pid 5966] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5966] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5966] chdir("./file2") = 0 [pid 5966] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 160.742951][ T5966] loop0: detected capacity change from 0 to 128 [pid 5966] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5966] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5966] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5966] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5966] close(3) = 0 [pid 5966] close(4) = 0 [pid 5966] close(5) = -1 EBADF (Bad file descriptor) [pid 5966] close(6) = -1 EBADF (Bad file descriptor) [pid 5966] close(7) = -1 EBADF (Bad file descriptor) [pid 5966] close(8) = -1 EBADF (Bad file descriptor) [pid 5966] close(9) = -1 EBADF (Bad file descriptor) [pid 5966] close(10) = -1 EBADF (Bad file descriptor) [pid 5966] close(11) = -1 EBADF (Bad file descriptor) [pid 5966] close(12) = -1 EBADF (Bad file descriptor) [pid 5966] close(13) = -1 EBADF (Bad file descriptor) [pid 5966] close(14) = -1 EBADF (Bad file descriptor) [pid 5966] close(15) = -1 EBADF (Bad file descriptor) [pid 5966] close(16) = -1 EBADF (Bad file descriptor) [pid 5966] close(17) = -1 EBADF (Bad file descriptor) [pid 5966] close(18) = -1 EBADF (Bad file descriptor) [pid 5966] close(19) = -1 EBADF (Bad file descriptor) [pid 5966] close(20) = -1 EBADF (Bad file descriptor) [pid 5966] close(21) = -1 EBADF (Bad file descriptor) [pid 5966] close(22) = -1 EBADF (Bad file descriptor) [pid 5966] close(23) = -1 EBADF (Bad file descriptor) [pid 5966] close(24) = -1 EBADF (Bad file descriptor) [pid 5966] close(25) = -1 EBADF (Bad file descriptor) [pid 5966] close(26) = -1 EBADF (Bad file descriptor) [pid 5966] close(27) = -1 EBADF (Bad file descriptor) [pid 5966] close(28) = -1 EBADF (Bad file descriptor) [pid 5966] close(29) = -1 EBADF (Bad file descriptor) [pid 5966] exit_group(0) = ? [pid 5966] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=121, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5836] umount2("./118", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./118", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./118/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./118/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./118/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./118/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./118/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./118/file2") = 0 [pid 5836] umount2("./118/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./118/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./118/binderfs") = 0 [pid 5836] umount2("./118/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./118/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./118/cgroup.net") = 0 [pid 5836] umount2("./118/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./118/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./118/cgroup.cpu") = 0 [pid 5836] umount2("./118/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./118/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./118/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./118") = 0 [pid 5836] mkdir("./119", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5967 attached , child_tidptr=0x555563237690) = 122 [pid 5967] set_robust_list(0x5555632376a0, 24) = 0 [pid 5967] chdir("./119") = 0 [pid 5967] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5967] setpgid(0, 0) = 0 [pid 5967] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5967] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5967] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5967] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5967] write(3, "1000", 4) = 4 [pid 5967] close(3) = 0 [pid 5967] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5967] write(1, "executing program\n", 18executing program ) = 18 [pid 5967] memfd_create("syzkaller", 0) = 3 [pid 5967] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5967] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5967] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5967] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5967] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5967] close(3) = 0 [pid 5967] close(4) = 0 [pid 5967] mkdir("./file2", 0777) = 0 [pid 5967] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5967] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5967] chdir("./file2") = 0 [pid 5967] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5967] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [ 161.305080][ T5967] loop0: detected capacity change from 0 to 128 [pid 5967] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5967] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5967] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5967] close(3) = 0 [pid 5967] close(4) = 0 [pid 5967] close(5) = -1 EBADF (Bad file descriptor) [pid 5967] close(6) = -1 EBADF (Bad file descriptor) [pid 5967] close(7) = -1 EBADF (Bad file descriptor) [pid 5967] close(8) = -1 EBADF (Bad file descriptor) [pid 5967] close(9) = -1 EBADF (Bad file descriptor) [pid 5967] close(10) = -1 EBADF (Bad file descriptor) [pid 5967] close(11) = -1 EBADF (Bad file descriptor) [pid 5967] close(12) = -1 EBADF (Bad file descriptor) [pid 5967] close(13) = -1 EBADF (Bad file descriptor) [pid 5967] close(14) = -1 EBADF (Bad file descriptor) [pid 5967] close(15) = -1 EBADF (Bad file descriptor) [pid 5967] close(16) = -1 EBADF (Bad file descriptor) [pid 5967] close(17) = -1 EBADF (Bad file descriptor) [pid 5967] close(18) = -1 EBADF (Bad file descriptor) [pid 5967] close(19) = -1 EBADF (Bad file descriptor) [pid 5967] close(20) = -1 EBADF (Bad file descriptor) [pid 5967] close(21) = -1 EBADF (Bad file descriptor) [pid 5967] close(22) = -1 EBADF (Bad file descriptor) [pid 5967] close(23) = -1 EBADF (Bad file descriptor) [pid 5967] close(24) = -1 EBADF (Bad file descriptor) [pid 5967] close(25) = -1 EBADF (Bad file descriptor) [pid 5967] close(26) = -1 EBADF (Bad file descriptor) [pid 5967] close(27) = -1 EBADF (Bad file descriptor) [pid 5967] close(28) = -1 EBADF (Bad file descriptor) [pid 5967] close(29) = -1 EBADF (Bad file descriptor) [pid 5967] exit_group(0) = ? [pid 5967] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=122, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] umount2("./119", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./119", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./119/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./119/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./119/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./119/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./119/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./119/file2") = 0 [pid 5836] umount2("./119/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./119/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./119/binderfs") = 0 [pid 5836] umount2("./119/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./119/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./119/cgroup.net") = 0 [pid 5836] umount2("./119/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./119/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./119/cgroup.cpu") = 0 [pid 5836] umount2("./119/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./119/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./119/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./119") = 0 [pid 5836] mkdir("./120", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5968 attached [pid 5968] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 123 [pid 5968] <... set_robust_list resumed>) = 0 [pid 5968] chdir("./120") = 0 [pid 5968] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5968] setpgid(0, 0) = 0 [pid 5968] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5968] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5968] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5968] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5968] write(3, "1000", 4) = 4 [pid 5968] close(3) = 0 [pid 5968] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5968] write(1, "executing program\n", 18executing program ) = 18 [pid 5968] memfd_create("syzkaller", 0) = 3 [pid 5968] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5968] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5968] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5968] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5968] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5968] close(3) = 0 [pid 5968] close(4) = 0 [pid 5968] mkdir("./file2", 0777) = 0 [pid 5968] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [ 161.854029][ T5968] loop0: detected capacity change from 0 to 128 [pid 5968] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5968] chdir("./file2") = 0 [pid 5968] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5968] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5968] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5968] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5968] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5968] close(3) = 0 [pid 5968] close(4) = 0 [pid 5968] close(5) = -1 EBADF (Bad file descriptor) [pid 5968] close(6) = -1 EBADF (Bad file descriptor) [pid 5968] close(7) = -1 EBADF (Bad file descriptor) [pid 5968] close(8) = -1 EBADF (Bad file descriptor) [pid 5968] close(9) = -1 EBADF (Bad file descriptor) [pid 5968] close(10) = -1 EBADF (Bad file descriptor) [pid 5968] close(11) = -1 EBADF (Bad file descriptor) [pid 5968] close(12) = -1 EBADF (Bad file descriptor) [pid 5968] close(13) = -1 EBADF (Bad file descriptor) [pid 5968] close(14) = -1 EBADF (Bad file descriptor) [pid 5968] close(15) = -1 EBADF (Bad file descriptor) [pid 5968] close(16) = -1 EBADF (Bad file descriptor) [pid 5968] close(17) = -1 EBADF (Bad file descriptor) [pid 5968] close(18) = -1 EBADF (Bad file descriptor) [pid 5968] close(19) = -1 EBADF (Bad file descriptor) [pid 5968] close(20) = -1 EBADF (Bad file descriptor) [pid 5968] close(21) = -1 EBADF (Bad file descriptor) [pid 5968] close(22) = -1 EBADF (Bad file descriptor) [pid 5968] close(23) = -1 EBADF (Bad file descriptor) [pid 5968] close(24) = -1 EBADF (Bad file descriptor) [pid 5968] close(25) = -1 EBADF (Bad file descriptor) [pid 5968] close(26) = -1 EBADF (Bad file descriptor) [pid 5968] close(27) = -1 EBADF (Bad file descriptor) [pid 5968] close(28) = -1 EBADF (Bad file descriptor) [pid 5968] close(29) = -1 EBADF (Bad file descriptor) [pid 5968] exit_group(0) = ? [pid 5968] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=123, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5836] umount2("./120", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./120", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./120/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./120/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./120/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./120/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./120/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./120/file2") = 0 [pid 5836] umount2("./120/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./120/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./120/binderfs") = 0 [pid 5836] umount2("./120/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./120/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./120/cgroup.net") = 0 [pid 5836] umount2("./120/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./120/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./120/cgroup.cpu") = 0 [pid 5836] umount2("./120/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./120/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./120/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./120") = 0 [pid 5836] mkdir("./121", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5969 attached [pid 5969] set_robust_list(0x5555632376a0, 24) = 0 [pid 5969] chdir("./121") = 0 [pid 5969] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 124 [pid 5969] <... prctl resumed>) = 0 [pid 5969] setpgid(0, 0) = 0 [pid 5969] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5969] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5969] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5969] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5969] write(3, "1000", 4) = 4 [pid 5969] close(3) = 0 [pid 5969] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5969] write(1, "executing program\n", 18executing program ) = 18 [pid 5969] memfd_create("syzkaller", 0) = 3 [pid 5969] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5969] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5969] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5969] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5969] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5969] close(3) = 0 [pid 5969] close(4) = 0 [pid 5969] mkdir("./file2", 0777) = 0 [pid 5969] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5969] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5969] chdir("./file2") = 0 [pid 5969] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5969] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5969] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5969] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5969] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5969] close(3) = 0 [pid 5969] close(4) = 0 [ 162.139227][ T5969] loop0: detected capacity change from 0 to 128 [pid 5969] close(5) = -1 EBADF (Bad file descriptor) [pid 5969] close(6) = -1 EBADF (Bad file descriptor) [pid 5969] close(7) = -1 EBADF (Bad file descriptor) [pid 5969] close(8) = -1 EBADF (Bad file descriptor) [pid 5969] close(9) = -1 EBADF (Bad file descriptor) [pid 5969] close(10) = -1 EBADF (Bad file descriptor) [pid 5969] close(11) = -1 EBADF (Bad file descriptor) [pid 5969] close(12) = -1 EBADF (Bad file descriptor) [pid 5969] close(13) = -1 EBADF (Bad file descriptor) [pid 5969] close(14) = -1 EBADF (Bad file descriptor) [pid 5969] close(15) = -1 EBADF (Bad file descriptor) [pid 5969] close(16) = -1 EBADF (Bad file descriptor) [pid 5969] close(17) = -1 EBADF (Bad file descriptor) [pid 5969] close(18) = -1 EBADF (Bad file descriptor) [pid 5969] close(19) = -1 EBADF (Bad file descriptor) [pid 5969] close(20) = -1 EBADF (Bad file descriptor) [pid 5969] close(21) = -1 EBADF (Bad file descriptor) [pid 5969] close(22) = -1 EBADF (Bad file descriptor) [pid 5969] close(23) = -1 EBADF (Bad file descriptor) [pid 5969] close(24) = -1 EBADF (Bad file descriptor) [pid 5969] close(25) = -1 EBADF (Bad file descriptor) [pid 5969] close(26) = -1 EBADF (Bad file descriptor) [pid 5969] close(27) = -1 EBADF (Bad file descriptor) [pid 5969] close(28) = -1 EBADF (Bad file descriptor) [pid 5969] close(29) = -1 EBADF (Bad file descriptor) [pid 5969] exit_group(0) = ? [pid 5969] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=124, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./121", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./121", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./121/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./121/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./121/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./121/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./121/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./121/file2") = 0 [pid 5836] umount2("./121/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./121/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./121/binderfs") = 0 [pid 5836] umount2("./121/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./121/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./121/cgroup.net") = 0 [pid 5836] umount2("./121/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./121/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./121/cgroup.cpu") = 0 [pid 5836] umount2("./121/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./121/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./121/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./121") = 0 [pid 5836] mkdir("./122", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5970 attached [pid 5970] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 125 [pid 5970] <... set_robust_list resumed>) = 0 [pid 5970] chdir("./122") = 0 [pid 5970] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5970] setpgid(0, 0) = 0 [pid 5970] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5970] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5970] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5970] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5970] write(3, "1000", 4) = 4 [pid 5970] close(3) = 0 [pid 5970] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5970] write(1, "executing program\n", 18) = 18 [pid 5970] memfd_create("syzkaller", 0) = 3 [pid 5970] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5970] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5970] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5970] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5970] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5970] close(3) = 0 [pid 5970] close(4) = 0 [pid 5970] mkdir("./file2", 0777) = 0 [pid 5970] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5970] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5970] chdir("./file2") = 0 [pid 5970] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5970] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5970] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5970] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [ 162.527142][ T5970] loop0: detected capacity change from 0 to 128 [pid 5970] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5970] close(3) = 0 [pid 5970] close(4) = 0 [pid 5970] close(5) = -1 EBADF (Bad file descriptor) [pid 5970] close(6) = -1 EBADF (Bad file descriptor) [pid 5970] close(7) = -1 EBADF (Bad file descriptor) [pid 5970] close(8) = -1 EBADF (Bad file descriptor) [pid 5970] close(9) = -1 EBADF (Bad file descriptor) [pid 5970] close(10) = -1 EBADF (Bad file descriptor) [pid 5970] close(11) = -1 EBADF (Bad file descriptor) [pid 5970] close(12) = -1 EBADF (Bad file descriptor) [pid 5970] close(13) = -1 EBADF (Bad file descriptor) [pid 5970] close(14) = -1 EBADF (Bad file descriptor) [pid 5970] close(15) = -1 EBADF (Bad file descriptor) [pid 5970] close(16) = -1 EBADF (Bad file descriptor) [pid 5970] close(17) = -1 EBADF (Bad file descriptor) [pid 5970] close(18) = -1 EBADF (Bad file descriptor) [pid 5970] close(19) = -1 EBADF (Bad file descriptor) [pid 5970] close(20) = -1 EBADF (Bad file descriptor) [pid 5970] close(21) = -1 EBADF (Bad file descriptor) [pid 5970] close(22) = -1 EBADF (Bad file descriptor) [pid 5970] close(23) = -1 EBADF (Bad file descriptor) [pid 5970] close(24) = -1 EBADF (Bad file descriptor) [pid 5970] close(25) = -1 EBADF (Bad file descriptor) [pid 5970] close(26) = -1 EBADF (Bad file descriptor) [pid 5970] close(27) = -1 EBADF (Bad file descriptor) [pid 5970] close(28) = -1 EBADF (Bad file descriptor) [pid 5970] close(29) = -1 EBADF (Bad file descriptor) [pid 5970] exit_group(0) = ? [pid 5970] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=125, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] umount2("./122", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./122", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./122/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./122/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./122/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./122/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./122/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./122/file2") = 0 [pid 5836] umount2("./122/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./122/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./122/binderfs") = 0 [pid 5836] umount2("./122/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./122/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./122/cgroup.net") = 0 [pid 5836] umount2("./122/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./122/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./122/cgroup.cpu") = 0 [pid 5836] umount2("./122/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./122/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./122/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./122") = 0 [pid 5836] mkdir("./123", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5971 attached [pid 5971] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 126 [pid 5971] <... set_robust_list resumed>) = 0 [pid 5971] chdir("./123") = 0 [pid 5971] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5971] setpgid(0, 0) = 0 [pid 5971] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5971] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5971] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5971] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5971] write(3, "1000", 4) = 4 [pid 5971] close(3) = 0 [pid 5971] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5971] write(1, "executing program\n", 18) = 18 [pid 5971] memfd_create("syzkaller", 0) = 3 [pid 5971] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5971] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5971] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5971] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5971] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5971] close(3) = 0 [pid 5971] close(4) = 0 [pid 5971] mkdir("./file2", 0777) = 0 [pid 5971] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5971] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5971] chdir("./file2") = 0 [pid 5971] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5971] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5971] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5971] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5971] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5971] close(3) = 0 [pid 5971] close(4) = 0 [ 163.108292][ T5971] loop0: detected capacity change from 0 to 128 [pid 5971] close(5) = -1 EBADF (Bad file descriptor) [pid 5971] close(6) = -1 EBADF (Bad file descriptor) [pid 5971] close(7) = -1 EBADF (Bad file descriptor) [pid 5971] close(8) = -1 EBADF (Bad file descriptor) [pid 5971] close(9) = -1 EBADF (Bad file descriptor) [pid 5971] close(10) = -1 EBADF (Bad file descriptor) [pid 5971] close(11) = -1 EBADF (Bad file descriptor) [pid 5971] close(12) = -1 EBADF (Bad file descriptor) [pid 5971] close(13) = -1 EBADF (Bad file descriptor) [pid 5971] close(14) = -1 EBADF (Bad file descriptor) [pid 5971] close(15) = -1 EBADF (Bad file descriptor) [pid 5971] close(16) = -1 EBADF (Bad file descriptor) [pid 5971] close(17) = -1 EBADF (Bad file descriptor) [pid 5971] close(18) = -1 EBADF (Bad file descriptor) [pid 5971] close(19) = -1 EBADF (Bad file descriptor) [pid 5971] close(20) = -1 EBADF (Bad file descriptor) [pid 5971] close(21) = -1 EBADF (Bad file descriptor) [pid 5971] close(22) = -1 EBADF (Bad file descriptor) [pid 5971] close(23) = -1 EBADF (Bad file descriptor) [pid 5971] close(24) = -1 EBADF (Bad file descriptor) [pid 5971] close(25) = -1 EBADF (Bad file descriptor) [pid 5971] close(26) = -1 EBADF (Bad file descriptor) [pid 5971] close(27) = -1 EBADF (Bad file descriptor) [pid 5971] close(28) = -1 EBADF (Bad file descriptor) [pid 5971] close(29) = -1 EBADF (Bad file descriptor) [pid 5971] exit_group(0) = ? [pid 5971] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=126, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5836] umount2("./123", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./123", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./123/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./123/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./123/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./123/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./123/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./123/file2") = 0 [pid 5836] umount2("./123/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./123/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./123/binderfs") = 0 [pid 5836] umount2("./123/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./123/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./123/cgroup.net") = 0 [pid 5836] umount2("./123/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./123/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./123/cgroup.cpu") = 0 [pid 5836] umount2("./123/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./123/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./123/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./123") = 0 [pid 5836] mkdir("./124", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5972 attached [pid 5972] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 127 [pid 5972] <... set_robust_list resumed>) = 0 [pid 5972] chdir("./124") = 0 [pid 5972] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5972] setpgid(0, 0) = 0 [pid 5972] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5972] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5972] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5972] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5972] write(3, "1000", 4) = 4 [pid 5972] close(3) = 0 [pid 5972] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5972] write(1, "executing program\n", 18executing program ) = 18 [pid 5972] memfd_create("syzkaller", 0) = 3 [pid 5972] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5972] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5972] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5972] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5972] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5972] close(3) = 0 [pid 5972] close(4) = 0 [pid 5972] mkdir("./file2", 0777) = 0 [pid 5972] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5972] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5972] chdir("./file2") = 0 [pid 5972] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 163.697361][ T5972] loop0: detected capacity change from 0 to 128 [pid 5972] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5972] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5972] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5972] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5972] close(3) = 0 [pid 5972] close(4) = 0 [pid 5972] close(5) = -1 EBADF (Bad file descriptor) [pid 5972] close(6) = -1 EBADF (Bad file descriptor) [pid 5972] close(7) = -1 EBADF (Bad file descriptor) [pid 5972] close(8) = -1 EBADF (Bad file descriptor) [pid 5972] close(9) = -1 EBADF (Bad file descriptor) [pid 5972] close(10) = -1 EBADF (Bad file descriptor) [pid 5972] close(11) = -1 EBADF (Bad file descriptor) [pid 5972] close(12) = -1 EBADF (Bad file descriptor) [pid 5972] close(13) = -1 EBADF (Bad file descriptor) [pid 5972] close(14) = -1 EBADF (Bad file descriptor) [pid 5972] close(15) = -1 EBADF (Bad file descriptor) [pid 5972] close(16) = -1 EBADF (Bad file descriptor) [pid 5972] close(17) = -1 EBADF (Bad file descriptor) [pid 5972] close(18) = -1 EBADF (Bad file descriptor) [pid 5972] close(19) = -1 EBADF (Bad file descriptor) [pid 5972] close(20) = -1 EBADF (Bad file descriptor) [pid 5972] close(21) = -1 EBADF (Bad file descriptor) [pid 5972] close(22) = -1 EBADF (Bad file descriptor) [pid 5972] close(23) = -1 EBADF (Bad file descriptor) [pid 5972] close(24) = -1 EBADF (Bad file descriptor) [pid 5972] close(25) = -1 EBADF (Bad file descriptor) [pid 5972] close(26) = -1 EBADF (Bad file descriptor) [pid 5972] close(27) = -1 EBADF (Bad file descriptor) [pid 5972] close(28) = -1 EBADF (Bad file descriptor) [pid 5972] close(29) = -1 EBADF (Bad file descriptor) [pid 5972] exit_group(0) = ? [pid 5972] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=127, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] umount2("./124", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./124", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./124/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./124/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./124/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./124/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./124/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./124/file2") = 0 [pid 5836] umount2("./124/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./124/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./124/binderfs") = 0 [pid 5836] umount2("./124/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./124/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./124/cgroup.net") = 0 [pid 5836] umount2("./124/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./124/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./124/cgroup.cpu") = 0 [pid 5836] umount2("./124/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./124/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./124/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./124") = 0 [pid 5836] mkdir("./125", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5973 attached [pid 5973] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 128 [pid 5973] <... set_robust_list resumed>) = 0 [pid 5973] chdir("./125") = 0 [pid 5973] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5973] setpgid(0, 0) = 0 [pid 5973] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5973] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5973] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5973] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5973] write(3, "1000", 4) = 4 [pid 5973] close(3) = 0 executing program [pid 5973] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5973] write(1, "executing program\n", 18) = 18 [pid 5973] memfd_create("syzkaller", 0) = 3 [pid 5973] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5973] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5973] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5973] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5973] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5973] close(3) = 0 [pid 5973] close(4) = 0 [pid 5973] mkdir("./file2", 0777) = 0 [pid 5973] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5973] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5973] chdir("./file2") = 0 [pid 5973] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 163.968358][ T5973] loop0: detected capacity change from 0 to 128 [pid 5973] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5973] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5973] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5973] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5973] close(3) = 0 [pid 5973] close(4) = 0 [pid 5973] close(5) = -1 EBADF (Bad file descriptor) [pid 5973] close(6) = -1 EBADF (Bad file descriptor) [pid 5973] close(7) = -1 EBADF (Bad file descriptor) [pid 5973] close(8) = -1 EBADF (Bad file descriptor) [pid 5973] close(9) = -1 EBADF (Bad file descriptor) [pid 5973] close(10) = -1 EBADF (Bad file descriptor) [pid 5973] close(11) = -1 EBADF (Bad file descriptor) [pid 5973] close(12) = -1 EBADF (Bad file descriptor) [pid 5973] close(13) = -1 EBADF (Bad file descriptor) [pid 5973] close(14) = -1 EBADF (Bad file descriptor) [pid 5973] close(15) = -1 EBADF (Bad file descriptor) [pid 5973] close(16) = -1 EBADF (Bad file descriptor) [pid 5973] close(17) = -1 EBADF (Bad file descriptor) [pid 5973] close(18) = -1 EBADF (Bad file descriptor) [pid 5973] close(19) = -1 EBADF (Bad file descriptor) [pid 5973] close(20) = -1 EBADF (Bad file descriptor) [pid 5973] close(21) = -1 EBADF (Bad file descriptor) [pid 5973] close(22) = -1 EBADF (Bad file descriptor) [pid 5973] close(23) = -1 EBADF (Bad file descriptor) [pid 5973] close(24) = -1 EBADF (Bad file descriptor) [pid 5973] close(25) = -1 EBADF (Bad file descriptor) [pid 5973] close(26) = -1 EBADF (Bad file descriptor) [pid 5973] close(27) = -1 EBADF (Bad file descriptor) [pid 5973] close(28) = -1 EBADF (Bad file descriptor) [pid 5973] close(29) = -1 EBADF (Bad file descriptor) [pid 5973] exit_group(0) = ? [pid 5973] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=128, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./125", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./125", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./125/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./125/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./125/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./125/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./125/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./125/file2") = 0 [pid 5836] umount2("./125/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./125/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./125/binderfs") = 0 [pid 5836] umount2("./125/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./125/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./125/cgroup.net") = 0 [pid 5836] umount2("./125/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./125/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./125/cgroup.cpu") = 0 [pid 5836] umount2("./125/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./125/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./125/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./125") = 0 [pid 5836] mkdir("./126", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5974 attached [pid 5974] set_robust_list(0x5555632376a0, 24) = 0 [pid 5974] chdir("./126" [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 129 [pid 5974] <... chdir resumed>) = 0 [pid 5974] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5974] setpgid(0, 0) = 0 [pid 5974] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5974] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5974] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5974] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5974] write(3, "1000", 4) = 4 [pid 5974] close(3) = 0 [pid 5974] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5974] write(1, "executing program\n", 18executing program ) = 18 [pid 5974] memfd_create("syzkaller", 0) = 3 [pid 5974] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5974] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5974] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5974] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5974] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5974] close(3) = 0 [pid 5974] close(4) = 0 [pid 5974] mkdir("./file2", 0777) = 0 [pid 5974] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5974] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5974] chdir("./file2") = 0 [pid 5974] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5974] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5974] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5974] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5974] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5974] close(3) = 0 [pid 5974] close(4) = 0 [pid 5974] close(5) = -1 EBADF (Bad file descriptor) [pid 5974] close(6) = -1 EBADF (Bad file descriptor) [pid 5974] close(7) = -1 EBADF (Bad file descriptor) [pid 5974] close(8) = -1 EBADF (Bad file descriptor) [pid 5974] close(9) = -1 EBADF (Bad file descriptor) [pid 5974] close(10) = -1 EBADF (Bad file descriptor) [pid 5974] close(11) = -1 EBADF (Bad file descriptor) [pid 5974] close(12) = -1 EBADF (Bad file descriptor) [pid 5974] close(13) = -1 EBADF (Bad file descriptor) [pid 5974] close(14) = -1 EBADF (Bad file descriptor) [pid 5974] close(15) = -1 EBADF (Bad file descriptor) [pid 5974] close(16) = -1 EBADF (Bad file descriptor) [pid 5974] close(17) = -1 EBADF (Bad file descriptor) [pid 5974] close(18) = -1 EBADF (Bad file descriptor) [pid 5974] close(19) = -1 EBADF (Bad file descriptor) [pid 5974] close(20) = -1 EBADF (Bad file descriptor) [pid 5974] close(21) = -1 EBADF (Bad file descriptor) [pid 5974] close(22) = -1 EBADF (Bad file descriptor) [pid 5974] close(23) = -1 EBADF (Bad file descriptor) [pid 5974] close(24) = -1 EBADF (Bad file descriptor) [pid 5974] close(25) = -1 EBADF (Bad file descriptor) [pid 5974] close(26) = -1 EBADF (Bad file descriptor) [pid 5974] close(27) = -1 EBADF (Bad file descriptor) [pid 5974] close(28) = -1 EBADF (Bad file descriptor) [pid 5974] close(29) = -1 EBADF (Bad file descriptor) [pid 5974] exit_group(0) = ? [pid 5974] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=129, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./126", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./126", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./126/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [ 164.587957][ T5974] loop0: detected capacity change from 0 to 128 [pid 5836] umount2("./126/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./126/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./126/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./126/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./126/file2") = 0 [pid 5836] umount2("./126/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./126/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./126/binderfs") = 0 [pid 5836] umount2("./126/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./126/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./126/cgroup.net") = 0 [pid 5836] umount2("./126/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./126/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./126/cgroup.cpu") = 0 [pid 5836] umount2("./126/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./126/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./126/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./126") = 0 [pid 5836] mkdir("./127", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5975 attached [pid 5975] set_robust_list(0x5555632376a0, 24) = 0 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 130 [pid 5975] chdir("./127") = 0 [pid 5975] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5975] setpgid(0, 0) = 0 [pid 5975] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5975] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5975] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5975] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5975] write(3, "1000", 4) = 4 [pid 5975] close(3) = 0 [pid 5975] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5975] write(1, "executing program\n", 18) = 18 executing program [pid 5975] memfd_create("syzkaller", 0) = 3 [pid 5975] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5975] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5975] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5975] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5975] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5975] close(3) = 0 [pid 5975] close(4) = 0 [pid 5975] mkdir("./file2", 0777) = 0 [pid 5975] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5975] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5975] chdir("./file2") = 0 [pid 5975] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 164.766770][ T5975] loop0: detected capacity change from 0 to 128 [pid 5975] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5975] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5975] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5975] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5975] close(3) = 0 [pid 5975] close(4) = 0 [pid 5975] close(5) = -1 EBADF (Bad file descriptor) [pid 5975] close(6) = -1 EBADF (Bad file descriptor) [pid 5975] close(7) = -1 EBADF (Bad file descriptor) [pid 5975] close(8) = -1 EBADF (Bad file descriptor) [pid 5975] close(9) = -1 EBADF (Bad file descriptor) [pid 5975] close(10) = -1 EBADF (Bad file descriptor) [pid 5975] close(11) = -1 EBADF (Bad file descriptor) [pid 5975] close(12) = -1 EBADF (Bad file descriptor) [pid 5975] close(13) = -1 EBADF (Bad file descriptor) [pid 5975] close(14) = -1 EBADF (Bad file descriptor) [pid 5975] close(15) = -1 EBADF (Bad file descriptor) [pid 5975] close(16) = -1 EBADF (Bad file descriptor) [pid 5975] close(17) = -1 EBADF (Bad file descriptor) [pid 5975] close(18) = -1 EBADF (Bad file descriptor) [pid 5975] close(19) = -1 EBADF (Bad file descriptor) [pid 5975] close(20) = -1 EBADF (Bad file descriptor) [pid 5975] close(21) = -1 EBADF (Bad file descriptor) [pid 5975] close(22) = -1 EBADF (Bad file descriptor) [pid 5975] close(23) = -1 EBADF (Bad file descriptor) [pid 5975] close(24) = -1 EBADF (Bad file descriptor) [pid 5975] close(25) = -1 EBADF (Bad file descriptor) [pid 5975] close(26) = -1 EBADF (Bad file descriptor) [pid 5975] close(27) = -1 EBADF (Bad file descriptor) [pid 5975] close(28) = -1 EBADF (Bad file descriptor) [pid 5975] close(29) = -1 EBADF (Bad file descriptor) [pid 5975] exit_group(0) = ? [pid 5975] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=130, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] umount2("./127", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./127", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./127/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./127/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./127/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./127/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./127/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./127/file2") = 0 [pid 5836] umount2("./127/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./127/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./127/binderfs") = 0 [pid 5836] umount2("./127/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./127/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./127/cgroup.net") = 0 [pid 5836] umount2("./127/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./127/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./127/cgroup.cpu") = 0 [pid 5836] umount2("./127/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./127/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./127/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./127") = 0 [pid 5836] mkdir("./128", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5976 attached [pid 5976] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 131 [pid 5976] <... set_robust_list resumed>) = 0 [pid 5976] chdir("./128") = 0 [pid 5976] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5976] setpgid(0, 0) = 0 [pid 5976] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5976] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5976] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5976] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5976] write(3, "1000", 4) = 4 [pid 5976] close(3) = 0 [pid 5976] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5976] write(1, "executing program\n", 18executing program ) = 18 [pid 5976] memfd_create("syzkaller", 0) = 3 [pid 5976] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5976] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5976] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5976] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5976] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5976] close(3) = 0 [pid 5976] close(4) = 0 [pid 5976] mkdir("./file2", 0777) = 0 [pid 5976] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5976] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5976] chdir("./file2") = 0 [pid 5976] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5976] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [ 165.296814][ T5976] loop0: detected capacity change from 0 to 128 [pid 5976] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5976] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5976] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5976] close(3) = 0 [pid 5976] close(4) = 0 [pid 5976] close(5) = -1 EBADF (Bad file descriptor) [pid 5976] close(6) = -1 EBADF (Bad file descriptor) [pid 5976] close(7) = -1 EBADF (Bad file descriptor) [pid 5976] close(8) = -1 EBADF (Bad file descriptor) [pid 5976] close(9) = -1 EBADF (Bad file descriptor) [pid 5976] close(10) = -1 EBADF (Bad file descriptor) [pid 5976] close(11) = -1 EBADF (Bad file descriptor) [pid 5976] close(12) = -1 EBADF (Bad file descriptor) [pid 5976] close(13) = -1 EBADF (Bad file descriptor) [pid 5976] close(14) = -1 EBADF (Bad file descriptor) [pid 5976] close(15) = -1 EBADF (Bad file descriptor) [pid 5976] close(16) = -1 EBADF (Bad file descriptor) [pid 5976] close(17) = -1 EBADF (Bad file descriptor) [pid 5976] close(18) = -1 EBADF (Bad file descriptor) [pid 5976] close(19) = -1 EBADF (Bad file descriptor) [pid 5976] close(20) = -1 EBADF (Bad file descriptor) [pid 5976] close(21) = -1 EBADF (Bad file descriptor) [pid 5976] close(22) = -1 EBADF (Bad file descriptor) [pid 5976] close(23) = -1 EBADF (Bad file descriptor) [pid 5976] close(24) = -1 EBADF (Bad file descriptor) [pid 5976] close(25) = -1 EBADF (Bad file descriptor) [pid 5976] close(26) = -1 EBADF (Bad file descriptor) [pid 5976] close(27) = -1 EBADF (Bad file descriptor) [pid 5976] close(28) = -1 EBADF (Bad file descriptor) [pid 5976] close(29) = -1 EBADF (Bad file descriptor) [pid 5976] exit_group(0) = ? [pid 5976] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=131, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./128", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./128", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./128/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./128/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./128/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./128/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./128/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./128/file2") = 0 [pid 5836] umount2("./128/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./128/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./128/binderfs") = 0 [pid 5836] umount2("./128/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./128/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./128/cgroup.net") = 0 [pid 5836] umount2("./128/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./128/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./128/cgroup.cpu") = 0 [pid 5836] umount2("./128/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./128/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./128/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./128") = 0 [pid 5836] mkdir("./129", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5977 attached , child_tidptr=0x555563237690) = 132 [pid 5977] set_robust_list(0x5555632376a0, 24) = 0 [pid 5977] chdir("./129") = 0 [pid 5977] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5977] setpgid(0, 0) = 0 [pid 5977] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5977] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5977] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5977] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5977] write(3, "1000", 4) = 4 [pid 5977] close(3) = 0 [pid 5977] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5977] write(1, "executing program\n", 18executing program ) = 18 [pid 5977] memfd_create("syzkaller", 0) = 3 [pid 5977] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5977] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5977] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5977] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5977] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5977] close(3) = 0 [pid 5977] close(4) = 0 [pid 5977] mkdir("./file2", 0777) = 0 [pid 5977] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5977] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5977] chdir("./file2") = 0 [pid 5977] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5977] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5977] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5977] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5977] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5977] close(3) = 0 [pid 5977] close(4) = 0 [ 165.871491][ T5977] loop0: detected capacity change from 0 to 128 [pid 5977] close(5) = -1 EBADF (Bad file descriptor) [pid 5977] close(6) = -1 EBADF (Bad file descriptor) [pid 5977] close(7) = -1 EBADF (Bad file descriptor) [pid 5977] close(8) = -1 EBADF (Bad file descriptor) [pid 5977] close(9) = -1 EBADF (Bad file descriptor) [pid 5977] close(10) = -1 EBADF (Bad file descriptor) [pid 5977] close(11) = -1 EBADF (Bad file descriptor) [pid 5977] close(12) = -1 EBADF (Bad file descriptor) [pid 5977] close(13) = -1 EBADF (Bad file descriptor) [pid 5977] close(14) = -1 EBADF (Bad file descriptor) [pid 5977] close(15) = -1 EBADF (Bad file descriptor) [pid 5977] close(16) = -1 EBADF (Bad file descriptor) [pid 5977] close(17) = -1 EBADF (Bad file descriptor) [pid 5977] close(18) = -1 EBADF (Bad file descriptor) [pid 5977] close(19) = -1 EBADF (Bad file descriptor) [pid 5977] close(20) = -1 EBADF (Bad file descriptor) [pid 5977] close(21) = -1 EBADF (Bad file descriptor) [pid 5977] close(22) = -1 EBADF (Bad file descriptor) [pid 5977] close(23) = -1 EBADF (Bad file descriptor) [pid 5977] close(24) = -1 EBADF (Bad file descriptor) [pid 5977] close(25) = -1 EBADF (Bad file descriptor) [pid 5977] close(26) = -1 EBADF (Bad file descriptor) [pid 5977] close(27) = -1 EBADF (Bad file descriptor) [pid 5977] close(28) = -1 EBADF (Bad file descriptor) [pid 5977] close(29) = -1 EBADF (Bad file descriptor) [pid 5977] exit_group(0) = ? [pid 5977] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=132, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./129", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./129", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./129/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./129/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./129/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./129/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./129/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./129/file2") = 0 [pid 5836] umount2("./129/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./129/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./129/binderfs") = 0 [pid 5836] umount2("./129/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./129/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./129/cgroup.net") = 0 [pid 5836] umount2("./129/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./129/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./129/cgroup.cpu") = 0 [pid 5836] umount2("./129/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./129/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./129/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./129") = 0 [pid 5836] mkdir("./130", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5978 attached [pid 5978] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 133 [pid 5978] <... set_robust_list resumed>) = 0 [pid 5978] chdir("./130") = 0 [pid 5978] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5978] setpgid(0, 0) = 0 [pid 5978] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5978] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5978] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5978] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5978] write(3, "1000", 4) = 4 [pid 5978] close(3) = 0 [pid 5978] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5978] write(1, "executing program\n", 18executing program ) = 18 [pid 5978] memfd_create("syzkaller", 0) = 3 [pid 5978] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5978] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5978] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5978] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5978] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5978] close(3) = 0 [pid 5978] close(4) = 0 [pid 5978] mkdir("./file2", 0777) = 0 [pid 5978] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5978] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5978] chdir("./file2") = 0 [pid 5978] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5978] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5978] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5978] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [ 166.091400][ T5978] loop0: detected capacity change from 0 to 128 [pid 5978] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5978] close(3) = 0 [pid 5978] close(4) = 0 [pid 5978] close(5) = -1 EBADF (Bad file descriptor) [pid 5978] close(6) = -1 EBADF (Bad file descriptor) [pid 5978] close(7) = -1 EBADF (Bad file descriptor) [pid 5978] close(8) = -1 EBADF (Bad file descriptor) [pid 5978] close(9) = -1 EBADF (Bad file descriptor) [pid 5978] close(10) = -1 EBADF (Bad file descriptor) [pid 5978] close(11) = -1 EBADF (Bad file descriptor) [pid 5978] close(12) = -1 EBADF (Bad file descriptor) [pid 5978] close(13) = -1 EBADF (Bad file descriptor) [pid 5978] close(14) = -1 EBADF (Bad file descriptor) [pid 5978] close(15) = -1 EBADF (Bad file descriptor) [pid 5978] close(16) = -1 EBADF (Bad file descriptor) [pid 5978] close(17) = -1 EBADF (Bad file descriptor) [pid 5978] close(18) = -1 EBADF (Bad file descriptor) [pid 5978] close(19) = -1 EBADF (Bad file descriptor) [pid 5978] close(20) = -1 EBADF (Bad file descriptor) [pid 5978] close(21) = -1 EBADF (Bad file descriptor) [pid 5978] close(22) = -1 EBADF (Bad file descriptor) [pid 5978] close(23) = -1 EBADF (Bad file descriptor) [pid 5978] close(24) = -1 EBADF (Bad file descriptor) [pid 5978] close(25) = -1 EBADF (Bad file descriptor) [pid 5978] close(26) = -1 EBADF (Bad file descriptor) [pid 5978] close(27) = -1 EBADF (Bad file descriptor) [pid 5978] close(28) = -1 EBADF (Bad file descriptor) [pid 5978] close(29) = -1 EBADF (Bad file descriptor) [pid 5978] exit_group(0) = ? [pid 5978] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=133, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] umount2("./130", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./130", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./130/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./130/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./130/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./130/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./130/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./130/file2") = 0 [pid 5836] umount2("./130/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./130/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./130/binderfs") = 0 [pid 5836] umount2("./130/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./130/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./130/cgroup.net") = 0 [pid 5836] umount2("./130/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./130/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./130/cgroup.cpu") = 0 [pid 5836] umount2("./130/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./130/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./130/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./130") = 0 [pid 5836] mkdir("./131", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5979 attached , child_tidptr=0x555563237690) = 134 [pid 5979] set_robust_list(0x5555632376a0, 24) = 0 [pid 5979] chdir("./131") = 0 [pid 5979] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5979] setpgid(0, 0) = 0 [pid 5979] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5979] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5979] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5979] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5979] write(3, "1000", 4) = 4 [pid 5979] close(3) = 0 [pid 5979] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5979] write(1, "executing program\n", 18executing program ) = 18 [pid 5979] memfd_create("syzkaller", 0) = 3 [pid 5979] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5979] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5979] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5979] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5979] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5979] close(3) = 0 [pid 5979] close(4) = 0 [pid 5979] mkdir("./file2", 0777) = 0 [pid 5979] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5979] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5979] chdir("./file2") = 0 [pid 5979] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5979] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5979] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5979] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5979] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5979] close(3) = 0 [ 166.692212][ T5979] loop0: detected capacity change from 0 to 128 [pid 5979] close(4) = 0 [pid 5979] close(5) = -1 EBADF (Bad file descriptor) [pid 5979] close(6) = -1 EBADF (Bad file descriptor) [pid 5979] close(7) = -1 EBADF (Bad file descriptor) [pid 5979] close(8) = -1 EBADF (Bad file descriptor) [pid 5979] close(9) = -1 EBADF (Bad file descriptor) [pid 5979] close(10) = -1 EBADF (Bad file descriptor) [pid 5979] close(11) = -1 EBADF (Bad file descriptor) [pid 5979] close(12) = -1 EBADF (Bad file descriptor) [pid 5979] close(13) = -1 EBADF (Bad file descriptor) [pid 5979] close(14) = -1 EBADF (Bad file descriptor) [pid 5979] close(15) = -1 EBADF (Bad file descriptor) [pid 5979] close(16) = -1 EBADF (Bad file descriptor) [pid 5979] close(17) = -1 EBADF (Bad file descriptor) [pid 5979] close(18) = -1 EBADF (Bad file descriptor) [pid 5979] close(19) = -1 EBADF (Bad file descriptor) [pid 5979] close(20) = -1 EBADF (Bad file descriptor) [pid 5979] close(21) = -1 EBADF (Bad file descriptor) [pid 5979] close(22) = -1 EBADF (Bad file descriptor) [pid 5979] close(23) = -1 EBADF (Bad file descriptor) [pid 5979] close(24) = -1 EBADF (Bad file descriptor) [pid 5979] close(25) = -1 EBADF (Bad file descriptor) [pid 5979] close(26) = -1 EBADF (Bad file descriptor) [pid 5979] close(27) = -1 EBADF (Bad file descriptor) [pid 5979] close(28) = -1 EBADF (Bad file descriptor) [pid 5979] close(29) = -1 EBADF (Bad file descriptor) [pid 5979] exit_group(0) = ? [pid 5979] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=134, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] umount2("./131", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./131", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./131/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./131/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./131/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./131/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./131/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./131/file2") = 0 [pid 5836] umount2("./131/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./131/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./131/binderfs") = 0 [pid 5836] umount2("./131/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./131/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./131/cgroup.net") = 0 [pid 5836] umount2("./131/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./131/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./131/cgroup.cpu") = 0 [pid 5836] umount2("./131/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./131/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./131/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./131") = 0 [pid 5836] mkdir("./132", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5980 attached [pid 5980] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 135 [pid 5980] <... set_robust_list resumed>) = 0 [pid 5980] chdir("./132") = 0 [pid 5980] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5980] setpgid(0, 0) = 0 [pid 5980] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5980] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5980] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5980] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5980] write(3, "1000", 4) = 4 [pid 5980] close(3) = 0 [pid 5980] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5980] write(1, "executing program\n", 18executing program ) = 18 [pid 5980] memfd_create("syzkaller", 0) = 3 [pid 5980] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5980] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5980] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5980] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5980] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5980] close(3) = 0 [pid 5980] close(4) = 0 [pid 5980] mkdir("./file2", 0777) = 0 [pid 5980] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5980] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [ 166.938778][ T5980] loop0: detected capacity change from 0 to 128 [pid 5980] chdir("./file2") = 0 [pid 5980] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5980] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5980] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5980] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5980] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5980] close(3) = 0 [pid 5980] close(4) = 0 [pid 5980] close(5) = -1 EBADF (Bad file descriptor) [pid 5980] close(6) = -1 EBADF (Bad file descriptor) [pid 5980] close(7) = -1 EBADF (Bad file descriptor) [pid 5980] close(8) = -1 EBADF (Bad file descriptor) [pid 5980] close(9) = -1 EBADF (Bad file descriptor) [pid 5980] close(10) = -1 EBADF (Bad file descriptor) [pid 5980] close(11) = -1 EBADF (Bad file descriptor) [pid 5980] close(12) = -1 EBADF (Bad file descriptor) [pid 5980] close(13) = -1 EBADF (Bad file descriptor) [pid 5980] close(14) = -1 EBADF (Bad file descriptor) [pid 5980] close(15) = -1 EBADF (Bad file descriptor) [pid 5980] close(16) = -1 EBADF (Bad file descriptor) [pid 5980] close(17) = -1 EBADF (Bad file descriptor) [pid 5980] close(18) = -1 EBADF (Bad file descriptor) [pid 5980] close(19) = -1 EBADF (Bad file descriptor) [pid 5980] close(20) = -1 EBADF (Bad file descriptor) [pid 5980] close(21) = -1 EBADF (Bad file descriptor) [pid 5980] close(22) = -1 EBADF (Bad file descriptor) [pid 5980] close(23) = -1 EBADF (Bad file descriptor) [pid 5980] close(24) = -1 EBADF (Bad file descriptor) [pid 5980] close(25) = -1 EBADF (Bad file descriptor) [pid 5980] close(26) = -1 EBADF (Bad file descriptor) [pid 5980] close(27) = -1 EBADF (Bad file descriptor) [pid 5980] close(28) = -1 EBADF (Bad file descriptor) [pid 5980] close(29) = -1 EBADF (Bad file descriptor) [pid 5980] exit_group(0) = ? [pid 5980] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=135, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./132", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./132", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./132/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./132/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./132/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./132/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./132/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./132/file2") = 0 [pid 5836] umount2("./132/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./132/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./132/binderfs") = 0 [pid 5836] umount2("./132/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./132/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./132/cgroup.net") = 0 [pid 5836] umount2("./132/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./132/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./132/cgroup.cpu") = 0 [pid 5836] umount2("./132/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./132/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./132/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./132") = 0 [pid 5836] mkdir("./133", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5981 attached [pid 5981] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 136 [pid 5981] <... set_robust_list resumed>) = 0 [pid 5981] chdir("./133") = 0 [pid 5981] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5981] setpgid(0, 0) = 0 [pid 5981] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5981] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5981] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5981] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5981] write(3, "1000", 4) = 4 [pid 5981] close(3) = 0 [pid 5981] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5981] write(1, "executing program\n", 18) = 18 [pid 5981] memfd_create("syzkaller", 0) = 3 [pid 5981] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5981] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5981] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5981] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5981] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5981] close(3) = 0 [pid 5981] close(4) = 0 [pid 5981] mkdir("./file2", 0777) = 0 [pid 5981] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5981] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5981] chdir("./file2") = 0 [pid 5981] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5981] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5981] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5981] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5981] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5981] close(3) = 0 [pid 5981] close(4) = 0 [pid 5981] close(5) = -1 EBADF (Bad file descriptor) [pid 5981] close(6) = -1 EBADF (Bad file descriptor) [pid 5981] close(7) = -1 EBADF (Bad file descriptor) [pid 5981] close(8) = -1 EBADF (Bad file descriptor) [pid 5981] close(9) = -1 EBADF (Bad file descriptor) [pid 5981] close(10) = -1 EBADF (Bad file descriptor) [pid 5981] close(11) = -1 EBADF (Bad file descriptor) [pid 5981] close(12) = -1 EBADF (Bad file descriptor) [pid 5981] close(13) = -1 EBADF (Bad file descriptor) [pid 5981] close(14) = -1 EBADF (Bad file descriptor) [pid 5981] close(15) = -1 EBADF (Bad file descriptor) [pid 5981] close(16) = -1 EBADF (Bad file descriptor) [pid 5981] close(17) = -1 EBADF (Bad file descriptor) [pid 5981] close(18) = -1 EBADF (Bad file descriptor) [pid 5981] close(19) = -1 EBADF (Bad file descriptor) [pid 5981] close(20) = -1 EBADF (Bad file descriptor) [pid 5981] close(21) = -1 EBADF (Bad file descriptor) [pid 5981] close(22) = -1 EBADF (Bad file descriptor) [pid 5981] close(23) = -1 EBADF (Bad file descriptor) [ 167.590874][ T5981] loop0: detected capacity change from 0 to 128 [pid 5981] close(24) = -1 EBADF (Bad file descriptor) [pid 5981] close(25) = -1 EBADF (Bad file descriptor) [pid 5981] close(26) = -1 EBADF (Bad file descriptor) [pid 5981] close(27) = -1 EBADF (Bad file descriptor) [pid 5981] close(28) = -1 EBADF (Bad file descriptor) [pid 5981] close(29) = -1 EBADF (Bad file descriptor) [pid 5981] exit_group(0) = ? [pid 5981] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=136, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./133", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./133", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./133/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./133/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./133/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./133/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./133/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./133/file2") = 0 [pid 5836] umount2("./133/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./133/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./133/binderfs") = 0 [pid 5836] umount2("./133/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./133/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./133/cgroup.net") = 0 [pid 5836] umount2("./133/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./133/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./133/cgroup.cpu") = 0 [pid 5836] umount2("./133/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./133/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./133/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./133") = 0 [pid 5836] mkdir("./134", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5982 attached [pid 5982] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 137 [pid 5982] <... set_robust_list resumed>) = 0 [pid 5982] chdir("./134") = 0 [pid 5982] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5982] setpgid(0, 0) = 0 [pid 5982] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5982] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5982] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5982] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5982] write(3, "1000", 4) = 4 [pid 5982] close(3) = 0 [pid 5982] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5982] write(1, "executing program\n", 18) = 18 [pid 5982] memfd_create("syzkaller", 0) = 3 [pid 5982] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5982] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5982] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5982] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5982] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5982] close(3) = 0 [pid 5982] close(4) = 0 [pid 5982] mkdir("./file2", 0777) = 0 [pid 5982] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5982] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5982] chdir("./file2") = 0 [pid 5982] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5982] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5982] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5982] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5982] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5982] close(3) = 0 [pid 5982] close(4) = 0 [ 168.108007][ T5982] loop0: detected capacity change from 0 to 128 [pid 5982] close(5) = -1 EBADF (Bad file descriptor) [pid 5982] close(6) = -1 EBADF (Bad file descriptor) [pid 5982] close(7) = -1 EBADF (Bad file descriptor) [pid 5982] close(8) = -1 EBADF (Bad file descriptor) [pid 5982] close(9) = -1 EBADF (Bad file descriptor) [pid 5982] close(10) = -1 EBADF (Bad file descriptor) [pid 5982] close(11) = -1 EBADF (Bad file descriptor) [pid 5982] close(12) = -1 EBADF (Bad file descriptor) [pid 5982] close(13) = -1 EBADF (Bad file descriptor) [pid 5982] close(14) = -1 EBADF (Bad file descriptor) [pid 5982] close(15) = -1 EBADF (Bad file descriptor) [pid 5982] close(16) = -1 EBADF (Bad file descriptor) [pid 5982] close(17) = -1 EBADF (Bad file descriptor) [pid 5982] close(18) = -1 EBADF (Bad file descriptor) [pid 5982] close(19) = -1 EBADF (Bad file descriptor) [pid 5982] close(20) = -1 EBADF (Bad file descriptor) [pid 5982] close(21) = -1 EBADF (Bad file descriptor) [pid 5982] close(22) = -1 EBADF (Bad file descriptor) [pid 5982] close(23) = -1 EBADF (Bad file descriptor) [pid 5982] close(24) = -1 EBADF (Bad file descriptor) [pid 5982] close(25) = -1 EBADF (Bad file descriptor) [pid 5982] close(26) = -1 EBADF (Bad file descriptor) [pid 5982] close(27) = -1 EBADF (Bad file descriptor) [pid 5982] close(28) = -1 EBADF (Bad file descriptor) [pid 5982] close(29) = -1 EBADF (Bad file descriptor) [pid 5982] exit_group(0) = ? [pid 5982] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=137, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] umount2("./134", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./134", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./134/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./134/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./134/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./134/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./134/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./134/file2") = 0 [pid 5836] umount2("./134/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./134/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./134/binderfs") = 0 [pid 5836] umount2("./134/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./134/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./134/cgroup.net") = 0 [pid 5836] umount2("./134/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./134/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./134/cgroup.cpu") = 0 [pid 5836] umount2("./134/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./134/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./134/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./134") = 0 [pid 5836] mkdir("./135", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5983 attached , child_tidptr=0x555563237690) = 138 [pid 5983] set_robust_list(0x5555632376a0, 24) = 0 [pid 5983] chdir("./135") = 0 [pid 5983] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5983] setpgid(0, 0) = 0 [pid 5983] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5983] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5983] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5983] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5983] write(3, "1000", 4) = 4 [pid 5983] close(3) = 0 [pid 5983] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5983] write(1, "executing program\n", 18) = 18 [pid 5983] memfd_create("syzkaller", 0) = 3 [pid 5983] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5983] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5983] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5983] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5983] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5983] close(3) = 0 [pid 5983] close(4) = 0 [pid 5983] mkdir("./file2", 0777) = 0 [pid 5983] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5983] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5983] chdir("./file2") = 0 [pid 5983] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5983] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5983] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5983] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5983] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5983] close(3) = 0 [ 168.696440][ T5983] loop0: detected capacity change from 0 to 128 [pid 5983] close(4) = 0 [pid 5983] close(5) = -1 EBADF (Bad file descriptor) [pid 5983] close(6) = -1 EBADF (Bad file descriptor) [pid 5983] close(7) = -1 EBADF (Bad file descriptor) [pid 5983] close(8) = -1 EBADF (Bad file descriptor) [pid 5983] close(9) = -1 EBADF (Bad file descriptor) [pid 5983] close(10) = -1 EBADF (Bad file descriptor) [pid 5983] close(11) = -1 EBADF (Bad file descriptor) [pid 5983] close(12) = -1 EBADF (Bad file descriptor) [pid 5983] close(13) = -1 EBADF (Bad file descriptor) [pid 5983] close(14) = -1 EBADF (Bad file descriptor) [pid 5983] close(15) = -1 EBADF (Bad file descriptor) [pid 5983] close(16) = -1 EBADF (Bad file descriptor) [pid 5983] close(17) = -1 EBADF (Bad file descriptor) [pid 5983] close(18) = -1 EBADF (Bad file descriptor) [pid 5983] close(19) = -1 EBADF (Bad file descriptor) [pid 5983] close(20) = -1 EBADF (Bad file descriptor) [pid 5983] close(21) = -1 EBADF (Bad file descriptor) [pid 5983] close(22) = -1 EBADF (Bad file descriptor) [pid 5983] close(23) = -1 EBADF (Bad file descriptor) [pid 5983] close(24) = -1 EBADF (Bad file descriptor) [pid 5983] close(25) = -1 EBADF (Bad file descriptor) [pid 5983] close(26) = -1 EBADF (Bad file descriptor) [pid 5983] close(27) = -1 EBADF (Bad file descriptor) [pid 5983] close(28) = -1 EBADF (Bad file descriptor) [pid 5983] close(29) = -1 EBADF (Bad file descriptor) [pid 5983] exit_group(0) = ? [pid 5983] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=138, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./135", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./135", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./135/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./135/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./135/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./135/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./135/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./135/file2") = 0 [pid 5836] umount2("./135/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./135/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./135/binderfs") = 0 [pid 5836] umount2("./135/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./135/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./135/cgroup.net") = 0 [pid 5836] umount2("./135/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./135/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./135/cgroup.cpu") = 0 [pid 5836] umount2("./135/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./135/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./135/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./135") = 0 [pid 5836] mkdir("./136", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5984 attached , child_tidptr=0x555563237690) = 139 [pid 5984] set_robust_list(0x5555632376a0, 24) = 0 [pid 5984] chdir("./136") = 0 [pid 5984] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5984] setpgid(0, 0) = 0 [pid 5984] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5984] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5984] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5984] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5984] write(3, "1000", 4) = 4 [pid 5984] close(3) = 0 [pid 5984] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5984] write(1, "executing program\n", 18) = 18 [pid 5984] memfd_create("syzkaller", 0) = 3 [pid 5984] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5984] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5984] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5984] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5984] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5984] close(3) = 0 [pid 5984] close(4) = 0 [pid 5984] mkdir("./file2", 0777) = 0 [pid 5984] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5984] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5984] chdir("./file2") = 0 [pid 5984] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5984] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5984] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5984] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5984] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5984] close(3) = 0 [pid 5984] close(4) = 0 [ 169.327129][ T5984] loop0: detected capacity change from 0 to 128 [pid 5984] close(5) = -1 EBADF (Bad file descriptor) [pid 5984] close(6) = -1 EBADF (Bad file descriptor) [pid 5984] close(7) = -1 EBADF (Bad file descriptor) [pid 5984] close(8) = -1 EBADF (Bad file descriptor) [pid 5984] close(9) = -1 EBADF (Bad file descriptor) [pid 5984] close(10) = -1 EBADF (Bad file descriptor) [pid 5984] close(11) = -1 EBADF (Bad file descriptor) [pid 5984] close(12) = -1 EBADF (Bad file descriptor) [pid 5984] close(13) = -1 EBADF (Bad file descriptor) [pid 5984] close(14) = -1 EBADF (Bad file descriptor) [pid 5984] close(15) = -1 EBADF (Bad file descriptor) [pid 5984] close(16) = -1 EBADF (Bad file descriptor) [pid 5984] close(17) = -1 EBADF (Bad file descriptor) [pid 5984] close(18) = -1 EBADF (Bad file descriptor) [pid 5984] close(19) = -1 EBADF (Bad file descriptor) [pid 5984] close(20) = -1 EBADF (Bad file descriptor) [pid 5984] close(21) = -1 EBADF (Bad file descriptor) [pid 5984] close(22) = -1 EBADF (Bad file descriptor) [pid 5984] close(23) = -1 EBADF (Bad file descriptor) [pid 5984] close(24) = -1 EBADF (Bad file descriptor) [pid 5984] close(25) = -1 EBADF (Bad file descriptor) [pid 5984] close(26) = -1 EBADF (Bad file descriptor) [pid 5984] close(27) = -1 EBADF (Bad file descriptor) [pid 5984] close(28) = -1 EBADF (Bad file descriptor) [pid 5984] close(29) = -1 EBADF (Bad file descriptor) [pid 5984] exit_group(0) = ? [pid 5984] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=139, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./136", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./136", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./136/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./136/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./136/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./136/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./136/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./136/file2") = 0 [pid 5836] umount2("./136/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./136/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./136/binderfs") = 0 [pid 5836] umount2("./136/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./136/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./136/cgroup.net") = 0 [pid 5836] umount2("./136/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./136/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./136/cgroup.cpu") = 0 [pid 5836] umount2("./136/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./136/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./136/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./136") = 0 [pid 5836] mkdir("./137", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5985 attached [pid 5985] set_robust_list(0x5555632376a0, 24) = 0 [pid 5985] chdir("./137" [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 140 [pid 5985] <... chdir resumed>) = 0 [pid 5985] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5985] setpgid(0, 0) = 0 [pid 5985] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5985] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5985] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5985] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5985] write(3, "1000", 4) = 4 [pid 5985] close(3) = 0 [pid 5985] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5985] write(1, "executing program\n", 18executing program ) = 18 [pid 5985] memfd_create("syzkaller", 0) = 3 [pid 5985] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5985] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5985] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5985] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5985] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5985] close(3) = 0 [pid 5985] close(4) = 0 [pid 5985] mkdir("./file2", 0777) = 0 [pid 5985] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5985] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5985] chdir("./file2") = 0 [pid 5985] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 169.731101][ T5985] loop0: detected capacity change from 0 to 128 [pid 5985] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5985] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5985] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5985] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5985] close(3) = 0 [pid 5985] close(4) = 0 [pid 5985] close(5) = -1 EBADF (Bad file descriptor) [pid 5985] close(6) = -1 EBADF (Bad file descriptor) [pid 5985] close(7) = -1 EBADF (Bad file descriptor) [pid 5985] close(8) = -1 EBADF (Bad file descriptor) [pid 5985] close(9) = -1 EBADF (Bad file descriptor) [pid 5985] close(10) = -1 EBADF (Bad file descriptor) [pid 5985] close(11) = -1 EBADF (Bad file descriptor) [pid 5985] close(12) = -1 EBADF (Bad file descriptor) [pid 5985] close(13) = -1 EBADF (Bad file descriptor) [pid 5985] close(14) = -1 EBADF (Bad file descriptor) [pid 5985] close(15) = -1 EBADF (Bad file descriptor) [pid 5985] close(16) = -1 EBADF (Bad file descriptor) [pid 5985] close(17) = -1 EBADF (Bad file descriptor) [pid 5985] close(18) = -1 EBADF (Bad file descriptor) [pid 5985] close(19) = -1 EBADF (Bad file descriptor) [pid 5985] close(20) = -1 EBADF (Bad file descriptor) [pid 5985] close(21) = -1 EBADF (Bad file descriptor) [pid 5985] close(22) = -1 EBADF (Bad file descriptor) [pid 5985] close(23) = -1 EBADF (Bad file descriptor) [pid 5985] close(24) = -1 EBADF (Bad file descriptor) [pid 5985] close(25) = -1 EBADF (Bad file descriptor) [pid 5985] close(26) = -1 EBADF (Bad file descriptor) [pid 5985] close(27) = -1 EBADF (Bad file descriptor) [pid 5985] close(28) = -1 EBADF (Bad file descriptor) [pid 5985] close(29) = -1 EBADF (Bad file descriptor) [pid 5985] exit_group(0) = ? [pid 5985] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=140, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./137", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./137", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./137/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./137/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./137/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./137/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./137/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./137/file2") = 0 [pid 5836] umount2("./137/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./137/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./137/binderfs") = 0 [pid 5836] umount2("./137/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./137/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./137/cgroup.net") = 0 [pid 5836] umount2("./137/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./137/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./137/cgroup.cpu") = 0 [pid 5836] umount2("./137/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./137/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./137/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./137") = 0 [pid 5836] mkdir("./138", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5986 attached [pid 5986] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 141 [pid 5986] <... set_robust_list resumed>) = 0 [pid 5986] chdir("./138") = 0 [pid 5986] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5986] setpgid(0, 0) = 0 [pid 5986] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5986] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5986] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5986] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5986] write(3, "1000", 4) = 4 [pid 5986] close(3) = 0 [pid 5986] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5986] write(1, "executing program\n", 18) = 18 [pid 5986] memfd_create("syzkaller", 0) = 3 [pid 5986] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5986] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5986] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5986] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5986] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5986] close(3) = 0 [pid 5986] close(4) = 0 [pid 5986] mkdir("./file2", 0777) = 0 [pid 5986] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5986] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5986] chdir("./file2") = 0 [pid 5986] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5986] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5986] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5986] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5986] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5986] close(3) = 0 [ 170.271480][ T5986] loop0: detected capacity change from 0 to 128 [pid 5986] close(4) = 0 [pid 5986] close(5) = -1 EBADF (Bad file descriptor) [pid 5986] close(6) = -1 EBADF (Bad file descriptor) [pid 5986] close(7) = -1 EBADF (Bad file descriptor) [pid 5986] close(8) = -1 EBADF (Bad file descriptor) [pid 5986] close(9) = -1 EBADF (Bad file descriptor) [pid 5986] close(10) = -1 EBADF (Bad file descriptor) [pid 5986] close(11) = -1 EBADF (Bad file descriptor) [pid 5986] close(12) = -1 EBADF (Bad file descriptor) [pid 5986] close(13) = -1 EBADF (Bad file descriptor) [pid 5986] close(14) = -1 EBADF (Bad file descriptor) [pid 5986] close(15) = -1 EBADF (Bad file descriptor) [pid 5986] close(16) = -1 EBADF (Bad file descriptor) [pid 5986] close(17) = -1 EBADF (Bad file descriptor) [pid 5986] close(18) = -1 EBADF (Bad file descriptor) [pid 5986] close(19) = -1 EBADF (Bad file descriptor) [pid 5986] close(20) = -1 EBADF (Bad file descriptor) [pid 5986] close(21) = -1 EBADF (Bad file descriptor) [pid 5986] close(22) = -1 EBADF (Bad file descriptor) [pid 5986] close(23) = -1 EBADF (Bad file descriptor) [pid 5986] close(24) = -1 EBADF (Bad file descriptor) [pid 5986] close(25) = -1 EBADF (Bad file descriptor) [pid 5986] close(26) = -1 EBADF (Bad file descriptor) [pid 5986] close(27) = -1 EBADF (Bad file descriptor) [pid 5986] close(28) = -1 EBADF (Bad file descriptor) [pid 5986] close(29) = -1 EBADF (Bad file descriptor) [pid 5986] exit_group(0) = ? [pid 5986] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=141, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] umount2("./138", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./138", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./138/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./138/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./138/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./138/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./138/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./138/file2") = 0 [pid 5836] umount2("./138/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./138/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./138/binderfs") = 0 [pid 5836] umount2("./138/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./138/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./138/cgroup.net") = 0 [pid 5836] umount2("./138/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./138/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./138/cgroup.cpu") = 0 [pid 5836] umount2("./138/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./138/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./138/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./138") = 0 [pid 5836] mkdir("./139", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5987 attached , child_tidptr=0x555563237690) = 142 [pid 5987] set_robust_list(0x5555632376a0, 24) = 0 [pid 5987] chdir("./139") = 0 [pid 5987] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5987] setpgid(0, 0) = 0 [pid 5987] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5987] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5987] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5987] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5987] write(3, "1000", 4) = 4 [pid 5987] close(3) = 0 [pid 5987] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5987] write(1, "executing program\n", 18) = 18 [pid 5987] memfd_create("syzkaller", 0) = 3 [pid 5987] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5987] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5987] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5987] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5987] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5987] close(3) = 0 [pid 5987] close(4) = 0 [pid 5987] mkdir("./file2", 0777) = 0 [pid 5987] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5987] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5987] chdir("./file2") = 0 [pid 5987] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5987] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5987] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5987] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5987] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5987] close(3) = 0 [pid 5987] close(4) = 0 [ 170.823336][ T5987] loop0: detected capacity change from 0 to 128 [pid 5987] close(5) = -1 EBADF (Bad file descriptor) [pid 5987] close(6) = -1 EBADF (Bad file descriptor) [pid 5987] close(7) = -1 EBADF (Bad file descriptor) [pid 5987] close(8) = -1 EBADF (Bad file descriptor) [pid 5987] close(9) = -1 EBADF (Bad file descriptor) [pid 5987] close(10) = -1 EBADF (Bad file descriptor) [pid 5987] close(11) = -1 EBADF (Bad file descriptor) [pid 5987] close(12) = -1 EBADF (Bad file descriptor) [pid 5987] close(13) = -1 EBADF (Bad file descriptor) [pid 5987] close(14) = -1 EBADF (Bad file descriptor) [pid 5987] close(15) = -1 EBADF (Bad file descriptor) [pid 5987] close(16) = -1 EBADF (Bad file descriptor) [pid 5987] close(17) = -1 EBADF (Bad file descriptor) [pid 5987] close(18) = -1 EBADF (Bad file descriptor) [pid 5987] close(19) = -1 EBADF (Bad file descriptor) [pid 5987] close(20) = -1 EBADF (Bad file descriptor) [pid 5987] close(21) = -1 EBADF (Bad file descriptor) [pid 5987] close(22) = -1 EBADF (Bad file descriptor) [pid 5987] close(23) = -1 EBADF (Bad file descriptor) [pid 5987] close(24) = -1 EBADF (Bad file descriptor) [pid 5987] close(25) = -1 EBADF (Bad file descriptor) [pid 5987] close(26) = -1 EBADF (Bad file descriptor) [pid 5987] close(27) = -1 EBADF (Bad file descriptor) [pid 5987] close(28) = -1 EBADF (Bad file descriptor) [pid 5987] close(29) = -1 EBADF (Bad file descriptor) [pid 5987] exit_group(0) = ? [pid 5987] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=142, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./139", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./139", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./139/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./139/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./139/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./139/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./139/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./139/file2") = 0 [pid 5836] umount2("./139/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./139/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./139/binderfs") = 0 [pid 5836] umount2("./139/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./139/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./139/cgroup.net") = 0 [pid 5836] umount2("./139/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./139/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./139/cgroup.cpu") = 0 [pid 5836] umount2("./139/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./139/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./139/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./139") = 0 [pid 5836] mkdir("./140", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5988 attached , child_tidptr=0x555563237690) = 143 [pid 5988] set_robust_list(0x5555632376a0, 24) = 0 [pid 5988] chdir("./140") = 0 [pid 5988] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5988] setpgid(0, 0) = 0 [pid 5988] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5988] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5988] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5988] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5988] write(3, "1000", 4) = 4 [pid 5988] close(3) = 0 [pid 5988] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5988] write(1, "executing program\n", 18) = 18 [pid 5988] memfd_create("syzkaller", 0) = 3 [pid 5988] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5988] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5988] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5988] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5988] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5988] close(3) = 0 [pid 5988] close(4) = 0 [pid 5988] mkdir("./file2", 0777) = 0 [pid 5988] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5988] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5988] chdir("./file2") = 0 [pid 5988] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5988] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5988] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5988] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5988] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [ 171.360137][ T5988] loop0: detected capacity change from 0 to 128 [pid 5988] close(3) = 0 [pid 5988] close(4) = 0 [pid 5988] close(5) = -1 EBADF (Bad file descriptor) [pid 5988] close(6) = -1 EBADF (Bad file descriptor) [pid 5988] close(7) = -1 EBADF (Bad file descriptor) [pid 5988] close(8) = -1 EBADF (Bad file descriptor) [pid 5988] close(9) = -1 EBADF (Bad file descriptor) [pid 5988] close(10) = -1 EBADF (Bad file descriptor) [pid 5988] close(11) = -1 EBADF (Bad file descriptor) [pid 5988] close(12) = -1 EBADF (Bad file descriptor) [pid 5988] close(13) = -1 EBADF (Bad file descriptor) [pid 5988] close(14) = -1 EBADF (Bad file descriptor) [pid 5988] close(15) = -1 EBADF (Bad file descriptor) [pid 5988] close(16) = -1 EBADF (Bad file descriptor) [pid 5988] close(17) = -1 EBADF (Bad file descriptor) [pid 5988] close(18) = -1 EBADF (Bad file descriptor) [pid 5988] close(19) = -1 EBADF (Bad file descriptor) [pid 5988] close(20) = -1 EBADF (Bad file descriptor) [pid 5988] close(21) = -1 EBADF (Bad file descriptor) [pid 5988] close(22) = -1 EBADF (Bad file descriptor) [pid 5988] close(23) = -1 EBADF (Bad file descriptor) [pid 5988] close(24) = -1 EBADF (Bad file descriptor) [pid 5988] close(25) = -1 EBADF (Bad file descriptor) [pid 5988] close(26) = -1 EBADF (Bad file descriptor) [pid 5988] close(27) = -1 EBADF (Bad file descriptor) [pid 5988] close(28) = -1 EBADF (Bad file descriptor) [pid 5988] close(29) = -1 EBADF (Bad file descriptor) [pid 5988] exit_group(0) = ? [pid 5988] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=143, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] umount2("./140", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./140", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./140/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./140/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./140/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./140/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./140/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./140/file2") = 0 [pid 5836] umount2("./140/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./140/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./140/binderfs") = 0 [pid 5836] umount2("./140/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./140/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./140/cgroup.net") = 0 [pid 5836] umount2("./140/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./140/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./140/cgroup.cpu") = 0 [pid 5836] umount2("./140/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./140/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./140/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./140") = 0 [pid 5836] mkdir("./141", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5989 attached [pid 5989] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 144 [pid 5989] <... set_robust_list resumed>) = 0 [pid 5989] chdir("./141") = 0 [pid 5989] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5989] setpgid(0, 0) = 0 [pid 5989] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5989] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5989] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5989] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5989] write(3, "1000", 4) = 4 [pid 5989] close(3) = 0 [pid 5989] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5989] write(1, "executing program\n", 18executing program ) = 18 [pid 5989] memfd_create("syzkaller", 0) = 3 [pid 5989] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5989] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5989] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5989] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5989] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5989] close(3) = 0 [pid 5989] close(4) = 0 [pid 5989] mkdir("./file2", 0777) = 0 [pid 5989] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5989] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5989] chdir("./file2") = 0 [pid 5989] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5989] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5989] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5989] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5989] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5989] close(3) = 0 [ 171.933342][ T5989] loop0: detected capacity change from 0 to 128 [pid 5989] close(4) = 0 [pid 5989] close(5) = -1 EBADF (Bad file descriptor) [pid 5989] close(6) = -1 EBADF (Bad file descriptor) [pid 5989] close(7) = -1 EBADF (Bad file descriptor) [pid 5989] close(8) = -1 EBADF (Bad file descriptor) [pid 5989] close(9) = -1 EBADF (Bad file descriptor) [pid 5989] close(10) = -1 EBADF (Bad file descriptor) [pid 5989] close(11) = -1 EBADF (Bad file descriptor) [pid 5989] close(12) = -1 EBADF (Bad file descriptor) [pid 5989] close(13) = -1 EBADF (Bad file descriptor) [pid 5989] close(14) = -1 EBADF (Bad file descriptor) [pid 5989] close(15) = -1 EBADF (Bad file descriptor) [pid 5989] close(16) = -1 EBADF (Bad file descriptor) [pid 5989] close(17) = -1 EBADF (Bad file descriptor) [pid 5989] close(18) = -1 EBADF (Bad file descriptor) [pid 5989] close(19) = -1 EBADF (Bad file descriptor) [pid 5989] close(20) = -1 EBADF (Bad file descriptor) [pid 5989] close(21) = -1 EBADF (Bad file descriptor) [pid 5989] close(22) = -1 EBADF (Bad file descriptor) [pid 5989] close(23) = -1 EBADF (Bad file descriptor) [pid 5989] close(24) = -1 EBADF (Bad file descriptor) [pid 5989] close(25) = -1 EBADF (Bad file descriptor) [pid 5989] close(26) = -1 EBADF (Bad file descriptor) [pid 5989] close(27) = -1 EBADF (Bad file descriptor) [pid 5989] close(28) = -1 EBADF (Bad file descriptor) [pid 5989] close(29) = -1 EBADF (Bad file descriptor) [pid 5989] exit_group(0) = ? [pid 5989] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=144, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./141", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./141", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./141/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./141/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./141/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./141/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./141/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./141/file2") = 0 [pid 5836] umount2("./141/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./141/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./141/binderfs") = 0 [pid 5836] umount2("./141/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./141/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./141/cgroup.net") = 0 [pid 5836] umount2("./141/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./141/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./141/cgroup.cpu") = 0 [pid 5836] umount2("./141/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./141/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./141/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./141") = 0 [pid 5836] mkdir("./142", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5990 attached [pid 5990] set_robust_list(0x5555632376a0, 24) = 0 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 145 [pid 5990] chdir("./142") = 0 [pid 5990] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5990] setpgid(0, 0) = 0 [pid 5990] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5990] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5990] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5990] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5990] write(3, "1000", 4) = 4 [pid 5990] close(3) = 0 [pid 5990] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5990] write(1, "executing program\n", 18) = 18 [pid 5990] memfd_create("syzkaller", 0) = 3 [pid 5990] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5990] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5990] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5990] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5990] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5990] close(3) = 0 [pid 5990] close(4) = 0 [pid 5990] mkdir("./file2", 0777) = 0 [pid 5990] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5990] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5990] chdir("./file2") = 0 [pid 5990] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5990] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5990] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5990] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5990] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5990] close(3) = 0 [pid 5990] close(4) = 0 [pid 5990] close(5) = -1 EBADF (Bad file descriptor) [pid 5990] close(6) = -1 EBADF (Bad file descriptor) [pid 5990] close(7) = -1 EBADF (Bad file descriptor) [pid 5990] close(8) = -1 EBADF (Bad file descriptor) [pid 5990] close(9) = -1 EBADF (Bad file descriptor) [pid 5990] close(10) = -1 EBADF (Bad file descriptor) [pid 5990] close(11) = -1 EBADF (Bad file descriptor) [pid 5990] close(12) = -1 EBADF (Bad file descriptor) [pid 5990] close(13) = -1 EBADF (Bad file descriptor) [pid 5990] close(14) = -1 EBADF (Bad file descriptor) [pid 5990] close(15) = -1 EBADF (Bad file descriptor) [pid 5990] close(16) = -1 EBADF (Bad file descriptor) [pid 5990] close(17) = -1 EBADF (Bad file descriptor) [pid 5990] close(18) = -1 EBADF (Bad file descriptor) [pid 5990] close(19) = -1 EBADF (Bad file descriptor) [pid 5990] close(20) = -1 EBADF (Bad file descriptor) [pid 5990] close(21) = -1 EBADF (Bad file descriptor) [pid 5990] close(22) = -1 EBADF (Bad file descriptor) [pid 5990] close(23) = -1 EBADF (Bad file descriptor) [pid 5990] close(24) = -1 EBADF (Bad file descriptor) [pid 5990] close(25) = -1 EBADF (Bad file descriptor) [pid 5990] close(26) = -1 EBADF (Bad file descriptor) [pid 5990] close(27) = -1 EBADF (Bad file descriptor) [pid 5990] close(28) = -1 EBADF (Bad file descriptor) [pid 5990] close(29) = -1 EBADF (Bad file descriptor) [pid 5990] exit_group(0) = ? [ 172.500667][ T5990] loop0: detected capacity change from 0 to 128 [pid 5990] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=145, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5836] umount2("./142", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./142", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./142/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./142/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./142/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./142/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./142/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./142/file2") = 0 [pid 5836] umount2("./142/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./142/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./142/binderfs") = 0 [pid 5836] umount2("./142/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./142/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./142/cgroup.net") = 0 [pid 5836] umount2("./142/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./142/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./142/cgroup.cpu") = 0 [pid 5836] umount2("./142/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./142/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./142/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./142") = 0 [pid 5836] mkdir("./143", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5991 attached , child_tidptr=0x555563237690) = 146 [pid 5991] set_robust_list(0x5555632376a0, 24) = 0 [pid 5991] chdir("./143") = 0 [pid 5991] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5991] setpgid(0, 0) = 0 [pid 5991] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5991] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5991] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5991] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5991] write(3, "1000", 4) = 4 [pid 5991] close(3) = 0 [pid 5991] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5991] write(1, "executing program\n", 18) = 18 [pid 5991] memfd_create("syzkaller", 0) = 3 [pid 5991] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5991] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5991] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5991] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5991] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5991] close(3) = 0 [pid 5991] close(4) = 0 [pid 5991] mkdir("./file2", 0777) = 0 [pid 5991] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5991] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5991] chdir("./file2") = 0 [pid 5991] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5991] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5991] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [ 173.060494][ T5991] loop0: detected capacity change from 0 to 128 [pid 5991] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5991] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5991] close(3) = 0 [pid 5991] close(4) = 0 [pid 5991] close(5) = -1 EBADF (Bad file descriptor) [pid 5991] close(6) = -1 EBADF (Bad file descriptor) [pid 5991] close(7) = -1 EBADF (Bad file descriptor) [pid 5991] close(8) = -1 EBADF (Bad file descriptor) [pid 5991] close(9) = -1 EBADF (Bad file descriptor) [pid 5991] close(10) = -1 EBADF (Bad file descriptor) [pid 5991] close(11) = -1 EBADF (Bad file descriptor) [pid 5991] close(12) = -1 EBADF (Bad file descriptor) [pid 5991] close(13) = -1 EBADF (Bad file descriptor) [pid 5991] close(14) = -1 EBADF (Bad file descriptor) [pid 5991] close(15) = -1 EBADF (Bad file descriptor) [pid 5991] close(16) = -1 EBADF (Bad file descriptor) [pid 5991] close(17) = -1 EBADF (Bad file descriptor) [pid 5991] close(18) = -1 EBADF (Bad file descriptor) [pid 5991] close(19) = -1 EBADF (Bad file descriptor) [pid 5991] close(20) = -1 EBADF (Bad file descriptor) [pid 5991] close(21) = -1 EBADF (Bad file descriptor) [pid 5991] close(22) = -1 EBADF (Bad file descriptor) [pid 5991] close(23) = -1 EBADF (Bad file descriptor) [pid 5991] close(24) = -1 EBADF (Bad file descriptor) [pid 5991] close(25) = -1 EBADF (Bad file descriptor) [pid 5991] close(26) = -1 EBADF (Bad file descriptor) [pid 5991] close(27) = -1 EBADF (Bad file descriptor) [pid 5991] close(28) = -1 EBADF (Bad file descriptor) [pid 5991] close(29) = -1 EBADF (Bad file descriptor) [pid 5991] exit_group(0) = ? [pid 5991] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=146, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5836] umount2("./143", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./143", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./143/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./143/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./143/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./143/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./143/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./143/file2") = 0 [pid 5836] umount2("./143/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./143/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./143/binderfs") = 0 [pid 5836] umount2("./143/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./143/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./143/cgroup.net") = 0 [pid 5836] umount2("./143/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./143/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./143/cgroup.cpu") = 0 [pid 5836] umount2("./143/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./143/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./143/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./143") = 0 [pid 5836] mkdir("./144", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5992 attached [pid 5992] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 147 [pid 5992] <... set_robust_list resumed>) = 0 [pid 5992] chdir("./144") = 0 [pid 5992] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5992] setpgid(0, 0) = 0 [pid 5992] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5992] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5992] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5992] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5992] write(3, "1000", 4) = 4 [pid 5992] close(3) = 0 [pid 5992] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5992] write(1, "executing program\n", 18) = 18 [pid 5992] memfd_create("syzkaller", 0) = 3 [pid 5992] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5992] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5992] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5992] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5992] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5992] close(3) = 0 [pid 5992] close(4) = 0 [pid 5992] mkdir("./file2", 0777) = 0 [pid 5992] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5992] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5992] chdir("./file2") = 0 [ 173.561381][ T5992] loop0: detected capacity change from 0 to 128 [pid 5992] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5992] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5992] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5992] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5992] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5992] close(3) = 0 [pid 5992] close(4) = 0 [pid 5992] close(5) = -1 EBADF (Bad file descriptor) [pid 5992] close(6) = -1 EBADF (Bad file descriptor) [pid 5992] close(7) = -1 EBADF (Bad file descriptor) [pid 5992] close(8) = -1 EBADF (Bad file descriptor) [pid 5992] close(9) = -1 EBADF (Bad file descriptor) [pid 5992] close(10) = -1 EBADF (Bad file descriptor) [pid 5992] close(11) = -1 EBADF (Bad file descriptor) [pid 5992] close(12) = -1 EBADF (Bad file descriptor) [pid 5992] close(13) = -1 EBADF (Bad file descriptor) [pid 5992] close(14) = -1 EBADF (Bad file descriptor) [pid 5992] close(15) = -1 EBADF (Bad file descriptor) [pid 5992] close(16) = -1 EBADF (Bad file descriptor) [pid 5992] close(17) = -1 EBADF (Bad file descriptor) [pid 5992] close(18) = -1 EBADF (Bad file descriptor) [pid 5992] close(19) = -1 EBADF (Bad file descriptor) [pid 5992] close(20) = -1 EBADF (Bad file descriptor) [pid 5992] close(21) = -1 EBADF (Bad file descriptor) [pid 5992] close(22) = -1 EBADF (Bad file descriptor) [pid 5992] close(23) = -1 EBADF (Bad file descriptor) [pid 5992] close(24) = -1 EBADF (Bad file descriptor) [pid 5992] close(25) = -1 EBADF (Bad file descriptor) [pid 5992] close(26) = -1 EBADF (Bad file descriptor) [pid 5992] close(27) = -1 EBADF (Bad file descriptor) [pid 5992] close(28) = -1 EBADF (Bad file descriptor) [pid 5992] close(29) = -1 EBADF (Bad file descriptor) [pid 5992] exit_group(0) = ? [pid 5992] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=147, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./144", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./144", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./144/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./144/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./144/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./144/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./144/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./144/file2") = 0 [pid 5836] umount2("./144/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./144/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./144/binderfs") = 0 [pid 5836] umount2("./144/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./144/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./144/cgroup.net") = 0 [pid 5836] umount2("./144/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./144/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./144/cgroup.cpu") = 0 [pid 5836] umount2("./144/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./144/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./144/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./144") = 0 [pid 5836] mkdir("./145", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5993 attached [pid 5993] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 148 [pid 5993] <... set_robust_list resumed>) = 0 [pid 5993] chdir("./145") = 0 [pid 5993] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5993] setpgid(0, 0) = 0 [pid 5993] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5993] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5993] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5993] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5993] write(3, "1000", 4) = 4 [pid 5993] close(3) = 0 [pid 5993] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5993] write(1, "executing program\n", 18) = 18 [pid 5993] memfd_create("syzkaller", 0) = 3 [pid 5993] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5993] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5993] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5993] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5993] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5993] close(3) = 0 [pid 5993] close(4) = 0 [pid 5993] mkdir("./file2", 0777) = 0 [pid 5993] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5993] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5993] chdir("./file2") = 0 [pid 5993] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5993] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5993] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5993] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [ 174.127102][ T5993] loop0: detected capacity change from 0 to 128 [pid 5993] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5993] close(3) = 0 [pid 5993] close(4) = 0 [pid 5993] close(5) = -1 EBADF (Bad file descriptor) [pid 5993] close(6) = -1 EBADF (Bad file descriptor) [pid 5993] close(7) = -1 EBADF (Bad file descriptor) [pid 5993] close(8) = -1 EBADF (Bad file descriptor) [pid 5993] close(9) = -1 EBADF (Bad file descriptor) [pid 5993] close(10) = -1 EBADF (Bad file descriptor) [pid 5993] close(11) = -1 EBADF (Bad file descriptor) [pid 5993] close(12) = -1 EBADF (Bad file descriptor) [pid 5993] close(13) = -1 EBADF (Bad file descriptor) [pid 5993] close(14) = -1 EBADF (Bad file descriptor) [pid 5993] close(15) = -1 EBADF (Bad file descriptor) [pid 5993] close(16) = -1 EBADF (Bad file descriptor) [pid 5993] close(17) = -1 EBADF (Bad file descriptor) [pid 5993] close(18) = -1 EBADF (Bad file descriptor) [pid 5993] close(19) = -1 EBADF (Bad file descriptor) [pid 5993] close(20) = -1 EBADF (Bad file descriptor) [pid 5993] close(21) = -1 EBADF (Bad file descriptor) [pid 5993] close(22) = -1 EBADF (Bad file descriptor) [pid 5993] close(23) = -1 EBADF (Bad file descriptor) [pid 5993] close(24) = -1 EBADF (Bad file descriptor) [pid 5993] close(25) = -1 EBADF (Bad file descriptor) [pid 5993] close(26) = -1 EBADF (Bad file descriptor) [pid 5993] close(27) = -1 EBADF (Bad file descriptor) [pid 5993] close(28) = -1 EBADF (Bad file descriptor) [pid 5993] close(29) = -1 EBADF (Bad file descriptor) [pid 5993] exit_group(0) = ? [pid 5993] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=148, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./145", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./145", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./145/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./145/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./145/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./145/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./145/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./145/file2") = 0 [pid 5836] umount2("./145/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./145/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./145/binderfs") = 0 [pid 5836] umount2("./145/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./145/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./145/cgroup.net") = 0 [pid 5836] umount2("./145/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./145/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./145/cgroup.cpu") = 0 [pid 5836] umount2("./145/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./145/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./145/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./145") = 0 [pid 5836] mkdir("./146", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5994 attached [pid 5994] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 149 [pid 5994] <... set_robust_list resumed>) = 0 [pid 5994] chdir("./146") = 0 [pid 5994] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5994] setpgid(0, 0) = 0 [pid 5994] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5994] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5994] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5994] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5994] write(3, "1000", 4) = 4 [pid 5994] close(3) = 0 [pid 5994] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5994] write(1, "executing program\n", 18executing program ) = 18 [pid 5994] memfd_create("syzkaller", 0) = 3 [pid 5994] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5994] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5994] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5994] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5994] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5994] close(3) = 0 [pid 5994] close(4) = 0 [pid 5994] mkdir("./file2", 0777) = 0 [pid 5994] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5994] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5994] chdir("./file2") = 0 [pid 5994] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5994] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [ 174.770987][ T5994] loop0: detected capacity change from 0 to 128 [pid 5994] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5994] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5994] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5994] close(3) = 0 [pid 5994] close(4) = 0 [pid 5994] close(5) = -1 EBADF (Bad file descriptor) [pid 5994] close(6) = -1 EBADF (Bad file descriptor) [pid 5994] close(7) = -1 EBADF (Bad file descriptor) [pid 5994] close(8) = -1 EBADF (Bad file descriptor) [pid 5994] close(9) = -1 EBADF (Bad file descriptor) [pid 5994] close(10) = -1 EBADF (Bad file descriptor) [pid 5994] close(11) = -1 EBADF (Bad file descriptor) [pid 5994] close(12) = -1 EBADF (Bad file descriptor) [pid 5994] close(13) = -1 EBADF (Bad file descriptor) [pid 5994] close(14) = -1 EBADF (Bad file descriptor) [pid 5994] close(15) = -1 EBADF (Bad file descriptor) [pid 5994] close(16) = -1 EBADF (Bad file descriptor) [pid 5994] close(17) = -1 EBADF (Bad file descriptor) [pid 5994] close(18) = -1 EBADF (Bad file descriptor) [pid 5994] close(19) = -1 EBADF (Bad file descriptor) [pid 5994] close(20) = -1 EBADF (Bad file descriptor) [pid 5994] close(21) = -1 EBADF (Bad file descriptor) [pid 5994] close(22) = -1 EBADF (Bad file descriptor) [pid 5994] close(23) = -1 EBADF (Bad file descriptor) [pid 5994] close(24) = -1 EBADF (Bad file descriptor) [pid 5994] close(25) = -1 EBADF (Bad file descriptor) [pid 5994] close(26) = -1 EBADF (Bad file descriptor) [pid 5994] close(27) = -1 EBADF (Bad file descriptor) [pid 5994] close(28) = -1 EBADF (Bad file descriptor) [pid 5994] close(29) = -1 EBADF (Bad file descriptor) [pid 5994] exit_group(0) = ? [pid 5994] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=149, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] umount2("./146", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./146", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./146/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./146/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./146/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./146/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./146/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./146/file2") = 0 [pid 5836] umount2("./146/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./146/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./146/binderfs") = 0 [pid 5836] umount2("./146/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./146/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./146/cgroup.net") = 0 [pid 5836] umount2("./146/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./146/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./146/cgroup.cpu") = 0 [pid 5836] umount2("./146/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./146/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./146/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./146") = 0 [pid 5836] mkdir("./147", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5995 attached [pid 5995] set_robust_list(0x5555632376a0, 24) = 0 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 150 [pid 5995] chdir("./147") = 0 [pid 5995] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5995] setpgid(0, 0) = 0 [pid 5995] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5995] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5995] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5995] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5995] write(3, "1000", 4) = 4 [pid 5995] close(3) = 0 [pid 5995] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5995] write(1, "executing program\n", 18executing program ) = 18 [pid 5995] memfd_create("syzkaller", 0) = 3 [pid 5995] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5995] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5995] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5995] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5995] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5995] close(3) = 0 [pid 5995] close(4) = 0 [pid 5995] mkdir("./file2", 0777) = 0 [pid 5995] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5995] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5995] chdir("./file2") = 0 [pid 5995] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5995] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5995] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5995] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [ 175.407804][ T5995] loop0: detected capacity change from 0 to 128 [pid 5995] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5995] close(3) = 0 [pid 5995] close(4) = 0 [pid 5995] close(5) = -1 EBADF (Bad file descriptor) [pid 5995] close(6) = -1 EBADF (Bad file descriptor) [pid 5995] close(7) = -1 EBADF (Bad file descriptor) [pid 5995] close(8) = -1 EBADF (Bad file descriptor) [pid 5995] close(9) = -1 EBADF (Bad file descriptor) [pid 5995] close(10) = -1 EBADF (Bad file descriptor) [pid 5995] close(11) = -1 EBADF (Bad file descriptor) [pid 5995] close(12) = -1 EBADF (Bad file descriptor) [pid 5995] close(13) = -1 EBADF (Bad file descriptor) [pid 5995] close(14) = -1 EBADF (Bad file descriptor) [pid 5995] close(15) = -1 EBADF (Bad file descriptor) [pid 5995] close(16) = -1 EBADF (Bad file descriptor) [pid 5995] close(17) = -1 EBADF (Bad file descriptor) [pid 5995] close(18) = -1 EBADF (Bad file descriptor) [pid 5995] close(19) = -1 EBADF (Bad file descriptor) [pid 5995] close(20) = -1 EBADF (Bad file descriptor) [pid 5995] close(21) = -1 EBADF (Bad file descriptor) [pid 5995] close(22) = -1 EBADF (Bad file descriptor) [pid 5995] close(23) = -1 EBADF (Bad file descriptor) [pid 5995] close(24) = -1 EBADF (Bad file descriptor) [pid 5995] close(25) = -1 EBADF (Bad file descriptor) [pid 5995] close(26) = -1 EBADF (Bad file descriptor) [pid 5995] close(27) = -1 EBADF (Bad file descriptor) [pid 5995] close(28) = -1 EBADF (Bad file descriptor) [pid 5995] close(29) = -1 EBADF (Bad file descriptor) [pid 5995] exit_group(0) = ? [pid 5995] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=150, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] umount2("./147", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./147", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./147/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./147/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./147/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./147/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./147/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./147/file2") = 0 [pid 5836] umount2("./147/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./147/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./147/binderfs") = 0 [pid 5836] umount2("./147/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./147/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./147/cgroup.net") = 0 [pid 5836] umount2("./147/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./147/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./147/cgroup.cpu") = 0 [pid 5836] umount2("./147/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./147/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./147/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./147") = 0 [pid 5836] mkdir("./148", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5996 attached [pid 5996] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 151 [pid 5996] <... set_robust_list resumed>) = 0 [pid 5996] chdir("./148") = 0 [pid 5996] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5996] setpgid(0, 0) = 0 [pid 5996] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5996] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5996] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5996] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5996] write(3, "1000", 4) = 4 [pid 5996] close(3) = 0 [pid 5996] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5996] write(1, "executing program\n", 18executing program ) = 18 [pid 5996] memfd_create("syzkaller", 0) = 3 [pid 5996] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5996] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5996] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5996] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5996] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5996] close(3) = 0 [pid 5996] close(4) = 0 [pid 5996] mkdir("./file2", 0777) = 0 [pid 5996] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [ 175.980769][ T5996] loop0: detected capacity change from 0 to 128 [pid 5996] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5996] chdir("./file2") = 0 [pid 5996] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5996] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5996] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5996] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5996] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5996] close(3) = 0 [pid 5996] close(4) = 0 [pid 5996] close(5) = -1 EBADF (Bad file descriptor) [pid 5996] close(6) = -1 EBADF (Bad file descriptor) [pid 5996] close(7) = -1 EBADF (Bad file descriptor) [pid 5996] close(8) = -1 EBADF (Bad file descriptor) [pid 5996] close(9) = -1 EBADF (Bad file descriptor) [pid 5996] close(10) = -1 EBADF (Bad file descriptor) [pid 5996] close(11) = -1 EBADF (Bad file descriptor) [pid 5996] close(12) = -1 EBADF (Bad file descriptor) [pid 5996] close(13) = -1 EBADF (Bad file descriptor) [pid 5996] close(14) = -1 EBADF (Bad file descriptor) [pid 5996] close(15) = -1 EBADF (Bad file descriptor) [pid 5996] close(16) = -1 EBADF (Bad file descriptor) [pid 5996] close(17) = -1 EBADF (Bad file descriptor) [pid 5996] close(18) = -1 EBADF (Bad file descriptor) [pid 5996] close(19) = -1 EBADF (Bad file descriptor) [pid 5996] close(20) = -1 EBADF (Bad file descriptor) [pid 5996] close(21) = -1 EBADF (Bad file descriptor) [pid 5996] close(22) = -1 EBADF (Bad file descriptor) [pid 5996] close(23) = -1 EBADF (Bad file descriptor) [pid 5996] close(24) = -1 EBADF (Bad file descriptor) [pid 5996] close(25) = -1 EBADF (Bad file descriptor) [pid 5996] close(26) = -1 EBADF (Bad file descriptor) [pid 5996] close(27) = -1 EBADF (Bad file descriptor) [pid 5996] close(28) = -1 EBADF (Bad file descriptor) [pid 5996] close(29) = -1 EBADF (Bad file descriptor) [pid 5996] exit_group(0) = ? [pid 5996] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=151, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./148", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./148", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./148/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./148/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./148/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./148/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./148/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./148/file2") = 0 [pid 5836] umount2("./148/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./148/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./148/binderfs") = 0 [pid 5836] umount2("./148/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./148/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./148/cgroup.net") = 0 [pid 5836] umount2("./148/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./148/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./148/cgroup.cpu") = 0 [pid 5836] umount2("./148/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./148/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./148/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./148") = 0 [pid 5836] mkdir("./149", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5997 attached , child_tidptr=0x555563237690) = 152 [pid 5997] set_robust_list(0x5555632376a0, 24) = 0 [pid 5997] chdir("./149") = 0 [pid 5997] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5997] setpgid(0, 0) = 0 [pid 5997] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5997] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5997] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5997] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5997] write(3, "1000", 4) = 4 [pid 5997] close(3) = 0 [pid 5997] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5997] write(1, "executing program\n", 18) = 18 [pid 5997] memfd_create("syzkaller", 0) = 3 [pid 5997] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5997] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5997] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5997] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5997] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5997] close(3) = 0 [pid 5997] close(4) = 0 [pid 5997] mkdir("./file2", 0777) = 0 [pid 5997] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5997] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5997] chdir("./file2") = 0 [pid 5997] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5997] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5997] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5997] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5997] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5997] close(3) = 0 [pid 5997] close(4) = 0 [pid 5997] close(5) = -1 EBADF (Bad file descriptor) [pid 5997] close(6) = -1 EBADF (Bad file descriptor) [pid 5997] close(7) = -1 EBADF (Bad file descriptor) [pid 5997] close(8) = -1 EBADF (Bad file descriptor) [pid 5997] close(9) = -1 EBADF (Bad file descriptor) [pid 5997] close(10) = -1 EBADF (Bad file descriptor) [pid 5997] close(11) = -1 EBADF (Bad file descriptor) [pid 5997] close(12) = -1 EBADF (Bad file descriptor) [pid 5997] close(13) = -1 EBADF (Bad file descriptor) [pid 5997] close(14) = -1 EBADF (Bad file descriptor) [pid 5997] close(15) = -1 EBADF (Bad file descriptor) [pid 5997] close(16) = -1 EBADF (Bad file descriptor) [pid 5997] close(17) = -1 EBADF (Bad file descriptor) [pid 5997] close(18) = -1 EBADF (Bad file descriptor) [pid 5997] close(19) = -1 EBADF (Bad file descriptor) [pid 5997] close(20) = -1 EBADF (Bad file descriptor) [pid 5997] close(21) = -1 EBADF (Bad file descriptor) [pid 5997] close(22) = -1 EBADF (Bad file descriptor) [pid 5997] close(23) = -1 EBADF (Bad file descriptor) [pid 5997] close(24) = -1 EBADF (Bad file descriptor) [pid 5997] close(25) = -1 EBADF (Bad file descriptor) [pid 5997] close(26) = -1 EBADF (Bad file descriptor) [pid 5997] close(27) = -1 EBADF (Bad file descriptor) [ 176.532446][ T5997] loop0: detected capacity change from 0 to 128 [pid 5997] close(28) = -1 EBADF (Bad file descriptor) [pid 5997] close(29) = -1 EBADF (Bad file descriptor) [pid 5997] exit_group(0) = ? [pid 5997] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=152, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./149", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./149", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./149/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./149/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./149/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./149/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./149/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./149/file2") = 0 [pid 5836] umount2("./149/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./149/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./149/binderfs") = 0 [pid 5836] umount2("./149/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./149/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./149/cgroup.net") = 0 [pid 5836] umount2("./149/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./149/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./149/cgroup.cpu") = 0 [pid 5836] umount2("./149/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./149/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./149/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./149") = 0 [pid 5836] mkdir("./150", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5998 attached , child_tidptr=0x555563237690) = 153 [pid 5998] set_robust_list(0x5555632376a0, 24) = 0 [pid 5998] chdir("./150") = 0 [pid 5998] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5998] setpgid(0, 0) = 0 [pid 5998] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5998] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5998] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5998] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5998] write(3, "1000", 4) = 4 [pid 5998] close(3) = 0 [pid 5998] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5998] write(1, "executing program\n", 18) = 18 [pid 5998] memfd_create("syzkaller", 0) = 3 [pid 5998] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5998] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5998] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5998] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5998] close(3) = 0 [pid 5998] close(4) = 0 [pid 5998] mkdir("./file2", 0777) = 0 [pid 5998] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5998] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5998] chdir("./file2") = 0 [pid 5998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5998] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [ 177.035596][ T5998] loop0: detected capacity change from 0 to 128 [pid 5998] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5998] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5998] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5998] close(3) = 0 [pid 5998] close(4) = 0 [pid 5998] close(5) = -1 EBADF (Bad file descriptor) [pid 5998] close(6) = -1 EBADF (Bad file descriptor) [pid 5998] close(7) = -1 EBADF (Bad file descriptor) [pid 5998] close(8) = -1 EBADF (Bad file descriptor) [pid 5998] close(9) = -1 EBADF (Bad file descriptor) [pid 5998] close(10) = -1 EBADF (Bad file descriptor) [pid 5998] close(11) = -1 EBADF (Bad file descriptor) [pid 5998] close(12) = -1 EBADF (Bad file descriptor) [pid 5998] close(13) = -1 EBADF (Bad file descriptor) [pid 5998] close(14) = -1 EBADF (Bad file descriptor) [pid 5998] close(15) = -1 EBADF (Bad file descriptor) [pid 5998] close(16) = -1 EBADF (Bad file descriptor) [pid 5998] close(17) = -1 EBADF (Bad file descriptor) [pid 5998] close(18) = -1 EBADF (Bad file descriptor) [pid 5998] close(19) = -1 EBADF (Bad file descriptor) [pid 5998] close(20) = -1 EBADF (Bad file descriptor) [pid 5998] close(21) = -1 EBADF (Bad file descriptor) [pid 5998] close(22) = -1 EBADF (Bad file descriptor) [pid 5998] close(23) = -1 EBADF (Bad file descriptor) [pid 5998] close(24) = -1 EBADF (Bad file descriptor) [pid 5998] close(25) = -1 EBADF (Bad file descriptor) [pid 5998] close(26) = -1 EBADF (Bad file descriptor) [pid 5998] close(27) = -1 EBADF (Bad file descriptor) [pid 5998] close(28) = -1 EBADF (Bad file descriptor) [pid 5998] close(29) = -1 EBADF (Bad file descriptor) [pid 5998] exit_group(0) = ? [pid 5998] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=153, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] umount2("./150", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./150", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./150/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./150/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./150/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./150/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./150/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./150/file2") = 0 [pid 5836] umount2("./150/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./150/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./150/binderfs") = 0 [pid 5836] umount2("./150/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./150/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./150/cgroup.net") = 0 [pid 5836] umount2("./150/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./150/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./150/cgroup.cpu") = 0 [pid 5836] umount2("./150/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./150/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./150/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./150") = 0 [pid 5836] mkdir("./151", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5999 attached [pid 5999] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 154 [pid 5999] <... set_robust_list resumed>) = 0 [pid 5999] chdir("./151") = 0 [pid 5999] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5999] setpgid(0, 0) = 0 [pid 5999] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5999] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5999] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5999] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5999] write(3, "1000", 4) = 4 [pid 5999] close(3) = 0 [pid 5999] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5999] write(1, "executing program\n", 18) = 18 [pid 5999] memfd_create("syzkaller", 0) = 3 [pid 5999] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 5999] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 5999] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 5999] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5999] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5999] close(3) = 0 [pid 5999] close(4) = 0 [pid 5999] mkdir("./file2", 0777) = 0 [pid 5999] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 5999] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5999] chdir("./file2") = 0 [pid 5999] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5999] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 5999] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5999] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 5999] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 5999] close(3) = 0 [pid 5999] close(4) = 0 [pid 5999] close(5) = -1 EBADF (Bad file descriptor) [pid 5999] close(6) = -1 EBADF (Bad file descriptor) [pid 5999] close(7) = -1 EBADF (Bad file descriptor) [pid 5999] close(8) = -1 EBADF (Bad file descriptor) [pid 5999] close(9) = -1 EBADF (Bad file descriptor) [pid 5999] close(10) = -1 EBADF (Bad file descriptor) [pid 5999] close(11) = -1 EBADF (Bad file descriptor) [pid 5999] close(12) = -1 EBADF (Bad file descriptor) [pid 5999] close(13) = -1 EBADF (Bad file descriptor) [pid 5999] close(14) = -1 EBADF (Bad file descriptor) [pid 5999] close(15) = -1 EBADF (Bad file descriptor) [pid 5999] close(16) = -1 EBADF (Bad file descriptor) [pid 5999] close(17) = -1 EBADF (Bad file descriptor) [pid 5999] close(18) = -1 EBADF (Bad file descriptor) [pid 5999] close(19) = -1 EBADF (Bad file descriptor) [pid 5999] close(20) = -1 EBADF (Bad file descriptor) [pid 5999] close(21) = -1 EBADF (Bad file descriptor) [pid 5999] close(22) = -1 EBADF (Bad file descriptor) [pid 5999] close(23) = -1 EBADF (Bad file descriptor) [pid 5999] close(24) = -1 EBADF (Bad file descriptor) [pid 5999] close(25) = -1 EBADF (Bad file descriptor) [pid 5999] close(26) = -1 EBADF (Bad file descriptor) [pid 5999] close(27) = -1 EBADF (Bad file descriptor) [pid 5999] close(28) = -1 EBADF (Bad file descriptor) [pid 5999] close(29) = -1 EBADF (Bad file descriptor) [pid 5999] exit_group(0) = ? [pid 5999] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=154, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [ 177.641713][ T5999] loop0: detected capacity change from 0 to 128 [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./151", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./151", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./151/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./151/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./151/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./151/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./151/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./151/file2") = 0 [pid 5836] umount2("./151/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./151/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./151/binderfs") = 0 [pid 5836] umount2("./151/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./151/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./151/cgroup.net") = 0 [pid 5836] umount2("./151/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./151/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./151/cgroup.cpu") = 0 [pid 5836] umount2("./151/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./151/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./151/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./151") = 0 [pid 5836] mkdir("./152", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6000 attached , child_tidptr=0x555563237690) = 155 [pid 6000] set_robust_list(0x5555632376a0, 24) = 0 [pid 6000] chdir("./152") = 0 [pid 6000] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6000] setpgid(0, 0) = 0 [pid 6000] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6000] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6000] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6000] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6000] write(3, "1000", 4) = 4 [pid 6000] close(3) = 0 [pid 6000] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6000] write(1, "executing program\n", 18executing program ) = 18 [pid 6000] memfd_create("syzkaller", 0) = 3 [pid 6000] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6000] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6000] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6000] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6000] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6000] close(3) = 0 [pid 6000] close(4) = 0 [pid 6000] mkdir("./file2", 0777) = 0 [pid 6000] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6000] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6000] chdir("./file2") = 0 [pid 6000] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6000] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6000] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6000] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6000] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6000] close(3) = 0 [pid 6000] close(4) = 0 [pid 6000] close(5) = -1 EBADF (Bad file descriptor) [pid 6000] close(6) = -1 EBADF (Bad file descriptor) [pid 6000] close(7) = -1 EBADF (Bad file descriptor) [pid 6000] close(8) = -1 EBADF (Bad file descriptor) [pid 6000] close(9) = -1 EBADF (Bad file descriptor) [pid 6000] close(10) = -1 EBADF (Bad file descriptor) [pid 6000] close(11) = -1 EBADF (Bad file descriptor) [pid 6000] close(12) = -1 EBADF (Bad file descriptor) [pid 6000] close(13) = -1 EBADF (Bad file descriptor) [pid 6000] close(14) = -1 EBADF (Bad file descriptor) [pid 6000] close(15) = -1 EBADF (Bad file descriptor) [pid 6000] close(16) = -1 EBADF (Bad file descriptor) [ 178.163578][ T6000] loop0: detected capacity change from 0 to 128 [pid 6000] close(17) = -1 EBADF (Bad file descriptor) [pid 6000] close(18) = -1 EBADF (Bad file descriptor) [pid 6000] close(19) = -1 EBADF (Bad file descriptor) [pid 6000] close(20) = -1 EBADF (Bad file descriptor) [pid 6000] close(21) = -1 EBADF (Bad file descriptor) [pid 6000] close(22) = -1 EBADF (Bad file descriptor) [pid 6000] close(23) = -1 EBADF (Bad file descriptor) [pid 6000] close(24) = -1 EBADF (Bad file descriptor) [pid 6000] close(25) = -1 EBADF (Bad file descriptor) [pid 6000] close(26) = -1 EBADF (Bad file descriptor) [pid 6000] close(27) = -1 EBADF (Bad file descriptor) [pid 6000] close(28) = -1 EBADF (Bad file descriptor) [pid 6000] close(29) = -1 EBADF (Bad file descriptor) [pid 6000] exit_group(0) = ? [pid 6000] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=155, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./152", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./152", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./152/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./152/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./152/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./152/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./152/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./152/file2") = 0 [pid 5836] umount2("./152/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./152/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./152/binderfs") = 0 [pid 5836] umount2("./152/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./152/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./152/cgroup.net") = 0 [pid 5836] umount2("./152/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./152/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./152/cgroup.cpu") = 0 [pid 5836] umount2("./152/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./152/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./152/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./152") = 0 [pid 5836] mkdir("./153", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6001 attached , child_tidptr=0x555563237690) = 156 [pid 6001] set_robust_list(0x5555632376a0, 24) = 0 [pid 6001] chdir("./153") = 0 [pid 6001] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6001] setpgid(0, 0) = 0 [pid 6001] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6001] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6001] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6001] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6001] write(3, "1000", 4) = 4 [pid 6001] close(3) = 0 [pid 6001] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6001] write(1, "executing program\n", 18executing program ) = 18 [pid 6001] memfd_create("syzkaller", 0) = 3 [pid 6001] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6001] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6001] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6001] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6001] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6001] close(3) = 0 [pid 6001] close(4) = 0 [pid 6001] mkdir("./file2", 0777) = 0 [pid 6001] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6001] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6001] chdir("./file2") = 0 [pid 6001] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6001] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6001] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6001] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6001] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6001] close(3) = 0 [pid 6001] close(4) = 0 [ 178.666578][ T6001] loop0: detected capacity change from 0 to 128 [pid 6001] close(5) = -1 EBADF (Bad file descriptor) [pid 6001] close(6) = -1 EBADF (Bad file descriptor) [pid 6001] close(7) = -1 EBADF (Bad file descriptor) [pid 6001] close(8) = -1 EBADF (Bad file descriptor) [pid 6001] close(9) = -1 EBADF (Bad file descriptor) [pid 6001] close(10) = -1 EBADF (Bad file descriptor) [pid 6001] close(11) = -1 EBADF (Bad file descriptor) [pid 6001] close(12) = -1 EBADF (Bad file descriptor) [pid 6001] close(13) = -1 EBADF (Bad file descriptor) [pid 6001] close(14) = -1 EBADF (Bad file descriptor) [pid 6001] close(15) = -1 EBADF (Bad file descriptor) [pid 6001] close(16) = -1 EBADF (Bad file descriptor) [pid 6001] close(17) = -1 EBADF (Bad file descriptor) [pid 6001] close(18) = -1 EBADF (Bad file descriptor) [pid 6001] close(19) = -1 EBADF (Bad file descriptor) [pid 6001] close(20) = -1 EBADF (Bad file descriptor) [pid 6001] close(21) = -1 EBADF (Bad file descriptor) [pid 6001] close(22) = -1 EBADF (Bad file descriptor) [pid 6001] close(23) = -1 EBADF (Bad file descriptor) [pid 6001] close(24) = -1 EBADF (Bad file descriptor) [pid 6001] close(25) = -1 EBADF (Bad file descriptor) [pid 6001] close(26) = -1 EBADF (Bad file descriptor) [pid 6001] close(27) = -1 EBADF (Bad file descriptor) [pid 6001] close(28) = -1 EBADF (Bad file descriptor) [pid 6001] close(29) = -1 EBADF (Bad file descriptor) [pid 6001] exit_group(0) = ? [pid 6001] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=156, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./153", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./153", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./153/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./153/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./153/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./153/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./153/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./153/file2") = 0 [pid 5836] umount2("./153/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./153/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./153/binderfs") = 0 [pid 5836] umount2("./153/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./153/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./153/cgroup.net") = 0 [pid 5836] umount2("./153/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./153/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./153/cgroup.cpu") = 0 [pid 5836] umount2("./153/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./153/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./153/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./153") = 0 [pid 5836] mkdir("./154", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6002 attached [pid 6002] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 157 [pid 6002] <... set_robust_list resumed>) = 0 [pid 6002] chdir("./154") = 0 [pid 6002] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6002] setpgid(0, 0) = 0 [pid 6002] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6002] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6002] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6002] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6002] write(3, "1000", 4) = 4 [pid 6002] close(3) = 0 [pid 6002] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6002] write(1, "executing program\n", 18) = 18 [pid 6002] memfd_create("syzkaller", 0) = 3 [pid 6002] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6002] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6002] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6002] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6002] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6002] close(3) = 0 [pid 6002] close(4) = 0 [pid 6002] mkdir("./file2", 0777) = 0 [pid 6002] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6002] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6002] chdir("./file2") = 0 [pid 6002] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 179.155758][ T6002] loop0: detected capacity change from 0 to 128 [pid 6002] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6002] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6002] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6002] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6002] close(3) = 0 [pid 6002] close(4) = 0 [pid 6002] close(5) = -1 EBADF (Bad file descriptor) [pid 6002] close(6) = -1 EBADF (Bad file descriptor) [pid 6002] close(7) = -1 EBADF (Bad file descriptor) [pid 6002] close(8) = -1 EBADF (Bad file descriptor) [pid 6002] close(9) = -1 EBADF (Bad file descriptor) [pid 6002] close(10) = -1 EBADF (Bad file descriptor) [pid 6002] close(11) = -1 EBADF (Bad file descriptor) [pid 6002] close(12) = -1 EBADF (Bad file descriptor) [pid 6002] close(13) = -1 EBADF (Bad file descriptor) [pid 6002] close(14) = -1 EBADF (Bad file descriptor) [pid 6002] close(15) = -1 EBADF (Bad file descriptor) [pid 6002] close(16) = -1 EBADF (Bad file descriptor) [pid 6002] close(17) = -1 EBADF (Bad file descriptor) [pid 6002] close(18) = -1 EBADF (Bad file descriptor) [pid 6002] close(19) = -1 EBADF (Bad file descriptor) [pid 6002] close(20) = -1 EBADF (Bad file descriptor) [pid 6002] close(21) = -1 EBADF (Bad file descriptor) [pid 6002] close(22) = -1 EBADF (Bad file descriptor) [pid 6002] close(23) = -1 EBADF (Bad file descriptor) [pid 6002] close(24) = -1 EBADF (Bad file descriptor) [pid 6002] close(25) = -1 EBADF (Bad file descriptor) [pid 6002] close(26) = -1 EBADF (Bad file descriptor) [pid 6002] close(27) = -1 EBADF (Bad file descriptor) [pid 6002] close(28) = -1 EBADF (Bad file descriptor) [pid 6002] close(29) = -1 EBADF (Bad file descriptor) [pid 6002] exit_group(0) = ? [pid 6002] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=157, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./154", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./154", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./154/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./154/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./154/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./154/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./154/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./154/file2") = 0 [pid 5836] umount2("./154/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./154/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./154/binderfs") = 0 [pid 5836] umount2("./154/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./154/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./154/cgroup.net") = 0 [pid 5836] umount2("./154/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./154/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./154/cgroup.cpu") = 0 [pid 5836] umount2("./154/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./154/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./154/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./154") = 0 [pid 5836] mkdir("./155", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6003 attached [pid 6003] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 158 [pid 6003] <... set_robust_list resumed>) = 0 [pid 6003] chdir("./155") = 0 [pid 6003] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6003] setpgid(0, 0) = 0 [pid 6003] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6003] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6003] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6003] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6003] write(3, "1000", 4) = 4 [pid 6003] close(3) = 0 [pid 6003] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6003] write(1, "executing program\n", 18executing program ) = 18 [pid 6003] memfd_create("syzkaller", 0) = 3 [pid 6003] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6003] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6003] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6003] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6003] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6003] close(3) = 0 [pid 6003] close(4) = 0 [pid 6003] mkdir("./file2", 0777) = 0 [pid 6003] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6003] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6003] chdir("./file2") = 0 [pid 6003] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6003] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6003] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [ 179.762511][ T6003] loop0: detected capacity change from 0 to 128 [pid 6003] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6003] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6003] close(3) = 0 [pid 6003] close(4) = 0 [pid 6003] close(5) = -1 EBADF (Bad file descriptor) [pid 6003] close(6) = -1 EBADF (Bad file descriptor) [pid 6003] close(7) = -1 EBADF (Bad file descriptor) [pid 6003] close(8) = -1 EBADF (Bad file descriptor) [pid 6003] close(9) = -1 EBADF (Bad file descriptor) [pid 6003] close(10) = -1 EBADF (Bad file descriptor) [pid 6003] close(11) = -1 EBADF (Bad file descriptor) [pid 6003] close(12) = -1 EBADF (Bad file descriptor) [pid 6003] close(13) = -1 EBADF (Bad file descriptor) [pid 6003] close(14) = -1 EBADF (Bad file descriptor) [pid 6003] close(15) = -1 EBADF (Bad file descriptor) [pid 6003] close(16) = -1 EBADF (Bad file descriptor) [pid 6003] close(17) = -1 EBADF (Bad file descriptor) [pid 6003] close(18) = -1 EBADF (Bad file descriptor) [pid 6003] close(19) = -1 EBADF (Bad file descriptor) [pid 6003] close(20) = -1 EBADF (Bad file descriptor) [pid 6003] close(21) = -1 EBADF (Bad file descriptor) [pid 6003] close(22) = -1 EBADF (Bad file descriptor) [pid 6003] close(23) = -1 EBADF (Bad file descriptor) [pid 6003] close(24) = -1 EBADF (Bad file descriptor) [pid 6003] close(25) = -1 EBADF (Bad file descriptor) [pid 6003] close(26) = -1 EBADF (Bad file descriptor) [pid 6003] close(27) = -1 EBADF (Bad file descriptor) [pid 6003] close(28) = -1 EBADF (Bad file descriptor) [pid 6003] close(29) = -1 EBADF (Bad file descriptor) [pid 6003] exit_group(0) = ? [pid 6003] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=158, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5836] umount2("./155", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./155", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./155/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./155/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./155/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./155/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./155/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./155/file2") = 0 [pid 5836] umount2("./155/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./155/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./155/binderfs") = 0 [pid 5836] umount2("./155/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./155/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./155/cgroup.net") = 0 [pid 5836] umount2("./155/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./155/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./155/cgroup.cpu") = 0 [pid 5836] umount2("./155/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./155/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./155/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./155") = 0 [pid 5836] mkdir("./156", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6004 attached [pid 6004] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 159 [pid 6004] <... set_robust_list resumed>) = 0 [pid 6004] chdir("./156") = 0 [pid 6004] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6004] setpgid(0, 0) = 0 [pid 6004] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6004] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6004] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6004] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6004] write(3, "1000", 4) = 4 [pid 6004] close(3) = 0 [pid 6004] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6004] write(1, "executing program\n", 18) = 18 [pid 6004] memfd_create("syzkaller", 0) = 3 [pid 6004] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6004] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6004] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6004] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6004] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6004] close(3) = 0 [pid 6004] close(4) = 0 [pid 6004] mkdir("./file2", 0777) = 0 [pid 6004] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6004] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6004] chdir("./file2") = 0 [pid 6004] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 180.310620][ T6004] loop0: detected capacity change from 0 to 128 [pid 6004] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6004] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6004] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6004] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6004] close(3) = 0 [pid 6004] close(4) = 0 [pid 6004] close(5) = -1 EBADF (Bad file descriptor) [pid 6004] close(6) = -1 EBADF (Bad file descriptor) [pid 6004] close(7) = -1 EBADF (Bad file descriptor) [pid 6004] close(8) = -1 EBADF (Bad file descriptor) [pid 6004] close(9) = -1 EBADF (Bad file descriptor) [pid 6004] close(10) = -1 EBADF (Bad file descriptor) [pid 6004] close(11) = -1 EBADF (Bad file descriptor) [pid 6004] close(12) = -1 EBADF (Bad file descriptor) [pid 6004] close(13) = -1 EBADF (Bad file descriptor) [pid 6004] close(14) = -1 EBADF (Bad file descriptor) [pid 6004] close(15) = -1 EBADF (Bad file descriptor) [pid 6004] close(16) = -1 EBADF (Bad file descriptor) [pid 6004] close(17) = -1 EBADF (Bad file descriptor) [pid 6004] close(18) = -1 EBADF (Bad file descriptor) [pid 6004] close(19) = -1 EBADF (Bad file descriptor) [pid 6004] close(20) = -1 EBADF (Bad file descriptor) [pid 6004] close(21) = -1 EBADF (Bad file descriptor) [pid 6004] close(22) = -1 EBADF (Bad file descriptor) [pid 6004] close(23) = -1 EBADF (Bad file descriptor) [pid 6004] close(24) = -1 EBADF (Bad file descriptor) [pid 6004] close(25) = -1 EBADF (Bad file descriptor) [pid 6004] close(26) = -1 EBADF (Bad file descriptor) [pid 6004] close(27) = -1 EBADF (Bad file descriptor) [pid 6004] close(28) = -1 EBADF (Bad file descriptor) [pid 6004] close(29) = -1 EBADF (Bad file descriptor) [pid 6004] exit_group(0) = ? [pid 6004] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=159, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] umount2("./156", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./156", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./156/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./156/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./156/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./156/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./156/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./156/file2") = 0 [pid 5836] umount2("./156/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./156/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./156/binderfs") = 0 [pid 5836] umount2("./156/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./156/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./156/cgroup.net") = 0 [pid 5836] umount2("./156/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./156/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./156/cgroup.cpu") = 0 [pid 5836] umount2("./156/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./156/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./156/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./156") = 0 [pid 5836] mkdir("./157", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6005 attached [pid 6005] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 160 [pid 6005] <... set_robust_list resumed>) = 0 [pid 6005] chdir("./157") = 0 [pid 6005] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6005] setpgid(0, 0) = 0 [pid 6005] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6005] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6005] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6005] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6005] write(3, "1000", 4) = 4 [pid 6005] close(3) = 0 [pid 6005] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6005] write(1, "executing program\n", 18executing program ) = 18 [pid 6005] memfd_create("syzkaller", 0) = 3 [pid 6005] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6005] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6005] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6005] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6005] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6005] close(3) = 0 [pid 6005] close(4) = 0 [pid 6005] mkdir("./file2", 0777) = 0 [pid 6005] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6005] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6005] chdir("./file2") = 0 [pid 6005] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6005] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6005] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6005] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6005] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6005] close(3) = 0 [pid 6005] close(4) = 0 [ 180.908201][ T6005] loop0: detected capacity change from 0 to 128 [pid 6005] close(5) = -1 EBADF (Bad file descriptor) [pid 6005] close(6) = -1 EBADF (Bad file descriptor) [pid 6005] close(7) = -1 EBADF (Bad file descriptor) [pid 6005] close(8) = -1 EBADF (Bad file descriptor) [pid 6005] close(9) = -1 EBADF (Bad file descriptor) [pid 6005] close(10) = -1 EBADF (Bad file descriptor) [pid 6005] close(11) = -1 EBADF (Bad file descriptor) [pid 6005] close(12) = -1 EBADF (Bad file descriptor) [pid 6005] close(13) = -1 EBADF (Bad file descriptor) [pid 6005] close(14) = -1 EBADF (Bad file descriptor) [pid 6005] close(15) = -1 EBADF (Bad file descriptor) [pid 6005] close(16) = -1 EBADF (Bad file descriptor) [pid 6005] close(17) = -1 EBADF (Bad file descriptor) [pid 6005] close(18) = -1 EBADF (Bad file descriptor) [pid 6005] close(19) = -1 EBADF (Bad file descriptor) [pid 6005] close(20) = -1 EBADF (Bad file descriptor) [pid 6005] close(21) = -1 EBADF (Bad file descriptor) [pid 6005] close(22) = -1 EBADF (Bad file descriptor) [pid 6005] close(23) = -1 EBADF (Bad file descriptor) [pid 6005] close(24) = -1 EBADF (Bad file descriptor) [pid 6005] close(25) = -1 EBADF (Bad file descriptor) [pid 6005] close(26) = -1 EBADF (Bad file descriptor) [pid 6005] close(27) = -1 EBADF (Bad file descriptor) [pid 6005] close(28) = -1 EBADF (Bad file descriptor) [pid 6005] close(29) = -1 EBADF (Bad file descriptor) [pid 6005] exit_group(0) = ? [pid 6005] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=160, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./157", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./157", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./157/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./157/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./157/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./157/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./157/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./157/file2") = 0 [pid 5836] umount2("./157/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./157/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./157/binderfs") = 0 [pid 5836] umount2("./157/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./157/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./157/cgroup.net") = 0 [pid 5836] umount2("./157/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./157/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./157/cgroup.cpu") = 0 [pid 5836] umount2("./157/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./157/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./157/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./157") = 0 [pid 5836] mkdir("./158", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6006 attached [pid 6006] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 161 [pid 6006] <... set_robust_list resumed>) = 0 [pid 6006] chdir("./158") = 0 [pid 6006] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6006] setpgid(0, 0) = 0 [pid 6006] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6006] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6006] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6006] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6006] write(3, "1000", 4) = 4 [pid 6006] close(3) = 0 [pid 6006] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6006] write(1, "executing program\n", 18executing program ) = 18 [pid 6006] memfd_create("syzkaller", 0) = 3 [pid 6006] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6006] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6006] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6006] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6006] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6006] close(3) = 0 [pid 6006] close(4) = 0 [pid 6006] mkdir("./file2", 0777) = 0 [pid 6006] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6006] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6006] chdir("./file2") = 0 [pid 6006] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 181.549947][ T6006] loop0: detected capacity change from 0 to 128 [pid 6006] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6006] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6006] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6006] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6006] close(3) = 0 [pid 6006] close(4) = 0 [pid 6006] close(5) = -1 EBADF (Bad file descriptor) [pid 6006] close(6) = -1 EBADF (Bad file descriptor) [pid 6006] close(7) = -1 EBADF (Bad file descriptor) [pid 6006] close(8) = -1 EBADF (Bad file descriptor) [pid 6006] close(9) = -1 EBADF (Bad file descriptor) [pid 6006] close(10) = -1 EBADF (Bad file descriptor) [pid 6006] close(11) = -1 EBADF (Bad file descriptor) [pid 6006] close(12) = -1 EBADF (Bad file descriptor) [pid 6006] close(13) = -1 EBADF (Bad file descriptor) [pid 6006] close(14) = -1 EBADF (Bad file descriptor) [pid 6006] close(15) = -1 EBADF (Bad file descriptor) [pid 6006] close(16) = -1 EBADF (Bad file descriptor) [pid 6006] close(17) = -1 EBADF (Bad file descriptor) [pid 6006] close(18) = -1 EBADF (Bad file descriptor) [pid 6006] close(19) = -1 EBADF (Bad file descriptor) [pid 6006] close(20) = -1 EBADF (Bad file descriptor) [pid 6006] close(21) = -1 EBADF (Bad file descriptor) [pid 6006] close(22) = -1 EBADF (Bad file descriptor) [pid 6006] close(23) = -1 EBADF (Bad file descriptor) [pid 6006] close(24) = -1 EBADF (Bad file descriptor) [pid 6006] close(25) = -1 EBADF (Bad file descriptor) [pid 6006] close(26) = -1 EBADF (Bad file descriptor) [pid 6006] close(27) = -1 EBADF (Bad file descriptor) [pid 6006] close(28) = -1 EBADF (Bad file descriptor) [pid 6006] close(29) = -1 EBADF (Bad file descriptor) [pid 6006] exit_group(0) = ? [pid 6006] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=161, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] umount2("./158", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./158", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./158/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./158/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./158/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./158/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./158/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./158/file2") = 0 [pid 5836] umount2("./158/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./158/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./158/binderfs") = 0 [pid 5836] umount2("./158/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./158/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./158/cgroup.net") = 0 [pid 5836] umount2("./158/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./158/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./158/cgroup.cpu") = 0 [pid 5836] umount2("./158/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./158/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./158/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./158") = 0 [pid 5836] mkdir("./159", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6007 attached [pid 6007] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 162 [pid 6007] <... set_robust_list resumed>) = 0 [pid 6007] chdir("./159") = 0 [pid 6007] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6007] setpgid(0, 0) = 0 [pid 6007] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6007] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6007] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6007] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6007] write(3, "1000", 4) = 4 [pid 6007] close(3) = 0 [pid 6007] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6007] write(1, "executing program\n", 18executing program ) = 18 [pid 6007] memfd_create("syzkaller", 0) = 3 [pid 6007] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6007] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6007] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6007] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6007] close(3) = 0 [pid 6007] close(4) = 0 [pid 6007] mkdir("./file2", 0777) = 0 [pid 6007] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6007] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6007] chdir("./file2") = 0 [pid 6007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6007] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6007] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [ 182.154170][ T6007] loop0: detected capacity change from 0 to 128 [pid 6007] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6007] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6007] close(3) = 0 [pid 6007] close(4) = 0 [pid 6007] close(5) = -1 EBADF (Bad file descriptor) [pid 6007] close(6) = -1 EBADF (Bad file descriptor) [pid 6007] close(7) = -1 EBADF (Bad file descriptor) [pid 6007] close(8) = -1 EBADF (Bad file descriptor) [pid 6007] close(9) = -1 EBADF (Bad file descriptor) [pid 6007] close(10) = -1 EBADF (Bad file descriptor) [pid 6007] close(11) = -1 EBADF (Bad file descriptor) [pid 6007] close(12) = -1 EBADF (Bad file descriptor) [pid 6007] close(13) = -1 EBADF (Bad file descriptor) [pid 6007] close(14) = -1 EBADF (Bad file descriptor) [pid 6007] close(15) = -1 EBADF (Bad file descriptor) [pid 6007] close(16) = -1 EBADF (Bad file descriptor) [pid 6007] close(17) = -1 EBADF (Bad file descriptor) [pid 6007] close(18) = -1 EBADF (Bad file descriptor) [pid 6007] close(19) = -1 EBADF (Bad file descriptor) [pid 6007] close(20) = -1 EBADF (Bad file descriptor) [pid 6007] close(21) = -1 EBADF (Bad file descriptor) [pid 6007] close(22) = -1 EBADF (Bad file descriptor) [pid 6007] close(23) = -1 EBADF (Bad file descriptor) [pid 6007] close(24) = -1 EBADF (Bad file descriptor) [pid 6007] close(25) = -1 EBADF (Bad file descriptor) [pid 6007] close(26) = -1 EBADF (Bad file descriptor) [pid 6007] close(27) = -1 EBADF (Bad file descriptor) [pid 6007] close(28) = -1 EBADF (Bad file descriptor) [pid 6007] close(29) = -1 EBADF (Bad file descriptor) [pid 6007] exit_group(0) = ? [pid 6007] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=162, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./159", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./159", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./159/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./159/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./159/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./159/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./159/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./159/file2") = 0 [pid 5836] umount2("./159/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./159/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./159/binderfs") = 0 [pid 5836] umount2("./159/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./159/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./159/cgroup.net") = 0 [pid 5836] umount2("./159/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./159/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./159/cgroup.cpu") = 0 [pid 5836] umount2("./159/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./159/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./159/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./159") = 0 [pid 5836] mkdir("./160", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6008 attached [pid 6008] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 163 [pid 6008] <... set_robust_list resumed>) = 0 [pid 6008] chdir("./160") = 0 [pid 6008] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6008] setpgid(0, 0) = 0 [pid 6008] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6008] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6008] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6008] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6008] write(3, "1000", 4) = 4 [pid 6008] close(3) = 0 [pid 6008] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6008] write(1, "executing program\n", 18) = 18 [pid 6008] memfd_create("syzkaller", 0) = 3 [pid 6008] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6008] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6008] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6008] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6008] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6008] close(3) = 0 [pid 6008] close(4) = 0 [pid 6008] mkdir("./file2", 0777) = 0 [pid 6008] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6008] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6008] chdir("./file2") = 0 [pid 6008] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6008] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6008] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6008] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6008] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6008] close(3) = 0 [pid 6008] close(4) = 0 [pid 6008] close(5) = -1 EBADF (Bad file descriptor) [pid 6008] close(6) = -1 EBADF (Bad file descriptor) [pid 6008] close(7) = -1 EBADF (Bad file descriptor) [pid 6008] close(8) = -1 EBADF (Bad file descriptor) [pid 6008] close(9) = -1 EBADF (Bad file descriptor) [pid 6008] close(10) = -1 EBADF (Bad file descriptor) [pid 6008] close(11) = -1 EBADF (Bad file descriptor) [pid 6008] close(12) = -1 EBADF (Bad file descriptor) [pid 6008] close(13) = -1 EBADF (Bad file descriptor) [pid 6008] close(14) = -1 EBADF (Bad file descriptor) [pid 6008] close(15) = -1 EBADF (Bad file descriptor) [pid 6008] close(16) = -1 EBADF (Bad file descriptor) [pid 6008] close(17) = -1 EBADF (Bad file descriptor) [pid 6008] close(18) = -1 EBADF (Bad file descriptor) [pid 6008] close(19) = -1 EBADF (Bad file descriptor) [pid 6008] close(20) = -1 EBADF (Bad file descriptor) [pid 6008] close(21) = -1 EBADF (Bad file descriptor) [pid 6008] close(22) = -1 EBADF (Bad file descriptor) [pid 6008] close(23) = -1 EBADF (Bad file descriptor) [pid 6008] close(24) = -1 EBADF (Bad file descriptor) [pid 6008] close(25) = -1 EBADF (Bad file descriptor) [pid 6008] close(26) = -1 EBADF (Bad file descriptor) [pid 6008] close(27) = -1 EBADF (Bad file descriptor) [pid 6008] close(28) = -1 EBADF (Bad file descriptor) [pid 6008] close(29) = -1 EBADF (Bad file descriptor) [pid 6008] exit_group(0) = ? [ 182.611744][ T6008] loop0: detected capacity change from 0 to 128 [pid 6008] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=163, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] umount2("./160", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./160", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./160/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./160/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./160/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./160/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./160/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./160/file2") = 0 [pid 5836] umount2("./160/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./160/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./160/binderfs") = 0 [pid 5836] umount2("./160/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./160/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./160/cgroup.net") = 0 [pid 5836] umount2("./160/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./160/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./160/cgroup.cpu") = 0 [pid 5836] umount2("./160/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./160/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./160/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./160") = 0 [pid 5836] mkdir("./161", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6009 attached [pid 6009] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 164 [pid 6009] <... set_robust_list resumed>) = 0 [pid 6009] chdir("./161") = 0 [pid 6009] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6009] setpgid(0, 0) = 0 [pid 6009] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6009] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6009] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6009] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6009] write(3, "1000", 4) = 4 [pid 6009] close(3) = 0 [pid 6009] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6009] write(1, "executing program\n", 18) = 18 [pid 6009] memfd_create("syzkaller", 0) = 3 [pid 6009] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6009] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6009] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6009] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6009] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6009] close(3) = 0 [pid 6009] close(4) = 0 [pid 6009] mkdir("./file2", 0777) = 0 [pid 6009] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6009] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [ 183.060910][ T6009] loop0: detected capacity change from 0 to 128 [pid 6009] chdir("./file2") = 0 [pid 6009] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6009] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6009] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6009] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6009] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6009] close(3) = 0 [pid 6009] close(4) = 0 [pid 6009] close(5) = -1 EBADF (Bad file descriptor) [pid 6009] close(6) = -1 EBADF (Bad file descriptor) [pid 6009] close(7) = -1 EBADF (Bad file descriptor) [pid 6009] close(8) = -1 EBADF (Bad file descriptor) [pid 6009] close(9) = -1 EBADF (Bad file descriptor) [pid 6009] close(10) = -1 EBADF (Bad file descriptor) [pid 6009] close(11) = -1 EBADF (Bad file descriptor) [pid 6009] close(12) = -1 EBADF (Bad file descriptor) [pid 6009] close(13) = -1 EBADF (Bad file descriptor) [pid 6009] close(14) = -1 EBADF (Bad file descriptor) [pid 6009] close(15) = -1 EBADF (Bad file descriptor) [pid 6009] close(16) = -1 EBADF (Bad file descriptor) [pid 6009] close(17) = -1 EBADF (Bad file descriptor) [pid 6009] close(18) = -1 EBADF (Bad file descriptor) [pid 6009] close(19) = -1 EBADF (Bad file descriptor) [pid 6009] close(20) = -1 EBADF (Bad file descriptor) [pid 6009] close(21) = -1 EBADF (Bad file descriptor) [pid 6009] close(22) = -1 EBADF (Bad file descriptor) [pid 6009] close(23) = -1 EBADF (Bad file descriptor) [pid 6009] close(24) = -1 EBADF (Bad file descriptor) [pid 6009] close(25) = -1 EBADF (Bad file descriptor) [pid 6009] close(26) = -1 EBADF (Bad file descriptor) [pid 6009] close(27) = -1 EBADF (Bad file descriptor) [pid 6009] close(28) = -1 EBADF (Bad file descriptor) [pid 6009] close(29) = -1 EBADF (Bad file descriptor) [pid 6009] exit_group(0) = ? [pid 6009] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=164, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] umount2("./161", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./161", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./161/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./161/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./161/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./161/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./161/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./161/file2") = 0 [pid 5836] umount2("./161/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./161/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./161/binderfs") = 0 [pid 5836] umount2("./161/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./161/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./161/cgroup.net") = 0 [pid 5836] umount2("./161/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./161/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./161/cgroup.cpu") = 0 [pid 5836] umount2("./161/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./161/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./161/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./161") = 0 [pid 5836] mkdir("./162", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6010 attached [pid 6010] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 165 [pid 6010] <... set_robust_list resumed>) = 0 [pid 6010] chdir("./162") = 0 [pid 6010] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6010] setpgid(0, 0) = 0 [pid 6010] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6010] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6010] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6010] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6010] write(3, "1000", 4) = 4 [pid 6010] close(3) = 0 [pid 6010] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6010] write(1, "executing program\n", 18) = 18 [pid 6010] memfd_create("syzkaller", 0) = 3 [pid 6010] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6010] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6010] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6010] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6010] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6010] close(3) = 0 [pid 6010] close(4) = 0 [pid 6010] mkdir("./file2", 0777) = 0 [pid 6010] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6010] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6010] chdir("./file2") = 0 [pid 6010] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6010] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6010] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6010] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6010] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6010] close(3) = 0 [ 183.585540][ T6010] loop0: detected capacity change from 0 to 128 [pid 6010] close(4) = 0 [pid 6010] close(5) = -1 EBADF (Bad file descriptor) [pid 6010] close(6) = -1 EBADF (Bad file descriptor) [pid 6010] close(7) = -1 EBADF (Bad file descriptor) [pid 6010] close(8) = -1 EBADF (Bad file descriptor) [pid 6010] close(9) = -1 EBADF (Bad file descriptor) [pid 6010] close(10) = -1 EBADF (Bad file descriptor) [pid 6010] close(11) = -1 EBADF (Bad file descriptor) [pid 6010] close(12) = -1 EBADF (Bad file descriptor) [pid 6010] close(13) = -1 EBADF (Bad file descriptor) [pid 6010] close(14) = -1 EBADF (Bad file descriptor) [pid 6010] close(15) = -1 EBADF (Bad file descriptor) [pid 6010] close(16) = -1 EBADF (Bad file descriptor) [pid 6010] close(17) = -1 EBADF (Bad file descriptor) [pid 6010] close(18) = -1 EBADF (Bad file descriptor) [pid 6010] close(19) = -1 EBADF (Bad file descriptor) [pid 6010] close(20) = -1 EBADF (Bad file descriptor) [pid 6010] close(21) = -1 EBADF (Bad file descriptor) [pid 6010] close(22) = -1 EBADF (Bad file descriptor) [pid 6010] close(23) = -1 EBADF (Bad file descriptor) [pid 6010] close(24) = -1 EBADF (Bad file descriptor) [pid 6010] close(25) = -1 EBADF (Bad file descriptor) [pid 6010] close(26) = -1 EBADF (Bad file descriptor) [pid 6010] close(27) = -1 EBADF (Bad file descriptor) [pid 6010] close(28) = -1 EBADF (Bad file descriptor) [pid 6010] close(29) = -1 EBADF (Bad file descriptor) [pid 6010] exit_group(0) = ? [pid 6010] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=165, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./162", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./162", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./162/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./162/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./162/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./162/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./162/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./162/file2") = 0 [pid 5836] umount2("./162/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./162/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./162/binderfs") = 0 [pid 5836] umount2("./162/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./162/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./162/cgroup.net") = 0 [pid 5836] umount2("./162/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./162/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./162/cgroup.cpu") = 0 [pid 5836] umount2("./162/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./162/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./162/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./162") = 0 [pid 5836] mkdir("./163", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6011 attached , child_tidptr=0x555563237690) = 166 [pid 6011] set_robust_list(0x5555632376a0, 24) = 0 [pid 6011] chdir("./163") = 0 [pid 6011] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6011] setpgid(0, 0) = 0 [pid 6011] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6011] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6011] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6011] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6011] write(3, "1000", 4) = 4 [pid 6011] close(3) = 0 [pid 6011] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6011] write(1, "executing program\n", 18executing program ) = 18 [pid 6011] memfd_create("syzkaller", 0) = 3 [pid 6011] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6011] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6011] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6011] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6011] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6011] close(3) = 0 [pid 6011] close(4) = 0 [pid 6011] mkdir("./file2", 0777) = 0 [pid 6011] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6011] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6011] chdir("./file2") = 0 [pid 6011] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6011] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6011] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6011] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6011] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6011] close(3) = 0 [ 184.182030][ T6011] loop0: detected capacity change from 0 to 128 [pid 6011] close(4) = 0 [pid 6011] close(5) = -1 EBADF (Bad file descriptor) [pid 6011] close(6) = -1 EBADF (Bad file descriptor) [pid 6011] close(7) = -1 EBADF (Bad file descriptor) [pid 6011] close(8) = -1 EBADF (Bad file descriptor) [pid 6011] close(9) = -1 EBADF (Bad file descriptor) [pid 6011] close(10) = -1 EBADF (Bad file descriptor) [pid 6011] close(11) = -1 EBADF (Bad file descriptor) [pid 6011] close(12) = -1 EBADF (Bad file descriptor) [pid 6011] close(13) = -1 EBADF (Bad file descriptor) [pid 6011] close(14) = -1 EBADF (Bad file descriptor) [pid 6011] close(15) = -1 EBADF (Bad file descriptor) [pid 6011] close(16) = -1 EBADF (Bad file descriptor) [pid 6011] close(17) = -1 EBADF (Bad file descriptor) [pid 6011] close(18) = -1 EBADF (Bad file descriptor) [pid 6011] close(19) = -1 EBADF (Bad file descriptor) [pid 6011] close(20) = -1 EBADF (Bad file descriptor) [pid 6011] close(21) = -1 EBADF (Bad file descriptor) [pid 6011] close(22) = -1 EBADF (Bad file descriptor) [pid 6011] close(23) = -1 EBADF (Bad file descriptor) [pid 6011] close(24) = -1 EBADF (Bad file descriptor) [pid 6011] close(25) = -1 EBADF (Bad file descriptor) [pid 6011] close(26) = -1 EBADF (Bad file descriptor) [pid 6011] close(27) = -1 EBADF (Bad file descriptor) [pid 6011] close(28) = -1 EBADF (Bad file descriptor) [pid 6011] close(29) = -1 EBADF (Bad file descriptor) [pid 6011] exit_group(0) = ? [pid 6011] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=166, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5836] umount2("./163", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./163", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./163/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./163/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./163/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./163/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./163/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./163/file2") = 0 [pid 5836] umount2("./163/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./163/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./163/binderfs") = 0 [pid 5836] umount2("./163/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./163/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./163/cgroup.net") = 0 [pid 5836] umount2("./163/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./163/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./163/cgroup.cpu") = 0 [pid 5836] umount2("./163/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./163/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./163/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./163") = 0 [pid 5836] mkdir("./164", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6012 attached [pid 6012] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 167 [pid 6012] <... set_robust_list resumed>) = 0 [pid 6012] chdir("./164") = 0 [pid 6012] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6012] setpgid(0, 0) = 0 [pid 6012] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6012] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6012] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6012] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6012] write(3, "1000", 4) = 4 [pid 6012] close(3) = 0 [pid 6012] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6012] write(1, "executing program\n", 18executing program ) = 18 [pid 6012] memfd_create("syzkaller", 0) = 3 [pid 6012] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6012] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6012] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6012] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6012] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6012] close(3) = 0 [pid 6012] close(4) = 0 [pid 6012] mkdir("./file2", 0777) = 0 [pid 6012] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6012] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6012] chdir("./file2") = 0 [pid 6012] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6012] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6012] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6012] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6012] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [ 184.468109][ T6012] loop0: detected capacity change from 0 to 128 [pid 6012] close(3) = 0 [pid 6012] close(4) = 0 [pid 6012] close(5) = -1 EBADF (Bad file descriptor) [pid 6012] close(6) = -1 EBADF (Bad file descriptor) [pid 6012] close(7) = -1 EBADF (Bad file descriptor) [pid 6012] close(8) = -1 EBADF (Bad file descriptor) [pid 6012] close(9) = -1 EBADF (Bad file descriptor) [pid 6012] close(10) = -1 EBADF (Bad file descriptor) [pid 6012] close(11) = -1 EBADF (Bad file descriptor) [pid 6012] close(12) = -1 EBADF (Bad file descriptor) [pid 6012] close(13) = -1 EBADF (Bad file descriptor) [pid 6012] close(14) = -1 EBADF (Bad file descriptor) [pid 6012] close(15) = -1 EBADF (Bad file descriptor) [pid 6012] close(16) = -1 EBADF (Bad file descriptor) [pid 6012] close(17) = -1 EBADF (Bad file descriptor) [pid 6012] close(18) = -1 EBADF (Bad file descriptor) [pid 6012] close(19) = -1 EBADF (Bad file descriptor) [pid 6012] close(20) = -1 EBADF (Bad file descriptor) [pid 6012] close(21) = -1 EBADF (Bad file descriptor) [pid 6012] close(22) = -1 EBADF (Bad file descriptor) [pid 6012] close(23) = -1 EBADF (Bad file descriptor) [pid 6012] close(24) = -1 EBADF (Bad file descriptor) [pid 6012] close(25) = -1 EBADF (Bad file descriptor) [pid 6012] close(26) = -1 EBADF (Bad file descriptor) [pid 6012] close(27) = -1 EBADF (Bad file descriptor) [pid 6012] close(28) = -1 EBADF (Bad file descriptor) [pid 6012] close(29) = -1 EBADF (Bad file descriptor) [pid 6012] exit_group(0) = ? [pid 6012] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=167, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./164", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./164", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./164/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./164/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./164/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./164/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./164/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./164/file2") = 0 [pid 5836] umount2("./164/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./164/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./164/binderfs") = 0 [pid 5836] umount2("./164/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./164/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./164/cgroup.net") = 0 [pid 5836] umount2("./164/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./164/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./164/cgroup.cpu") = 0 [pid 5836] umount2("./164/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./164/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./164/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./164") = 0 [pid 5836] mkdir("./165", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6013 attached [pid 6013] set_robust_list(0x5555632376a0, 24) = 0 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 168 [pid 6013] chdir("./165") = 0 [pid 6013] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6013] setpgid(0, 0) = 0 [pid 6013] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6013] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6013] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6013] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6013] write(3, "1000", 4) = 4 [pid 6013] close(3) = 0 [pid 6013] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6013] write(1, "executing program\n", 18executing program ) = 18 [pid 6013] memfd_create("syzkaller", 0) = 3 [pid 6013] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6013] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6013] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6013] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6013] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6013] close(3) = 0 [pid 6013] close(4) = 0 [pid 6013] mkdir("./file2", 0777) = 0 [pid 6013] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6013] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6013] chdir("./file2") = 0 [pid 6013] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6013] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6013] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6013] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6013] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6013] close(3) = 0 [pid 6013] close(4) = 0 [ 185.090507][ T6013] loop0: detected capacity change from 0 to 128 [pid 6013] close(5) = -1 EBADF (Bad file descriptor) [pid 6013] close(6) = -1 EBADF (Bad file descriptor) [pid 6013] close(7) = -1 EBADF (Bad file descriptor) [pid 6013] close(8) = -1 EBADF (Bad file descriptor) [pid 6013] close(9) = -1 EBADF (Bad file descriptor) [pid 6013] close(10) = -1 EBADF (Bad file descriptor) [pid 6013] close(11) = -1 EBADF (Bad file descriptor) [pid 6013] close(12) = -1 EBADF (Bad file descriptor) [pid 6013] close(13) = -1 EBADF (Bad file descriptor) [pid 6013] close(14) = -1 EBADF (Bad file descriptor) [pid 6013] close(15) = -1 EBADF (Bad file descriptor) [pid 6013] close(16) = -1 EBADF (Bad file descriptor) [pid 6013] close(17) = -1 EBADF (Bad file descriptor) [pid 6013] close(18) = -1 EBADF (Bad file descriptor) [pid 6013] close(19) = -1 EBADF (Bad file descriptor) [pid 6013] close(20) = -1 EBADF (Bad file descriptor) [pid 6013] close(21) = -1 EBADF (Bad file descriptor) [pid 6013] close(22) = -1 EBADF (Bad file descriptor) [pid 6013] close(23) = -1 EBADF (Bad file descriptor) [pid 6013] close(24) = -1 EBADF (Bad file descriptor) [pid 6013] close(25) = -1 EBADF (Bad file descriptor) [pid 6013] close(26) = -1 EBADF (Bad file descriptor) [pid 6013] close(27) = -1 EBADF (Bad file descriptor) [pid 6013] close(28) = -1 EBADF (Bad file descriptor) [pid 6013] close(29) = -1 EBADF (Bad file descriptor) [pid 6013] exit_group(0) = ? [pid 6013] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=168, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5836] umount2("./165", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./165", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./165/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./165/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./165/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./165/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./165/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./165/file2") = 0 [pid 5836] umount2("./165/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./165/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./165/binderfs") = 0 [pid 5836] umount2("./165/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./165/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./165/cgroup.net") = 0 [pid 5836] umount2("./165/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./165/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./165/cgroup.cpu") = 0 [pid 5836] umount2("./165/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./165/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./165/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./165") = 0 [pid 5836] mkdir("./166", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6014 attached [pid 6014] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 169 [pid 6014] <... set_robust_list resumed>) = 0 [pid 6014] chdir("./166") = 0 [pid 6014] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6014] setpgid(0, 0) = 0 [pid 6014] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6014] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6014] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6014] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6014] write(3, "1000", 4) = 4 [pid 6014] close(3) = 0 [pid 6014] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6014] write(1, "executing program\n", 18executing program ) = 18 [pid 6014] memfd_create("syzkaller", 0) = 3 [pid 6014] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6014] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6014] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6014] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6014] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6014] close(3) = 0 [pid 6014] close(4) = 0 [pid 6014] mkdir("./file2", 0777) = 0 [pid 6014] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6014] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6014] chdir("./file2") = 0 [pid 6014] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6014] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6014] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6014] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6014] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6014] close(3) = 0 [ 185.675060][ T6014] loop0: detected capacity change from 0 to 128 [pid 6014] close(4) = 0 [pid 6014] close(5) = -1 EBADF (Bad file descriptor) [pid 6014] close(6) = -1 EBADF (Bad file descriptor) [pid 6014] close(7) = -1 EBADF (Bad file descriptor) [pid 6014] close(8) = -1 EBADF (Bad file descriptor) [pid 6014] close(9) = -1 EBADF (Bad file descriptor) [pid 6014] close(10) = -1 EBADF (Bad file descriptor) [pid 6014] close(11) = -1 EBADF (Bad file descriptor) [pid 6014] close(12) = -1 EBADF (Bad file descriptor) [pid 6014] close(13) = -1 EBADF (Bad file descriptor) [pid 6014] close(14) = -1 EBADF (Bad file descriptor) [pid 6014] close(15) = -1 EBADF (Bad file descriptor) [pid 6014] close(16) = -1 EBADF (Bad file descriptor) [pid 6014] close(17) = -1 EBADF (Bad file descriptor) [pid 6014] close(18) = -1 EBADF (Bad file descriptor) [pid 6014] close(19) = -1 EBADF (Bad file descriptor) [pid 6014] close(20) = -1 EBADF (Bad file descriptor) [pid 6014] close(21) = -1 EBADF (Bad file descriptor) [pid 6014] close(22) = -1 EBADF (Bad file descriptor) [pid 6014] close(23) = -1 EBADF (Bad file descriptor) [pid 6014] close(24) = -1 EBADF (Bad file descriptor) [pid 6014] close(25) = -1 EBADF (Bad file descriptor) [pid 6014] close(26) = -1 EBADF (Bad file descriptor) [pid 6014] close(27) = -1 EBADF (Bad file descriptor) [pid 6014] close(28) = -1 EBADF (Bad file descriptor) [pid 6014] close(29) = -1 EBADF (Bad file descriptor) [pid 6014] exit_group(0) = ? [pid 6014] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=169, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./166", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./166", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./166/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./166/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./166/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./166/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./166/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./166/file2") = 0 [pid 5836] umount2("./166/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./166/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./166/binderfs") = 0 [pid 5836] umount2("./166/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./166/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./166/cgroup.net") = 0 [pid 5836] umount2("./166/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./166/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./166/cgroup.cpu") = 0 [pid 5836] umount2("./166/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./166/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./166/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./166") = 0 [pid 5836] mkdir("./167", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6015 attached [pid 6015] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 170 [pid 6015] <... set_robust_list resumed>) = 0 [pid 6015] chdir("./167") = 0 [pid 6015] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6015] setpgid(0, 0) = 0 [pid 6015] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6015] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6015] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6015] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6015] write(3, "1000", 4) = 4 [pid 6015] close(3) = 0 [pid 6015] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6015] write(1, "executing program\n", 18executing program ) = 18 [pid 6015] memfd_create("syzkaller", 0) = 3 [pid 6015] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6015] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6015] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6015] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6015] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6015] close(3) = 0 [pid 6015] close(4) = 0 [pid 6015] mkdir("./file2", 0777) = 0 [pid 6015] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6015] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6015] chdir("./file2") = 0 [pid 6015] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6015] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6015] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6015] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6015] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6015] close(3) = 0 [pid 6015] close(4) = 0 [ 186.312481][ T6015] loop0: detected capacity change from 0 to 128 [pid 6015] close(5) = -1 EBADF (Bad file descriptor) [pid 6015] close(6) = -1 EBADF (Bad file descriptor) [pid 6015] close(7) = -1 EBADF (Bad file descriptor) [pid 6015] close(8) = -1 EBADF (Bad file descriptor) [pid 6015] close(9) = -1 EBADF (Bad file descriptor) [pid 6015] close(10) = -1 EBADF (Bad file descriptor) [pid 6015] close(11) = -1 EBADF (Bad file descriptor) [pid 6015] close(12) = -1 EBADF (Bad file descriptor) [pid 6015] close(13) = -1 EBADF (Bad file descriptor) [pid 6015] close(14) = -1 EBADF (Bad file descriptor) [pid 6015] close(15) = -1 EBADF (Bad file descriptor) [pid 6015] close(16) = -1 EBADF (Bad file descriptor) [pid 6015] close(17) = -1 EBADF (Bad file descriptor) [pid 6015] close(18) = -1 EBADF (Bad file descriptor) [pid 6015] close(19) = -1 EBADF (Bad file descriptor) [pid 6015] close(20) = -1 EBADF (Bad file descriptor) [pid 6015] close(21) = -1 EBADF (Bad file descriptor) [pid 6015] close(22) = -1 EBADF (Bad file descriptor) [pid 6015] close(23) = -1 EBADF (Bad file descriptor) [pid 6015] close(24) = -1 EBADF (Bad file descriptor) [pid 6015] close(25) = -1 EBADF (Bad file descriptor) [pid 6015] close(26) = -1 EBADF (Bad file descriptor) [pid 6015] close(27) = -1 EBADF (Bad file descriptor) [pid 6015] close(28) = -1 EBADF (Bad file descriptor) [pid 6015] close(29) = -1 EBADF (Bad file descriptor) [pid 6015] exit_group(0) = ? [pid 6015] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=170, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./167", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./167", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./167/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./167/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./167/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./167/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./167/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./167/file2") = 0 [pid 5836] umount2("./167/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./167/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./167/binderfs") = 0 [pid 5836] umount2("./167/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./167/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./167/cgroup.net") = 0 [pid 5836] umount2("./167/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./167/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./167/cgroup.cpu") = 0 [pid 5836] umount2("./167/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./167/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./167/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./167") = 0 [pid 5836] mkdir("./168", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6016 attached [pid 6016] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 171 [pid 6016] <... set_robust_list resumed>) = 0 [pid 6016] chdir("./168") = 0 [pid 6016] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6016] setpgid(0, 0) = 0 [pid 6016] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6016] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6016] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6016] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6016] write(3, "1000", 4) = 4 [pid 6016] close(3) = 0 [pid 6016] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6016] write(1, "executing program\n", 18executing program ) = 18 [pid 6016] memfd_create("syzkaller", 0) = 3 [pid 6016] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6016] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6016] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6016] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6016] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6016] close(3) = 0 [pid 6016] close(4) = 0 [pid 6016] mkdir("./file2", 0777) = 0 [pid 6016] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6016] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6016] chdir("./file2") = 0 [pid 6016] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6016] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6016] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6016] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6016] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [ 186.844361][ T6016] loop0: detected capacity change from 0 to 128 [pid 6016] close(3) = 0 [pid 6016] close(4) = 0 [pid 6016] close(5) = -1 EBADF (Bad file descriptor) [pid 6016] close(6) = -1 EBADF (Bad file descriptor) [pid 6016] close(7) = -1 EBADF (Bad file descriptor) [pid 6016] close(8) = -1 EBADF (Bad file descriptor) [pid 6016] close(9) = -1 EBADF (Bad file descriptor) [pid 6016] close(10) = -1 EBADF (Bad file descriptor) [pid 6016] close(11) = -1 EBADF (Bad file descriptor) [pid 6016] close(12) = -1 EBADF (Bad file descriptor) [pid 6016] close(13) = -1 EBADF (Bad file descriptor) [pid 6016] close(14) = -1 EBADF (Bad file descriptor) [pid 6016] close(15) = -1 EBADF (Bad file descriptor) [pid 6016] close(16) = -1 EBADF (Bad file descriptor) [pid 6016] close(17) = -1 EBADF (Bad file descriptor) [pid 6016] close(18) = -1 EBADF (Bad file descriptor) [pid 6016] close(19) = -1 EBADF (Bad file descriptor) [pid 6016] close(20) = -1 EBADF (Bad file descriptor) [pid 6016] close(21) = -1 EBADF (Bad file descriptor) [pid 6016] close(22) = -1 EBADF (Bad file descriptor) [pid 6016] close(23) = -1 EBADF (Bad file descriptor) [pid 6016] close(24) = -1 EBADF (Bad file descriptor) [pid 6016] close(25) = -1 EBADF (Bad file descriptor) [pid 6016] close(26) = -1 EBADF (Bad file descriptor) [pid 6016] close(27) = -1 EBADF (Bad file descriptor) [pid 6016] close(28) = -1 EBADF (Bad file descriptor) [pid 6016] close(29) = -1 EBADF (Bad file descriptor) [pid 6016] exit_group(0) = ? [pid 6016] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=171, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] umount2("./168", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./168", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./168/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./168/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./168/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./168/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./168/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./168/file2") = 0 [pid 5836] umount2("./168/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./168/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./168/binderfs") = 0 [pid 5836] umount2("./168/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./168/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./168/cgroup.net") = 0 [pid 5836] umount2("./168/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./168/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./168/cgroup.cpu") = 0 [pid 5836] umount2("./168/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./168/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./168/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./168") = 0 [pid 5836] mkdir("./169", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6017 attached [pid 6017] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 172 [pid 6017] <... set_robust_list resumed>) = 0 [pid 6017] chdir("./169") = 0 [pid 6017] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6017] setpgid(0, 0) = 0 [pid 6017] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6017] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6017] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6017] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6017] write(3, "1000", 4) = 4 [pid 6017] close(3) = 0 [pid 6017] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6017] write(1, "executing program\n", 18) = 18 [pid 6017] memfd_create("syzkaller", 0) = 3 [pid 6017] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6017] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6017] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6017] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6017] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6017] close(3) = 0 [pid 6017] close(4) = 0 [pid 6017] mkdir("./file2", 0777) = 0 [pid 6017] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6017] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6017] chdir("./file2") = 0 [pid 6017] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6017] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6017] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6017] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6017] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6017] close(3) = 0 [ 187.363496][ T6017] loop0: detected capacity change from 0 to 128 [pid 6017] close(4) = 0 [pid 6017] close(5) = -1 EBADF (Bad file descriptor) [pid 6017] close(6) = -1 EBADF (Bad file descriptor) [pid 6017] close(7) = -1 EBADF (Bad file descriptor) [pid 6017] close(8) = -1 EBADF (Bad file descriptor) [pid 6017] close(9) = -1 EBADF (Bad file descriptor) [pid 6017] close(10) = -1 EBADF (Bad file descriptor) [pid 6017] close(11) = -1 EBADF (Bad file descriptor) [pid 6017] close(12) = -1 EBADF (Bad file descriptor) [pid 6017] close(13) = -1 EBADF (Bad file descriptor) [pid 6017] close(14) = -1 EBADF (Bad file descriptor) [pid 6017] close(15) = -1 EBADF (Bad file descriptor) [pid 6017] close(16) = -1 EBADF (Bad file descriptor) [pid 6017] close(17) = -1 EBADF (Bad file descriptor) [pid 6017] close(18) = -1 EBADF (Bad file descriptor) [pid 6017] close(19) = -1 EBADF (Bad file descriptor) [pid 6017] close(20) = -1 EBADF (Bad file descriptor) [pid 6017] close(21) = -1 EBADF (Bad file descriptor) [pid 6017] close(22) = -1 EBADF (Bad file descriptor) [pid 6017] close(23) = -1 EBADF (Bad file descriptor) [pid 6017] close(24) = -1 EBADF (Bad file descriptor) [pid 6017] close(25) = -1 EBADF (Bad file descriptor) [pid 6017] close(26) = -1 EBADF (Bad file descriptor) [pid 6017] close(27) = -1 EBADF (Bad file descriptor) [pid 6017] close(28) = -1 EBADF (Bad file descriptor) [pid 6017] close(29) = -1 EBADF (Bad file descriptor) [pid 6017] exit_group(0) = ? [pid 6017] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=172, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./169", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./169", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./169/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./169/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./169/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./169/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./169/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./169/file2") = 0 [pid 5836] umount2("./169/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./169/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./169/binderfs") = 0 [pid 5836] umount2("./169/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./169/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./169/cgroup.net") = 0 [pid 5836] umount2("./169/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./169/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./169/cgroup.cpu") = 0 [pid 5836] umount2("./169/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./169/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./169/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./169") = 0 [pid 5836] mkdir("./170", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6018 attached [pid 6018] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 173 [pid 6018] <... set_robust_list resumed>) = 0 [pid 6018] chdir("./170") = 0 [pid 6018] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6018] setpgid(0, 0) = 0 [pid 6018] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6018] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6018] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6018] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6018] write(3, "1000", 4) = 4 [pid 6018] close(3) = 0 [pid 6018] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6018] write(1, "executing program\n", 18executing program ) = 18 [pid 6018] memfd_create("syzkaller", 0) = 3 [pid 6018] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6018] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6018] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6018] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6018] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6018] close(3) = 0 [pid 6018] close(4) = 0 [pid 6018] mkdir("./file2", 0777) = 0 [pid 6018] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6018] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6018] chdir("./file2") = 0 [pid 6018] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 187.932981][ T6018] loop0: detected capacity change from 0 to 128 [pid 6018] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6018] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6018] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6018] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6018] close(3) = 0 [pid 6018] close(4) = 0 [pid 6018] close(5) = -1 EBADF (Bad file descriptor) [pid 6018] close(6) = -1 EBADF (Bad file descriptor) [pid 6018] close(7) = -1 EBADF (Bad file descriptor) [pid 6018] close(8) = -1 EBADF (Bad file descriptor) [pid 6018] close(9) = -1 EBADF (Bad file descriptor) [pid 6018] close(10) = -1 EBADF (Bad file descriptor) [pid 6018] close(11) = -1 EBADF (Bad file descriptor) [pid 6018] close(12) = -1 EBADF (Bad file descriptor) [pid 6018] close(13) = -1 EBADF (Bad file descriptor) [pid 6018] close(14) = -1 EBADF (Bad file descriptor) [pid 6018] close(15) = -1 EBADF (Bad file descriptor) [pid 6018] close(16) = -1 EBADF (Bad file descriptor) [pid 6018] close(17) = -1 EBADF (Bad file descriptor) [pid 6018] close(18) = -1 EBADF (Bad file descriptor) [pid 6018] close(19) = -1 EBADF (Bad file descriptor) [pid 6018] close(20) = -1 EBADF (Bad file descriptor) [pid 6018] close(21) = -1 EBADF (Bad file descriptor) [pid 6018] close(22) = -1 EBADF (Bad file descriptor) [pid 6018] close(23) = -1 EBADF (Bad file descriptor) [pid 6018] close(24) = -1 EBADF (Bad file descriptor) [pid 6018] close(25) = -1 EBADF (Bad file descriptor) [pid 6018] close(26) = -1 EBADF (Bad file descriptor) [pid 6018] close(27) = -1 EBADF (Bad file descriptor) [pid 6018] close(28) = -1 EBADF (Bad file descriptor) [pid 6018] close(29) = -1 EBADF (Bad file descriptor) [pid 6018] exit_group(0) = ? [pid 6018] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=173, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./170", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./170", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./170/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./170/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./170/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./170/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./170/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./170/file2") = 0 [pid 5836] umount2("./170/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./170/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./170/binderfs") = 0 [pid 5836] umount2("./170/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./170/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./170/cgroup.net") = 0 [pid 5836] umount2("./170/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./170/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./170/cgroup.cpu") = 0 [pid 5836] umount2("./170/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./170/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./170/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./170") = 0 [pid 5836] mkdir("./171", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6019 attached , child_tidptr=0x555563237690) = 174 [pid 6019] set_robust_list(0x5555632376a0, 24) = 0 [pid 6019] chdir("./171") = 0 [pid 6019] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6019] setpgid(0, 0) = 0 [pid 6019] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6019] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6019] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6019] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6019] write(3, "1000", 4) = 4 [pid 6019] close(3) = 0 [pid 6019] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6019] write(1, "executing program\n", 18) = 18 [pid 6019] memfd_create("syzkaller", 0) = 3 [pid 6019] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6019] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6019] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6019] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6019] close(3) = 0 [pid 6019] close(4) = 0 [pid 6019] mkdir("./file2", 0777) = 0 [pid 6019] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6019] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6019] chdir("./file2") = 0 [pid 6019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6019] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6019] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6019] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6019] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6019] close(3) = 0 [ 188.475723][ T6019] loop0: detected capacity change from 0 to 128 [pid 6019] close(4) = 0 [pid 6019] close(5) = -1 EBADF (Bad file descriptor) [pid 6019] close(6) = -1 EBADF (Bad file descriptor) [pid 6019] close(7) = -1 EBADF (Bad file descriptor) [pid 6019] close(8) = -1 EBADF (Bad file descriptor) [pid 6019] close(9) = -1 EBADF (Bad file descriptor) [pid 6019] close(10) = -1 EBADF (Bad file descriptor) [pid 6019] close(11) = -1 EBADF (Bad file descriptor) [pid 6019] close(12) = -1 EBADF (Bad file descriptor) [pid 6019] close(13) = -1 EBADF (Bad file descriptor) [pid 6019] close(14) = -1 EBADF (Bad file descriptor) [pid 6019] close(15) = -1 EBADF (Bad file descriptor) [pid 6019] close(16) = -1 EBADF (Bad file descriptor) [pid 6019] close(17) = -1 EBADF (Bad file descriptor) [pid 6019] close(18) = -1 EBADF (Bad file descriptor) [pid 6019] close(19) = -1 EBADF (Bad file descriptor) [pid 6019] close(20) = -1 EBADF (Bad file descriptor) [pid 6019] close(21) = -1 EBADF (Bad file descriptor) [pid 6019] close(22) = -1 EBADF (Bad file descriptor) [pid 6019] close(23) = -1 EBADF (Bad file descriptor) [pid 6019] close(24) = -1 EBADF (Bad file descriptor) [pid 6019] close(25) = -1 EBADF (Bad file descriptor) [pid 6019] close(26) = -1 EBADF (Bad file descriptor) [pid 6019] close(27) = -1 EBADF (Bad file descriptor) [pid 6019] close(28) = -1 EBADF (Bad file descriptor) [pid 6019] close(29) = -1 EBADF (Bad file descriptor) [pid 6019] exit_group(0) = ? [pid 6019] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=174, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5836] umount2("./171", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./171", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./171/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./171/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./171/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./171/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./171/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./171/file2") = 0 [pid 5836] umount2("./171/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./171/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./171/binderfs") = 0 [pid 5836] umount2("./171/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./171/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./171/cgroup.net") = 0 [pid 5836] umount2("./171/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./171/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./171/cgroup.cpu") = 0 [pid 5836] umount2("./171/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./171/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./171/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./171") = 0 [pid 5836] mkdir("./172", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6020 attached [pid 6020] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 175 [pid 6020] <... set_robust_list resumed>) = 0 [pid 6020] chdir("./172") = 0 [pid 6020] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6020] setpgid(0, 0) = 0 [pid 6020] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6020] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6020] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6020] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6020] write(3, "1000", 4) = 4 [pid 6020] close(3) = 0 [pid 6020] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6020] write(1, "executing program\n", 18executing program ) = 18 [pid 6020] memfd_create("syzkaller", 0) = 3 [pid 6020] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6020] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6020] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6020] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6020] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6020] close(3) = 0 [pid 6020] close(4) = 0 [pid 6020] mkdir("./file2", 0777) = 0 [pid 6020] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6020] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6020] chdir("./file2") = 0 [pid 6020] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 189.014679][ T6020] loop0: detected capacity change from 0 to 128 [pid 6020] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6020] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6020] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6020] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6020] close(3) = 0 [pid 6020] close(4) = 0 [pid 6020] close(5) = -1 EBADF (Bad file descriptor) [pid 6020] close(6) = -1 EBADF (Bad file descriptor) [pid 6020] close(7) = -1 EBADF (Bad file descriptor) [pid 6020] close(8) = -1 EBADF (Bad file descriptor) [pid 6020] close(9) = -1 EBADF (Bad file descriptor) [pid 6020] close(10) = -1 EBADF (Bad file descriptor) [pid 6020] close(11) = -1 EBADF (Bad file descriptor) [pid 6020] close(12) = -1 EBADF (Bad file descriptor) [pid 6020] close(13) = -1 EBADF (Bad file descriptor) [pid 6020] close(14) = -1 EBADF (Bad file descriptor) [pid 6020] close(15) = -1 EBADF (Bad file descriptor) [pid 6020] close(16) = -1 EBADF (Bad file descriptor) [pid 6020] close(17) = -1 EBADF (Bad file descriptor) [pid 6020] close(18) = -1 EBADF (Bad file descriptor) [pid 6020] close(19) = -1 EBADF (Bad file descriptor) [pid 6020] close(20) = -1 EBADF (Bad file descriptor) [pid 6020] close(21) = -1 EBADF (Bad file descriptor) [pid 6020] close(22) = -1 EBADF (Bad file descriptor) [pid 6020] close(23) = -1 EBADF (Bad file descriptor) [pid 6020] close(24) = -1 EBADF (Bad file descriptor) [pid 6020] close(25) = -1 EBADF (Bad file descriptor) [pid 6020] close(26) = -1 EBADF (Bad file descriptor) [pid 6020] close(27) = -1 EBADF (Bad file descriptor) [pid 6020] close(28) = -1 EBADF (Bad file descriptor) [pid 6020] close(29) = -1 EBADF (Bad file descriptor) [pid 6020] exit_group(0) = ? [pid 6020] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=175, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./172", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./172", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./172/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./172/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./172/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./172/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./172/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./172/file2") = 0 [pid 5836] umount2("./172/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./172/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./172/binderfs") = 0 [pid 5836] umount2("./172/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./172/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./172/cgroup.net") = 0 [pid 5836] umount2("./172/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./172/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./172/cgroup.cpu") = 0 [pid 5836] umount2("./172/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./172/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./172/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./172") = 0 [pid 5836] mkdir("./173", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6021 attached [pid 6021] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 176 [pid 6021] <... set_robust_list resumed>) = 0 [pid 6021] chdir("./173") = 0 [pid 6021] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6021] setpgid(0, 0) = 0 [pid 6021] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6021] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6021] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6021] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6021] write(3, "1000", 4) = 4 [pid 6021] close(3) = 0 [pid 6021] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6021] write(1, "executing program\n", 18executing program ) = 18 [pid 6021] memfd_create("syzkaller", 0) = 3 [pid 6021] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6021] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6021] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6021] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6021] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6021] close(3) = 0 [pid 6021] close(4) = 0 [pid 6021] mkdir("./file2", 0777) = 0 [pid 6021] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6021] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6021] chdir("./file2") = 0 [pid 6021] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6021] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6021] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6021] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [ 189.531561][ T6021] loop0: detected capacity change from 0 to 128 [pid 6021] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6021] close(3) = 0 [pid 6021] close(4) = 0 [pid 6021] close(5) = -1 EBADF (Bad file descriptor) [pid 6021] close(6) = -1 EBADF (Bad file descriptor) [pid 6021] close(7) = -1 EBADF (Bad file descriptor) [pid 6021] close(8) = -1 EBADF (Bad file descriptor) [pid 6021] close(9) = -1 EBADF (Bad file descriptor) [pid 6021] close(10) = -1 EBADF (Bad file descriptor) [pid 6021] close(11) = -1 EBADF (Bad file descriptor) [pid 6021] close(12) = -1 EBADF (Bad file descriptor) [pid 6021] close(13) = -1 EBADF (Bad file descriptor) [pid 6021] close(14) = -1 EBADF (Bad file descriptor) [pid 6021] close(15) = -1 EBADF (Bad file descriptor) [pid 6021] close(16) = -1 EBADF (Bad file descriptor) [pid 6021] close(17) = -1 EBADF (Bad file descriptor) [pid 6021] close(18) = -1 EBADF (Bad file descriptor) [pid 6021] close(19) = -1 EBADF (Bad file descriptor) [pid 6021] close(20) = -1 EBADF (Bad file descriptor) [pid 6021] close(21) = -1 EBADF (Bad file descriptor) [pid 6021] close(22) = -1 EBADF (Bad file descriptor) [pid 6021] close(23) = -1 EBADF (Bad file descriptor) [pid 6021] close(24) = -1 EBADF (Bad file descriptor) [pid 6021] close(25) = -1 EBADF (Bad file descriptor) [pid 6021] close(26) = -1 EBADF (Bad file descriptor) [pid 6021] close(27) = -1 EBADF (Bad file descriptor) [pid 6021] close(28) = -1 EBADF (Bad file descriptor) [pid 6021] close(29) = -1 EBADF (Bad file descriptor) [pid 6021] exit_group(0) = ? [pid 6021] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=176, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./173", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./173", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./173/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./173/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./173/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./173/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./173/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./173/file2") = 0 [pid 5836] umount2("./173/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./173/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./173/binderfs") = 0 [pid 5836] umount2("./173/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./173/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./173/cgroup.net") = 0 [pid 5836] umount2("./173/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./173/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./173/cgroup.cpu") = 0 [pid 5836] umount2("./173/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./173/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./173/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./173") = 0 [pid 5836] mkdir("./174", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6022 attached [pid 6022] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 177 [pid 6022] <... set_robust_list resumed>) = 0 [pid 6022] chdir("./174") = 0 [pid 6022] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6022] setpgid(0, 0) = 0 [pid 6022] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6022] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6022] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6022] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6022] write(3, "1000", 4) = 4 [pid 6022] close(3) = 0 [pid 6022] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6022] write(1, "executing program\n", 18executing program ) = 18 [pid 6022] memfd_create("syzkaller", 0) = 3 [pid 6022] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6022] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6022] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6022] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6022] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6022] close(3) = 0 [pid 6022] close(4) = 0 [pid 6022] mkdir("./file2", 0777) = 0 [pid 6022] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6022] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6022] chdir("./file2") = 0 [pid 6022] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6022] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6022] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [ 190.003320][ T6022] loop0: detected capacity change from 0 to 128 [pid 6022] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6022] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6022] close(3) = 0 [pid 6022] close(4) = 0 [pid 6022] close(5) = -1 EBADF (Bad file descriptor) [pid 6022] close(6) = -1 EBADF (Bad file descriptor) [pid 6022] close(7) = -1 EBADF (Bad file descriptor) [pid 6022] close(8) = -1 EBADF (Bad file descriptor) [pid 6022] close(9) = -1 EBADF (Bad file descriptor) [pid 6022] close(10) = -1 EBADF (Bad file descriptor) [pid 6022] close(11) = -1 EBADF (Bad file descriptor) [pid 6022] close(12) = -1 EBADF (Bad file descriptor) [pid 6022] close(13) = -1 EBADF (Bad file descriptor) [pid 6022] close(14) = -1 EBADF (Bad file descriptor) [pid 6022] close(15) = -1 EBADF (Bad file descriptor) [pid 6022] close(16) = -1 EBADF (Bad file descriptor) [pid 6022] close(17) = -1 EBADF (Bad file descriptor) [pid 6022] close(18) = -1 EBADF (Bad file descriptor) [pid 6022] close(19) = -1 EBADF (Bad file descriptor) [pid 6022] close(20) = -1 EBADF (Bad file descriptor) [pid 6022] close(21) = -1 EBADF (Bad file descriptor) [pid 6022] close(22) = -1 EBADF (Bad file descriptor) [pid 6022] close(23) = -1 EBADF (Bad file descriptor) [pid 6022] close(24) = -1 EBADF (Bad file descriptor) [pid 6022] close(25) = -1 EBADF (Bad file descriptor) [pid 6022] close(26) = -1 EBADF (Bad file descriptor) [pid 6022] close(27) = -1 EBADF (Bad file descriptor) [pid 6022] close(28) = -1 EBADF (Bad file descriptor) [pid 6022] close(29) = -1 EBADF (Bad file descriptor) [pid 6022] exit_group(0) = ? [pid 6022] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=177, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] umount2("./174", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./174", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./174/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./174/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./174/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./174/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./174/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./174/file2") = 0 [pid 5836] umount2("./174/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./174/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./174/binderfs") = 0 [pid 5836] umount2("./174/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./174/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./174/cgroup.net") = 0 [pid 5836] umount2("./174/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./174/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./174/cgroup.cpu") = 0 [pid 5836] umount2("./174/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./174/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./174/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./174") = 0 [pid 5836] mkdir("./175", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6023 attached [pid 6023] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 178 [pid 6023] <... set_robust_list resumed>) = 0 [pid 6023] chdir("./175") = 0 [pid 6023] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6023] setpgid(0, 0) = 0 [pid 6023] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6023] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6023] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6023] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6023] write(3, "1000", 4) = 4 [pid 6023] close(3) = 0 [pid 6023] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6023] write(1, "executing program\n", 18) = 18 [pid 6023] memfd_create("syzkaller", 0) = 3 [pid 6023] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6023] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6023] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6023] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6023] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6023] close(3) = 0 [pid 6023] close(4) = 0 [pid 6023] mkdir("./file2", 0777) = 0 [pid 6023] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6023] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6023] chdir("./file2") = 0 [pid 6023] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6023] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6023] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6023] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6023] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6023] close(3) = 0 [pid 6023] close(4) = 0 [ 190.480001][ T6023] loop0: detected capacity change from 0 to 128 [pid 6023] close(5) = -1 EBADF (Bad file descriptor) [pid 6023] close(6) = -1 EBADF (Bad file descriptor) [pid 6023] close(7) = -1 EBADF (Bad file descriptor) [pid 6023] close(8) = -1 EBADF (Bad file descriptor) [pid 6023] close(9) = -1 EBADF (Bad file descriptor) [pid 6023] close(10) = -1 EBADF (Bad file descriptor) [pid 6023] close(11) = -1 EBADF (Bad file descriptor) [pid 6023] close(12) = -1 EBADF (Bad file descriptor) [pid 6023] close(13) = -1 EBADF (Bad file descriptor) [pid 6023] close(14) = -1 EBADF (Bad file descriptor) [pid 6023] close(15) = -1 EBADF (Bad file descriptor) [pid 6023] close(16) = -1 EBADF (Bad file descriptor) [pid 6023] close(17) = -1 EBADF (Bad file descriptor) [pid 6023] close(18) = -1 EBADF (Bad file descriptor) [pid 6023] close(19) = -1 EBADF (Bad file descriptor) [pid 6023] close(20) = -1 EBADF (Bad file descriptor) [pid 6023] close(21) = -1 EBADF (Bad file descriptor) [pid 6023] close(22) = -1 EBADF (Bad file descriptor) [pid 6023] close(23) = -1 EBADF (Bad file descriptor) [pid 6023] close(24) = -1 EBADF (Bad file descriptor) [pid 6023] close(25) = -1 EBADF (Bad file descriptor) [pid 6023] close(26) = -1 EBADF (Bad file descriptor) [pid 6023] close(27) = -1 EBADF (Bad file descriptor) [pid 6023] close(28) = -1 EBADF (Bad file descriptor) [pid 6023] close(29) = -1 EBADF (Bad file descriptor) [pid 6023] exit_group(0) = ? [pid 6023] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=178, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] umount2("./175", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./175", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./175/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./175/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./175/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./175/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./175/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./175/file2") = 0 [pid 5836] umount2("./175/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./175/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./175/binderfs") = 0 [pid 5836] umount2("./175/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./175/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./175/cgroup.net") = 0 [pid 5836] umount2("./175/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./175/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./175/cgroup.cpu") = 0 [pid 5836] umount2("./175/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./175/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./175/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./175") = 0 [pid 5836] mkdir("./176", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6024 attached , child_tidptr=0x555563237690) = 179 [pid 6024] set_robust_list(0x5555632376a0, 24) = 0 [pid 6024] chdir("./176") = 0 [pid 6024] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6024] setpgid(0, 0) = 0 [pid 6024] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6024] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6024] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6024] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6024] write(3, "1000", 4) = 4 [pid 6024] close(3) = 0 [pid 6024] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6024] write(1, "executing program\n", 18executing program ) = 18 [pid 6024] memfd_create("syzkaller", 0) = 3 [pid 6024] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6024] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6024] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6024] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6024] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6024] close(3) = 0 [pid 6024] close(4) = 0 [pid 6024] mkdir("./file2", 0777) = 0 [pid 6024] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6024] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6024] chdir("./file2") = 0 [pid 6024] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6024] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6024] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6024] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6024] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6024] close(3) = 0 [ 191.097582][ T6024] loop0: detected capacity change from 0 to 128 [pid 6024] close(4) = 0 [pid 6024] close(5) = -1 EBADF (Bad file descriptor) [pid 6024] close(6) = -1 EBADF (Bad file descriptor) [pid 6024] close(7) = -1 EBADF (Bad file descriptor) [pid 6024] close(8) = -1 EBADF (Bad file descriptor) [pid 6024] close(9) = -1 EBADF (Bad file descriptor) [pid 6024] close(10) = -1 EBADF (Bad file descriptor) [pid 6024] close(11) = -1 EBADF (Bad file descriptor) [pid 6024] close(12) = -1 EBADF (Bad file descriptor) [pid 6024] close(13) = -1 EBADF (Bad file descriptor) [pid 6024] close(14) = -1 EBADF (Bad file descriptor) [pid 6024] close(15) = -1 EBADF (Bad file descriptor) [pid 6024] close(16) = -1 EBADF (Bad file descriptor) [pid 6024] close(17) = -1 EBADF (Bad file descriptor) [pid 6024] close(18) = -1 EBADF (Bad file descriptor) [pid 6024] close(19) = -1 EBADF (Bad file descriptor) [pid 6024] close(20) = -1 EBADF (Bad file descriptor) [pid 6024] close(21) = -1 EBADF (Bad file descriptor) [pid 6024] close(22) = -1 EBADF (Bad file descriptor) [pid 6024] close(23) = -1 EBADF (Bad file descriptor) [pid 6024] close(24) = -1 EBADF (Bad file descriptor) [pid 6024] close(25) = -1 EBADF (Bad file descriptor) [pid 6024] close(26) = -1 EBADF (Bad file descriptor) [pid 6024] close(27) = -1 EBADF (Bad file descriptor) [pid 6024] close(28) = -1 EBADF (Bad file descriptor) [pid 6024] close(29) = -1 EBADF (Bad file descriptor) [pid 6024] exit_group(0) = ? [pid 6024] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=179, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./176", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./176", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./176/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./176/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./176/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./176/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./176/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./176/file2") = 0 [pid 5836] umount2("./176/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./176/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./176/binderfs") = 0 [pid 5836] umount2("./176/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./176/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./176/cgroup.net") = 0 [pid 5836] umount2("./176/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./176/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./176/cgroup.cpu") = 0 [pid 5836] umount2("./176/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./176/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./176/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./176") = 0 [pid 5836] mkdir("./177", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6025 attached [pid 6025] set_robust_list(0x5555632376a0, 24) = 0 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 180 [pid 6025] chdir("./177") = 0 [pid 6025] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6025] setpgid(0, 0) = 0 [pid 6025] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6025] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6025] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6025] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6025] write(3, "1000", 4) = 4 [pid 6025] close(3) = 0 [pid 6025] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6025] write(1, "executing program\n", 18) = 18 [pid 6025] memfd_create("syzkaller", 0) = 3 [pid 6025] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6025] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6025] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6025] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6025] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6025] close(3) = 0 [pid 6025] close(4) = 0 [pid 6025] mkdir("./file2", 0777) = 0 [pid 6025] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6025] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6025] chdir("./file2") = 0 [ 191.582432][ T6025] loop0: detected capacity change from 0 to 128 [pid 6025] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6025] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6025] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6025] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6025] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6025] close(3) = 0 [pid 6025] close(4) = 0 [pid 6025] close(5) = -1 EBADF (Bad file descriptor) [pid 6025] close(6) = -1 EBADF (Bad file descriptor) [pid 6025] close(7) = -1 EBADF (Bad file descriptor) [pid 6025] close(8) = -1 EBADF (Bad file descriptor) [pid 6025] close(9) = -1 EBADF (Bad file descriptor) [pid 6025] close(10) = -1 EBADF (Bad file descriptor) [pid 6025] close(11) = -1 EBADF (Bad file descriptor) [pid 6025] close(12) = -1 EBADF (Bad file descriptor) [pid 6025] close(13) = -1 EBADF (Bad file descriptor) [pid 6025] close(14) = -1 EBADF (Bad file descriptor) [pid 6025] close(15) = -1 EBADF (Bad file descriptor) [pid 6025] close(16) = -1 EBADF (Bad file descriptor) [pid 6025] close(17) = -1 EBADF (Bad file descriptor) [pid 6025] close(18) = -1 EBADF (Bad file descriptor) [pid 6025] close(19) = -1 EBADF (Bad file descriptor) [pid 6025] close(20) = -1 EBADF (Bad file descriptor) [pid 6025] close(21) = -1 EBADF (Bad file descriptor) [pid 6025] close(22) = -1 EBADF (Bad file descriptor) [pid 6025] close(23) = -1 EBADF (Bad file descriptor) [pid 6025] close(24) = -1 EBADF (Bad file descriptor) [pid 6025] close(25) = -1 EBADF (Bad file descriptor) [pid 6025] close(26) = -1 EBADF (Bad file descriptor) [pid 6025] close(27) = -1 EBADF (Bad file descriptor) [pid 6025] close(28) = -1 EBADF (Bad file descriptor) [pid 6025] close(29) = -1 EBADF (Bad file descriptor) [pid 6025] exit_group(0) = ? [pid 6025] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=180, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./177", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./177", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./177/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./177/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./177/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./177/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./177/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./177/file2") = 0 [pid 5836] umount2("./177/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./177/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./177/binderfs") = 0 [pid 5836] umount2("./177/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./177/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./177/cgroup.net") = 0 [pid 5836] umount2("./177/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./177/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./177/cgroup.cpu") = 0 [pid 5836] umount2("./177/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./177/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./177/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./177") = 0 [pid 5836] mkdir("./178", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6026 attached [pid 6026] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 181 [pid 6026] <... set_robust_list resumed>) = 0 [pid 6026] chdir("./178") = 0 [pid 6026] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6026] setpgid(0, 0) = 0 [pid 6026] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6026] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6026] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6026] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6026] write(3, "1000", 4) = 4 [pid 6026] close(3) = 0 [pid 6026] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6026] write(1, "executing program\n", 18executing program ) = 18 [pid 6026] memfd_create("syzkaller", 0) = 3 [pid 6026] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6026] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6026] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6026] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6026] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6026] close(3) = 0 [pid 6026] close(4) = 0 [pid 6026] mkdir("./file2", 0777) = 0 [pid 6026] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6026] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6026] chdir("./file2") = 0 [pid 6026] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6026] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6026] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6026] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6026] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6026] close(3) = 0 [ 192.179631][ T6026] loop0: detected capacity change from 0 to 128 [pid 6026] close(4) = 0 [pid 6026] close(5) = -1 EBADF (Bad file descriptor) [pid 6026] close(6) = -1 EBADF (Bad file descriptor) [pid 6026] close(7) = -1 EBADF (Bad file descriptor) [pid 6026] close(8) = -1 EBADF (Bad file descriptor) [pid 6026] close(9) = -1 EBADF (Bad file descriptor) [pid 6026] close(10) = -1 EBADF (Bad file descriptor) [pid 6026] close(11) = -1 EBADF (Bad file descriptor) [pid 6026] close(12) = -1 EBADF (Bad file descriptor) [pid 6026] close(13) = -1 EBADF (Bad file descriptor) [pid 6026] close(14) = -1 EBADF (Bad file descriptor) [pid 6026] close(15) = -1 EBADF (Bad file descriptor) [pid 6026] close(16) = -1 EBADF (Bad file descriptor) [pid 6026] close(17) = -1 EBADF (Bad file descriptor) [pid 6026] close(18) = -1 EBADF (Bad file descriptor) [pid 6026] close(19) = -1 EBADF (Bad file descriptor) [pid 6026] close(20) = -1 EBADF (Bad file descriptor) [pid 6026] close(21) = -1 EBADF (Bad file descriptor) [pid 6026] close(22) = -1 EBADF (Bad file descriptor) [pid 6026] close(23) = -1 EBADF (Bad file descriptor) [pid 6026] close(24) = -1 EBADF (Bad file descriptor) [pid 6026] close(25) = -1 EBADF (Bad file descriptor) [pid 6026] close(26) = -1 EBADF (Bad file descriptor) [pid 6026] close(27) = -1 EBADF (Bad file descriptor) [pid 6026] close(28) = -1 EBADF (Bad file descriptor) [pid 6026] close(29) = -1 EBADF (Bad file descriptor) [pid 6026] exit_group(0) = ? [pid 6026] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=181, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] umount2("./178", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./178", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./178/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./178/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./178/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./178/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./178/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./178/file2") = 0 [pid 5836] umount2("./178/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./178/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./178/binderfs") = 0 [pid 5836] umount2("./178/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./178/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./178/cgroup.net") = 0 [pid 5836] umount2("./178/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./178/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./178/cgroup.cpu") = 0 [pid 5836] umount2("./178/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./178/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./178/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./178") = 0 [pid 5836] mkdir("./179", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6027 attached [pid 6027] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 182 [pid 6027] <... set_robust_list resumed>) = 0 [pid 6027] chdir("./179") = 0 [pid 6027] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6027] setpgid(0, 0) = 0 [pid 6027] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6027] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6027] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6027] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6027] write(3, "1000", 4) = 4 [pid 6027] close(3) = 0 [pid 6027] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6027] write(1, "executing program\n", 18executing program ) = 18 [pid 6027] memfd_create("syzkaller", 0) = 3 [pid 6027] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6027] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6027] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6027] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6027] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6027] close(3) = 0 [pid 6027] close(4) = 0 [pid 6027] mkdir("./file2", 0777) = 0 [pid 6027] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6027] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6027] chdir("./file2") = 0 [pid 6027] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6027] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6027] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6027] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [ 192.800581][ T6027] loop0: detected capacity change from 0 to 128 [pid 6027] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6027] close(3) = 0 [pid 6027] close(4) = 0 [pid 6027] close(5) = -1 EBADF (Bad file descriptor) [pid 6027] close(6) = -1 EBADF (Bad file descriptor) [pid 6027] close(7) = -1 EBADF (Bad file descriptor) [pid 6027] close(8) = -1 EBADF (Bad file descriptor) [pid 6027] close(9) = -1 EBADF (Bad file descriptor) [pid 6027] close(10) = -1 EBADF (Bad file descriptor) [pid 6027] close(11) = -1 EBADF (Bad file descriptor) [pid 6027] close(12) = -1 EBADF (Bad file descriptor) [pid 6027] close(13) = -1 EBADF (Bad file descriptor) [pid 6027] close(14) = -1 EBADF (Bad file descriptor) [pid 6027] close(15) = -1 EBADF (Bad file descriptor) [pid 6027] close(16) = -1 EBADF (Bad file descriptor) [pid 6027] close(17) = -1 EBADF (Bad file descriptor) [pid 6027] close(18) = -1 EBADF (Bad file descriptor) [pid 6027] close(19) = -1 EBADF (Bad file descriptor) [pid 6027] close(20) = -1 EBADF (Bad file descriptor) [pid 6027] close(21) = -1 EBADF (Bad file descriptor) [pid 6027] close(22) = -1 EBADF (Bad file descriptor) [pid 6027] close(23) = -1 EBADF (Bad file descriptor) [pid 6027] close(24) = -1 EBADF (Bad file descriptor) [pid 6027] close(25) = -1 EBADF (Bad file descriptor) [pid 6027] close(26) = -1 EBADF (Bad file descriptor) [pid 6027] close(27) = -1 EBADF (Bad file descriptor) [pid 6027] close(28) = -1 EBADF (Bad file descriptor) [pid 6027] close(29) = -1 EBADF (Bad file descriptor) [pid 6027] exit_group(0) = ? [pid 6027] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=182, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] umount2("./179", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./179", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./179/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./179/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./179/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./179/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./179/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./179/file2") = 0 [pid 5836] umount2("./179/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./179/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./179/binderfs") = 0 [pid 5836] umount2("./179/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./179/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./179/cgroup.net") = 0 [pid 5836] umount2("./179/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./179/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./179/cgroup.cpu") = 0 [pid 5836] umount2("./179/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./179/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./179/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./179") = 0 [pid 5836] mkdir("./180", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6028 attached [pid 6028] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 183 [pid 6028] <... set_robust_list resumed>) = 0 [pid 6028] chdir("./180") = 0 [pid 6028] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6028] setpgid(0, 0) = 0 [pid 6028] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6028] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6028] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6028] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6028] write(3, "1000", 4) = 4 [pid 6028] close(3) = 0 [pid 6028] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6028] write(1, "executing program\n", 18) = 18 [pid 6028] memfd_create("syzkaller", 0) = 3 [pid 6028] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6028] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6028] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6028] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6028] close(3) = 0 [pid 6028] close(4) = 0 [pid 6028] mkdir("./file2", 0777) = 0 [pid 6028] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6028] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6028] chdir("./file2") = 0 [pid 6028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6028] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6028] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [ 193.339496][ T6028] loop0: detected capacity change from 0 to 128 [pid 6028] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6028] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6028] close(3) = 0 [pid 6028] close(4) = 0 [pid 6028] close(5) = -1 EBADF (Bad file descriptor) [pid 6028] close(6) = -1 EBADF (Bad file descriptor) [pid 6028] close(7) = -1 EBADF (Bad file descriptor) [pid 6028] close(8) = -1 EBADF (Bad file descriptor) [pid 6028] close(9) = -1 EBADF (Bad file descriptor) [pid 6028] close(10) = -1 EBADF (Bad file descriptor) [pid 6028] close(11) = -1 EBADF (Bad file descriptor) [pid 6028] close(12) = -1 EBADF (Bad file descriptor) [pid 6028] close(13) = -1 EBADF (Bad file descriptor) [pid 6028] close(14) = -1 EBADF (Bad file descriptor) [pid 6028] close(15) = -1 EBADF (Bad file descriptor) [pid 6028] close(16) = -1 EBADF (Bad file descriptor) [pid 6028] close(17) = -1 EBADF (Bad file descriptor) [pid 6028] close(18) = -1 EBADF (Bad file descriptor) [pid 6028] close(19) = -1 EBADF (Bad file descriptor) [pid 6028] close(20) = -1 EBADF (Bad file descriptor) [pid 6028] close(21) = -1 EBADF (Bad file descriptor) [pid 6028] close(22) = -1 EBADF (Bad file descriptor) [pid 6028] close(23) = -1 EBADF (Bad file descriptor) [pid 6028] close(24) = -1 EBADF (Bad file descriptor) [pid 6028] close(25) = -1 EBADF (Bad file descriptor) [pid 6028] close(26) = -1 EBADF (Bad file descriptor) [pid 6028] close(27) = -1 EBADF (Bad file descriptor) [pid 6028] close(28) = -1 EBADF (Bad file descriptor) [pid 6028] close(29) = -1 EBADF (Bad file descriptor) [pid 6028] exit_group(0) = ? [pid 6028] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=183, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./180", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./180", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./180/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./180/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./180/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./180/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./180/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./180/file2") = 0 [pid 5836] umount2("./180/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./180/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./180/binderfs") = 0 [pid 5836] umount2("./180/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./180/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./180/cgroup.net") = 0 [pid 5836] umount2("./180/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./180/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./180/cgroup.cpu") = 0 [pid 5836] umount2("./180/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./180/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./180/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./180") = 0 [pid 5836] mkdir("./181", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555563237690) = 184 ./strace-static-x86_64: Process 6029 attached [pid 6029] set_robust_list(0x5555632376a0, 24) = 0 [pid 6029] chdir("./181") = 0 [pid 6029] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6029] setpgid(0, 0) = 0 [pid 6029] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6029] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6029] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6029] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6029] write(3, "1000", 4) = 4 [pid 6029] close(3) = 0 [pid 6029] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6029] write(1, "executing program\n", 18) = 18 [pid 6029] memfd_create("syzkaller", 0) = 3 [pid 6029] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6029] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6029] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6029] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6029] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6029] close(3) = 0 [pid 6029] close(4) = 0 [pid 6029] mkdir("./file2", 0777) = 0 [pid 6029] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6029] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6029] chdir("./file2") = 0 [pid 6029] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 193.505697][ T6029] loop0: detected capacity change from 0 to 128 [pid 6029] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6029] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6029] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6029] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6029] close(3) = 0 [pid 6029] close(4) = 0 [pid 6029] close(5) = -1 EBADF (Bad file descriptor) [pid 6029] close(6) = -1 EBADF (Bad file descriptor) [pid 6029] close(7) = -1 EBADF (Bad file descriptor) [pid 6029] close(8) = -1 EBADF (Bad file descriptor) [pid 6029] close(9) = -1 EBADF (Bad file descriptor) [pid 6029] close(10) = -1 EBADF (Bad file descriptor) [pid 6029] close(11) = -1 EBADF (Bad file descriptor) [pid 6029] close(12) = -1 EBADF (Bad file descriptor) [pid 6029] close(13) = -1 EBADF (Bad file descriptor) [pid 6029] close(14) = -1 EBADF (Bad file descriptor) [pid 6029] close(15) = -1 EBADF (Bad file descriptor) [pid 6029] close(16) = -1 EBADF (Bad file descriptor) [pid 6029] close(17) = -1 EBADF (Bad file descriptor) [pid 6029] close(18) = -1 EBADF (Bad file descriptor) [pid 6029] close(19) = -1 EBADF (Bad file descriptor) [pid 6029] close(20) = -1 EBADF (Bad file descriptor) [pid 6029] close(21) = -1 EBADF (Bad file descriptor) [pid 6029] close(22) = -1 EBADF (Bad file descriptor) [pid 6029] close(23) = -1 EBADF (Bad file descriptor) [pid 6029] close(24) = -1 EBADF (Bad file descriptor) [pid 6029] close(25) = -1 EBADF (Bad file descriptor) [pid 6029] close(26) = -1 EBADF (Bad file descriptor) [pid 6029] close(27) = -1 EBADF (Bad file descriptor) [pid 6029] close(28) = -1 EBADF (Bad file descriptor) [pid 6029] close(29) = -1 EBADF (Bad file descriptor) [pid 6029] exit_group(0) = ? [pid 6029] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=184, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] umount2("./181", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./181", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./181/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./181/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./181/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./181/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./181/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./181/file2") = 0 [pid 5836] umount2("./181/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./181/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./181/binderfs") = 0 [pid 5836] umount2("./181/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./181/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./181/cgroup.net") = 0 [pid 5836] umount2("./181/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./181/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./181/cgroup.cpu") = 0 [pid 5836] umount2("./181/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./181/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./181/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./181") = 0 [pid 5836] mkdir("./182", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6030 attached [pid 6030] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 185 [pid 6030] <... set_robust_list resumed>) = 0 [pid 6030] chdir("./182") = 0 [pid 6030] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6030] setpgid(0, 0) = 0 [pid 6030] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6030] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6030] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6030] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6030] write(3, "1000", 4) = 4 [pid 6030] close(3) = 0 [pid 6030] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6030] write(1, "executing program\n", 18executing program ) = 18 [pid 6030] memfd_create("syzkaller", 0) = 3 [pid 6030] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6030] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6030] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6030] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6030] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6030] close(3) = 0 [pid 6030] close(4) = 0 [pid 6030] mkdir("./file2", 0777) = 0 [pid 6030] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6030] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6030] chdir("./file2") = 0 [pid 6030] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 194.116407][ T6030] loop0: detected capacity change from 0 to 128 [pid 6030] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6030] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6030] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6030] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6030] close(3) = 0 [pid 6030] close(4) = 0 [pid 6030] close(5) = -1 EBADF (Bad file descriptor) [pid 6030] close(6) = -1 EBADF (Bad file descriptor) [pid 6030] close(7) = -1 EBADF (Bad file descriptor) [pid 6030] close(8) = -1 EBADF (Bad file descriptor) [pid 6030] close(9) = -1 EBADF (Bad file descriptor) [pid 6030] close(10) = -1 EBADF (Bad file descriptor) [pid 6030] close(11) = -1 EBADF (Bad file descriptor) [pid 6030] close(12) = -1 EBADF (Bad file descriptor) [pid 6030] close(13) = -1 EBADF (Bad file descriptor) [pid 6030] close(14) = -1 EBADF (Bad file descriptor) [pid 6030] close(15) = -1 EBADF (Bad file descriptor) [pid 6030] close(16) = -1 EBADF (Bad file descriptor) [pid 6030] close(17) = -1 EBADF (Bad file descriptor) [pid 6030] close(18) = -1 EBADF (Bad file descriptor) [pid 6030] close(19) = -1 EBADF (Bad file descriptor) [pid 6030] close(20) = -1 EBADF (Bad file descriptor) [pid 6030] close(21) = -1 EBADF (Bad file descriptor) [pid 6030] close(22) = -1 EBADF (Bad file descriptor) [pid 6030] close(23) = -1 EBADF (Bad file descriptor) [pid 6030] close(24) = -1 EBADF (Bad file descriptor) [pid 6030] close(25) = -1 EBADF (Bad file descriptor) [pid 6030] close(26) = -1 EBADF (Bad file descriptor) [pid 6030] close(27) = -1 EBADF (Bad file descriptor) [pid 6030] close(28) = -1 EBADF (Bad file descriptor) [pid 6030] close(29) = -1 EBADF (Bad file descriptor) [pid 6030] exit_group(0) = ? [pid 6030] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=185, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5836] umount2("./182", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./182", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./182/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./182/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./182/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./182/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./182/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./182/file2") = 0 [pid 5836] umount2("./182/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./182/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./182/binderfs") = 0 [pid 5836] umount2("./182/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./182/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./182/cgroup.net") = 0 [pid 5836] umount2("./182/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./182/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./182/cgroup.cpu") = 0 [pid 5836] umount2("./182/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./182/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./182/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./182") = 0 [pid 5836] mkdir("./183", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6031 attached [pid 6031] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 186 [pid 6031] <... set_robust_list resumed>) = 0 [pid 6031] chdir("./183") = 0 [pid 6031] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6031] setpgid(0, 0) = 0 [pid 6031] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6031] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6031] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6031] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6031] write(3, "1000", 4) = 4 [pid 6031] close(3) = 0 [pid 6031] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6031] write(1, "executing program\n", 18executing program ) = 18 [pid 6031] memfd_create("syzkaller", 0) = 3 [pid 6031] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6031] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6031] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6031] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6031] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6031] close(3) = 0 [pid 6031] close(4) = 0 [pid 6031] mkdir("./file2", 0777) = 0 [pid 6031] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6031] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6031] chdir("./file2") = 0 [pid 6031] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6031] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [ 194.705128][ T6031] loop0: detected capacity change from 0 to 128 [pid 6031] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6031] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6031] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6031] close(3) = 0 [pid 6031] close(4) = 0 [pid 6031] close(5) = -1 EBADF (Bad file descriptor) [pid 6031] close(6) = -1 EBADF (Bad file descriptor) [pid 6031] close(7) = -1 EBADF (Bad file descriptor) [pid 6031] close(8) = -1 EBADF (Bad file descriptor) [pid 6031] close(9) = -1 EBADF (Bad file descriptor) [pid 6031] close(10) = -1 EBADF (Bad file descriptor) [pid 6031] close(11) = -1 EBADF (Bad file descriptor) [pid 6031] close(12) = -1 EBADF (Bad file descriptor) [pid 6031] close(13) = -1 EBADF (Bad file descriptor) [pid 6031] close(14) = -1 EBADF (Bad file descriptor) [pid 6031] close(15) = -1 EBADF (Bad file descriptor) [pid 6031] close(16) = -1 EBADF (Bad file descriptor) [pid 6031] close(17) = -1 EBADF (Bad file descriptor) [pid 6031] close(18) = -1 EBADF (Bad file descriptor) [pid 6031] close(19) = -1 EBADF (Bad file descriptor) [pid 6031] close(20) = -1 EBADF (Bad file descriptor) [pid 6031] close(21) = -1 EBADF (Bad file descriptor) [pid 6031] close(22) = -1 EBADF (Bad file descriptor) [pid 6031] close(23) = -1 EBADF (Bad file descriptor) [pid 6031] close(24) = -1 EBADF (Bad file descriptor) [pid 6031] close(25) = -1 EBADF (Bad file descriptor) [pid 6031] close(26) = -1 EBADF (Bad file descriptor) [pid 6031] close(27) = -1 EBADF (Bad file descriptor) [pid 6031] close(28) = -1 EBADF (Bad file descriptor) [pid 6031] close(29) = -1 EBADF (Bad file descriptor) [pid 6031] exit_group(0) = ? [pid 6031] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=186, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./183", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./183", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./183/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./183/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./183/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./183/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./183/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./183/file2") = 0 [pid 5836] umount2("./183/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./183/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./183/binderfs") = 0 [pid 5836] umount2("./183/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./183/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./183/cgroup.net") = 0 [pid 5836] umount2("./183/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./183/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./183/cgroup.cpu") = 0 [pid 5836] umount2("./183/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./183/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./183/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./183") = 0 [pid 5836] mkdir("./184", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6032 attached [pid 6032] set_robust_list(0x5555632376a0, 24) = 0 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 187 [pid 6032] chdir("./184") = 0 [pid 6032] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6032] setpgid(0, 0) = 0 [pid 6032] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6032] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6032] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6032] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6032] write(3, "1000", 4) = 4 [pid 6032] close(3) = 0 [pid 6032] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6032] write(1, "executing program\n", 18executing program ) = 18 [pid 6032] memfd_create("syzkaller", 0) = 3 [pid 6032] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6032] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6032] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6032] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6032] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6032] close(3) = 0 [pid 6032] close(4) = 0 [pid 6032] mkdir("./file2", 0777) = 0 [pid 6032] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6032] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6032] chdir("./file2") = 0 [pid 6032] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6032] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6032] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6032] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6032] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [ 195.224624][ T6032] loop0: detected capacity change from 0 to 128 [pid 6032] close(3) = 0 [pid 6032] close(4) = 0 [pid 6032] close(5) = -1 EBADF (Bad file descriptor) [pid 6032] close(6) = -1 EBADF (Bad file descriptor) [pid 6032] close(7) = -1 EBADF (Bad file descriptor) [pid 6032] close(8) = -1 EBADF (Bad file descriptor) [pid 6032] close(9) = -1 EBADF (Bad file descriptor) [pid 6032] close(10) = -1 EBADF (Bad file descriptor) [pid 6032] close(11) = -1 EBADF (Bad file descriptor) [pid 6032] close(12) = -1 EBADF (Bad file descriptor) [pid 6032] close(13) = -1 EBADF (Bad file descriptor) [pid 6032] close(14) = -1 EBADF (Bad file descriptor) [pid 6032] close(15) = -1 EBADF (Bad file descriptor) [pid 6032] close(16) = -1 EBADF (Bad file descriptor) [pid 6032] close(17) = -1 EBADF (Bad file descriptor) [pid 6032] close(18) = -1 EBADF (Bad file descriptor) [pid 6032] close(19) = -1 EBADF (Bad file descriptor) [pid 6032] close(20) = -1 EBADF (Bad file descriptor) [pid 6032] close(21) = -1 EBADF (Bad file descriptor) [pid 6032] close(22) = -1 EBADF (Bad file descriptor) [pid 6032] close(23) = -1 EBADF (Bad file descriptor) [pid 6032] close(24) = -1 EBADF (Bad file descriptor) [pid 6032] close(25) = -1 EBADF (Bad file descriptor) [pid 6032] close(26) = -1 EBADF (Bad file descriptor) [pid 6032] close(27) = -1 EBADF (Bad file descriptor) [pid 6032] close(28) = -1 EBADF (Bad file descriptor) [pid 6032] close(29) = -1 EBADF (Bad file descriptor) [pid 6032] exit_group(0) = ? [pid 6032] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=187, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./184", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./184", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./184/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./184/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./184/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./184/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./184/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./184/file2") = 0 [pid 5836] umount2("./184/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./184/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./184/binderfs") = 0 [pid 5836] umount2("./184/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./184/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./184/cgroup.net") = 0 [pid 5836] umount2("./184/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./184/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./184/cgroup.cpu") = 0 [pid 5836] umount2("./184/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./184/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./184/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./184") = 0 [pid 5836] mkdir("./185", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6033 attached [pid 6033] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 188 [pid 6033] <... set_robust_list resumed>) = 0 [pid 6033] chdir("./185") = 0 [pid 6033] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6033] setpgid(0, 0) = 0 [pid 6033] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6033] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6033] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6033] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6033] write(3, "1000", 4) = 4 [pid 6033] close(3) = 0 [pid 6033] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6033] write(1, "executing program\n", 18executing program ) = 18 [pid 6033] memfd_create("syzkaller", 0) = 3 [pid 6033] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6033] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6033] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6033] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6033] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6033] close(3) = 0 [pid 6033] close(4) = 0 [pid 6033] mkdir("./file2", 0777) = 0 [pid 6033] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6033] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6033] chdir("./file2") = 0 [pid 6033] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6033] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [ 195.762733][ T6033] loop0: detected capacity change from 0 to 128 [pid 6033] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6033] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6033] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6033] close(3) = 0 [pid 6033] close(4) = 0 [pid 6033] close(5) = -1 EBADF (Bad file descriptor) [pid 6033] close(6) = -1 EBADF (Bad file descriptor) [pid 6033] close(7) = -1 EBADF (Bad file descriptor) [pid 6033] close(8) = -1 EBADF (Bad file descriptor) [pid 6033] close(9) = -1 EBADF (Bad file descriptor) [pid 6033] close(10) = -1 EBADF (Bad file descriptor) [pid 6033] close(11) = -1 EBADF (Bad file descriptor) [pid 6033] close(12) = -1 EBADF (Bad file descriptor) [pid 6033] close(13) = -1 EBADF (Bad file descriptor) [pid 6033] close(14) = -1 EBADF (Bad file descriptor) [pid 6033] close(15) = -1 EBADF (Bad file descriptor) [pid 6033] close(16) = -1 EBADF (Bad file descriptor) [pid 6033] close(17) = -1 EBADF (Bad file descriptor) [pid 6033] close(18) = -1 EBADF (Bad file descriptor) [pid 6033] close(19) = -1 EBADF (Bad file descriptor) [pid 6033] close(20) = -1 EBADF (Bad file descriptor) [pid 6033] close(21) = -1 EBADF (Bad file descriptor) [pid 6033] close(22) = -1 EBADF (Bad file descriptor) [pid 6033] close(23) = -1 EBADF (Bad file descriptor) [pid 6033] close(24) = -1 EBADF (Bad file descriptor) [pid 6033] close(25) = -1 EBADF (Bad file descriptor) [pid 6033] close(26) = -1 EBADF (Bad file descriptor) [pid 6033] close(27) = -1 EBADF (Bad file descriptor) [pid 6033] close(28) = -1 EBADF (Bad file descriptor) [pid 6033] close(29) = -1 EBADF (Bad file descriptor) [pid 6033] exit_group(0) = ? [pid 6033] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=188, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5836] umount2("./185", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./185", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./185/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./185/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./185/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./185/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./185/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./185/file2") = 0 [pid 5836] umount2("./185/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./185/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./185/binderfs") = 0 [pid 5836] umount2("./185/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./185/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./185/cgroup.net") = 0 [pid 5836] umount2("./185/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./185/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./185/cgroup.cpu") = 0 [pid 5836] umount2("./185/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./185/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./185/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./185") = 0 [pid 5836] mkdir("./186", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6034 attached [pid 6034] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 189 [pid 6034] <... set_robust_list resumed>) = 0 [pid 6034] chdir("./186") = 0 [pid 6034] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6034] setpgid(0, 0) = 0 [pid 6034] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6034] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6034] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6034] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6034] write(3, "1000", 4) = 4 [pid 6034] close(3) = 0 [pid 6034] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6034] write(1, "executing program\n", 18executing program ) = 18 [pid 6034] memfd_create("syzkaller", 0) = 3 [pid 6034] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6034] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6034] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6034] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6034] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6034] close(3) = 0 [pid 6034] close(4) = 0 [pid 6034] mkdir("./file2", 0777) = 0 [pid 6034] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6034] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6034] chdir("./file2") = 0 [pid 6034] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6034] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6034] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6034] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6034] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6034] close(3) = 0 [pid 6034] close(4) = 0 [ 196.373689][ T6034] loop0: detected capacity change from 0 to 128 [pid 6034] close(5) = -1 EBADF (Bad file descriptor) [pid 6034] close(6) = -1 EBADF (Bad file descriptor) [pid 6034] close(7) = -1 EBADF (Bad file descriptor) [pid 6034] close(8) = -1 EBADF (Bad file descriptor) [pid 6034] close(9) = -1 EBADF (Bad file descriptor) [pid 6034] close(10) = -1 EBADF (Bad file descriptor) [pid 6034] close(11) = -1 EBADF (Bad file descriptor) [pid 6034] close(12) = -1 EBADF (Bad file descriptor) [pid 6034] close(13) = -1 EBADF (Bad file descriptor) [pid 6034] close(14) = -1 EBADF (Bad file descriptor) [pid 6034] close(15) = -1 EBADF (Bad file descriptor) [pid 6034] close(16) = -1 EBADF (Bad file descriptor) [pid 6034] close(17) = -1 EBADF (Bad file descriptor) [pid 6034] close(18) = -1 EBADF (Bad file descriptor) [pid 6034] close(19) = -1 EBADF (Bad file descriptor) [pid 6034] close(20) = -1 EBADF (Bad file descriptor) [pid 6034] close(21) = -1 EBADF (Bad file descriptor) [pid 6034] close(22) = -1 EBADF (Bad file descriptor) [pid 6034] close(23) = -1 EBADF (Bad file descriptor) [pid 6034] close(24) = -1 EBADF (Bad file descriptor) [pid 6034] close(25) = -1 EBADF (Bad file descriptor) [pid 6034] close(26) = -1 EBADF (Bad file descriptor) [pid 6034] close(27) = -1 EBADF (Bad file descriptor) [pid 6034] close(28) = -1 EBADF (Bad file descriptor) [pid 6034] close(29) = -1 EBADF (Bad file descriptor) [pid 6034] exit_group(0) = ? [pid 6034] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=189, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./186", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./186", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./186/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./186/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./186/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./186/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./186/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./186/file2") = 0 [pid 5836] umount2("./186/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./186/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./186/binderfs") = 0 [pid 5836] umount2("./186/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./186/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./186/cgroup.net") = 0 [pid 5836] umount2("./186/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./186/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./186/cgroup.cpu") = 0 [pid 5836] umount2("./186/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./186/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./186/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./186") = 0 [pid 5836] mkdir("./187", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6035 attached [pid 6035] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 190 [pid 6035] <... set_robust_list resumed>) = 0 [pid 6035] chdir("./187") = 0 [pid 6035] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6035] setpgid(0, 0) = 0 [pid 6035] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6035] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6035] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6035] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6035] write(3, "1000", 4) = 4 [pid 6035] close(3) = 0 executing program [pid 6035] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6035] write(1, "executing program\n", 18) = 18 [pid 6035] memfd_create("syzkaller", 0) = 3 [pid 6035] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6035] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6035] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6035] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6035] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6035] close(3) = 0 [pid 6035] close(4) = 0 [pid 6035] mkdir("./file2", 0777) = 0 [pid 6035] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6035] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6035] chdir("./file2") = 0 [ 196.923374][ T6035] loop0: detected capacity change from 0 to 128 [pid 6035] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6035] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6035] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6035] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6035] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6035] close(3) = 0 [pid 6035] close(4) = 0 [pid 6035] close(5) = -1 EBADF (Bad file descriptor) [pid 6035] close(6) = -1 EBADF (Bad file descriptor) [pid 6035] close(7) = -1 EBADF (Bad file descriptor) [pid 6035] close(8) = -1 EBADF (Bad file descriptor) [pid 6035] close(9) = -1 EBADF (Bad file descriptor) [pid 6035] close(10) = -1 EBADF (Bad file descriptor) [pid 6035] close(11) = -1 EBADF (Bad file descriptor) [pid 6035] close(12) = -1 EBADF (Bad file descriptor) [pid 6035] close(13) = -1 EBADF (Bad file descriptor) [pid 6035] close(14) = -1 EBADF (Bad file descriptor) [pid 6035] close(15) = -1 EBADF (Bad file descriptor) [pid 6035] close(16) = -1 EBADF (Bad file descriptor) [pid 6035] close(17) = -1 EBADF (Bad file descriptor) [pid 6035] close(18) = -1 EBADF (Bad file descriptor) [pid 6035] close(19) = -1 EBADF (Bad file descriptor) [pid 6035] close(20) = -1 EBADF (Bad file descriptor) [pid 6035] close(21) = -1 EBADF (Bad file descriptor) [pid 6035] close(22) = -1 EBADF (Bad file descriptor) [pid 6035] close(23) = -1 EBADF (Bad file descriptor) [pid 6035] close(24) = -1 EBADF (Bad file descriptor) [pid 6035] close(25) = -1 EBADF (Bad file descriptor) [pid 6035] close(26) = -1 EBADF (Bad file descriptor) [pid 6035] close(27) = -1 EBADF (Bad file descriptor) [pid 6035] close(28) = -1 EBADF (Bad file descriptor) [pid 6035] close(29) = -1 EBADF (Bad file descriptor) [pid 6035] exit_group(0) = ? [pid 6035] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=190, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5836] umount2("./187", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./187", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./187/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./187/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./187/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./187/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./187/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./187/file2") = 0 [pid 5836] umount2("./187/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./187/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./187/binderfs") = 0 [pid 5836] umount2("./187/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./187/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./187/cgroup.net") = 0 [pid 5836] umount2("./187/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./187/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./187/cgroup.cpu") = 0 [pid 5836] umount2("./187/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./187/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./187/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./187") = 0 [pid 5836] mkdir("./188", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6036 attached [pid 6036] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 191 [pid 6036] <... set_robust_list resumed>) = 0 [pid 6036] chdir("./188") = 0 [pid 6036] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6036] setpgid(0, 0) = 0 [pid 6036] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6036] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6036] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6036] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6036] write(3, "1000", 4) = 4 [pid 6036] close(3) = 0 [pid 6036] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6036] write(1, "executing program\n", 18) = 18 [pid 6036] memfd_create("syzkaller", 0) = 3 [pid 6036] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6036] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6036] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6036] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6036] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6036] close(3) = 0 [pid 6036] close(4) = 0 [pid 6036] mkdir("./file2", 0777) = 0 [pid 6036] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6036] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6036] chdir("./file2") = 0 [pid 6036] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6036] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6036] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6036] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6036] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6036] close(3) = 0 [pid 6036] close(4) = 0 [pid 6036] close(5) = -1 EBADF (Bad file descriptor) [pid 6036] close(6) = -1 EBADF (Bad file descriptor) [pid 6036] close(7) = -1 EBADF (Bad file descriptor) [pid 6036] close(8) = -1 EBADF (Bad file descriptor) [pid 6036] close(9) = -1 EBADF (Bad file descriptor) [pid 6036] close(10) = -1 EBADF (Bad file descriptor) [pid 6036] close(11) = -1 EBADF (Bad file descriptor) [pid 6036] close(12) = -1 EBADF (Bad file descriptor) [pid 6036] close(13) = -1 EBADF (Bad file descriptor) [pid 6036] close(14) = -1 EBADF (Bad file descriptor) [pid 6036] close(15) = -1 EBADF (Bad file descriptor) [pid 6036] close(16) = -1 EBADF (Bad file descriptor) [pid 6036] close(17) = -1 EBADF (Bad file descriptor) [pid 6036] close(18) = -1 EBADF (Bad file descriptor) [pid 6036] close(19) = -1 EBADF (Bad file descriptor) [pid 6036] close(20) = -1 EBADF (Bad file descriptor) [pid 6036] close(21) = -1 EBADF (Bad file descriptor) [pid 6036] close(22) = -1 EBADF (Bad file descriptor) [pid 6036] close(23) = -1 EBADF (Bad file descriptor) [pid 6036] close(24) = -1 EBADF (Bad file descriptor) [pid 6036] close(25) = -1 EBADF (Bad file descriptor) [pid 6036] close(26) = -1 EBADF (Bad file descriptor) [pid 6036] close(27) = -1 EBADF (Bad file descriptor) [pid 6036] close(28) = -1 EBADF (Bad file descriptor) [pid 6036] close(29) = -1 EBADF (Bad file descriptor) [pid 6036] exit_group(0) = ? [ 197.429496][ T6036] loop0: detected capacity change from 0 to 128 [pid 6036] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=191, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./188", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./188", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./188/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./188/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./188/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./188/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./188/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./188/file2") = 0 [pid 5836] umount2("./188/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./188/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./188/binderfs") = 0 [pid 5836] umount2("./188/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./188/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./188/cgroup.net") = 0 [pid 5836] umount2("./188/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./188/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./188/cgroup.cpu") = 0 [pid 5836] umount2("./188/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./188/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./188/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./188") = 0 [pid 5836] mkdir("./189", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6037 attached [pid 6037] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 192 [pid 6037] <... set_robust_list resumed>) = 0 [pid 6037] chdir("./189") = 0 [pid 6037] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6037] setpgid(0, 0) = 0 [pid 6037] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6037] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6037] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6037] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6037] write(3, "1000", 4) = 4 [pid 6037] close(3) = 0 [pid 6037] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6037] write(1, "executing program\n", 18executing program ) = 18 [pid 6037] memfd_create("syzkaller", 0) = 3 [pid 6037] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6037] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6037] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6037] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6037] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6037] close(3) = 0 [pid 6037] close(4) = 0 [pid 6037] mkdir("./file2", 0777) = 0 [pid 6037] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [ 197.923338][ T6037] loop0: detected capacity change from 0 to 128 [pid 6037] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6037] chdir("./file2") = 0 [pid 6037] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6037] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6037] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6037] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6037] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6037] close(3) = 0 [pid 6037] close(4) = 0 [pid 6037] close(5) = -1 EBADF (Bad file descriptor) [pid 6037] close(6) = -1 EBADF (Bad file descriptor) [pid 6037] close(7) = -1 EBADF (Bad file descriptor) [pid 6037] close(8) = -1 EBADF (Bad file descriptor) [pid 6037] close(9) = -1 EBADF (Bad file descriptor) [pid 6037] close(10) = -1 EBADF (Bad file descriptor) [pid 6037] close(11) = -1 EBADF (Bad file descriptor) [pid 6037] close(12) = -1 EBADF (Bad file descriptor) [pid 6037] close(13) = -1 EBADF (Bad file descriptor) [pid 6037] close(14) = -1 EBADF (Bad file descriptor) [pid 6037] close(15) = -1 EBADF (Bad file descriptor) [pid 6037] close(16) = -1 EBADF (Bad file descriptor) [pid 6037] close(17) = -1 EBADF (Bad file descriptor) [pid 6037] close(18) = -1 EBADF (Bad file descriptor) [pid 6037] close(19) = -1 EBADF (Bad file descriptor) [pid 6037] close(20) = -1 EBADF (Bad file descriptor) [pid 6037] close(21) = -1 EBADF (Bad file descriptor) [pid 6037] close(22) = -1 EBADF (Bad file descriptor) [pid 6037] close(23) = -1 EBADF (Bad file descriptor) [pid 6037] close(24) = -1 EBADF (Bad file descriptor) [pid 6037] close(25) = -1 EBADF (Bad file descriptor) [pid 6037] close(26) = -1 EBADF (Bad file descriptor) [pid 6037] close(27) = -1 EBADF (Bad file descriptor) [pid 6037] close(28) = -1 EBADF (Bad file descriptor) [pid 6037] close(29) = -1 EBADF (Bad file descriptor) [pid 6037] exit_group(0) = ? [pid 6037] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=192, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./189", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./189", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./189/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./189/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./189/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./189/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./189/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./189/file2") = 0 [pid 5836] umount2("./189/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./189/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./189/binderfs") = 0 [pid 5836] umount2("./189/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./189/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./189/cgroup.net") = 0 [pid 5836] umount2("./189/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./189/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./189/cgroup.cpu") = 0 [pid 5836] umount2("./189/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./189/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./189/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./189") = 0 [pid 5836] mkdir("./190", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6038 attached [pid 6038] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 193 [pid 6038] <... set_robust_list resumed>) = 0 [pid 6038] chdir("./190") = 0 [pid 6038] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6038] setpgid(0, 0) = 0 [pid 6038] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6038] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6038] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6038] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6038] write(3, "1000", 4) = 4 [pid 6038] close(3) = 0 [pid 6038] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6038] write(1, "executing program\n", 18) = 18 [pid 6038] memfd_create("syzkaller", 0) = 3 [pid 6038] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6038] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6038] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6038] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6038] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6038] close(3) = 0 [pid 6038] close(4) = 0 [pid 6038] mkdir("./file2", 0777) = 0 [pid 6038] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6038] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6038] chdir("./file2") = 0 [pid 6038] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6038] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [ 198.342065][ T6038] loop0: detected capacity change from 0 to 128 [pid 6038] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6038] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6038] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6038] close(3) = 0 [pid 6038] close(4) = 0 [pid 6038] close(5) = -1 EBADF (Bad file descriptor) [pid 6038] close(6) = -1 EBADF (Bad file descriptor) [pid 6038] close(7) = -1 EBADF (Bad file descriptor) [pid 6038] close(8) = -1 EBADF (Bad file descriptor) [pid 6038] close(9) = -1 EBADF (Bad file descriptor) [pid 6038] close(10) = -1 EBADF (Bad file descriptor) [pid 6038] close(11) = -1 EBADF (Bad file descriptor) [pid 6038] close(12) = -1 EBADF (Bad file descriptor) [pid 6038] close(13) = -1 EBADF (Bad file descriptor) [pid 6038] close(14) = -1 EBADF (Bad file descriptor) [pid 6038] close(15) = -1 EBADF (Bad file descriptor) [pid 6038] close(16) = -1 EBADF (Bad file descriptor) [pid 6038] close(17) = -1 EBADF (Bad file descriptor) [pid 6038] close(18) = -1 EBADF (Bad file descriptor) [pid 6038] close(19) = -1 EBADF (Bad file descriptor) [pid 6038] close(20) = -1 EBADF (Bad file descriptor) [pid 6038] close(21) = -1 EBADF (Bad file descriptor) [pid 6038] close(22) = -1 EBADF (Bad file descriptor) [pid 6038] close(23) = -1 EBADF (Bad file descriptor) [pid 6038] close(24) = -1 EBADF (Bad file descriptor) [pid 6038] close(25) = -1 EBADF (Bad file descriptor) [pid 6038] close(26) = -1 EBADF (Bad file descriptor) [pid 6038] close(27) = -1 EBADF (Bad file descriptor) [pid 6038] close(28) = -1 EBADF (Bad file descriptor) [pid 6038] close(29) = -1 EBADF (Bad file descriptor) [pid 6038] exit_group(0) = ? [pid 6038] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=193, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] umount2("./190", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./190", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./190/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./190/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./190/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./190/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./190/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./190/file2") = 0 [pid 5836] umount2("./190/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./190/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./190/binderfs") = 0 [pid 5836] umount2("./190/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./190/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./190/cgroup.net") = 0 [pid 5836] umount2("./190/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./190/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./190/cgroup.cpu") = 0 [pid 5836] umount2("./190/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./190/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./190/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./190") = 0 [pid 5836] mkdir("./191", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6039 attached [pid 6039] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 194 [pid 6039] <... set_robust_list resumed>) = 0 [pid 6039] chdir("./191") = 0 [pid 6039] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6039] setpgid(0, 0) = 0 [pid 6039] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6039] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6039] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6039] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6039] write(3, "1000", 4) = 4 [pid 6039] close(3) = 0 [pid 6039] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6039] write(1, "executing program\n", 18executing program ) = 18 [pid 6039] memfd_create("syzkaller", 0) = 3 [pid 6039] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6039] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6039] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6039] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6039] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6039] close(3) = 0 [pid 6039] close(4) = 0 [pid 6039] mkdir("./file2", 0777) = 0 [pid 6039] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6039] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6039] chdir("./file2") = 0 [pid 6039] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6039] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6039] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6039] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6039] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6039] close(3) = 0 [pid 6039] close(4) = 0 [pid 6039] close(5) = -1 EBADF (Bad file descriptor) [pid 6039] close(6) = -1 EBADF (Bad file descriptor) [pid 6039] close(7) = -1 EBADF (Bad file descriptor) [pid 6039] close(8) = -1 EBADF (Bad file descriptor) [pid 6039] close(9) = -1 EBADF (Bad file descriptor) [pid 6039] close(10) = -1 EBADF (Bad file descriptor) [pid 6039] close(11) = -1 EBADF (Bad file descriptor) [pid 6039] close(12) = -1 EBADF (Bad file descriptor) [pid 6039] close(13) = -1 EBADF (Bad file descriptor) [pid 6039] close(14) = -1 EBADF (Bad file descriptor) [pid 6039] close(15) = -1 EBADF (Bad file descriptor) [pid 6039] close(16) = -1 EBADF (Bad file descriptor) [pid 6039] close(17) = -1 EBADF (Bad file descriptor) [pid 6039] close(18) = -1 EBADF (Bad file descriptor) [pid 6039] close(19) = -1 EBADF (Bad file descriptor) [pid 6039] close(20) = -1 EBADF (Bad file descriptor) [pid 6039] close(21) = -1 EBADF (Bad file descriptor) [pid 6039] close(22) = -1 EBADF (Bad file descriptor) [pid 6039] close(23) = -1 EBADF (Bad file descriptor) [pid 6039] close(24) = -1 EBADF (Bad file descriptor) [pid 6039] close(25) = -1 EBADF (Bad file descriptor) [pid 6039] close(26) = -1 EBADF (Bad file descriptor) [pid 6039] close(27) = -1 EBADF (Bad file descriptor) [pid 6039] close(28) = -1 EBADF (Bad file descriptor) [pid 6039] close(29) = -1 EBADF (Bad file descriptor) [ 198.919166][ T6039] loop0: detected capacity change from 0 to 128 [pid 6039] exit_group(0) = ? [pid 6039] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=194, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./191", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./191", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./191/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./191/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./191/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./191/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./191/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./191/file2") = 0 [pid 5836] umount2("./191/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./191/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./191/binderfs") = 0 [pid 5836] umount2("./191/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./191/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./191/cgroup.net") = 0 [pid 5836] umount2("./191/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./191/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./191/cgroup.cpu") = 0 [pid 5836] umount2("./191/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./191/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./191/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./191") = 0 [pid 5836] mkdir("./192", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6040 attached [pid 6040] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 195 [pid 6040] <... set_robust_list resumed>) = 0 [pid 6040] chdir("./192") = 0 [pid 6040] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6040] setpgid(0, 0) = 0 [pid 6040] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6040] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6040] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6040] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6040] write(3, "1000", 4) = 4 [pid 6040] close(3) = 0 [pid 6040] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6040] write(1, "executing program\n", 18executing program ) = 18 [pid 6040] memfd_create("syzkaller", 0) = 3 [pid 6040] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6040] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6040] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6040] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6040] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6040] close(3) = 0 [pid 6040] close(4) = 0 [pid 6040] mkdir("./file2", 0777) = 0 [pid 6040] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6040] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6040] chdir("./file2") = 0 [pid 6040] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6040] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6040] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6040] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6040] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6040] close(3) = 0 [pid 6040] close(4) = 0 [pid 6040] close(5) = -1 EBADF (Bad file descriptor) [pid 6040] close(6) = -1 EBADF (Bad file descriptor) [pid 6040] close(7) = -1 EBADF (Bad file descriptor) [pid 6040] close(8) = -1 EBADF (Bad file descriptor) [pid 6040] close(9) = -1 EBADF (Bad file descriptor) [pid 6040] close(10) = -1 EBADF (Bad file descriptor) [pid 6040] close(11) = -1 EBADF (Bad file descriptor) [pid 6040] close(12) = -1 EBADF (Bad file descriptor) [pid 6040] close(13) = -1 EBADF (Bad file descriptor) [pid 6040] close(14) = -1 EBADF (Bad file descriptor) [pid 6040] close(15) = -1 EBADF (Bad file descriptor) [pid 6040] close(16) = -1 EBADF (Bad file descriptor) [pid 6040] close(17) = -1 EBADF (Bad file descriptor) [pid 6040] close(18) = -1 EBADF (Bad file descriptor) [pid 6040] close(19) = -1 EBADF (Bad file descriptor) [pid 6040] close(20) = -1 EBADF (Bad file descriptor) [pid 6040] close(21) = -1 EBADF (Bad file descriptor) [pid 6040] close(22) = -1 EBADF (Bad file descriptor) [pid 6040] close(23) = -1 EBADF (Bad file descriptor) [pid 6040] close(24) = -1 EBADF (Bad file descriptor) [pid 6040] close(25) = -1 EBADF (Bad file descriptor) [ 199.209654][ T6040] loop0: detected capacity change from 0 to 128 [pid 6040] close(26) = -1 EBADF (Bad file descriptor) [pid 6040] close(27) = -1 EBADF (Bad file descriptor) [pid 6040] close(28) = -1 EBADF (Bad file descriptor) [pid 6040] close(29) = -1 EBADF (Bad file descriptor) [pid 6040] exit_group(0) = ? [pid 6040] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=195, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./192", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./192", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./192/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./192/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./192/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./192/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./192/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./192/file2") = 0 [pid 5836] umount2("./192/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./192/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./192/binderfs") = 0 [pid 5836] umount2("./192/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./192/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./192/cgroup.net") = 0 [pid 5836] umount2("./192/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./192/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./192/cgroup.cpu") = 0 [pid 5836] umount2("./192/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./192/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./192/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./192") = 0 [pid 5836] mkdir("./193", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6041 attached [pid 6041] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 196 [pid 6041] <... set_robust_list resumed>) = 0 [pid 6041] chdir("./193") = 0 [pid 6041] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6041] setpgid(0, 0) = 0 [pid 6041] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6041] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6041] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6041] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6041] write(3, "1000", 4) = 4 [pid 6041] close(3) = 0 [pid 6041] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6041] write(1, "executing program\n", 18) = 18 [pid 6041] memfd_create("syzkaller", 0) = 3 [pid 6041] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6041] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6041] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6041] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6041] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6041] close(3) = 0 [pid 6041] close(4) = 0 [pid 6041] mkdir("./file2", 0777) = 0 [pid 6041] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6041] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6041] chdir("./file2") = 0 [pid 6041] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6041] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6041] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6041] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6041] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6041] close(3) = 0 [ 199.633662][ T6041] loop0: detected capacity change from 0 to 128 [pid 6041] close(4) = 0 [pid 6041] close(5) = -1 EBADF (Bad file descriptor) [pid 6041] close(6) = -1 EBADF (Bad file descriptor) [pid 6041] close(7) = -1 EBADF (Bad file descriptor) [pid 6041] close(8) = -1 EBADF (Bad file descriptor) [pid 6041] close(9) = -1 EBADF (Bad file descriptor) [pid 6041] close(10) = -1 EBADF (Bad file descriptor) [pid 6041] close(11) = -1 EBADF (Bad file descriptor) [pid 6041] close(12) = -1 EBADF (Bad file descriptor) [pid 6041] close(13) = -1 EBADF (Bad file descriptor) [pid 6041] close(14) = -1 EBADF (Bad file descriptor) [pid 6041] close(15) = -1 EBADF (Bad file descriptor) [pid 6041] close(16) = -1 EBADF (Bad file descriptor) [pid 6041] close(17) = -1 EBADF (Bad file descriptor) [pid 6041] close(18) = -1 EBADF (Bad file descriptor) [pid 6041] close(19) = -1 EBADF (Bad file descriptor) [pid 6041] close(20) = -1 EBADF (Bad file descriptor) [pid 6041] close(21) = -1 EBADF (Bad file descriptor) [pid 6041] close(22) = -1 EBADF (Bad file descriptor) [pid 6041] close(23) = -1 EBADF (Bad file descriptor) [pid 6041] close(24) = -1 EBADF (Bad file descriptor) [pid 6041] close(25) = -1 EBADF (Bad file descriptor) [pid 6041] close(26) = -1 EBADF (Bad file descriptor) [pid 6041] close(27) = -1 EBADF (Bad file descriptor) [pid 6041] close(28) = -1 EBADF (Bad file descriptor) [pid 6041] close(29) = -1 EBADF (Bad file descriptor) [pid 6041] exit_group(0) = ? [pid 6041] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=196, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] umount2("./193", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./193", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./193/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./193/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./193/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./193/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./193/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./193/file2") = 0 [pid 5836] umount2("./193/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./193/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./193/binderfs") = 0 [pid 5836] umount2("./193/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./193/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./193/cgroup.net") = 0 [pid 5836] umount2("./193/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./193/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./193/cgroup.cpu") = 0 [pid 5836] umount2("./193/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./193/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./193/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./193") = 0 [pid 5836] mkdir("./194", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6042 attached [pid 6042] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 197 [pid 6042] <... set_robust_list resumed>) = 0 [pid 6042] chdir("./194") = 0 [pid 6042] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6042] setpgid(0, 0) = 0 [pid 6042] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6042] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6042] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6042] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6042] write(3, "1000", 4) = 4 [pid 6042] close(3) = 0 [pid 6042] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6042] write(1, "executing program\n", 18) = 18 [pid 6042] memfd_create("syzkaller", 0) = 3 [pid 6042] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6042] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6042] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6042] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6042] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6042] close(3) = 0 [pid 6042] close(4) = 0 [pid 6042] mkdir("./file2", 0777) = 0 [pid 6042] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6042] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6042] chdir("./file2") = 0 [pid 6042] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 200.190563][ T6042] loop0: detected capacity change from 0 to 128 [pid 6042] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6042] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6042] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6042] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6042] close(3) = 0 [pid 6042] close(4) = 0 [pid 6042] close(5) = -1 EBADF (Bad file descriptor) [pid 6042] close(6) = -1 EBADF (Bad file descriptor) [pid 6042] close(7) = -1 EBADF (Bad file descriptor) [pid 6042] close(8) = -1 EBADF (Bad file descriptor) [pid 6042] close(9) = -1 EBADF (Bad file descriptor) [pid 6042] close(10) = -1 EBADF (Bad file descriptor) [pid 6042] close(11) = -1 EBADF (Bad file descriptor) [pid 6042] close(12) = -1 EBADF (Bad file descriptor) [pid 6042] close(13) = -1 EBADF (Bad file descriptor) [pid 6042] close(14) = -1 EBADF (Bad file descriptor) [pid 6042] close(15) = -1 EBADF (Bad file descriptor) [pid 6042] close(16) = -1 EBADF (Bad file descriptor) [pid 6042] close(17) = -1 EBADF (Bad file descriptor) [pid 6042] close(18) = -1 EBADF (Bad file descriptor) [pid 6042] close(19) = -1 EBADF (Bad file descriptor) [pid 6042] close(20) = -1 EBADF (Bad file descriptor) [pid 6042] close(21) = -1 EBADF (Bad file descriptor) [pid 6042] close(22) = -1 EBADF (Bad file descriptor) [pid 6042] close(23) = -1 EBADF (Bad file descriptor) [pid 6042] close(24) = -1 EBADF (Bad file descriptor) [pid 6042] close(25) = -1 EBADF (Bad file descriptor) [pid 6042] close(26) = -1 EBADF (Bad file descriptor) [pid 6042] close(27) = -1 EBADF (Bad file descriptor) [pid 6042] close(28) = -1 EBADF (Bad file descriptor) [pid 6042] close(29) = -1 EBADF (Bad file descriptor) [pid 6042] exit_group(0) = ? [pid 6042] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=197, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] umount2("./194", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./194", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./194/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./194/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./194/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./194/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./194/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./194/file2") = 0 [pid 5836] umount2("./194/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./194/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./194/binderfs") = 0 [pid 5836] umount2("./194/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./194/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./194/cgroup.net") = 0 [pid 5836] umount2("./194/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./194/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./194/cgroup.cpu") = 0 [pid 5836] umount2("./194/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./194/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./194/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./194") = 0 [pid 5836] mkdir("./195", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6043 attached [pid 6043] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 198 [pid 6043] <... set_robust_list resumed>) = 0 [pid 6043] chdir("./195") = 0 [pid 6043] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6043] setpgid(0, 0) = 0 [pid 6043] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6043] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6043] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6043] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6043] write(3, "1000", 4) = 4 [pid 6043] close(3) = 0 [pid 6043] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6043] write(1, "executing program\n", 18) = 18 [pid 6043] memfd_create("syzkaller", 0) = 3 [pid 6043] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6043] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6043] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6043] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6043] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6043] close(3) = 0 [pid 6043] close(4) = 0 [pid 6043] mkdir("./file2", 0777) = 0 [pid 6043] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6043] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6043] chdir("./file2") = 0 [pid 6043] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6043] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6043] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6043] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6043] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6043] close(3) = 0 [pid 6043] close(4) = 0 [pid 6043] close(5) = -1 EBADF (Bad file descriptor) [pid 6043] close(6) = -1 EBADF (Bad file descriptor) [pid 6043] close(7) = -1 EBADF (Bad file descriptor) [pid 6043] close(8) = -1 EBADF (Bad file descriptor) [pid 6043] close(9) = -1 EBADF (Bad file descriptor) [pid 6043] close(10) = -1 EBADF (Bad file descriptor) [pid 6043] close(11) = -1 EBADF (Bad file descriptor) [pid 6043] close(12) = -1 EBADF (Bad file descriptor) [pid 6043] close(13) = -1 EBADF (Bad file descriptor) [pid 6043] close(14) = -1 EBADF (Bad file descriptor) [pid 6043] close(15) = -1 EBADF (Bad file descriptor) [pid 6043] close(16) = -1 EBADF (Bad file descriptor) [pid 6043] close(17) = -1 EBADF (Bad file descriptor) [pid 6043] close(18) = -1 EBADF (Bad file descriptor) [pid 6043] close(19) = -1 EBADF (Bad file descriptor) [pid 6043] close(20) = -1 EBADF (Bad file descriptor) [pid 6043] close(21) = -1 EBADF (Bad file descriptor) [pid 6043] close(22) = -1 EBADF (Bad file descriptor) [pid 6043] close(23) = -1 EBADF (Bad file descriptor) [pid 6043] close(24) = -1 EBADF (Bad file descriptor) [pid 6043] close(25) = -1 EBADF (Bad file descriptor) [pid 6043] close(26) = -1 EBADF (Bad file descriptor) [pid 6043] close(27) = -1 EBADF (Bad file descriptor) [pid 6043] close(28) = -1 EBADF (Bad file descriptor) [pid 6043] close(29) = -1 EBADF (Bad file descriptor) [pid 6043] exit_group(0) = ? [pid 6043] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=198, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [ 200.735186][ T6043] loop0: detected capacity change from 0 to 128 [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./195", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./195", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./195/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./195/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./195/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./195/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./195/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./195/file2") = 0 [pid 5836] umount2("./195/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./195/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./195/binderfs") = 0 [pid 5836] umount2("./195/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./195/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./195/cgroup.net") = 0 [pid 5836] umount2("./195/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./195/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./195/cgroup.cpu") = 0 [pid 5836] umount2("./195/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./195/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./195/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./195") = 0 [pid 5836] mkdir("./196", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6044 attached [pid 6044] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 199 [pid 6044] <... set_robust_list resumed>) = 0 [pid 6044] chdir("./196") = 0 [pid 6044] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6044] setpgid(0, 0) = 0 [pid 6044] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6044] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6044] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6044] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6044] write(3, "1000", 4) = 4 [pid 6044] close(3) = 0 [pid 6044] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6044] write(1, "executing program\n", 18executing program ) = 18 [pid 6044] memfd_create("syzkaller", 0) = 3 [pid 6044] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6044] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6044] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6044] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6044] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6044] close(3) = 0 [pid 6044] close(4) = 0 [pid 6044] mkdir("./file2", 0777) = 0 [pid 6044] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6044] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6044] chdir("./file2") = 0 [pid 6044] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6044] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6044] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6044] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6044] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6044] close(3) = 0 [ 201.270530][ T6044] loop0: detected capacity change from 0 to 128 [pid 6044] close(4) = 0 [pid 6044] close(5) = -1 EBADF (Bad file descriptor) [pid 6044] close(6) = -1 EBADF (Bad file descriptor) [pid 6044] close(7) = -1 EBADF (Bad file descriptor) [pid 6044] close(8) = -1 EBADF (Bad file descriptor) [pid 6044] close(9) = -1 EBADF (Bad file descriptor) [pid 6044] close(10) = -1 EBADF (Bad file descriptor) [pid 6044] close(11) = -1 EBADF (Bad file descriptor) [pid 6044] close(12) = -1 EBADF (Bad file descriptor) [pid 6044] close(13) = -1 EBADF (Bad file descriptor) [pid 6044] close(14) = -1 EBADF (Bad file descriptor) [pid 6044] close(15) = -1 EBADF (Bad file descriptor) [pid 6044] close(16) = -1 EBADF (Bad file descriptor) [pid 6044] close(17) = -1 EBADF (Bad file descriptor) [pid 6044] close(18) = -1 EBADF (Bad file descriptor) [pid 6044] close(19) = -1 EBADF (Bad file descriptor) [pid 6044] close(20) = -1 EBADF (Bad file descriptor) [pid 6044] close(21) = -1 EBADF (Bad file descriptor) [pid 6044] close(22) = -1 EBADF (Bad file descriptor) [pid 6044] close(23) = -1 EBADF (Bad file descriptor) [pid 6044] close(24) = -1 EBADF (Bad file descriptor) [pid 6044] close(25) = -1 EBADF (Bad file descriptor) [pid 6044] close(26) = -1 EBADF (Bad file descriptor) [pid 6044] close(27) = -1 EBADF (Bad file descriptor) [pid 6044] close(28) = -1 EBADF (Bad file descriptor) [pid 6044] close(29) = -1 EBADF (Bad file descriptor) [pid 6044] exit_group(0) = ? [pid 6044] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=199, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] umount2("./196", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./196", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./196/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./196/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./196/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./196/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./196/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./196/file2") = 0 [pid 5836] umount2("./196/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./196/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./196/binderfs") = 0 [pid 5836] umount2("./196/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./196/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./196/cgroup.net") = 0 [pid 5836] umount2("./196/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./196/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./196/cgroup.cpu") = 0 [pid 5836] umount2("./196/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./196/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./196/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./196") = 0 [pid 5836] mkdir("./197", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6045 attached , child_tidptr=0x555563237690) = 200 [pid 6045] set_robust_list(0x5555632376a0, 24) = 0 [pid 6045] chdir("./197") = 0 [pid 6045] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6045] setpgid(0, 0) = 0 [pid 6045] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6045] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6045] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6045] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6045] write(3, "1000", 4) = 4 [pid 6045] close(3) = 0 [pid 6045] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6045] write(1, "executing program\n", 18executing program ) = 18 [pid 6045] memfd_create("syzkaller", 0) = 3 [pid 6045] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6045] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6045] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6045] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6045] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6045] close(3) = 0 [pid 6045] close(4) = 0 [pid 6045] mkdir("./file2", 0777) = 0 [pid 6045] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6045] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6045] chdir("./file2") = 0 [pid 6045] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6045] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6045] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6045] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6045] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6045] close(3) = 0 [pid 6045] close(4) = 0 [ 201.817506][ T6045] loop0: detected capacity change from 0 to 128 [pid 6045] close(5) = -1 EBADF (Bad file descriptor) [pid 6045] close(6) = -1 EBADF (Bad file descriptor) [pid 6045] close(7) = -1 EBADF (Bad file descriptor) [pid 6045] close(8) = -1 EBADF (Bad file descriptor) [pid 6045] close(9) = -1 EBADF (Bad file descriptor) [pid 6045] close(10) = -1 EBADF (Bad file descriptor) [pid 6045] close(11) = -1 EBADF (Bad file descriptor) [pid 6045] close(12) = -1 EBADF (Bad file descriptor) [pid 6045] close(13) = -1 EBADF (Bad file descriptor) [pid 6045] close(14) = -1 EBADF (Bad file descriptor) [pid 6045] close(15) = -1 EBADF (Bad file descriptor) [pid 6045] close(16) = -1 EBADF (Bad file descriptor) [pid 6045] close(17) = -1 EBADF (Bad file descriptor) [pid 6045] close(18) = -1 EBADF (Bad file descriptor) [pid 6045] close(19) = -1 EBADF (Bad file descriptor) [pid 6045] close(20) = -1 EBADF (Bad file descriptor) [pid 6045] close(21) = -1 EBADF (Bad file descriptor) [pid 6045] close(22) = -1 EBADF (Bad file descriptor) [pid 6045] close(23) = -1 EBADF (Bad file descriptor) [pid 6045] close(24) = -1 EBADF (Bad file descriptor) [pid 6045] close(25) = -1 EBADF (Bad file descriptor) [pid 6045] close(26) = -1 EBADF (Bad file descriptor) [pid 6045] close(27) = -1 EBADF (Bad file descriptor) [pid 6045] close(28) = -1 EBADF (Bad file descriptor) [pid 6045] close(29) = -1 EBADF (Bad file descriptor) [pid 6045] exit_group(0) = ? [pid 6045] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=200, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./197", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./197", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./197/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./197/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./197/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./197/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./197/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./197/file2") = 0 [pid 5836] umount2("./197/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./197/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./197/binderfs") = 0 [pid 5836] umount2("./197/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./197/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./197/cgroup.net") = 0 [pid 5836] umount2("./197/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./197/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./197/cgroup.cpu") = 0 [pid 5836] umount2("./197/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./197/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./197/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./197") = 0 [pid 5836] mkdir("./198", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6046 attached [pid 6046] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 201 [pid 6046] <... set_robust_list resumed>) = 0 [pid 6046] chdir("./198") = 0 [pid 6046] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6046] setpgid(0, 0) = 0 [pid 6046] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6046] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6046] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6046] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6046] write(3, "1000", 4) = 4 [pid 6046] close(3) = 0 [pid 6046] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6046] write(1, "executing program\n", 18) = 18 [pid 6046] memfd_create("syzkaller", 0) = 3 [pid 6046] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6046] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6046] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6046] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6046] close(3) = 0 [pid 6046] close(4) = 0 [pid 6046] mkdir("./file2", 0777) = 0 [pid 6046] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6046] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [ 202.389571][ T6046] loop0: detected capacity change from 0 to 128 [pid 6046] chdir("./file2") = 0 [pid 6046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6046] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6046] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6046] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6046] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6046] close(3) = 0 [pid 6046] close(4) = 0 [pid 6046] close(5) = -1 EBADF (Bad file descriptor) [pid 6046] close(6) = -1 EBADF (Bad file descriptor) [pid 6046] close(7) = -1 EBADF (Bad file descriptor) [pid 6046] close(8) = -1 EBADF (Bad file descriptor) [pid 6046] close(9) = -1 EBADF (Bad file descriptor) [pid 6046] close(10) = -1 EBADF (Bad file descriptor) [pid 6046] close(11) = -1 EBADF (Bad file descriptor) [pid 6046] close(12) = -1 EBADF (Bad file descriptor) [pid 6046] close(13) = -1 EBADF (Bad file descriptor) [pid 6046] close(14) = -1 EBADF (Bad file descriptor) [pid 6046] close(15) = -1 EBADF (Bad file descriptor) [pid 6046] close(16) = -1 EBADF (Bad file descriptor) [pid 6046] close(17) = -1 EBADF (Bad file descriptor) [pid 6046] close(18) = -1 EBADF (Bad file descriptor) [pid 6046] close(19) = -1 EBADF (Bad file descriptor) [pid 6046] close(20) = -1 EBADF (Bad file descriptor) [pid 6046] close(21) = -1 EBADF (Bad file descriptor) [pid 6046] close(22) = -1 EBADF (Bad file descriptor) [pid 6046] close(23) = -1 EBADF (Bad file descriptor) [pid 6046] close(24) = -1 EBADF (Bad file descriptor) [pid 6046] close(25) = -1 EBADF (Bad file descriptor) [pid 6046] close(26) = -1 EBADF (Bad file descriptor) [pid 6046] close(27) = -1 EBADF (Bad file descriptor) [pid 6046] close(28) = -1 EBADF (Bad file descriptor) [pid 6046] close(29) = -1 EBADF (Bad file descriptor) [pid 6046] exit_group(0) = ? [pid 6046] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=201, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./198", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./198", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./198/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./198/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./198/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./198/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./198/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./198/file2") = 0 [pid 5836] umount2("./198/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./198/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./198/binderfs") = 0 [pid 5836] umount2("./198/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./198/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./198/cgroup.net") = 0 [pid 5836] umount2("./198/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./198/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./198/cgroup.cpu") = 0 [pid 5836] umount2("./198/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./198/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./198/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./198") = 0 [pid 5836] mkdir("./199", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6047 attached [pid 6047] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 202 [pid 6047] <... set_robust_list resumed>) = 0 [pid 6047] chdir("./199") = 0 [pid 6047] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6047] setpgid(0, 0) = 0 [pid 6047] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6047] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6047] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6047] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6047] write(3, "1000", 4) = 4 [pid 6047] close(3) = 0 [pid 6047] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6047] write(1, "executing program\n", 18) = 18 [pid 6047] memfd_create("syzkaller", 0) = 3 [pid 6047] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6047] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6047] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6047] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6047] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6047] close(3) = 0 [pid 6047] close(4) = 0 [pid 6047] mkdir("./file2", 0777) = 0 [pid 6047] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6047] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6047] chdir("./file2") = 0 [pid 6047] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 202.682353][ T6047] loop0: detected capacity change from 0 to 128 [pid 6047] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6047] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6047] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6047] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6047] close(3) = 0 [pid 6047] close(4) = 0 [pid 6047] close(5) = -1 EBADF (Bad file descriptor) [pid 6047] close(6) = -1 EBADF (Bad file descriptor) [pid 6047] close(7) = -1 EBADF (Bad file descriptor) [pid 6047] close(8) = -1 EBADF (Bad file descriptor) [pid 6047] close(9) = -1 EBADF (Bad file descriptor) [pid 6047] close(10) = -1 EBADF (Bad file descriptor) [pid 6047] close(11) = -1 EBADF (Bad file descriptor) [pid 6047] close(12) = -1 EBADF (Bad file descriptor) [pid 6047] close(13) = -1 EBADF (Bad file descriptor) [pid 6047] close(14) = -1 EBADF (Bad file descriptor) [pid 6047] close(15) = -1 EBADF (Bad file descriptor) [pid 6047] close(16) = -1 EBADF (Bad file descriptor) [pid 6047] close(17) = -1 EBADF (Bad file descriptor) [pid 6047] close(18) = -1 EBADF (Bad file descriptor) [pid 6047] close(19) = -1 EBADF (Bad file descriptor) [pid 6047] close(20) = -1 EBADF (Bad file descriptor) [pid 6047] close(21) = -1 EBADF (Bad file descriptor) [pid 6047] close(22) = -1 EBADF (Bad file descriptor) [pid 6047] close(23) = -1 EBADF (Bad file descriptor) [pid 6047] close(24) = -1 EBADF (Bad file descriptor) [pid 6047] close(25) = -1 EBADF (Bad file descriptor) [pid 6047] close(26) = -1 EBADF (Bad file descriptor) [pid 6047] close(27) = -1 EBADF (Bad file descriptor) [pid 6047] close(28) = -1 EBADF (Bad file descriptor) [pid 6047] close(29) = -1 EBADF (Bad file descriptor) [pid 6047] exit_group(0) = ? [pid 6047] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=202, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./199", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./199", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./199/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./199/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./199/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./199/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./199/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./199/file2") = 0 [pid 5836] umount2("./199/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./199/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./199/binderfs") = 0 [pid 5836] umount2("./199/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./199/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./199/cgroup.net") = 0 [pid 5836] umount2("./199/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./199/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./199/cgroup.cpu") = 0 [pid 5836] umount2("./199/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./199/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./199/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./199") = 0 [pid 5836] mkdir("./200", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6048 attached [pid 6048] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 203 [pid 6048] <... set_robust_list resumed>) = 0 [pid 6048] chdir("./200") = 0 [pid 6048] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6048] setpgid(0, 0) = 0 [pid 6048] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6048] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6048] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6048] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6048] write(3, "1000", 4) = 4 [pid 6048] close(3) = 0 [pid 6048] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6048] write(1, "executing program\n", 18) = 18 [pid 6048] memfd_create("syzkaller", 0) = 3 [pid 6048] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6048] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6048] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6048] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6048] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6048] close(3) = 0 [pid 6048] close(4) = 0 [pid 6048] mkdir("./file2", 0777) = 0 [pid 6048] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6048] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6048] chdir("./file2") = 0 [pid 6048] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6048] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [ 203.226949][ T6048] loop0: detected capacity change from 0 to 128 [pid 6048] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6048] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6048] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6048] close(3) = 0 [pid 6048] close(4) = 0 [pid 6048] close(5) = -1 EBADF (Bad file descriptor) [pid 6048] close(6) = -1 EBADF (Bad file descriptor) [pid 6048] close(7) = -1 EBADF (Bad file descriptor) [pid 6048] close(8) = -1 EBADF (Bad file descriptor) [pid 6048] close(9) = -1 EBADF (Bad file descriptor) [pid 6048] close(10) = -1 EBADF (Bad file descriptor) [pid 6048] close(11) = -1 EBADF (Bad file descriptor) [pid 6048] close(12) = -1 EBADF (Bad file descriptor) [pid 6048] close(13) = -1 EBADF (Bad file descriptor) [pid 6048] close(14) = -1 EBADF (Bad file descriptor) [pid 6048] close(15) = -1 EBADF (Bad file descriptor) [pid 6048] close(16) = -1 EBADF (Bad file descriptor) [pid 6048] close(17) = -1 EBADF (Bad file descriptor) [pid 6048] close(18) = -1 EBADF (Bad file descriptor) [pid 6048] close(19) = -1 EBADF (Bad file descriptor) [pid 6048] close(20) = -1 EBADF (Bad file descriptor) [pid 6048] close(21) = -1 EBADF (Bad file descriptor) [pid 6048] close(22) = -1 EBADF (Bad file descriptor) [pid 6048] close(23) = -1 EBADF (Bad file descriptor) [pid 6048] close(24) = -1 EBADF (Bad file descriptor) [pid 6048] close(25) = -1 EBADF (Bad file descriptor) [pid 6048] close(26) = -1 EBADF (Bad file descriptor) [pid 6048] close(27) = -1 EBADF (Bad file descriptor) [pid 6048] close(28) = -1 EBADF (Bad file descriptor) [pid 6048] close(29) = -1 EBADF (Bad file descriptor) [pid 6048] exit_group(0) = ? [pid 6048] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=203, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./200", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./200", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./200/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./200/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./200/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./200/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./200/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./200/file2") = 0 [pid 5836] umount2("./200/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./200/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./200/binderfs") = 0 [pid 5836] umount2("./200/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./200/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./200/cgroup.net") = 0 [pid 5836] umount2("./200/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./200/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./200/cgroup.cpu") = 0 [pid 5836] umount2("./200/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./200/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./200/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./200") = 0 [pid 5836] mkdir("./201", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6049 attached , child_tidptr=0x555563237690) = 204 [pid 6049] set_robust_list(0x5555632376a0, 24) = 0 [pid 6049] chdir("./201") = 0 [pid 6049] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6049] setpgid(0, 0) = 0 [pid 6049] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6049] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6049] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6049] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6049] write(3, "1000", 4) = 4 [pid 6049] close(3) = 0 [pid 6049] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6049] write(1, "executing program\n", 18) = 18 [pid 6049] memfd_create("syzkaller", 0) = 3 [pid 6049] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6049] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6049] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6049] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6049] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6049] close(3) = 0 [pid 6049] close(4) = 0 [pid 6049] mkdir("./file2", 0777) = 0 [pid 6049] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6049] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6049] chdir("./file2") = 0 [pid 6049] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 203.744419][ T6049] loop0: detected capacity change from 0 to 128 [pid 6049] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6049] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6049] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6049] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6049] close(3) = 0 [pid 6049] close(4) = 0 [pid 6049] close(5) = -1 EBADF (Bad file descriptor) [pid 6049] close(6) = -1 EBADF (Bad file descriptor) [pid 6049] close(7) = -1 EBADF (Bad file descriptor) [pid 6049] close(8) = -1 EBADF (Bad file descriptor) [pid 6049] close(9) = -1 EBADF (Bad file descriptor) [pid 6049] close(10) = -1 EBADF (Bad file descriptor) [pid 6049] close(11) = -1 EBADF (Bad file descriptor) [pid 6049] close(12) = -1 EBADF (Bad file descriptor) [pid 6049] close(13) = -1 EBADF (Bad file descriptor) [pid 6049] close(14) = -1 EBADF (Bad file descriptor) [pid 6049] close(15) = -1 EBADF (Bad file descriptor) [pid 6049] close(16) = -1 EBADF (Bad file descriptor) [pid 6049] close(17) = -1 EBADF (Bad file descriptor) [pid 6049] close(18) = -1 EBADF (Bad file descriptor) [pid 6049] close(19) = -1 EBADF (Bad file descriptor) [pid 6049] close(20) = -1 EBADF (Bad file descriptor) [pid 6049] close(21) = -1 EBADF (Bad file descriptor) [pid 6049] close(22) = -1 EBADF (Bad file descriptor) [pid 6049] close(23) = -1 EBADF (Bad file descriptor) [pid 6049] close(24) = -1 EBADF (Bad file descriptor) [pid 6049] close(25) = -1 EBADF (Bad file descriptor) [pid 6049] close(26) = -1 EBADF (Bad file descriptor) [pid 6049] close(27) = -1 EBADF (Bad file descriptor) [pid 6049] close(28) = -1 EBADF (Bad file descriptor) [pid 6049] close(29) = -1 EBADF (Bad file descriptor) [pid 6049] exit_group(0) = ? [pid 6049] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=204, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] umount2("./201", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./201", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./201/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./201/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./201/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./201/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./201/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./201/file2") = 0 [pid 5836] umount2("./201/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./201/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./201/binderfs") = 0 [pid 5836] umount2("./201/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./201/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./201/cgroup.net") = 0 [pid 5836] umount2("./201/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./201/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./201/cgroup.cpu") = 0 [pid 5836] umount2("./201/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./201/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./201/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./201") = 0 [pid 5836] mkdir("./202", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6050 attached [pid 6050] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 205 [pid 6050] <... set_robust_list resumed>) = 0 [pid 6050] chdir("./202") = 0 [pid 6050] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6050] setpgid(0, 0) = 0 [pid 6050] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6050] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6050] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6050] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6050] write(3, "1000", 4) = 4 [pid 6050] close(3) = 0 [pid 6050] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6050] write(1, "executing program\n", 18) = 18 [pid 6050] memfd_create("syzkaller", 0) = 3 [pid 6050] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6050] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6050] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6050] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6050] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6050] close(3) = 0 [pid 6050] close(4) = 0 [pid 6050] mkdir("./file2", 0777) = 0 [pid 6050] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6050] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6050] chdir("./file2") = 0 [pid 6050] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6050] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6050] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6050] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6050] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6050] close(3) = 0 [ 204.355000][ T6050] loop0: detected capacity change from 0 to 128 [pid 6050] close(4) = 0 [pid 6050] close(5) = -1 EBADF (Bad file descriptor) [pid 6050] close(6) = -1 EBADF (Bad file descriptor) [pid 6050] close(7) = -1 EBADF (Bad file descriptor) [pid 6050] close(8) = -1 EBADF (Bad file descriptor) [pid 6050] close(9) = -1 EBADF (Bad file descriptor) [pid 6050] close(10) = -1 EBADF (Bad file descriptor) [pid 6050] close(11) = -1 EBADF (Bad file descriptor) [pid 6050] close(12) = -1 EBADF (Bad file descriptor) [pid 6050] close(13) = -1 EBADF (Bad file descriptor) [pid 6050] close(14) = -1 EBADF (Bad file descriptor) [pid 6050] close(15) = -1 EBADF (Bad file descriptor) [pid 6050] close(16) = -1 EBADF (Bad file descriptor) [pid 6050] close(17) = -1 EBADF (Bad file descriptor) [pid 6050] close(18) = -1 EBADF (Bad file descriptor) [pid 6050] close(19) = -1 EBADF (Bad file descriptor) [pid 6050] close(20) = -1 EBADF (Bad file descriptor) [pid 6050] close(21) = -1 EBADF (Bad file descriptor) [pid 6050] close(22) = -1 EBADF (Bad file descriptor) [pid 6050] close(23) = -1 EBADF (Bad file descriptor) [pid 6050] close(24) = -1 EBADF (Bad file descriptor) [pid 6050] close(25) = -1 EBADF (Bad file descriptor) [pid 6050] close(26) = -1 EBADF (Bad file descriptor) [pid 6050] close(27) = -1 EBADF (Bad file descriptor) [pid 6050] close(28) = -1 EBADF (Bad file descriptor) [pid 6050] close(29) = -1 EBADF (Bad file descriptor) [pid 6050] exit_group(0) = ? [pid 6050] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=205, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./202", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./202", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./202/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./202/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./202/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./202/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./202/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./202/file2") = 0 [pid 5836] umount2("./202/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./202/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./202/binderfs") = 0 [pid 5836] umount2("./202/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./202/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./202/cgroup.net") = 0 [pid 5836] umount2("./202/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./202/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./202/cgroup.cpu") = 0 [pid 5836] umount2("./202/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./202/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./202/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./202") = 0 [pid 5836] mkdir("./203", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6051 attached [pid 6051] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 206 [pid 6051] <... set_robust_list resumed>) = 0 [pid 6051] chdir("./203") = 0 [pid 6051] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6051] setpgid(0, 0) = 0 [pid 6051] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6051] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6051] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6051] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6051] write(3, "1000", 4) = 4 [pid 6051] close(3) = 0 [pid 6051] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6051] write(1, "executing program\n", 18) = 18 [pid 6051] memfd_create("syzkaller", 0) = 3 [pid 6051] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6051] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6051] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6051] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6051] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6051] close(3) = 0 [pid 6051] close(4) = 0 [pid 6051] mkdir("./file2", 0777) = 0 [pid 6051] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6051] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6051] chdir("./file2") = 0 [pid 6051] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6051] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6051] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6051] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [ 204.932749][ T6051] loop0: detected capacity change from 0 to 128 [pid 6051] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6051] close(3) = 0 [pid 6051] close(4) = 0 [pid 6051] close(5) = -1 EBADF (Bad file descriptor) [pid 6051] close(6) = -1 EBADF (Bad file descriptor) [pid 6051] close(7) = -1 EBADF (Bad file descriptor) [pid 6051] close(8) = -1 EBADF (Bad file descriptor) [pid 6051] close(9) = -1 EBADF (Bad file descriptor) [pid 6051] close(10) = -1 EBADF (Bad file descriptor) [pid 6051] close(11) = -1 EBADF (Bad file descriptor) [pid 6051] close(12) = -1 EBADF (Bad file descriptor) [pid 6051] close(13) = -1 EBADF (Bad file descriptor) [pid 6051] close(14) = -1 EBADF (Bad file descriptor) [pid 6051] close(15) = -1 EBADF (Bad file descriptor) [pid 6051] close(16) = -1 EBADF (Bad file descriptor) [pid 6051] close(17) = -1 EBADF (Bad file descriptor) [pid 6051] close(18) = -1 EBADF (Bad file descriptor) [pid 6051] close(19) = -1 EBADF (Bad file descriptor) [pid 6051] close(20) = -1 EBADF (Bad file descriptor) [pid 6051] close(21) = -1 EBADF (Bad file descriptor) [pid 6051] close(22) = -1 EBADF (Bad file descriptor) [pid 6051] close(23) = -1 EBADF (Bad file descriptor) [pid 6051] close(24) = -1 EBADF (Bad file descriptor) [pid 6051] close(25) = -1 EBADF (Bad file descriptor) [pid 6051] close(26) = -1 EBADF (Bad file descriptor) [pid 6051] close(27) = -1 EBADF (Bad file descriptor) [pid 6051] close(28) = -1 EBADF (Bad file descriptor) [pid 6051] close(29) = -1 EBADF (Bad file descriptor) [pid 6051] exit_group(0) = ? [pid 6051] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=206, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5836] umount2("./203", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./203", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./203/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./203/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./203/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./203/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./203/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./203/file2") = 0 [pid 5836] umount2("./203/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./203/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./203/binderfs") = 0 [pid 5836] umount2("./203/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./203/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./203/cgroup.net") = 0 [pid 5836] umount2("./203/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./203/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./203/cgroup.cpu") = 0 [pid 5836] umount2("./203/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./203/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./203/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./203") = 0 [pid 5836] mkdir("./204", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6052 attached [pid 6052] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 207 [pid 6052] <... set_robust_list resumed>) = 0 [pid 6052] chdir("./204") = 0 [pid 6052] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6052] setpgid(0, 0) = 0 [pid 6052] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6052] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6052] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6052] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6052] write(3, "1000", 4) = 4 [pid 6052] close(3) = 0 [pid 6052] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6052] write(1, "executing program\n", 18executing program ) = 18 [pid 6052] memfd_create("syzkaller", 0) = 3 [pid 6052] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6052] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6052] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6052] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6052] close(3) = 0 [pid 6052] close(4) = 0 [pid 6052] mkdir("./file2", 0777) = 0 [pid 6052] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6052] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6052] chdir("./file2") = 0 [ 205.340841][ T6052] loop0: detected capacity change from 0 to 128 [pid 6052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6052] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6052] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6052] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6052] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6052] close(3) = 0 [pid 6052] close(4) = 0 [pid 6052] close(5) = -1 EBADF (Bad file descriptor) [pid 6052] close(6) = -1 EBADF (Bad file descriptor) [pid 6052] close(7) = -1 EBADF (Bad file descriptor) [pid 6052] close(8) = -1 EBADF (Bad file descriptor) [pid 6052] close(9) = -1 EBADF (Bad file descriptor) [pid 6052] close(10) = -1 EBADF (Bad file descriptor) [pid 6052] close(11) = -1 EBADF (Bad file descriptor) [pid 6052] close(12) = -1 EBADF (Bad file descriptor) [pid 6052] close(13) = -1 EBADF (Bad file descriptor) [pid 6052] close(14) = -1 EBADF (Bad file descriptor) [pid 6052] close(15) = -1 EBADF (Bad file descriptor) [pid 6052] close(16) = -1 EBADF (Bad file descriptor) [pid 6052] close(17) = -1 EBADF (Bad file descriptor) [pid 6052] close(18) = -1 EBADF (Bad file descriptor) [pid 6052] close(19) = -1 EBADF (Bad file descriptor) [pid 6052] close(20) = -1 EBADF (Bad file descriptor) [pid 6052] close(21) = -1 EBADF (Bad file descriptor) [pid 6052] close(22) = -1 EBADF (Bad file descriptor) [pid 6052] close(23) = -1 EBADF (Bad file descriptor) [pid 6052] close(24) = -1 EBADF (Bad file descriptor) [pid 6052] close(25) = -1 EBADF (Bad file descriptor) [pid 6052] close(26) = -1 EBADF (Bad file descriptor) [pid 6052] close(27) = -1 EBADF (Bad file descriptor) [pid 6052] close(28) = -1 EBADF (Bad file descriptor) [pid 6052] close(29) = -1 EBADF (Bad file descriptor) [pid 6052] exit_group(0) = ? [pid 6052] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=207, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./204", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./204", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./204/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./204/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./204/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./204/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./204/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./204/file2") = 0 [pid 5836] umount2("./204/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./204/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./204/binderfs") = 0 [pid 5836] umount2("./204/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./204/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./204/cgroup.net") = 0 [pid 5836] umount2("./204/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./204/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./204/cgroup.cpu") = 0 [pid 5836] umount2("./204/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./204/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./204/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./204") = 0 [pid 5836] mkdir("./205", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6053 attached , child_tidptr=0x555563237690) = 208 [pid 6053] set_robust_list(0x5555632376a0, 24) = 0 [pid 6053] chdir("./205") = 0 [pid 6053] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6053] setpgid(0, 0) = 0 [pid 6053] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6053] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6053] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6053] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6053] write(3, "1000", 4) = 4 [pid 6053] close(3) = 0 [pid 6053] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6053] write(1, "executing program\n", 18executing program ) = 18 [pid 6053] memfd_create("syzkaller", 0) = 3 [pid 6053] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6053] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6053] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6053] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6053] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6053] close(3) = 0 [pid 6053] close(4) = 0 [pid 6053] mkdir("./file2", 0777) = 0 [pid 6053] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6053] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6053] chdir("./file2") = 0 [pid 6053] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6053] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6053] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [ 205.937890][ T6053] loop0: detected capacity change from 0 to 128 [pid 6053] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6053] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6053] close(3) = 0 [pid 6053] close(4) = 0 [pid 6053] close(5) = -1 EBADF (Bad file descriptor) [pid 6053] close(6) = -1 EBADF (Bad file descriptor) [pid 6053] close(7) = -1 EBADF (Bad file descriptor) [pid 6053] close(8) = -1 EBADF (Bad file descriptor) [pid 6053] close(9) = -1 EBADF (Bad file descriptor) [pid 6053] close(10) = -1 EBADF (Bad file descriptor) [pid 6053] close(11) = -1 EBADF (Bad file descriptor) [pid 6053] close(12) = -1 EBADF (Bad file descriptor) [pid 6053] close(13) = -1 EBADF (Bad file descriptor) [pid 6053] close(14) = -1 EBADF (Bad file descriptor) [pid 6053] close(15) = -1 EBADF (Bad file descriptor) [pid 6053] close(16) = -1 EBADF (Bad file descriptor) [pid 6053] close(17) = -1 EBADF (Bad file descriptor) [pid 6053] close(18) = -1 EBADF (Bad file descriptor) [pid 6053] close(19) = -1 EBADF (Bad file descriptor) [pid 6053] close(20) = -1 EBADF (Bad file descriptor) [pid 6053] close(21) = -1 EBADF (Bad file descriptor) [pid 6053] close(22) = -1 EBADF (Bad file descriptor) [pid 6053] close(23) = -1 EBADF (Bad file descriptor) [pid 6053] close(24) = -1 EBADF (Bad file descriptor) [pid 6053] close(25) = -1 EBADF (Bad file descriptor) [pid 6053] close(26) = -1 EBADF (Bad file descriptor) [pid 6053] close(27) = -1 EBADF (Bad file descriptor) [pid 6053] close(28) = -1 EBADF (Bad file descriptor) [pid 6053] close(29) = -1 EBADF (Bad file descriptor) [pid 6053] exit_group(0) = ? [pid 6053] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=208, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./205", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./205", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./205/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./205/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./205/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./205/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./205/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./205/file2") = 0 [pid 5836] umount2("./205/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./205/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./205/binderfs") = 0 [pid 5836] umount2("./205/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./205/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./205/cgroup.net") = 0 [pid 5836] umount2("./205/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./205/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./205/cgroup.cpu") = 0 [pid 5836] umount2("./205/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./205/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./205/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./205") = 0 [pid 5836] mkdir("./206", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6054 attached [pid 6054] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 209 [pid 6054] <... set_robust_list resumed>) = 0 [pid 6054] chdir("./206") = 0 [pid 6054] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6054] setpgid(0, 0) = 0 [pid 6054] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6054] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6054] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6054] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6054] write(3, "1000", 4) = 4 [pid 6054] close(3) = 0 [pid 6054] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6054] write(1, "executing program\n", 18) = 18 [pid 6054] memfd_create("syzkaller", 0) = 3 [pid 6054] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6054] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6054] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6054] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6054] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6054] close(3) = 0 [pid 6054] close(4) = 0 [pid 6054] mkdir("./file2", 0777) = 0 [pid 6054] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6054] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6054] chdir("./file2") = 0 [pid 6054] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 206.524628][ T6054] loop0: detected capacity change from 0 to 128 [pid 6054] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6054] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6054] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6054] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6054] close(3) = 0 [pid 6054] close(4) = 0 [pid 6054] close(5) = -1 EBADF (Bad file descriptor) [pid 6054] close(6) = -1 EBADF (Bad file descriptor) [pid 6054] close(7) = -1 EBADF (Bad file descriptor) [pid 6054] close(8) = -1 EBADF (Bad file descriptor) [pid 6054] close(9) = -1 EBADF (Bad file descriptor) [pid 6054] close(10) = -1 EBADF (Bad file descriptor) [pid 6054] close(11) = -1 EBADF (Bad file descriptor) [pid 6054] close(12) = -1 EBADF (Bad file descriptor) [pid 6054] close(13) = -1 EBADF (Bad file descriptor) [pid 6054] close(14) = -1 EBADF (Bad file descriptor) [pid 6054] close(15) = -1 EBADF (Bad file descriptor) [pid 6054] close(16) = -1 EBADF (Bad file descriptor) [pid 6054] close(17) = -1 EBADF (Bad file descriptor) [pid 6054] close(18) = -1 EBADF (Bad file descriptor) [pid 6054] close(19) = -1 EBADF (Bad file descriptor) [pid 6054] close(20) = -1 EBADF (Bad file descriptor) [pid 6054] close(21) = -1 EBADF (Bad file descriptor) [pid 6054] close(22) = -1 EBADF (Bad file descriptor) [pid 6054] close(23) = -1 EBADF (Bad file descriptor) [pid 6054] close(24) = -1 EBADF (Bad file descriptor) [pid 6054] close(25) = -1 EBADF (Bad file descriptor) [pid 6054] close(26) = -1 EBADF (Bad file descriptor) [pid 6054] close(27) = -1 EBADF (Bad file descriptor) [pid 6054] close(28) = -1 EBADF (Bad file descriptor) [pid 6054] close(29) = -1 EBADF (Bad file descriptor) [pid 6054] exit_group(0) = ? [pid 6054] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=209, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] umount2("./206", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./206", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./206/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./206/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./206/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./206/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./206/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./206/file2") = 0 [pid 5836] umount2("./206/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./206/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./206/binderfs") = 0 [pid 5836] umount2("./206/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./206/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./206/cgroup.net") = 0 [pid 5836] umount2("./206/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./206/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./206/cgroup.cpu") = 0 [pid 5836] umount2("./206/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./206/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./206/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./206") = 0 [pid 5836] mkdir("./207", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6055 attached [pid 6055] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 210 [pid 6055] <... set_robust_list resumed>) = 0 [pid 6055] chdir("./207") = 0 [pid 6055] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6055] setpgid(0, 0) = 0 [pid 6055] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6055] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6055] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6055] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6055] write(3, "1000", 4) = 4 [pid 6055] close(3) = 0 [pid 6055] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6055] write(1, "executing program\n", 18executing program ) = 18 [pid 6055] memfd_create("syzkaller", 0) = 3 [pid 6055] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6055] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6055] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6055] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6055] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6055] close(3) = 0 [pid 6055] close(4) = 0 [pid 6055] mkdir("./file2", 0777) = 0 [pid 6055] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6055] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6055] chdir("./file2") = 0 [pid 6055] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6055] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6055] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6055] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6055] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6055] close(3) = 0 [ 207.050434][ T6055] loop0: detected capacity change from 0 to 128 [pid 6055] close(4) = 0 [pid 6055] close(5) = -1 EBADF (Bad file descriptor) [pid 6055] close(6) = -1 EBADF (Bad file descriptor) [pid 6055] close(7) = -1 EBADF (Bad file descriptor) [pid 6055] close(8) = -1 EBADF (Bad file descriptor) [pid 6055] close(9) = -1 EBADF (Bad file descriptor) [pid 6055] close(10) = -1 EBADF (Bad file descriptor) [pid 6055] close(11) = -1 EBADF (Bad file descriptor) [pid 6055] close(12) = -1 EBADF (Bad file descriptor) [pid 6055] close(13) = -1 EBADF (Bad file descriptor) [pid 6055] close(14) = -1 EBADF (Bad file descriptor) [pid 6055] close(15) = -1 EBADF (Bad file descriptor) [pid 6055] close(16) = -1 EBADF (Bad file descriptor) [pid 6055] close(17) = -1 EBADF (Bad file descriptor) [pid 6055] close(18) = -1 EBADF (Bad file descriptor) [pid 6055] close(19) = -1 EBADF (Bad file descriptor) [pid 6055] close(20) = -1 EBADF (Bad file descriptor) [pid 6055] close(21) = -1 EBADF (Bad file descriptor) [pid 6055] close(22) = -1 EBADF (Bad file descriptor) [pid 6055] close(23) = -1 EBADF (Bad file descriptor) [pid 6055] close(24) = -1 EBADF (Bad file descriptor) [pid 6055] close(25) = -1 EBADF (Bad file descriptor) [pid 6055] close(26) = -1 EBADF (Bad file descriptor) [pid 6055] close(27) = -1 EBADF (Bad file descriptor) [pid 6055] close(28) = -1 EBADF (Bad file descriptor) [pid 6055] close(29) = -1 EBADF (Bad file descriptor) [pid 6055] exit_group(0) = ? [pid 6055] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=210, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5836] umount2("./207", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./207", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./207/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./207/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./207/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./207/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./207/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./207/file2") = 0 [pid 5836] umount2("./207/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./207/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./207/binderfs") = 0 [pid 5836] umount2("./207/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./207/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./207/cgroup.net") = 0 [pid 5836] umount2("./207/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./207/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./207/cgroup.cpu") = 0 [pid 5836] umount2("./207/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./207/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./207/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./207") = 0 [pid 5836] mkdir("./208", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6056 attached [pid 6056] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 211 [pid 6056] <... set_robust_list resumed>) = 0 [pid 6056] chdir("./208") = 0 [pid 6056] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6056] setpgid(0, 0) = 0 [pid 6056] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6056] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6056] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6056] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6056] write(3, "1000", 4) = 4 [pid 6056] close(3) = 0 [pid 6056] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6056] write(1, "executing program\n", 18) = 18 [pid 6056] memfd_create("syzkaller", 0) = 3 [pid 6056] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6056] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6056] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6056] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6056] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6056] close(3) = 0 [pid 6056] close(4) = 0 [pid 6056] mkdir("./file2", 0777) = 0 [pid 6056] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6056] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6056] chdir("./file2") = 0 [pid 6056] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 207.553602][ T6056] loop0: detected capacity change from 0 to 128 [pid 6056] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6056] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6056] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6056] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6056] close(3) = 0 [pid 6056] close(4) = 0 [pid 6056] close(5) = -1 EBADF (Bad file descriptor) [pid 6056] close(6) = -1 EBADF (Bad file descriptor) [pid 6056] close(7) = -1 EBADF (Bad file descriptor) [pid 6056] close(8) = -1 EBADF (Bad file descriptor) [pid 6056] close(9) = -1 EBADF (Bad file descriptor) [pid 6056] close(10) = -1 EBADF (Bad file descriptor) [pid 6056] close(11) = -1 EBADF (Bad file descriptor) [pid 6056] close(12) = -1 EBADF (Bad file descriptor) [pid 6056] close(13) = -1 EBADF (Bad file descriptor) [pid 6056] close(14) = -1 EBADF (Bad file descriptor) [pid 6056] close(15) = -1 EBADF (Bad file descriptor) [pid 6056] close(16) = -1 EBADF (Bad file descriptor) [pid 6056] close(17) = -1 EBADF (Bad file descriptor) [pid 6056] close(18) = -1 EBADF (Bad file descriptor) [pid 6056] close(19) = -1 EBADF (Bad file descriptor) [pid 6056] close(20) = -1 EBADF (Bad file descriptor) [pid 6056] close(21) = -1 EBADF (Bad file descriptor) [pid 6056] close(22) = -1 EBADF (Bad file descriptor) [pid 6056] close(23) = -1 EBADF (Bad file descriptor) [pid 6056] close(24) = -1 EBADF (Bad file descriptor) [pid 6056] close(25) = -1 EBADF (Bad file descriptor) [pid 6056] close(26) = -1 EBADF (Bad file descriptor) [pid 6056] close(27) = -1 EBADF (Bad file descriptor) [pid 6056] close(28) = -1 EBADF (Bad file descriptor) [pid 6056] close(29) = -1 EBADF (Bad file descriptor) [pid 6056] exit_group(0) = ? [pid 6056] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=211, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./208", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./208", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./208/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./208/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./208/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./208/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./208/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./208/file2") = 0 [pid 5836] umount2("./208/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./208/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./208/binderfs") = 0 [pid 5836] umount2("./208/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./208/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./208/cgroup.net") = 0 [pid 5836] umount2("./208/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./208/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./208/cgroup.cpu") = 0 [pid 5836] umount2("./208/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./208/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./208/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./208") = 0 [pid 5836] mkdir("./209", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6057 attached [pid 6057] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 212 [pid 6057] <... set_robust_list resumed>) = 0 [pid 6057] chdir("./209") = 0 [pid 6057] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6057] setpgid(0, 0) = 0 [pid 6057] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6057] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6057] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6057] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6057] write(3, "1000", 4) = 4 [pid 6057] close(3) = 0 [pid 6057] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6057] write(1, "executing program\n", 18executing program ) = 18 [pid 6057] memfd_create("syzkaller", 0) = 3 [pid 6057] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6057] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6057] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6057] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6057] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6057] close(3) = 0 [pid 6057] close(4) = 0 [pid 6057] mkdir("./file2", 0777) = 0 [pid 6057] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6057] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6057] chdir("./file2") = 0 [pid 6057] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6057] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6057] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6057] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6057] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6057] close(3) = 0 [pid 6057] close(4) = 0 [pid 6057] close(5) = -1 EBADF (Bad file descriptor) [pid 6057] close(6) = -1 EBADF (Bad file descriptor) [pid 6057] close(7) = -1 EBADF (Bad file descriptor) [pid 6057] close(8) = -1 EBADF (Bad file descriptor) [pid 6057] close(9) = -1 EBADF (Bad file descriptor) [pid 6057] close(10) = -1 EBADF (Bad file descriptor) [pid 6057] close(11) = -1 EBADF (Bad file descriptor) [pid 6057] close(12) = -1 EBADF (Bad file descriptor) [pid 6057] close(13) = -1 EBADF (Bad file descriptor) [pid 6057] close(14) = -1 EBADF (Bad file descriptor) [pid 6057] close(15) = -1 EBADF (Bad file descriptor) [pid 6057] close(16) = -1 EBADF (Bad file descriptor) [pid 6057] close(17) = -1 EBADF (Bad file descriptor) [pid 6057] close(18) = -1 EBADF (Bad file descriptor) [pid 6057] close(19) = -1 EBADF (Bad file descriptor) [pid 6057] close(20) = -1 EBADF (Bad file descriptor) [pid 6057] close(21) = -1 EBADF (Bad file descriptor) [pid 6057] close(22) = -1 EBADF (Bad file descriptor) [pid 6057] close(23) = -1 EBADF (Bad file descriptor) [pid 6057] close(24) = -1 EBADF (Bad file descriptor) [pid 6057] close(25) = -1 EBADF (Bad file descriptor) [pid 6057] close(26) = -1 EBADF (Bad file descriptor) [pid 6057] close(27) = -1 EBADF (Bad file descriptor) [pid 6057] close(28) = -1 EBADF (Bad file descriptor) [pid 6057] close(29) = -1 EBADF (Bad file descriptor) [ 208.124523][ T6057] loop0: detected capacity change from 0 to 128 [pid 6057] exit_group(0) = ? [pid 6057] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=212, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./209", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./209", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./209/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./209/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./209/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./209/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./209/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./209/file2") = 0 [pid 5836] umount2("./209/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./209/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./209/binderfs") = 0 [pid 5836] umount2("./209/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./209/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./209/cgroup.net") = 0 [pid 5836] umount2("./209/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./209/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./209/cgroup.cpu") = 0 [pid 5836] umount2("./209/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./209/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./209/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./209") = 0 [pid 5836] mkdir("./210", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6058 attached , child_tidptr=0x555563237690) = 213 [pid 6058] set_robust_list(0x5555632376a0, 24) = 0 [pid 6058] chdir("./210") = 0 [pid 6058] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6058] setpgid(0, 0) = 0 [pid 6058] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6058] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6058] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6058] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6058] write(3, "1000", 4) = 4 [pid 6058] close(3) = 0 [pid 6058] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6058] write(1, "executing program\n", 18) = 18 [pid 6058] memfd_create("syzkaller", 0) = 3 [pid 6058] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6058] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6058] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6058] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6058] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6058] close(3) = 0 [pid 6058] close(4) = 0 [pid 6058] mkdir("./file2", 0777) = 0 [pid 6058] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6058] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6058] chdir("./file2") = 0 [pid 6058] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 208.660772][ T6058] loop0: detected capacity change from 0 to 128 [pid 6058] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6058] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6058] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6058] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6058] close(3) = 0 [pid 6058] close(4) = 0 [pid 6058] close(5) = -1 EBADF (Bad file descriptor) [pid 6058] close(6) = -1 EBADF (Bad file descriptor) [pid 6058] close(7) = -1 EBADF (Bad file descriptor) [pid 6058] close(8) = -1 EBADF (Bad file descriptor) [pid 6058] close(9) = -1 EBADF (Bad file descriptor) [pid 6058] close(10) = -1 EBADF (Bad file descriptor) [pid 6058] close(11) = -1 EBADF (Bad file descriptor) [pid 6058] close(12) = -1 EBADF (Bad file descriptor) [pid 6058] close(13) = -1 EBADF (Bad file descriptor) [pid 6058] close(14) = -1 EBADF (Bad file descriptor) [pid 6058] close(15) = -1 EBADF (Bad file descriptor) [pid 6058] close(16) = -1 EBADF (Bad file descriptor) [pid 6058] close(17) = -1 EBADF (Bad file descriptor) [pid 6058] close(18) = -1 EBADF (Bad file descriptor) [pid 6058] close(19) = -1 EBADF (Bad file descriptor) [pid 6058] close(20) = -1 EBADF (Bad file descriptor) [pid 6058] close(21) = -1 EBADF (Bad file descriptor) [pid 6058] close(22) = -1 EBADF (Bad file descriptor) [pid 6058] close(23) = -1 EBADF (Bad file descriptor) [pid 6058] close(24) = -1 EBADF (Bad file descriptor) [pid 6058] close(25) = -1 EBADF (Bad file descriptor) [pid 6058] close(26) = -1 EBADF (Bad file descriptor) [pid 6058] close(27) = -1 EBADF (Bad file descriptor) [pid 6058] close(28) = -1 EBADF (Bad file descriptor) [pid 6058] close(29) = -1 EBADF (Bad file descriptor) [pid 6058] exit_group(0) = ? [pid 6058] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=213, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] umount2("./210", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./210", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./210/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./210/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./210/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./210/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./210/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./210/file2") = 0 [pid 5836] umount2("./210/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./210/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./210/binderfs") = 0 [pid 5836] umount2("./210/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./210/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./210/cgroup.net") = 0 [pid 5836] umount2("./210/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./210/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./210/cgroup.cpu") = 0 [pid 5836] umount2("./210/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./210/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./210/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./210") = 0 [pid 5836] mkdir("./211", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6059 attached [pid 6059] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 214 [pid 6059] <... set_robust_list resumed>) = 0 [pid 6059] chdir("./211") = 0 [pid 6059] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6059] setpgid(0, 0) = 0 [pid 6059] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6059] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6059] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6059] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6059] write(3, "1000", 4) = 4 [pid 6059] close(3) = 0 [pid 6059] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6059] write(1, "executing program\n", 18) = 18 [pid 6059] memfd_create("syzkaller", 0) = 3 [pid 6059] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6059] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6059] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6059] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6059] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6059] close(3) = 0 [pid 6059] close(4) = 0 [pid 6059] mkdir("./file2", 0777) = 0 [pid 6059] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6059] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6059] chdir("./file2") = 0 [pid 6059] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6059] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6059] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6059] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6059] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6059] close(3) = 0 [ 209.139891][ T6059] loop0: detected capacity change from 0 to 128 [pid 6059] close(4) = 0 [pid 6059] close(5) = -1 EBADF (Bad file descriptor) [pid 6059] close(6) = -1 EBADF (Bad file descriptor) [pid 6059] close(7) = -1 EBADF (Bad file descriptor) [pid 6059] close(8) = -1 EBADF (Bad file descriptor) [pid 6059] close(9) = -1 EBADF (Bad file descriptor) [pid 6059] close(10) = -1 EBADF (Bad file descriptor) [pid 6059] close(11) = -1 EBADF (Bad file descriptor) [pid 6059] close(12) = -1 EBADF (Bad file descriptor) [pid 6059] close(13) = -1 EBADF (Bad file descriptor) [pid 6059] close(14) = -1 EBADF (Bad file descriptor) [pid 6059] close(15) = -1 EBADF (Bad file descriptor) [pid 6059] close(16) = -1 EBADF (Bad file descriptor) [pid 6059] close(17) = -1 EBADF (Bad file descriptor) [pid 6059] close(18) = -1 EBADF (Bad file descriptor) [pid 6059] close(19) = -1 EBADF (Bad file descriptor) [pid 6059] close(20) = -1 EBADF (Bad file descriptor) [pid 6059] close(21) = -1 EBADF (Bad file descriptor) [pid 6059] close(22) = -1 EBADF (Bad file descriptor) [pid 6059] close(23) = -1 EBADF (Bad file descriptor) [pid 6059] close(24) = -1 EBADF (Bad file descriptor) [pid 6059] close(25) = -1 EBADF (Bad file descriptor) [pid 6059] close(26) = -1 EBADF (Bad file descriptor) [pid 6059] close(27) = -1 EBADF (Bad file descriptor) [pid 6059] close(28) = -1 EBADF (Bad file descriptor) [pid 6059] close(29) = -1 EBADF (Bad file descriptor) [pid 6059] exit_group(0) = ? [pid 6059] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=214, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] umount2("./211", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./211", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./211/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./211/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./211/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./211/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./211/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./211/file2") = 0 [pid 5836] umount2("./211/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./211/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./211/binderfs") = 0 [pid 5836] umount2("./211/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./211/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./211/cgroup.net") = 0 [pid 5836] umount2("./211/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./211/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./211/cgroup.cpu") = 0 [pid 5836] umount2("./211/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./211/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./211/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./211") = 0 [pid 5836] mkdir("./212", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6060 attached [pid 6060] set_robust_list(0x5555632376a0, 24) = 0 [pid 6060] chdir("./212" [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 215 [pid 6060] <... chdir resumed>) = 0 [pid 6060] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6060] setpgid(0, 0) = 0 [pid 6060] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6060] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6060] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6060] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6060] write(3, "1000", 4) = 4 [pid 6060] close(3) = 0 [pid 6060] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6060] write(1, "executing program\n", 18executing program ) = 18 [pid 6060] memfd_create("syzkaller", 0) = 3 [pid 6060] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6060] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6060] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6060] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6060] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6060] close(3) = 0 [pid 6060] close(4) = 0 [pid 6060] mkdir("./file2", 0777) = 0 [pid 6060] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6060] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6060] chdir("./file2") = 0 [pid 6060] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6060] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6060] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6060] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6060] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [ 209.699431][ T6060] loop0: detected capacity change from 0 to 128 [pid 6060] close(3) = 0 [pid 6060] close(4) = 0 [pid 6060] close(5) = -1 EBADF (Bad file descriptor) [pid 6060] close(6) = -1 EBADF (Bad file descriptor) [pid 6060] close(7) = -1 EBADF (Bad file descriptor) [pid 6060] close(8) = -1 EBADF (Bad file descriptor) [pid 6060] close(9) = -1 EBADF (Bad file descriptor) [pid 6060] close(10) = -1 EBADF (Bad file descriptor) [pid 6060] close(11) = -1 EBADF (Bad file descriptor) [pid 6060] close(12) = -1 EBADF (Bad file descriptor) [pid 6060] close(13) = -1 EBADF (Bad file descriptor) [pid 6060] close(14) = -1 EBADF (Bad file descriptor) [pid 6060] close(15) = -1 EBADF (Bad file descriptor) [pid 6060] close(16) = -1 EBADF (Bad file descriptor) [pid 6060] close(17) = -1 EBADF (Bad file descriptor) [pid 6060] close(18) = -1 EBADF (Bad file descriptor) [pid 6060] close(19) = -1 EBADF (Bad file descriptor) [pid 6060] close(20) = -1 EBADF (Bad file descriptor) [pid 6060] close(21) = -1 EBADF (Bad file descriptor) [pid 6060] close(22) = -1 EBADF (Bad file descriptor) [pid 6060] close(23) = -1 EBADF (Bad file descriptor) [pid 6060] close(24) = -1 EBADF (Bad file descriptor) [pid 6060] close(25) = -1 EBADF (Bad file descriptor) [pid 6060] close(26) = -1 EBADF (Bad file descriptor) [pid 6060] close(27) = -1 EBADF (Bad file descriptor) [pid 6060] close(28) = -1 EBADF (Bad file descriptor) [pid 6060] close(29) = -1 EBADF (Bad file descriptor) [pid 6060] exit_group(0) = ? [pid 6060] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=215, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] umount2("./212", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./212", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./212/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./212/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./212/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./212/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./212/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./212/file2") = 0 [pid 5836] umount2("./212/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./212/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./212/binderfs") = 0 [pid 5836] umount2("./212/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./212/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./212/cgroup.net") = 0 [pid 5836] umount2("./212/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./212/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./212/cgroup.cpu") = 0 [pid 5836] umount2("./212/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./212/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./212/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./212") = 0 [pid 5836] mkdir("./213", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6061 attached [pid 6061] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 216 [pid 6061] <... set_robust_list resumed>) = 0 [pid 6061] chdir("./213") = 0 [pid 6061] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6061] setpgid(0, 0) = 0 [pid 6061] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6061] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6061] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6061] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6061] write(3, "1000", 4) = 4 [pid 6061] close(3) = 0 [pid 6061] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6061] write(1, "executing program\n", 18) = 18 [pid 6061] memfd_create("syzkaller", 0) = 3 [pid 6061] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6061] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6061] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6061] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6061] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6061] close(3) = 0 [pid 6061] close(4) = 0 [pid 6061] mkdir("./file2", 0777) = 0 [pid 6061] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6061] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [ 210.336389][ T6061] loop0: detected capacity change from 0 to 128 [pid 6061] chdir("./file2") = 0 [pid 6061] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6061] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6061] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6061] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6061] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6061] close(3) = 0 [pid 6061] close(4) = 0 [pid 6061] close(5) = -1 EBADF (Bad file descriptor) [pid 6061] close(6) = -1 EBADF (Bad file descriptor) [pid 6061] close(7) = -1 EBADF (Bad file descriptor) [pid 6061] close(8) = -1 EBADF (Bad file descriptor) [pid 6061] close(9) = -1 EBADF (Bad file descriptor) [pid 6061] close(10) = -1 EBADF (Bad file descriptor) [pid 6061] close(11) = -1 EBADF (Bad file descriptor) [pid 6061] close(12) = -1 EBADF (Bad file descriptor) [pid 6061] close(13) = -1 EBADF (Bad file descriptor) [pid 6061] close(14) = -1 EBADF (Bad file descriptor) [pid 6061] close(15) = -1 EBADF (Bad file descriptor) [pid 6061] close(16) = -1 EBADF (Bad file descriptor) [pid 6061] close(17) = -1 EBADF (Bad file descriptor) [pid 6061] close(18) = -1 EBADF (Bad file descriptor) [pid 6061] close(19) = -1 EBADF (Bad file descriptor) [pid 6061] close(20) = -1 EBADF (Bad file descriptor) [pid 6061] close(21) = -1 EBADF (Bad file descriptor) [pid 6061] close(22) = -1 EBADF (Bad file descriptor) [pid 6061] close(23) = -1 EBADF (Bad file descriptor) [pid 6061] close(24) = -1 EBADF (Bad file descriptor) [pid 6061] close(25) = -1 EBADF (Bad file descriptor) [pid 6061] close(26) = -1 EBADF (Bad file descriptor) [pid 6061] close(27) = -1 EBADF (Bad file descriptor) [pid 6061] close(28) = -1 EBADF (Bad file descriptor) [pid 6061] close(29) = -1 EBADF (Bad file descriptor) [pid 6061] exit_group(0) = ? [pid 6061] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=216, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] umount2("./213", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./213", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./213/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./213/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./213/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./213/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./213/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./213/file2") = 0 [pid 5836] umount2("./213/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./213/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./213/binderfs") = 0 [pid 5836] umount2("./213/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./213/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./213/cgroup.net") = 0 [pid 5836] umount2("./213/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./213/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./213/cgroup.cpu") = 0 [pid 5836] umount2("./213/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./213/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./213/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./213") = 0 [pid 5836] mkdir("./214", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6062 attached [pid 6062] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 217 [pid 6062] <... set_robust_list resumed>) = 0 [pid 6062] chdir("./214") = 0 [pid 6062] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6062] setpgid(0, 0) = 0 [pid 6062] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6062] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6062] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6062] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6062] write(3, "1000", 4) = 4 [pid 6062] close(3) = 0 [pid 6062] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6062] write(1, "executing program\n", 18executing program ) = 18 [pid 6062] memfd_create("syzkaller", 0) = 3 [pid 6062] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6062] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6062] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6062] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6062] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6062] close(3) = 0 [pid 6062] close(4) = 0 [pid 6062] mkdir("./file2", 0777) = 0 [pid 6062] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6062] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6062] chdir("./file2") = 0 [pid 6062] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 210.957108][ T6062] loop0: detected capacity change from 0 to 128 [pid 6062] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6062] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6062] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6062] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6062] close(3) = 0 [pid 6062] close(4) = 0 [pid 6062] close(5) = -1 EBADF (Bad file descriptor) [pid 6062] close(6) = -1 EBADF (Bad file descriptor) [pid 6062] close(7) = -1 EBADF (Bad file descriptor) [pid 6062] close(8) = -1 EBADF (Bad file descriptor) [pid 6062] close(9) = -1 EBADF (Bad file descriptor) [pid 6062] close(10) = -1 EBADF (Bad file descriptor) [pid 6062] close(11) = -1 EBADF (Bad file descriptor) [pid 6062] close(12) = -1 EBADF (Bad file descriptor) [pid 6062] close(13) = -1 EBADF (Bad file descriptor) [pid 6062] close(14) = -1 EBADF (Bad file descriptor) [pid 6062] close(15) = -1 EBADF (Bad file descriptor) [pid 6062] close(16) = -1 EBADF (Bad file descriptor) [pid 6062] close(17) = -1 EBADF (Bad file descriptor) [pid 6062] close(18) = -1 EBADF (Bad file descriptor) [pid 6062] close(19) = -1 EBADF (Bad file descriptor) [pid 6062] close(20) = -1 EBADF (Bad file descriptor) [pid 6062] close(21) = -1 EBADF (Bad file descriptor) [pid 6062] close(22) = -1 EBADF (Bad file descriptor) [pid 6062] close(23) = -1 EBADF (Bad file descriptor) [pid 6062] close(24) = -1 EBADF (Bad file descriptor) [pid 6062] close(25) = -1 EBADF (Bad file descriptor) [pid 6062] close(26) = -1 EBADF (Bad file descriptor) [pid 6062] close(27) = -1 EBADF (Bad file descriptor) [pid 6062] close(28) = -1 EBADF (Bad file descriptor) [pid 6062] close(29) = -1 EBADF (Bad file descriptor) [pid 6062] exit_group(0) = ? [pid 6062] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=217, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./214", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./214", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./214/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./214/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./214/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./214/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./214/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./214/file2") = 0 [pid 5836] umount2("./214/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./214/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./214/binderfs") = 0 [pid 5836] umount2("./214/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./214/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./214/cgroup.net") = 0 [pid 5836] umount2("./214/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./214/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./214/cgroup.cpu") = 0 [pid 5836] umount2("./214/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./214/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./214/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./214") = 0 [pid 5836] mkdir("./215", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6063 attached , child_tidptr=0x555563237690) = 218 [pid 6063] set_robust_list(0x5555632376a0, 24) = 0 [pid 6063] chdir("./215") = 0 [pid 6063] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6063] setpgid(0, 0) = 0 [pid 6063] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6063] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6063] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6063] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6063] write(3, "1000", 4) = 4 [pid 6063] close(3) = 0 [pid 6063] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6063] write(1, "executing program\n", 18) = 18 [pid 6063] memfd_create("syzkaller", 0) = 3 [pid 6063] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6063] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6063] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6063] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6063] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6063] close(3) = 0 [pid 6063] close(4) = 0 [pid 6063] mkdir("./file2", 0777) = 0 [pid 6063] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6063] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [ 211.487381][ T6063] loop0: detected capacity change from 0 to 128 [pid 6063] chdir("./file2") = 0 [pid 6063] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6063] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6063] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6063] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6063] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6063] close(3) = 0 [pid 6063] close(4) = 0 [pid 6063] close(5) = -1 EBADF (Bad file descriptor) [pid 6063] close(6) = -1 EBADF (Bad file descriptor) [pid 6063] close(7) = -1 EBADF (Bad file descriptor) [pid 6063] close(8) = -1 EBADF (Bad file descriptor) [pid 6063] close(9) = -1 EBADF (Bad file descriptor) [pid 6063] close(10) = -1 EBADF (Bad file descriptor) [pid 6063] close(11) = -1 EBADF (Bad file descriptor) [pid 6063] close(12) = -1 EBADF (Bad file descriptor) [pid 6063] close(13) = -1 EBADF (Bad file descriptor) [pid 6063] close(14) = -1 EBADF (Bad file descriptor) [pid 6063] close(15) = -1 EBADF (Bad file descriptor) [pid 6063] close(16) = -1 EBADF (Bad file descriptor) [pid 6063] close(17) = -1 EBADF (Bad file descriptor) [pid 6063] close(18) = -1 EBADF (Bad file descriptor) [pid 6063] close(19) = -1 EBADF (Bad file descriptor) [pid 6063] close(20) = -1 EBADF (Bad file descriptor) [pid 6063] close(21) = -1 EBADF (Bad file descriptor) [pid 6063] close(22) = -1 EBADF (Bad file descriptor) [pid 6063] close(23) = -1 EBADF (Bad file descriptor) [pid 6063] close(24) = -1 EBADF (Bad file descriptor) [pid 6063] close(25) = -1 EBADF (Bad file descriptor) [pid 6063] close(26) = -1 EBADF (Bad file descriptor) [pid 6063] close(27) = -1 EBADF (Bad file descriptor) [pid 6063] close(28) = -1 EBADF (Bad file descriptor) [pid 6063] close(29) = -1 EBADF (Bad file descriptor) [pid 6063] exit_group(0) = ? [pid 6063] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=218, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] umount2("./215", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./215", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./215/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./215/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./215/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./215/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./215/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./215/file2") = 0 [pid 5836] umount2("./215/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./215/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./215/binderfs") = 0 [pid 5836] umount2("./215/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./215/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./215/cgroup.net") = 0 [pid 5836] umount2("./215/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./215/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./215/cgroup.cpu") = 0 [pid 5836] umount2("./215/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./215/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./215/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./215") = 0 [pid 5836] mkdir("./216", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6064 attached [pid 6064] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 219 [pid 6064] <... set_robust_list resumed>) = 0 [pid 6064] chdir("./216") = 0 [pid 6064] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6064] setpgid(0, 0) = 0 [pid 6064] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6064] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6064] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6064] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6064] write(3, "1000", 4) = 4 [pid 6064] close(3) = 0 [pid 6064] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6064] write(1, "executing program\n", 18) = 18 [pid 6064] memfd_create("syzkaller", 0) = 3 [pid 6064] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6064] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6064] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6064] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6064] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6064] close(3) = 0 [pid 6064] close(4) = 0 [pid 6064] mkdir("./file2", 0777) = 0 [pid 6064] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6064] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6064] chdir("./file2") = 0 [pid 6064] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6064] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6064] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6064] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6064] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6064] close(3) = 0 [pid 6064] close(4) = 0 [pid 6064] close(5) = -1 EBADF (Bad file descriptor) [pid 6064] close(6) = -1 EBADF (Bad file descriptor) [pid 6064] close(7) = -1 EBADF (Bad file descriptor) [pid 6064] close(8) = -1 EBADF (Bad file descriptor) [pid 6064] close(9) = -1 EBADF (Bad file descriptor) [pid 6064] close(10) = -1 EBADF (Bad file descriptor) [pid 6064] close(11) = -1 EBADF (Bad file descriptor) [pid 6064] close(12) = -1 EBADF (Bad file descriptor) [pid 6064] close(13) = -1 EBADF (Bad file descriptor) [pid 6064] close(14) = -1 EBADF (Bad file descriptor) [pid 6064] close(15) = -1 EBADF (Bad file descriptor) [pid 6064] close(16) = -1 EBADF (Bad file descriptor) [pid 6064] close(17) = -1 EBADF (Bad file descriptor) [pid 6064] close(18) = -1 EBADF (Bad file descriptor) [pid 6064] close(19) = -1 EBADF (Bad file descriptor) [pid 6064] close(20) = -1 EBADF (Bad file descriptor) [pid 6064] close(21) = -1 EBADF (Bad file descriptor) [pid 6064] close(22) = -1 EBADF (Bad file descriptor) [pid 6064] close(23) = -1 EBADF (Bad file descriptor) [pid 6064] close(24) = -1 EBADF (Bad file descriptor) [pid 6064] close(25) = -1 EBADF (Bad file descriptor) [pid 6064] close(26) = -1 EBADF (Bad file descriptor) [pid 6064] close(27) = -1 EBADF (Bad file descriptor) [pid 6064] close(28) = -1 EBADF (Bad file descriptor) [pid 6064] close(29) = -1 EBADF (Bad file descriptor) [pid 6064] exit_group(0) = ? [pid 6064] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=219, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [ 212.007215][ T6064] loop0: detected capacity change from 0 to 128 [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./216", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./216", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./216/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./216/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./216/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./216/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./216/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./216/file2") = 0 [pid 5836] umount2("./216/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./216/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./216/binderfs") = 0 [pid 5836] umount2("./216/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./216/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./216/cgroup.net") = 0 [pid 5836] umount2("./216/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./216/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./216/cgroup.cpu") = 0 [pid 5836] umount2("./216/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./216/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./216/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./216") = 0 [pid 5836] mkdir("./217", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6065 attached [pid 6065] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 220 [pid 6065] <... set_robust_list resumed>) = 0 [pid 6065] chdir("./217") = 0 [pid 6065] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6065] setpgid(0, 0) = 0 [pid 6065] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6065] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6065] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6065] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6065] write(3, "1000", 4) = 4 [pid 6065] close(3) = 0 [pid 6065] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6065] write(1, "executing program\n", 18executing program ) = 18 [pid 6065] memfd_create("syzkaller", 0) = 3 [pid 6065] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6065] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6065] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6065] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6065] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6065] close(3) = 0 [pid 6065] close(4) = 0 [pid 6065] mkdir("./file2", 0777) = 0 [pid 6065] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6065] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6065] chdir("./file2") = 0 [pid 6065] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6065] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6065] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6065] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6065] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6065] close(3) = 0 [ 212.489832][ T6065] loop0: detected capacity change from 0 to 128 [pid 6065] close(4) = 0 [pid 6065] close(5) = -1 EBADF (Bad file descriptor) [pid 6065] close(6) = -1 EBADF (Bad file descriptor) [pid 6065] close(7) = -1 EBADF (Bad file descriptor) [pid 6065] close(8) = -1 EBADF (Bad file descriptor) [pid 6065] close(9) = -1 EBADF (Bad file descriptor) [pid 6065] close(10) = -1 EBADF (Bad file descriptor) [pid 6065] close(11) = -1 EBADF (Bad file descriptor) [pid 6065] close(12) = -1 EBADF (Bad file descriptor) [pid 6065] close(13) = -1 EBADF (Bad file descriptor) [pid 6065] close(14) = -1 EBADF (Bad file descriptor) [pid 6065] close(15) = -1 EBADF (Bad file descriptor) [pid 6065] close(16) = -1 EBADF (Bad file descriptor) [pid 6065] close(17) = -1 EBADF (Bad file descriptor) [pid 6065] close(18) = -1 EBADF (Bad file descriptor) [pid 6065] close(19) = -1 EBADF (Bad file descriptor) [pid 6065] close(20) = -1 EBADF (Bad file descriptor) [pid 6065] close(21) = -1 EBADF (Bad file descriptor) [pid 6065] close(22) = -1 EBADF (Bad file descriptor) [pid 6065] close(23) = -1 EBADF (Bad file descriptor) [pid 6065] close(24) = -1 EBADF (Bad file descriptor) [pid 6065] close(25) = -1 EBADF (Bad file descriptor) [pid 6065] close(26) = -1 EBADF (Bad file descriptor) [pid 6065] close(27) = -1 EBADF (Bad file descriptor) [pid 6065] close(28) = -1 EBADF (Bad file descriptor) [pid 6065] close(29) = -1 EBADF (Bad file descriptor) [pid 6065] exit_group(0) = ? [pid 6065] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=220, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] umount2("./217", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./217", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./217/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./217/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./217/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./217/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./217/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./217/file2") = 0 [pid 5836] umount2("./217/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./217/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./217/binderfs") = 0 [pid 5836] umount2("./217/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./217/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./217/cgroup.net") = 0 [pid 5836] umount2("./217/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./217/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./217/cgroup.cpu") = 0 [pid 5836] umount2("./217/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./217/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./217/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./217") = 0 [pid 5836] mkdir("./218", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6066 attached , child_tidptr=0x555563237690) = 221 [pid 6066] set_robust_list(0x5555632376a0, 24) = 0 [pid 6066] chdir("./218") = 0 [pid 6066] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6066] setpgid(0, 0) = 0 [pid 6066] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6066] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6066] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6066] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6066] write(3, "1000", 4) = 4 [pid 6066] close(3) = 0 [pid 6066] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6066] write(1, "executing program\n", 18executing program ) = 18 [pid 6066] memfd_create("syzkaller", 0) = 3 [pid 6066] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6066] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6066] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6066] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6066] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6066] close(3) = 0 [pid 6066] close(4) = 0 [pid 6066] mkdir("./file2", 0777) = 0 [pid 6066] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6066] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6066] chdir("./file2") = 0 [pid 6066] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 213.069595][ T6066] loop0: detected capacity change from 0 to 128 [pid 6066] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6066] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6066] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6066] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6066] close(3) = 0 [pid 6066] close(4) = 0 [pid 6066] close(5) = -1 EBADF (Bad file descriptor) [pid 6066] close(6) = -1 EBADF (Bad file descriptor) [pid 6066] close(7) = -1 EBADF (Bad file descriptor) [pid 6066] close(8) = -1 EBADF (Bad file descriptor) [pid 6066] close(9) = -1 EBADF (Bad file descriptor) [pid 6066] close(10) = -1 EBADF (Bad file descriptor) [pid 6066] close(11) = -1 EBADF (Bad file descriptor) [pid 6066] close(12) = -1 EBADF (Bad file descriptor) [pid 6066] close(13) = -1 EBADF (Bad file descriptor) [pid 6066] close(14) = -1 EBADF (Bad file descriptor) [pid 6066] close(15) = -1 EBADF (Bad file descriptor) [pid 6066] close(16) = -1 EBADF (Bad file descriptor) [pid 6066] close(17) = -1 EBADF (Bad file descriptor) [pid 6066] close(18) = -1 EBADF (Bad file descriptor) [pid 6066] close(19) = -1 EBADF (Bad file descriptor) [pid 6066] close(20) = -1 EBADF (Bad file descriptor) [pid 6066] close(21) = -1 EBADF (Bad file descriptor) [pid 6066] close(22) = -1 EBADF (Bad file descriptor) [pid 6066] close(23) = -1 EBADF (Bad file descriptor) [pid 6066] close(24) = -1 EBADF (Bad file descriptor) [pid 6066] close(25) = -1 EBADF (Bad file descriptor) [pid 6066] close(26) = -1 EBADF (Bad file descriptor) [pid 6066] close(27) = -1 EBADF (Bad file descriptor) [pid 6066] close(28) = -1 EBADF (Bad file descriptor) [pid 6066] close(29) = -1 EBADF (Bad file descriptor) [pid 6066] exit_group(0) = ? [pid 6066] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=221, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./218", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./218", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./218/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./218/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./218/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./218/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./218/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./218/file2") = 0 [pid 5836] umount2("./218/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./218/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./218/binderfs") = 0 [pid 5836] umount2("./218/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./218/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./218/cgroup.net") = 0 [pid 5836] umount2("./218/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./218/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./218/cgroup.cpu") = 0 [pid 5836] umount2("./218/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./218/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./218/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./218") = 0 [pid 5836] mkdir("./219", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6067 attached [pid 6067] set_robust_list(0x5555632376a0, 24) = 0 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 222 [pid 6067] chdir("./219") = 0 [pid 6067] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6067] setpgid(0, 0) = 0 [pid 6067] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6067] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6067] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6067] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6067] write(3, "1000", 4) = 4 [pid 6067] close(3) = 0 [pid 6067] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6067] write(1, "executing program\n", 18) = 18 [pid 6067] memfd_create("syzkaller", 0) = 3 [pid 6067] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6067] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6067] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6067] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6067] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6067] close(3) = 0 [pid 6067] close(4) = 0 [pid 6067] mkdir("./file2", 0777) = 0 [pid 6067] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6067] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6067] chdir("./file2") = 0 [pid 6067] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6067] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6067] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6067] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6067] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6067] close(3) = 0 [pid 6067] close(4) = 0 [pid 6067] close(5) = -1 EBADF (Bad file descriptor) [pid 6067] close(6) = -1 EBADF (Bad file descriptor) [pid 6067] close(7) = -1 EBADF (Bad file descriptor) [pid 6067] close(8) = -1 EBADF (Bad file descriptor) [pid 6067] close(9) = -1 EBADF (Bad file descriptor) [pid 6067] close(10) = -1 EBADF (Bad file descriptor) [pid 6067] close(11) = -1 EBADF (Bad file descriptor) [pid 6067] close(12) = -1 EBADF (Bad file descriptor) [pid 6067] close(13) = -1 EBADF (Bad file descriptor) [pid 6067] close(14) = -1 EBADF (Bad file descriptor) [pid 6067] close(15) = -1 EBADF (Bad file descriptor) [ 213.720100][ T6067] loop0: detected capacity change from 0 to 128 [pid 6067] close(16) = -1 EBADF (Bad file descriptor) [pid 6067] close(17) = -1 EBADF (Bad file descriptor) [pid 6067] close(18) = -1 EBADF (Bad file descriptor) [pid 6067] close(19) = -1 EBADF (Bad file descriptor) [pid 6067] close(20) = -1 EBADF (Bad file descriptor) [pid 6067] close(21) = -1 EBADF (Bad file descriptor) [pid 6067] close(22) = -1 EBADF (Bad file descriptor) [pid 6067] close(23) = -1 EBADF (Bad file descriptor) [pid 6067] close(24) = -1 EBADF (Bad file descriptor) [pid 6067] close(25) = -1 EBADF (Bad file descriptor) [pid 6067] close(26) = -1 EBADF (Bad file descriptor) [pid 6067] close(27) = -1 EBADF (Bad file descriptor) [pid 6067] close(28) = -1 EBADF (Bad file descriptor) [pid 6067] close(29) = -1 EBADF (Bad file descriptor) [pid 6067] exit_group(0) = ? [pid 6067] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=222, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] umount2("./219", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./219", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./219/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./219/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./219/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./219/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./219/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./219/file2") = 0 [pid 5836] umount2("./219/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./219/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./219/binderfs") = 0 [pid 5836] umount2("./219/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./219/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./219/cgroup.net") = 0 [pid 5836] umount2("./219/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./219/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./219/cgroup.cpu") = 0 [pid 5836] umount2("./219/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./219/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./219/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./219") = 0 [pid 5836] mkdir("./220", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6068 attached [pid 6068] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 223 [pid 6068] <... set_robust_list resumed>) = 0 [pid 6068] chdir("./220") = 0 [pid 6068] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6068] setpgid(0, 0) = 0 [pid 6068] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6068] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6068] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6068] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6068] write(3, "1000", 4) = 4 [pid 6068] close(3) = 0 [pid 6068] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6068] write(1, "executing program\n", 18executing program ) = 18 [pid 6068] memfd_create("syzkaller", 0) = 3 [pid 6068] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6068] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6068] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6068] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6068] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6068] close(3) = 0 [pid 6068] close(4) = 0 [pid 6068] mkdir("./file2", 0777) = 0 [pid 6068] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6068] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6068] chdir("./file2") = 0 [pid 6068] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6068] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6068] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6068] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6068] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6068] close(3) = 0 [pid 6068] close(4) = 0 [pid 6068] close(5) = -1 EBADF (Bad file descriptor) [pid 6068] close(6) = -1 EBADF (Bad file descriptor) [pid 6068] close(7) = -1 EBADF (Bad file descriptor) [pid 6068] close(8) = -1 EBADF (Bad file descriptor) [pid 6068] close(9) = -1 EBADF (Bad file descriptor) [pid 6068] close(10) = -1 EBADF (Bad file descriptor) [pid 6068] close(11) = -1 EBADF (Bad file descriptor) [pid 6068] close(12) = -1 EBADF (Bad file descriptor) [pid 6068] close(13) = -1 EBADF (Bad file descriptor) [pid 6068] close(14) = -1 EBADF (Bad file descriptor) [pid 6068] close(15) = -1 EBADF (Bad file descriptor) [pid 6068] close(16) = -1 EBADF (Bad file descriptor) [pid 6068] close(17) = -1 EBADF (Bad file descriptor) [pid 6068] close(18) = -1 EBADF (Bad file descriptor) [pid 6068] close(19) = -1 EBADF (Bad file descriptor) [pid 6068] close(20) = -1 EBADF (Bad file descriptor) [pid 6068] close(21) = -1 EBADF (Bad file descriptor) [pid 6068] close(22) = -1 EBADF (Bad file descriptor) [pid 6068] close(23) = -1 EBADF (Bad file descriptor) [pid 6068] close(24) = -1 EBADF (Bad file descriptor) [pid 6068] close(25) = -1 EBADF (Bad file descriptor) [pid 6068] close(26) = -1 EBADF (Bad file descriptor) [pid 6068] close(27) = -1 EBADF (Bad file descriptor) [pid 6068] close(28) = -1 EBADF (Bad file descriptor) [pid 6068] close(29) = -1 EBADF (Bad file descriptor) [pid 6068] exit_group(0) = ? [ 214.254525][ T6068] loop0: detected capacity change from 0 to 128 [pid 6068] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=223, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5836] umount2("./220", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./220", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./220/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./220/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./220/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./220/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./220/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./220/file2") = 0 [pid 5836] umount2("./220/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./220/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./220/binderfs") = 0 [pid 5836] umount2("./220/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./220/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./220/cgroup.net") = 0 [pid 5836] umount2("./220/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./220/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./220/cgroup.cpu") = 0 [pid 5836] umount2("./220/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./220/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./220/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./220") = 0 [pid 5836] mkdir("./221", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6069 attached [pid 6069] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 224 [pid 6069] <... set_robust_list resumed>) = 0 [pid 6069] chdir("./221") = 0 [pid 6069] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6069] setpgid(0, 0) = 0 [pid 6069] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6069] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6069] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6069] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6069] write(3, "1000", 4) = 4 [pid 6069] close(3) = 0 [pid 6069] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6069] write(1, "executing program\n", 18) = 18 [pid 6069] memfd_create("syzkaller", 0) = 3 [pid 6069] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6069] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6069] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6069] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6069] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6069] close(3) = 0 [pid 6069] close(4) = 0 [pid 6069] mkdir("./file2", 0777) = 0 [pid 6069] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6069] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6069] chdir("./file2") = 0 [pid 6069] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 214.786175][ T6069] loop0: detected capacity change from 0 to 128 [pid 6069] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6069] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6069] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6069] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6069] close(3) = 0 [pid 6069] close(4) = 0 [pid 6069] close(5) = -1 EBADF (Bad file descriptor) [pid 6069] close(6) = -1 EBADF (Bad file descriptor) [pid 6069] close(7) = -1 EBADF (Bad file descriptor) [pid 6069] close(8) = -1 EBADF (Bad file descriptor) [pid 6069] close(9) = -1 EBADF (Bad file descriptor) [pid 6069] close(10) = -1 EBADF (Bad file descriptor) [pid 6069] close(11) = -1 EBADF (Bad file descriptor) [pid 6069] close(12) = -1 EBADF (Bad file descriptor) [pid 6069] close(13) = -1 EBADF (Bad file descriptor) [pid 6069] close(14) = -1 EBADF (Bad file descriptor) [pid 6069] close(15) = -1 EBADF (Bad file descriptor) [pid 6069] close(16) = -1 EBADF (Bad file descriptor) [pid 6069] close(17) = -1 EBADF (Bad file descriptor) [pid 6069] close(18) = -1 EBADF (Bad file descriptor) [pid 6069] close(19) = -1 EBADF (Bad file descriptor) [pid 6069] close(20) = -1 EBADF (Bad file descriptor) [pid 6069] close(21) = -1 EBADF (Bad file descriptor) [pid 6069] close(22) = -1 EBADF (Bad file descriptor) [pid 6069] close(23) = -1 EBADF (Bad file descriptor) [pid 6069] close(24) = -1 EBADF (Bad file descriptor) [pid 6069] close(25) = -1 EBADF (Bad file descriptor) [pid 6069] close(26) = -1 EBADF (Bad file descriptor) [pid 6069] close(27) = -1 EBADF (Bad file descriptor) [pid 6069] close(28) = -1 EBADF (Bad file descriptor) [pid 6069] close(29) = -1 EBADF (Bad file descriptor) [pid 6069] exit_group(0) = ? [pid 6069] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=224, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./221", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./221", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./221/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./221/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./221/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./221/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./221/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./221/file2") = 0 [pid 5836] umount2("./221/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./221/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./221/binderfs") = 0 [pid 5836] umount2("./221/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./221/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./221/cgroup.net") = 0 [pid 5836] umount2("./221/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./221/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./221/cgroup.cpu") = 0 [pid 5836] umount2("./221/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./221/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./221/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./221") = 0 [pid 5836] mkdir("./222", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6070 attached , child_tidptr=0x555563237690) = 225 [pid 6070] set_robust_list(0x5555632376a0, 24) = 0 [pid 6070] chdir("./222") = 0 [pid 6070] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6070] setpgid(0, 0) = 0 [pid 6070] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6070] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6070] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6070] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6070] write(3, "1000", 4) = 4 [pid 6070] close(3) = 0 [pid 6070] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6070] write(1, "executing program\n", 18) = 18 [pid 6070] memfd_create("syzkaller", 0) = 3 [pid 6070] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6070] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6070] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6070] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6070] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6070] close(3) = 0 [pid 6070] close(4) = 0 [pid 6070] mkdir("./file2", 0777) = 0 [pid 6070] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6070] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6070] chdir("./file2") = 0 [pid 6070] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6070] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6070] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6070] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6070] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6070] close(3) = 0 [pid 6070] close(4) = 0 [ 215.423494][ T6070] loop0: detected capacity change from 0 to 128 [pid 6070] close(5) = -1 EBADF (Bad file descriptor) [pid 6070] close(6) = -1 EBADF (Bad file descriptor) [pid 6070] close(7) = -1 EBADF (Bad file descriptor) [pid 6070] close(8) = -1 EBADF (Bad file descriptor) [pid 6070] close(9) = -1 EBADF (Bad file descriptor) [pid 6070] close(10) = -1 EBADF (Bad file descriptor) [pid 6070] close(11) = -1 EBADF (Bad file descriptor) [pid 6070] close(12) = -1 EBADF (Bad file descriptor) [pid 6070] close(13) = -1 EBADF (Bad file descriptor) [pid 6070] close(14) = -1 EBADF (Bad file descriptor) [pid 6070] close(15) = -1 EBADF (Bad file descriptor) [pid 6070] close(16) = -1 EBADF (Bad file descriptor) [pid 6070] close(17) = -1 EBADF (Bad file descriptor) [pid 6070] close(18) = -1 EBADF (Bad file descriptor) [pid 6070] close(19) = -1 EBADF (Bad file descriptor) [pid 6070] close(20) = -1 EBADF (Bad file descriptor) [pid 6070] close(21) = -1 EBADF (Bad file descriptor) [pid 6070] close(22) = -1 EBADF (Bad file descriptor) [pid 6070] close(23) = -1 EBADF (Bad file descriptor) [pid 6070] close(24) = -1 EBADF (Bad file descriptor) [pid 6070] close(25) = -1 EBADF (Bad file descriptor) [pid 6070] close(26) = -1 EBADF (Bad file descriptor) [pid 6070] close(27) = -1 EBADF (Bad file descriptor) [pid 6070] close(28) = -1 EBADF (Bad file descriptor) [pid 6070] close(29) = -1 EBADF (Bad file descriptor) [pid 6070] exit_group(0) = ? [pid 6070] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=225, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./222", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./222", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./222/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./222/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./222/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./222/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./222/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./222/file2") = 0 [pid 5836] umount2("./222/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./222/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./222/binderfs") = 0 [pid 5836] umount2("./222/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./222/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./222/cgroup.net") = 0 [pid 5836] umount2("./222/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./222/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./222/cgroup.cpu") = 0 [pid 5836] umount2("./222/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./222/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./222/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./222") = 0 [pid 5836] mkdir("./223", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6071 attached [pid 6071] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 226 [pid 6071] <... set_robust_list resumed>) = 0 [pid 6071] chdir("./223") = 0 [pid 6071] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6071] setpgid(0, 0) = 0 [pid 6071] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6071] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6071] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6071] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6071] write(3, "1000", 4) = 4 [pid 6071] close(3) = 0 [pid 6071] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6071] write(1, "executing program\n", 18) = 18 [pid 6071] memfd_create("syzkaller", 0) = 3 [pid 6071] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6071] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6071] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6071] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6071] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6071] close(3) = 0 [pid 6071] close(4) = 0 [pid 6071] mkdir("./file2", 0777) = 0 [pid 6071] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6071] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6071] chdir("./file2") = 0 [pid 6071] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6071] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6071] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6071] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6071] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6071] close(3) = 0 [pid 6071] close(4) = 0 [pid 6071] close(5) = -1 EBADF (Bad file descriptor) [pid 6071] close(6) = -1 EBADF (Bad file descriptor) [ 215.996909][ T6071] loop0: detected capacity change from 0 to 128 [pid 6071] close(7) = -1 EBADF (Bad file descriptor) [pid 6071] close(8) = -1 EBADF (Bad file descriptor) [pid 6071] close(9) = -1 EBADF (Bad file descriptor) [pid 6071] close(10) = -1 EBADF (Bad file descriptor) [pid 6071] close(11) = -1 EBADF (Bad file descriptor) [pid 6071] close(12) = -1 EBADF (Bad file descriptor) [pid 6071] close(13) = -1 EBADF (Bad file descriptor) [pid 6071] close(14) = -1 EBADF (Bad file descriptor) [pid 6071] close(15) = -1 EBADF (Bad file descriptor) [pid 6071] close(16) = -1 EBADF (Bad file descriptor) [pid 6071] close(17) = -1 EBADF (Bad file descriptor) [pid 6071] close(18) = -1 EBADF (Bad file descriptor) [pid 6071] close(19) = -1 EBADF (Bad file descriptor) [pid 6071] close(20) = -1 EBADF (Bad file descriptor) [pid 6071] close(21) = -1 EBADF (Bad file descriptor) [pid 6071] close(22) = -1 EBADF (Bad file descriptor) [pid 6071] close(23) = -1 EBADF (Bad file descriptor) [pid 6071] close(24) = -1 EBADF (Bad file descriptor) [pid 6071] close(25) = -1 EBADF (Bad file descriptor) [pid 6071] close(26) = -1 EBADF (Bad file descriptor) [pid 6071] close(27) = -1 EBADF (Bad file descriptor) [pid 6071] close(28) = -1 EBADF (Bad file descriptor) [pid 6071] close(29) = -1 EBADF (Bad file descriptor) [pid 6071] exit_group(0) = ? [pid 6071] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=226, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./223", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./223", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./223/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./223/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./223/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./223/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./223/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./223/file2") = 0 [pid 5836] umount2("./223/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./223/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./223/binderfs") = 0 [pid 5836] umount2("./223/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./223/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./223/cgroup.net") = 0 [pid 5836] umount2("./223/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./223/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./223/cgroup.cpu") = 0 [pid 5836] umount2("./223/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./223/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./223/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./223") = 0 [pid 5836] mkdir("./224", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6072 attached [pid 6072] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 227 [pid 6072] <... set_robust_list resumed>) = 0 [pid 6072] chdir("./224") = 0 [pid 6072] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6072] setpgid(0, 0) = 0 [pid 6072] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6072] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6072] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6072] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6072] write(3, "1000", 4) = 4 [pid 6072] close(3) = 0 executing program [pid 6072] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6072] write(1, "executing program\n", 18) = 18 [pid 6072] memfd_create("syzkaller", 0) = 3 [pid 6072] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6072] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6072] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6072] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6072] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6072] close(3) = 0 [pid 6072] close(4) = 0 [pid 6072] mkdir("./file2", 0777) = 0 [pid 6072] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6072] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6072] chdir("./file2") = 0 [pid 6072] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6072] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6072] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6072] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6072] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6072] close(3) = 0 [pid 6072] close(4) = 0 [ 216.608570][ T6072] loop0: detected capacity change from 0 to 128 [pid 6072] close(5) = -1 EBADF (Bad file descriptor) [pid 6072] close(6) = -1 EBADF (Bad file descriptor) [pid 6072] close(7) = -1 EBADF (Bad file descriptor) [pid 6072] close(8) = -1 EBADF (Bad file descriptor) [pid 6072] close(9) = -1 EBADF (Bad file descriptor) [pid 6072] close(10) = -1 EBADF (Bad file descriptor) [pid 6072] close(11) = -1 EBADF (Bad file descriptor) [pid 6072] close(12) = -1 EBADF (Bad file descriptor) [pid 6072] close(13) = -1 EBADF (Bad file descriptor) [pid 6072] close(14) = -1 EBADF (Bad file descriptor) [pid 6072] close(15) = -1 EBADF (Bad file descriptor) [pid 6072] close(16) = -1 EBADF (Bad file descriptor) [pid 6072] close(17) = -1 EBADF (Bad file descriptor) [pid 6072] close(18) = -1 EBADF (Bad file descriptor) [pid 6072] close(19) = -1 EBADF (Bad file descriptor) [pid 6072] close(20) = -1 EBADF (Bad file descriptor) [pid 6072] close(21) = -1 EBADF (Bad file descriptor) [pid 6072] close(22) = -1 EBADF (Bad file descriptor) [pid 6072] close(23) = -1 EBADF (Bad file descriptor) [pid 6072] close(24) = -1 EBADF (Bad file descriptor) [pid 6072] close(25) = -1 EBADF (Bad file descriptor) [pid 6072] close(26) = -1 EBADF (Bad file descriptor) [pid 6072] close(27) = -1 EBADF (Bad file descriptor) [pid 6072] close(28) = -1 EBADF (Bad file descriptor) [pid 6072] close(29) = -1 EBADF (Bad file descriptor) [pid 6072] exit_group(0) = ? [pid 6072] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=227, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./224", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./224", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./224/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./224/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./224/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./224/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./224/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./224/file2") = 0 [pid 5836] umount2("./224/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./224/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./224/binderfs") = 0 [pid 5836] umount2("./224/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./224/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./224/cgroup.net") = 0 [pid 5836] umount2("./224/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./224/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./224/cgroup.cpu") = 0 [pid 5836] umount2("./224/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./224/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./224/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./224") = 0 [pid 5836] mkdir("./225", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6073 attached [pid 6073] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 228 [pid 6073] <... set_robust_list resumed>) = 0 [pid 6073] chdir("./225") = 0 [pid 6073] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6073] setpgid(0, 0) = 0 [pid 6073] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6073] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6073] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6073] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6073] write(3, "1000", 4) = 4 [pid 6073] close(3) = 0 [pid 6073] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6073] write(1, "executing program\n", 18executing program ) = 18 [pid 6073] memfd_create("syzkaller", 0) = 3 [pid 6073] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6073] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6073] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6073] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6073] close(3) = 0 [pid 6073] close(4) = 0 [pid 6073] mkdir("./file2", 0777) = 0 [pid 6073] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6073] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6073] chdir("./file2") = 0 [pid 6073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6073] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6073] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6073] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6073] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6073] close(3) = 0 [ 217.070984][ T6073] loop0: detected capacity change from 0 to 128 [pid 6073] close(4) = 0 [pid 6073] close(5) = -1 EBADF (Bad file descriptor) [pid 6073] close(6) = -1 EBADF (Bad file descriptor) [pid 6073] close(7) = -1 EBADF (Bad file descriptor) [pid 6073] close(8) = -1 EBADF (Bad file descriptor) [pid 6073] close(9) = -1 EBADF (Bad file descriptor) [pid 6073] close(10) = -1 EBADF (Bad file descriptor) [pid 6073] close(11) = -1 EBADF (Bad file descriptor) [pid 6073] close(12) = -1 EBADF (Bad file descriptor) [pid 6073] close(13) = -1 EBADF (Bad file descriptor) [pid 6073] close(14) = -1 EBADF (Bad file descriptor) [pid 6073] close(15) = -1 EBADF (Bad file descriptor) [pid 6073] close(16) = -1 EBADF (Bad file descriptor) [pid 6073] close(17) = -1 EBADF (Bad file descriptor) [pid 6073] close(18) = -1 EBADF (Bad file descriptor) [pid 6073] close(19) = -1 EBADF (Bad file descriptor) [pid 6073] close(20) = -1 EBADF (Bad file descriptor) [pid 6073] close(21) = -1 EBADF (Bad file descriptor) [pid 6073] close(22) = -1 EBADF (Bad file descriptor) [pid 6073] close(23) = -1 EBADF (Bad file descriptor) [pid 6073] close(24) = -1 EBADF (Bad file descriptor) [pid 6073] close(25) = -1 EBADF (Bad file descriptor) [pid 6073] close(26) = -1 EBADF (Bad file descriptor) [pid 6073] close(27) = -1 EBADF (Bad file descriptor) [pid 6073] close(28) = -1 EBADF (Bad file descriptor) [pid 6073] close(29) = -1 EBADF (Bad file descriptor) [pid 6073] exit_group(0) = ? [pid 6073] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=228, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./225", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./225", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./225/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./225/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./225/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./225/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./225/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./225/file2") = 0 [pid 5836] umount2("./225/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./225/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./225/binderfs") = 0 [pid 5836] umount2("./225/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./225/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./225/cgroup.net") = 0 [pid 5836] umount2("./225/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./225/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./225/cgroup.cpu") = 0 [pid 5836] umount2("./225/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./225/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./225/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./225") = 0 [pid 5836] mkdir("./226", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6074 attached [pid 6074] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 229 [pid 6074] <... set_robust_list resumed>) = 0 [pid 6074] chdir("./226") = 0 [pid 6074] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6074] setpgid(0, 0) = 0 [pid 6074] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6074] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6074] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6074] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6074] write(3, "1000", 4) = 4 [pid 6074] close(3) = 0 [pid 6074] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6074] write(1, "executing program\n", 18) = 18 [pid 6074] memfd_create("syzkaller", 0) = 3 [pid 6074] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6074] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6074] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6074] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6074] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6074] close(3) = 0 [pid 6074] close(4) = 0 [pid 6074] mkdir("./file2", 0777) = 0 [pid 6074] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6074] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6074] chdir("./file2") = 0 [pid 6074] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6074] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6074] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6074] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6074] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6074] close(3) = 0 [ 217.602883][ T6074] loop0: detected capacity change from 0 to 128 [pid 6074] close(4) = 0 [pid 6074] close(5) = -1 EBADF (Bad file descriptor) [pid 6074] close(6) = -1 EBADF (Bad file descriptor) [pid 6074] close(7) = -1 EBADF (Bad file descriptor) [pid 6074] close(8) = -1 EBADF (Bad file descriptor) [pid 6074] close(9) = -1 EBADF (Bad file descriptor) [pid 6074] close(10) = -1 EBADF (Bad file descriptor) [pid 6074] close(11) = -1 EBADF (Bad file descriptor) [pid 6074] close(12) = -1 EBADF (Bad file descriptor) [pid 6074] close(13) = -1 EBADF (Bad file descriptor) [pid 6074] close(14) = -1 EBADF (Bad file descriptor) [pid 6074] close(15) = -1 EBADF (Bad file descriptor) [pid 6074] close(16) = -1 EBADF (Bad file descriptor) [pid 6074] close(17) = -1 EBADF (Bad file descriptor) [pid 6074] close(18) = -1 EBADF (Bad file descriptor) [pid 6074] close(19) = -1 EBADF (Bad file descriptor) [pid 6074] close(20) = -1 EBADF (Bad file descriptor) [pid 6074] close(21) = -1 EBADF (Bad file descriptor) [pid 6074] close(22) = -1 EBADF (Bad file descriptor) [pid 6074] close(23) = -1 EBADF (Bad file descriptor) [pid 6074] close(24) = -1 EBADF (Bad file descriptor) [pid 6074] close(25) = -1 EBADF (Bad file descriptor) [pid 6074] close(26) = -1 EBADF (Bad file descriptor) [pid 6074] close(27) = -1 EBADF (Bad file descriptor) [pid 6074] close(28) = -1 EBADF (Bad file descriptor) [pid 6074] close(29) = -1 EBADF (Bad file descriptor) [pid 6074] exit_group(0) = ? [pid 6074] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=229, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] umount2("./226", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./226", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./226/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./226/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./226/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./226/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./226/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./226/file2") = 0 [pid 5836] umount2("./226/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./226/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./226/binderfs") = 0 [pid 5836] umount2("./226/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./226/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./226/cgroup.net") = 0 [pid 5836] umount2("./226/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./226/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./226/cgroup.cpu") = 0 [pid 5836] umount2("./226/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./226/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./226/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./226") = 0 [pid 5836] mkdir("./227", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6075 attached [pid 6075] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 230 [pid 6075] <... set_robust_list resumed>) = 0 [pid 6075] chdir("./227") = 0 [pid 6075] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6075] setpgid(0, 0) = 0 [pid 6075] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6075] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6075] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6075] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6075] write(3, "1000", 4) = 4 [pid 6075] close(3) = 0 [pid 6075] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6075] write(1, "executing program\n", 18) = 18 [pid 6075] memfd_create("syzkaller", 0) = 3 [pid 6075] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6075] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6075] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6075] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6075] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6075] close(3) = 0 [pid 6075] close(4) = 0 [pid 6075] mkdir("./file2", 0777) = 0 [pid 6075] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6075] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6075] chdir("./file2") = 0 [pid 6075] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6075] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6075] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6075] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6075] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6075] close(3) = 0 [pid 6075] close(4) = 0 [ 218.177202][ T6075] loop0: detected capacity change from 0 to 128 [pid 6075] close(5) = -1 EBADF (Bad file descriptor) [pid 6075] close(6) = -1 EBADF (Bad file descriptor) [pid 6075] close(7) = -1 EBADF (Bad file descriptor) [pid 6075] close(8) = -1 EBADF (Bad file descriptor) [pid 6075] close(9) = -1 EBADF (Bad file descriptor) [pid 6075] close(10) = -1 EBADF (Bad file descriptor) [pid 6075] close(11) = -1 EBADF (Bad file descriptor) [pid 6075] close(12) = -1 EBADF (Bad file descriptor) [pid 6075] close(13) = -1 EBADF (Bad file descriptor) [pid 6075] close(14) = -1 EBADF (Bad file descriptor) [pid 6075] close(15) = -1 EBADF (Bad file descriptor) [pid 6075] close(16) = -1 EBADF (Bad file descriptor) [pid 6075] close(17) = -1 EBADF (Bad file descriptor) [pid 6075] close(18) = -1 EBADF (Bad file descriptor) [pid 6075] close(19) = -1 EBADF (Bad file descriptor) [pid 6075] close(20) = -1 EBADF (Bad file descriptor) [pid 6075] close(21) = -1 EBADF (Bad file descriptor) [pid 6075] close(22) = -1 EBADF (Bad file descriptor) [pid 6075] close(23) = -1 EBADF (Bad file descriptor) [pid 6075] close(24) = -1 EBADF (Bad file descriptor) [pid 6075] close(25) = -1 EBADF (Bad file descriptor) [pid 6075] close(26) = -1 EBADF (Bad file descriptor) [pid 6075] close(27) = -1 EBADF (Bad file descriptor) [pid 6075] close(28) = -1 EBADF (Bad file descriptor) [pid 6075] close(29) = -1 EBADF (Bad file descriptor) [pid 6075] exit_group(0) = ? [pid 6075] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=230, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5836] umount2("./227", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./227", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./227/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./227/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./227/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./227/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./227/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./227/file2") = 0 [pid 5836] umount2("./227/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./227/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./227/binderfs") = 0 [pid 5836] umount2("./227/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./227/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./227/cgroup.net") = 0 [pid 5836] umount2("./227/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./227/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./227/cgroup.cpu") = 0 [pid 5836] umount2("./227/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./227/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./227/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./227") = 0 [pid 5836] mkdir("./228", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6076 attached [pid 6076] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 231 [pid 6076] <... set_robust_list resumed>) = 0 [pid 6076] chdir("./228") = 0 [pid 6076] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6076] setpgid(0, 0) = 0 [pid 6076] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6076] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6076] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6076] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6076] write(3, "1000", 4) = 4 [pid 6076] close(3) = 0 [pid 6076] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6076] write(1, "executing program\n", 18executing program ) = 18 [pid 6076] memfd_create("syzkaller", 0) = 3 [pid 6076] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6076] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6076] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6076] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6076] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6076] close(3) = 0 [pid 6076] close(4) = 0 [pid 6076] mkdir("./file2", 0777) = 0 [pid 6076] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6076] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6076] chdir("./file2") = 0 [pid 6076] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6076] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6076] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6076] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6076] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6076] close(3) = 0 [ 218.657552][ T6076] loop0: detected capacity change from 0 to 128 [pid 6076] close(4) = 0 [pid 6076] close(5) = -1 EBADF (Bad file descriptor) [pid 6076] close(6) = -1 EBADF (Bad file descriptor) [pid 6076] close(7) = -1 EBADF (Bad file descriptor) [pid 6076] close(8) = -1 EBADF (Bad file descriptor) [pid 6076] close(9) = -1 EBADF (Bad file descriptor) [pid 6076] close(10) = -1 EBADF (Bad file descriptor) [pid 6076] close(11) = -1 EBADF (Bad file descriptor) [pid 6076] close(12) = -1 EBADF (Bad file descriptor) [pid 6076] close(13) = -1 EBADF (Bad file descriptor) [pid 6076] close(14) = -1 EBADF (Bad file descriptor) [pid 6076] close(15) = -1 EBADF (Bad file descriptor) [pid 6076] close(16) = -1 EBADF (Bad file descriptor) [pid 6076] close(17) = -1 EBADF (Bad file descriptor) [pid 6076] close(18) = -1 EBADF (Bad file descriptor) [pid 6076] close(19) = -1 EBADF (Bad file descriptor) [pid 6076] close(20) = -1 EBADF (Bad file descriptor) [pid 6076] close(21) = -1 EBADF (Bad file descriptor) [pid 6076] close(22) = -1 EBADF (Bad file descriptor) [pid 6076] close(23) = -1 EBADF (Bad file descriptor) [pid 6076] close(24) = -1 EBADF (Bad file descriptor) [pid 6076] close(25) = -1 EBADF (Bad file descriptor) [pid 6076] close(26) = -1 EBADF (Bad file descriptor) [pid 6076] close(27) = -1 EBADF (Bad file descriptor) [pid 6076] close(28) = -1 EBADF (Bad file descriptor) [pid 6076] close(29) = -1 EBADF (Bad file descriptor) [pid 6076] exit_group(0) = ? [pid 6076] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=231, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./228", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./228", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./228/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./228/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./228/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./228/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./228/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./228/file2") = 0 [pid 5836] umount2("./228/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./228/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./228/binderfs") = 0 [pid 5836] umount2("./228/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./228/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./228/cgroup.net") = 0 [pid 5836] umount2("./228/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./228/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./228/cgroup.cpu") = 0 [pid 5836] umount2("./228/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./228/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./228/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./228") = 0 [pid 5836] mkdir("./229", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6077 attached [pid 6077] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 232 [pid 6077] <... set_robust_list resumed>) = 0 [pid 6077] chdir("./229") = 0 [pid 6077] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6077] setpgid(0, 0) = 0 [pid 6077] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6077] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6077] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6077] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6077] write(3, "1000", 4) = 4 [pid 6077] close(3) = 0 [pid 6077] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6077] write(1, "executing program\n", 18) = 18 [pid 6077] memfd_create("syzkaller", 0) = 3 [pid 6077] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6077] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6077] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6077] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6077] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6077] close(3) = 0 [pid 6077] close(4) = 0 [pid 6077] mkdir("./file2", 0777) = 0 [pid 6077] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6077] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6077] chdir("./file2") = 0 [pid 6077] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6077] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [ 219.191532][ T6077] loop0: detected capacity change from 0 to 128 [pid 6077] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6077] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6077] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6077] close(3) = 0 [pid 6077] close(4) = 0 [pid 6077] close(5) = -1 EBADF (Bad file descriptor) [pid 6077] close(6) = -1 EBADF (Bad file descriptor) [pid 6077] close(7) = -1 EBADF (Bad file descriptor) [pid 6077] close(8) = -1 EBADF (Bad file descriptor) [pid 6077] close(9) = -1 EBADF (Bad file descriptor) [pid 6077] close(10) = -1 EBADF (Bad file descriptor) [pid 6077] close(11) = -1 EBADF (Bad file descriptor) [pid 6077] close(12) = -1 EBADF (Bad file descriptor) [pid 6077] close(13) = -1 EBADF (Bad file descriptor) [pid 6077] close(14) = -1 EBADF (Bad file descriptor) [pid 6077] close(15) = -1 EBADF (Bad file descriptor) [pid 6077] close(16) = -1 EBADF (Bad file descriptor) [pid 6077] close(17) = -1 EBADF (Bad file descriptor) [pid 6077] close(18) = -1 EBADF (Bad file descriptor) [pid 6077] close(19) = -1 EBADF (Bad file descriptor) [pid 6077] close(20) = -1 EBADF (Bad file descriptor) [pid 6077] close(21) = -1 EBADF (Bad file descriptor) [pid 6077] close(22) = -1 EBADF (Bad file descriptor) [pid 6077] close(23) = -1 EBADF (Bad file descriptor) [pid 6077] close(24) = -1 EBADF (Bad file descriptor) [pid 6077] close(25) = -1 EBADF (Bad file descriptor) [pid 6077] close(26) = -1 EBADF (Bad file descriptor) [pid 6077] close(27) = -1 EBADF (Bad file descriptor) [pid 6077] close(28) = -1 EBADF (Bad file descriptor) [pid 6077] close(29) = -1 EBADF (Bad file descriptor) [pid 6077] exit_group(0) = ? [pid 6077] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=232, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./229", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./229", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./229/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./229/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./229/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./229/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./229/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./229/file2") = 0 [pid 5836] umount2("./229/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./229/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./229/binderfs") = 0 [pid 5836] umount2("./229/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./229/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./229/cgroup.net") = 0 [pid 5836] umount2("./229/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./229/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./229/cgroup.cpu") = 0 [pid 5836] umount2("./229/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./229/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./229/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./229") = 0 [pid 5836] mkdir("./230", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6078 attached [pid 6078] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 233 [pid 6078] <... set_robust_list resumed>) = 0 [pid 6078] chdir("./230") = 0 [pid 6078] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6078] setpgid(0, 0) = 0 [pid 6078] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6078] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6078] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6078] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6078] write(3, "1000", 4) = 4 [pid 6078] close(3) = 0 [pid 6078] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6078] write(1, "executing program\n", 18) = 18 [pid 6078] memfd_create("syzkaller", 0) = 3 [pid 6078] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6078] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6078] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6078] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6078] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6078] close(3) = 0 [pid 6078] close(4) = 0 [pid 6078] mkdir("./file2", 0777) = 0 [pid 6078] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6078] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6078] chdir("./file2") = 0 [pid 6078] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6078] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6078] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6078] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6078] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6078] close(3) = 0 [ 219.707927][ T6078] loop0: detected capacity change from 0 to 128 [pid 6078] close(4) = 0 [pid 6078] close(5) = -1 EBADF (Bad file descriptor) [pid 6078] close(6) = -1 EBADF (Bad file descriptor) [pid 6078] close(7) = -1 EBADF (Bad file descriptor) [pid 6078] close(8) = -1 EBADF (Bad file descriptor) [pid 6078] close(9) = -1 EBADF (Bad file descriptor) [pid 6078] close(10) = -1 EBADF (Bad file descriptor) [pid 6078] close(11) = -1 EBADF (Bad file descriptor) [pid 6078] close(12) = -1 EBADF (Bad file descriptor) [pid 6078] close(13) = -1 EBADF (Bad file descriptor) [pid 6078] close(14) = -1 EBADF (Bad file descriptor) [pid 6078] close(15) = -1 EBADF (Bad file descriptor) [pid 6078] close(16) = -1 EBADF (Bad file descriptor) [pid 6078] close(17) = -1 EBADF (Bad file descriptor) [pid 6078] close(18) = -1 EBADF (Bad file descriptor) [pid 6078] close(19) = -1 EBADF (Bad file descriptor) [pid 6078] close(20) = -1 EBADF (Bad file descriptor) [pid 6078] close(21) = -1 EBADF (Bad file descriptor) [pid 6078] close(22) = -1 EBADF (Bad file descriptor) [pid 6078] close(23) = -1 EBADF (Bad file descriptor) [pid 6078] close(24) = -1 EBADF (Bad file descriptor) [pid 6078] close(25) = -1 EBADF (Bad file descriptor) [pid 6078] close(26) = -1 EBADF (Bad file descriptor) [pid 6078] close(27) = -1 EBADF (Bad file descriptor) [pid 6078] close(28) = -1 EBADF (Bad file descriptor) [pid 6078] close(29) = -1 EBADF (Bad file descriptor) [pid 6078] exit_group(0) = ? [pid 6078] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=233, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./230", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./230", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./230/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./230/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./230/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./230/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./230/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./230/file2") = 0 [pid 5836] umount2("./230/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./230/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./230/binderfs") = 0 [pid 5836] umount2("./230/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./230/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./230/cgroup.net") = 0 [pid 5836] umount2("./230/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./230/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./230/cgroup.cpu") = 0 [pid 5836] umount2("./230/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./230/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./230/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./230") = 0 [pid 5836] mkdir("./231", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6079 attached [pid 6079] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 234 [pid 6079] <... set_robust_list resumed>) = 0 [pid 6079] chdir("./231") = 0 [pid 6079] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6079] setpgid(0, 0) = 0 [pid 6079] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6079] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6079] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6079] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6079] write(3, "1000", 4) = 4 [pid 6079] close(3) = 0 [pid 6079] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6079] write(1, "executing program\n", 18) = 18 [pid 6079] memfd_create("syzkaller", 0) = 3 [pid 6079] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6079] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6079] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6079] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6079] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6079] close(3) = 0 [pid 6079] close(4) = 0 [pid 6079] mkdir("./file2", 0777) = 0 [pid 6079] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6079] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6079] chdir("./file2") = 0 [pid 6079] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6079] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6079] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6079] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6079] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6079] close(3) = 0 [ 220.228254][ T6079] loop0: detected capacity change from 0 to 128 [pid 6079] close(4) = 0 [pid 6079] close(5) = -1 EBADF (Bad file descriptor) [pid 6079] close(6) = -1 EBADF (Bad file descriptor) [pid 6079] close(7) = -1 EBADF (Bad file descriptor) [pid 6079] close(8) = -1 EBADF (Bad file descriptor) [pid 6079] close(9) = -1 EBADF (Bad file descriptor) [pid 6079] close(10) = -1 EBADF (Bad file descriptor) [pid 6079] close(11) = -1 EBADF (Bad file descriptor) [pid 6079] close(12) = -1 EBADF (Bad file descriptor) [pid 6079] close(13) = -1 EBADF (Bad file descriptor) [pid 6079] close(14) = -1 EBADF (Bad file descriptor) [pid 6079] close(15) = -1 EBADF (Bad file descriptor) [pid 6079] close(16) = -1 EBADF (Bad file descriptor) [pid 6079] close(17) = -1 EBADF (Bad file descriptor) [pid 6079] close(18) = -1 EBADF (Bad file descriptor) [pid 6079] close(19) = -1 EBADF (Bad file descriptor) [pid 6079] close(20) = -1 EBADF (Bad file descriptor) [pid 6079] close(21) = -1 EBADF (Bad file descriptor) [pid 6079] close(22) = -1 EBADF (Bad file descriptor) [pid 6079] close(23) = -1 EBADF (Bad file descriptor) [pid 6079] close(24) = -1 EBADF (Bad file descriptor) [pid 6079] close(25) = -1 EBADF (Bad file descriptor) [pid 6079] close(26) = -1 EBADF (Bad file descriptor) [pid 6079] close(27) = -1 EBADF (Bad file descriptor) [pid 6079] close(28) = -1 EBADF (Bad file descriptor) [pid 6079] close(29) = -1 EBADF (Bad file descriptor) [pid 6079] exit_group(0) = ? [pid 6079] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=234, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] umount2("./231", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./231", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./231/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./231/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./231/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./231/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./231/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./231/file2") = 0 [pid 5836] umount2("./231/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./231/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./231/binderfs") = 0 [pid 5836] umount2("./231/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./231/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./231/cgroup.net") = 0 [pid 5836] umount2("./231/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./231/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./231/cgroup.cpu") = 0 [pid 5836] umount2("./231/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./231/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./231/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./231") = 0 [pid 5836] mkdir("./232", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6080 attached [pid 6080] set_robust_list(0x5555632376a0, 24) = 0 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 235 [pid 6080] chdir("./232") = 0 [pid 6080] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6080] setpgid(0, 0) = 0 [pid 6080] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6080] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6080] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6080] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6080] write(3, "1000", 4) = 4 [pid 6080] close(3) = 0 [pid 6080] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6080] write(1, "executing program\n", 18executing program ) = 18 [pid 6080] memfd_create("syzkaller", 0) = 3 [pid 6080] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6080] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6080] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6080] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6080] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6080] close(3) = 0 [pid 6080] close(4) = 0 [pid 6080] mkdir("./file2", 0777) = 0 [pid 6080] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6080] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6080] chdir("./file2") = 0 [pid 6080] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6080] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6080] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6080] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6080] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6080] close(3) = 0 [pid 6080] close(4) = 0 [ 220.714312][ T6080] loop0: detected capacity change from 0 to 128 [pid 6080] close(5) = -1 EBADF (Bad file descriptor) [pid 6080] close(6) = -1 EBADF (Bad file descriptor) [pid 6080] close(7) = -1 EBADF (Bad file descriptor) [pid 6080] close(8) = -1 EBADF (Bad file descriptor) [pid 6080] close(9) = -1 EBADF (Bad file descriptor) [pid 6080] close(10) = -1 EBADF (Bad file descriptor) [pid 6080] close(11) = -1 EBADF (Bad file descriptor) [pid 6080] close(12) = -1 EBADF (Bad file descriptor) [pid 6080] close(13) = -1 EBADF (Bad file descriptor) [pid 6080] close(14) = -1 EBADF (Bad file descriptor) [pid 6080] close(15) = -1 EBADF (Bad file descriptor) [pid 6080] close(16) = -1 EBADF (Bad file descriptor) [pid 6080] close(17) = -1 EBADF (Bad file descriptor) [pid 6080] close(18) = -1 EBADF (Bad file descriptor) [pid 6080] close(19) = -1 EBADF (Bad file descriptor) [pid 6080] close(20) = -1 EBADF (Bad file descriptor) [pid 6080] close(21) = -1 EBADF (Bad file descriptor) [pid 6080] close(22) = -1 EBADF (Bad file descriptor) [pid 6080] close(23) = -1 EBADF (Bad file descriptor) [pid 6080] close(24) = -1 EBADF (Bad file descriptor) [pid 6080] close(25) = -1 EBADF (Bad file descriptor) [pid 6080] close(26) = -1 EBADF (Bad file descriptor) [pid 6080] close(27) = -1 EBADF (Bad file descriptor) [pid 6080] close(28) = -1 EBADF (Bad file descriptor) [pid 6080] close(29) = -1 EBADF (Bad file descriptor) [pid 6080] exit_group(0) = ? [pid 6080] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=235, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./232", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./232", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./232/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./232/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./232/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./232/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./232/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./232/file2") = 0 [pid 5836] umount2("./232/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./232/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./232/binderfs") = 0 [pid 5836] umount2("./232/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./232/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./232/cgroup.net") = 0 [pid 5836] umount2("./232/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./232/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./232/cgroup.cpu") = 0 [pid 5836] umount2("./232/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./232/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./232/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./232") = 0 [pid 5836] mkdir("./233", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6081 attached [pid 6081] set_robust_list(0x5555632376a0, 24) = 0 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 236 [pid 6081] chdir("./233") = 0 [pid 6081] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6081] setpgid(0, 0) = 0 [pid 6081] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6081] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6081] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6081] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6081] write(3, "1000", 4) = 4 [pid 6081] close(3) = 0 executing program [pid 6081] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6081] write(1, "executing program\n", 18) = 18 [pid 6081] memfd_create("syzkaller", 0) = 3 [pid 6081] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6081] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6081] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6081] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6081] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6081] close(3) = 0 [pid 6081] close(4) = 0 [pid 6081] mkdir("./file2", 0777) = 0 [pid 6081] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6081] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6081] chdir("./file2") = 0 [pid 6081] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6081] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6081] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6081] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6081] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [ 221.254766][ T6081] loop0: detected capacity change from 0 to 128 [pid 6081] close(3) = 0 [pid 6081] close(4) = 0 [pid 6081] close(5) = -1 EBADF (Bad file descriptor) [pid 6081] close(6) = -1 EBADF (Bad file descriptor) [pid 6081] close(7) = -1 EBADF (Bad file descriptor) [pid 6081] close(8) = -1 EBADF (Bad file descriptor) [pid 6081] close(9) = -1 EBADF (Bad file descriptor) [pid 6081] close(10) = -1 EBADF (Bad file descriptor) [pid 6081] close(11) = -1 EBADF (Bad file descriptor) [pid 6081] close(12) = -1 EBADF (Bad file descriptor) [pid 6081] close(13) = -1 EBADF (Bad file descriptor) [pid 6081] close(14) = -1 EBADF (Bad file descriptor) [pid 6081] close(15) = -1 EBADF (Bad file descriptor) [pid 6081] close(16) = -1 EBADF (Bad file descriptor) [pid 6081] close(17) = -1 EBADF (Bad file descriptor) [pid 6081] close(18) = -1 EBADF (Bad file descriptor) [pid 6081] close(19) = -1 EBADF (Bad file descriptor) [pid 6081] close(20) = -1 EBADF (Bad file descriptor) [pid 6081] close(21) = -1 EBADF (Bad file descriptor) [pid 6081] close(22) = -1 EBADF (Bad file descriptor) [pid 6081] close(23) = -1 EBADF (Bad file descriptor) [pid 6081] close(24) = -1 EBADF (Bad file descriptor) [pid 6081] close(25) = -1 EBADF (Bad file descriptor) [pid 6081] close(26) = -1 EBADF (Bad file descriptor) [pid 6081] close(27) = -1 EBADF (Bad file descriptor) [pid 6081] close(28) = -1 EBADF (Bad file descriptor) [pid 6081] close(29) = -1 EBADF (Bad file descriptor) [pid 6081] exit_group(0) = ? [pid 6081] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=236, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./233", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./233", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./233/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./233/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./233/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./233/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./233/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./233/file2") = 0 [pid 5836] umount2("./233/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./233/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./233/binderfs") = 0 [pid 5836] umount2("./233/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./233/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./233/cgroup.net") = 0 [pid 5836] umount2("./233/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./233/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./233/cgroup.cpu") = 0 [pid 5836] umount2("./233/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./233/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./233/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./233") = 0 [pid 5836] mkdir("./234", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6082 attached [pid 6082] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 237 [pid 6082] <... set_robust_list resumed>) = 0 [pid 6082] chdir("./234") = 0 [pid 6082] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6082] setpgid(0, 0) = 0 [pid 6082] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6082] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6082] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6082] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6082] write(3, "1000", 4) = 4 [pid 6082] close(3) = 0 [pid 6082] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6082] write(1, "executing program\n", 18executing program ) = 18 [pid 6082] memfd_create("syzkaller", 0) = 3 [pid 6082] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6082] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6082] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6082] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6082] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6082] close(3) = 0 [pid 6082] close(4) = 0 [pid 6082] mkdir("./file2", 0777) = 0 [pid 6082] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6082] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6082] chdir("./file2") = 0 [pid 6082] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 221.835328][ T6082] loop0: detected capacity change from 0 to 128 [pid 6082] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6082] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6082] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6082] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6082] close(3) = 0 [pid 6082] close(4) = 0 [pid 6082] close(5) = -1 EBADF (Bad file descriptor) [pid 6082] close(6) = -1 EBADF (Bad file descriptor) [pid 6082] close(7) = -1 EBADF (Bad file descriptor) [pid 6082] close(8) = -1 EBADF (Bad file descriptor) [pid 6082] close(9) = -1 EBADF (Bad file descriptor) [pid 6082] close(10) = -1 EBADF (Bad file descriptor) [pid 6082] close(11) = -1 EBADF (Bad file descriptor) [pid 6082] close(12) = -1 EBADF (Bad file descriptor) [pid 6082] close(13) = -1 EBADF (Bad file descriptor) [pid 6082] close(14) = -1 EBADF (Bad file descriptor) [pid 6082] close(15) = -1 EBADF (Bad file descriptor) [pid 6082] close(16) = -1 EBADF (Bad file descriptor) [pid 6082] close(17) = -1 EBADF (Bad file descriptor) [pid 6082] close(18) = -1 EBADF (Bad file descriptor) [pid 6082] close(19) = -1 EBADF (Bad file descriptor) [pid 6082] close(20) = -1 EBADF (Bad file descriptor) [pid 6082] close(21) = -1 EBADF (Bad file descriptor) [pid 6082] close(22) = -1 EBADF (Bad file descriptor) [pid 6082] close(23) = -1 EBADF (Bad file descriptor) [pid 6082] close(24) = -1 EBADF (Bad file descriptor) [pid 6082] close(25) = -1 EBADF (Bad file descriptor) [pid 6082] close(26) = -1 EBADF (Bad file descriptor) [pid 6082] close(27) = -1 EBADF (Bad file descriptor) [pid 6082] close(28) = -1 EBADF (Bad file descriptor) [pid 6082] close(29) = -1 EBADF (Bad file descriptor) [pid 6082] exit_group(0) = ? [pid 6082] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=237, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5836] umount2("./234", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./234", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./234/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./234/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./234/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./234/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./234/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./234/file2") = 0 [pid 5836] umount2("./234/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./234/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./234/binderfs") = 0 [pid 5836] umount2("./234/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./234/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./234/cgroup.net") = 0 [pid 5836] umount2("./234/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./234/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./234/cgroup.cpu") = 0 [pid 5836] umount2("./234/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./234/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./234/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./234") = 0 [pid 5836] mkdir("./235", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6083 attached [pid 6083] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 238 [pid 6083] <... set_robust_list resumed>) = 0 [pid 6083] chdir("./235") = 0 [pid 6083] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6083] setpgid(0, 0) = 0 [pid 6083] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 executing program [pid 6083] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6083] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6083] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6083] write(3, "1000", 4) = 4 [pid 6083] close(3) = 0 [pid 6083] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6083] write(1, "executing program\n", 18) = 18 [pid 6083] memfd_create("syzkaller", 0) = 3 [pid 6083] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6083] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6083] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6083] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6083] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6083] close(3) = 0 [pid 6083] close(4) = 0 [pid 6083] mkdir("./file2", 0777) = 0 [pid 6083] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6083] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6083] chdir("./file2") = 0 [pid 6083] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 222.443784][ T6083] loop0: detected capacity change from 0 to 128 [pid 6083] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6083] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6083] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6083] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6083] close(3) = 0 [pid 6083] close(4) = 0 [pid 6083] close(5) = -1 EBADF (Bad file descriptor) [pid 6083] close(6) = -1 EBADF (Bad file descriptor) [pid 6083] close(7) = -1 EBADF (Bad file descriptor) [pid 6083] close(8) = -1 EBADF (Bad file descriptor) [pid 6083] close(9) = -1 EBADF (Bad file descriptor) [pid 6083] close(10) = -1 EBADF (Bad file descriptor) [pid 6083] close(11) = -1 EBADF (Bad file descriptor) [pid 6083] close(12) = -1 EBADF (Bad file descriptor) [pid 6083] close(13) = -1 EBADF (Bad file descriptor) [pid 6083] close(14) = -1 EBADF (Bad file descriptor) [pid 6083] close(15) = -1 EBADF (Bad file descriptor) [pid 6083] close(16) = -1 EBADF (Bad file descriptor) [pid 6083] close(17) = -1 EBADF (Bad file descriptor) [pid 6083] close(18) = -1 EBADF (Bad file descriptor) [pid 6083] close(19) = -1 EBADF (Bad file descriptor) [pid 6083] close(20) = -1 EBADF (Bad file descriptor) [pid 6083] close(21) = -1 EBADF (Bad file descriptor) [pid 6083] close(22) = -1 EBADF (Bad file descriptor) [pid 6083] close(23) = -1 EBADF (Bad file descriptor) [pid 6083] close(24) = -1 EBADF (Bad file descriptor) [pid 6083] close(25) = -1 EBADF (Bad file descriptor) [pid 6083] close(26) = -1 EBADF (Bad file descriptor) [pid 6083] close(27) = -1 EBADF (Bad file descriptor) [pid 6083] close(28) = -1 EBADF (Bad file descriptor) [pid 6083] close(29) = -1 EBADF (Bad file descriptor) [pid 6083] exit_group(0) = ? [pid 6083] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=238, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] umount2("./235", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./235", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./235/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./235/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./235/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./235/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./235/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./235/file2") = 0 [pid 5836] umount2("./235/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./235/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./235/binderfs") = 0 [pid 5836] umount2("./235/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./235/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./235/cgroup.net") = 0 [pid 5836] umount2("./235/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./235/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./235/cgroup.cpu") = 0 [pid 5836] umount2("./235/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./235/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./235/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./235") = 0 [pid 5836] mkdir("./236", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6084 attached [pid 6084] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 239 [pid 6084] <... set_robust_list resumed>) = 0 [pid 6084] chdir("./236") = 0 [pid 6084] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6084] setpgid(0, 0) = 0 [pid 6084] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6084] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6084] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6084] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6084] write(3, "1000", 4) = 4 [pid 6084] close(3) = 0 [pid 6084] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6084] write(1, "executing program\n", 18) = 18 [pid 6084] memfd_create("syzkaller", 0) = 3 [pid 6084] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6084] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6084] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6084] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6084] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6084] close(3) = 0 [pid 6084] close(4) = 0 [pid 6084] mkdir("./file2", 0777) = 0 [pid 6084] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6084] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6084] chdir("./file2") = 0 [pid 6084] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 222.973717][ T6084] loop0: detected capacity change from 0 to 128 [pid 6084] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6084] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6084] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6084] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6084] close(3) = 0 [pid 6084] close(4) = 0 [pid 6084] close(5) = -1 EBADF (Bad file descriptor) [pid 6084] close(6) = -1 EBADF (Bad file descriptor) [pid 6084] close(7) = -1 EBADF (Bad file descriptor) [pid 6084] close(8) = -1 EBADF (Bad file descriptor) [pid 6084] close(9) = -1 EBADF (Bad file descriptor) [pid 6084] close(10) = -1 EBADF (Bad file descriptor) [pid 6084] close(11) = -1 EBADF (Bad file descriptor) [pid 6084] close(12) = -1 EBADF (Bad file descriptor) [pid 6084] close(13) = -1 EBADF (Bad file descriptor) [pid 6084] close(14) = -1 EBADF (Bad file descriptor) [pid 6084] close(15) = -1 EBADF (Bad file descriptor) [pid 6084] close(16) = -1 EBADF (Bad file descriptor) [pid 6084] close(17) = -1 EBADF (Bad file descriptor) [pid 6084] close(18) = -1 EBADF (Bad file descriptor) [pid 6084] close(19) = -1 EBADF (Bad file descriptor) [pid 6084] close(20) = -1 EBADF (Bad file descriptor) [pid 6084] close(21) = -1 EBADF (Bad file descriptor) [pid 6084] close(22) = -1 EBADF (Bad file descriptor) [pid 6084] close(23) = -1 EBADF (Bad file descriptor) [pid 6084] close(24) = -1 EBADF (Bad file descriptor) [pid 6084] close(25) = -1 EBADF (Bad file descriptor) [pid 6084] close(26) = -1 EBADF (Bad file descriptor) [pid 6084] close(27) = -1 EBADF (Bad file descriptor) [pid 6084] close(28) = -1 EBADF (Bad file descriptor) [pid 6084] close(29) = -1 EBADF (Bad file descriptor) [pid 6084] exit_group(0) = ? [pid 6084] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=239, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] umount2("./236", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./236", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./236/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./236/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./236/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./236/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./236/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./236/file2") = 0 [pid 5836] umount2("./236/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./236/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./236/binderfs") = 0 [pid 5836] umount2("./236/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./236/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./236/cgroup.net") = 0 [pid 5836] umount2("./236/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./236/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./236/cgroup.cpu") = 0 [pid 5836] umount2("./236/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./236/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./236/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./236") = 0 [pid 5836] mkdir("./237", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6085 attached , child_tidptr=0x555563237690) = 240 [pid 6085] set_robust_list(0x5555632376a0, 24) = 0 [pid 6085] chdir("./237") = 0 [pid 6085] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6085] setpgid(0, 0) = 0 [pid 6085] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6085] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6085] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6085] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6085] write(3, "1000", 4) = 4 [pid 6085] close(3) = 0 [pid 6085] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6085] write(1, "executing program\n", 18) = 18 [pid 6085] memfd_create("syzkaller", 0) = 3 [pid 6085] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6085] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6085] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6085] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6085] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6085] close(3) = 0 [pid 6085] close(4) = 0 [pid 6085] mkdir("./file2", 0777) = 0 [pid 6085] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6085] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6085] chdir("./file2") = 0 [pid 6085] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6085] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6085] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6085] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6085] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6085] close(3) = 0 [pid 6085] close(4) = 0 [pid 6085] close(5) = -1 EBADF (Bad file descriptor) [pid 6085] close(6) = -1 EBADF (Bad file descriptor) [pid 6085] close(7) = -1 EBADF (Bad file descriptor) [pid 6085] close(8) = -1 EBADF (Bad file descriptor) [pid 6085] close(9) = -1 EBADF (Bad file descriptor) [pid 6085] close(10) = -1 EBADF (Bad file descriptor) [pid 6085] close(11) = -1 EBADF (Bad file descriptor) [pid 6085] close(12) = -1 EBADF (Bad file descriptor) [pid 6085] close(13) = -1 EBADF (Bad file descriptor) [pid 6085] close(14) = -1 EBADF (Bad file descriptor) [pid 6085] close(15) = -1 EBADF (Bad file descriptor) [pid 6085] close(16) = -1 EBADF (Bad file descriptor) [pid 6085] close(17) = -1 EBADF (Bad file descriptor) [pid 6085] close(18) = -1 EBADF (Bad file descriptor) [pid 6085] close(19) = -1 EBADF (Bad file descriptor) [pid 6085] close(20) = -1 EBADF (Bad file descriptor) [pid 6085] close(21) = -1 EBADF (Bad file descriptor) [pid 6085] close(22) = -1 EBADF (Bad file descriptor) [pid 6085] close(23) = -1 EBADF (Bad file descriptor) [pid 6085] close(24) = -1 EBADF (Bad file descriptor) [pid 6085] close(25) = -1 EBADF (Bad file descriptor) [ 223.605847][ T6085] loop0: detected capacity change from 0 to 128 [pid 6085] close(26) = -1 EBADF (Bad file descriptor) [pid 6085] close(27) = -1 EBADF (Bad file descriptor) [pid 6085] close(28) = -1 EBADF (Bad file descriptor) [pid 6085] close(29) = -1 EBADF (Bad file descriptor) [pid 6085] exit_group(0) = ? [pid 6085] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=240, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./237", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./237", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./237/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./237/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./237/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./237/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./237/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./237/file2") = 0 [pid 5836] umount2("./237/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./237/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./237/binderfs") = 0 [pid 5836] umount2("./237/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./237/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./237/cgroup.net") = 0 [pid 5836] umount2("./237/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./237/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./237/cgroup.cpu") = 0 [pid 5836] umount2("./237/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./237/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./237/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./237") = 0 [pid 5836] mkdir("./238", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6086 attached [pid 6086] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 241 [pid 6086] <... set_robust_list resumed>) = 0 [pid 6086] chdir("./238") = 0 [pid 6086] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6086] setpgid(0, 0) = 0 [pid 6086] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6086] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6086] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6086] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6086] write(3, "1000", 4) = 4 [pid 6086] close(3) = 0 [pid 6086] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6086] write(1, "executing program\n", 18executing program ) = 18 [pid 6086] memfd_create("syzkaller", 0) = 3 [pid 6086] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6086] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6086] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6086] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6086] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6086] close(3) = 0 [pid 6086] close(4) = 0 [pid 6086] mkdir("./file2", 0777) = 0 [pid 6086] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6086] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6086] chdir("./file2") = 0 [pid 6086] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6086] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6086] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6086] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6086] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [ 224.111741][ T6086] loop0: detected capacity change from 0 to 128 [pid 6086] close(3) = 0 [pid 6086] close(4) = 0 [pid 6086] close(5) = -1 EBADF (Bad file descriptor) [pid 6086] close(6) = -1 EBADF (Bad file descriptor) [pid 6086] close(7) = -1 EBADF (Bad file descriptor) [pid 6086] close(8) = -1 EBADF (Bad file descriptor) [pid 6086] close(9) = -1 EBADF (Bad file descriptor) [pid 6086] close(10) = -1 EBADF (Bad file descriptor) [pid 6086] close(11) = -1 EBADF (Bad file descriptor) [pid 6086] close(12) = -1 EBADF (Bad file descriptor) [pid 6086] close(13) = -1 EBADF (Bad file descriptor) [pid 6086] close(14) = -1 EBADF (Bad file descriptor) [pid 6086] close(15) = -1 EBADF (Bad file descriptor) [pid 6086] close(16) = -1 EBADF (Bad file descriptor) [pid 6086] close(17) = -1 EBADF (Bad file descriptor) [pid 6086] close(18) = -1 EBADF (Bad file descriptor) [pid 6086] close(19) = -1 EBADF (Bad file descriptor) [pid 6086] close(20) = -1 EBADF (Bad file descriptor) [pid 6086] close(21) = -1 EBADF (Bad file descriptor) [pid 6086] close(22) = -1 EBADF (Bad file descriptor) [pid 6086] close(23) = -1 EBADF (Bad file descriptor) [pid 6086] close(24) = -1 EBADF (Bad file descriptor) [pid 6086] close(25) = -1 EBADF (Bad file descriptor) [pid 6086] close(26) = -1 EBADF (Bad file descriptor) [pid 6086] close(27) = -1 EBADF (Bad file descriptor) [pid 6086] close(28) = -1 EBADF (Bad file descriptor) [pid 6086] close(29) = -1 EBADF (Bad file descriptor) [pid 6086] exit_group(0) = ? [pid 6086] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=241, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5836] umount2("./238", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./238", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./238/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./238/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./238/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./238/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./238/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./238/file2") = 0 [pid 5836] umount2("./238/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./238/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./238/binderfs") = 0 [pid 5836] umount2("./238/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./238/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./238/cgroup.net") = 0 [pid 5836] umount2("./238/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./238/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./238/cgroup.cpu") = 0 [pid 5836] umount2("./238/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./238/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./238/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./238") = 0 [pid 5836] mkdir("./239", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6087 attached [pid 6087] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 242 [pid 6087] <... set_robust_list resumed>) = 0 [pid 6087] chdir("./239") = 0 [pid 6087] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6087] setpgid(0, 0) = 0 [pid 6087] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6087] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6087] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6087] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6087] write(3, "1000", 4) = 4 [pid 6087] close(3) = 0 [pid 6087] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6087] write(1, "executing program\n", 18executing program ) = 18 [pid 6087] memfd_create("syzkaller", 0) = 3 [pid 6087] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6087] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6087] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6087] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6087] close(3) = 0 [pid 6087] close(4) = 0 [pid 6087] mkdir("./file2", 0777) = 0 [pid 6087] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6087] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6087] chdir("./file2") = 0 [pid 6087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6087] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6087] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6087] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [ 224.586612][ T6087] loop0: detected capacity change from 0 to 128 [pid 6087] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6087] close(3) = 0 [pid 6087] close(4) = 0 [pid 6087] close(5) = -1 EBADF (Bad file descriptor) [pid 6087] close(6) = -1 EBADF (Bad file descriptor) [pid 6087] close(7) = -1 EBADF (Bad file descriptor) [pid 6087] close(8) = -1 EBADF (Bad file descriptor) [pid 6087] close(9) = -1 EBADF (Bad file descriptor) [pid 6087] close(10) = -1 EBADF (Bad file descriptor) [pid 6087] close(11) = -1 EBADF (Bad file descriptor) [pid 6087] close(12) = -1 EBADF (Bad file descriptor) [pid 6087] close(13) = -1 EBADF (Bad file descriptor) [pid 6087] close(14) = -1 EBADF (Bad file descriptor) [pid 6087] close(15) = -1 EBADF (Bad file descriptor) [pid 6087] close(16) = -1 EBADF (Bad file descriptor) [pid 6087] close(17) = -1 EBADF (Bad file descriptor) [pid 6087] close(18) = -1 EBADF (Bad file descriptor) [pid 6087] close(19) = -1 EBADF (Bad file descriptor) [pid 6087] close(20) = -1 EBADF (Bad file descriptor) [pid 6087] close(21) = -1 EBADF (Bad file descriptor) [pid 6087] close(22) = -1 EBADF (Bad file descriptor) [pid 6087] close(23) = -1 EBADF (Bad file descriptor) [pid 6087] close(24) = -1 EBADF (Bad file descriptor) [pid 6087] close(25) = -1 EBADF (Bad file descriptor) [pid 6087] close(26) = -1 EBADF (Bad file descriptor) [pid 6087] close(27) = -1 EBADF (Bad file descriptor) [pid 6087] close(28) = -1 EBADF (Bad file descriptor) [pid 6087] close(29) = -1 EBADF (Bad file descriptor) [pid 6087] exit_group(0) = ? [pid 6087] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=242, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./239", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./239", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./239/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./239/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./239/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./239/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./239/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./239/file2") = 0 [pid 5836] umount2("./239/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./239/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./239/binderfs") = 0 [pid 5836] umount2("./239/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./239/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./239/cgroup.net") = 0 [pid 5836] umount2("./239/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./239/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./239/cgroup.cpu") = 0 [pid 5836] umount2("./239/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./239/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./239/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./239") = 0 [pid 5836] mkdir("./240", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6088 attached [pid 6088] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 243 [pid 6088] <... set_robust_list resumed>) = 0 [pid 6088] chdir("./240") = 0 [pid 6088] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6088] setpgid(0, 0) = 0 [pid 6088] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6088] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6088] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6088] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6088] write(3, "1000", 4) = 4 [pid 6088] close(3) = 0 [pid 6088] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6088] write(1, "executing program\n", 18executing program ) = 18 [pid 6088] memfd_create("syzkaller", 0) = 3 [pid 6088] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6088] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6088] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6088] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6088] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6088] close(3) = 0 [pid 6088] close(4) = 0 [pid 6088] mkdir("./file2", 0777) = 0 [pid 6088] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6088] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6088] chdir("./file2") = 0 [pid 6088] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 225.136362][ T6088] loop0: detected capacity change from 0 to 128 [pid 6088] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6088] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6088] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6088] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6088] close(3) = 0 [pid 6088] close(4) = 0 [pid 6088] close(5) = -1 EBADF (Bad file descriptor) [pid 6088] close(6) = -1 EBADF (Bad file descriptor) [pid 6088] close(7) = -1 EBADF (Bad file descriptor) [pid 6088] close(8) = -1 EBADF (Bad file descriptor) [pid 6088] close(9) = -1 EBADF (Bad file descriptor) [pid 6088] close(10) = -1 EBADF (Bad file descriptor) [pid 6088] close(11) = -1 EBADF (Bad file descriptor) [pid 6088] close(12) = -1 EBADF (Bad file descriptor) [pid 6088] close(13) = -1 EBADF (Bad file descriptor) [pid 6088] close(14) = -1 EBADF (Bad file descriptor) [pid 6088] close(15) = -1 EBADF (Bad file descriptor) [pid 6088] close(16) = -1 EBADF (Bad file descriptor) [pid 6088] close(17) = -1 EBADF (Bad file descriptor) [pid 6088] close(18) = -1 EBADF (Bad file descriptor) [pid 6088] close(19) = -1 EBADF (Bad file descriptor) [pid 6088] close(20) = -1 EBADF (Bad file descriptor) [pid 6088] close(21) = -1 EBADF (Bad file descriptor) [pid 6088] close(22) = -1 EBADF (Bad file descriptor) [pid 6088] close(23) = -1 EBADF (Bad file descriptor) [pid 6088] close(24) = -1 EBADF (Bad file descriptor) [pid 6088] close(25) = -1 EBADF (Bad file descriptor) [pid 6088] close(26) = -1 EBADF (Bad file descriptor) [pid 6088] close(27) = -1 EBADF (Bad file descriptor) [pid 6088] close(28) = -1 EBADF (Bad file descriptor) [pid 6088] close(29) = -1 EBADF (Bad file descriptor) [pid 6088] exit_group(0) = ? [pid 6088] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=243, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5836] umount2("./240", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./240", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./240/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./240/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./240/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./240/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./240/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./240/file2") = 0 [pid 5836] umount2("./240/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./240/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./240/binderfs") = 0 [pid 5836] umount2("./240/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./240/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./240/cgroup.net") = 0 [pid 5836] umount2("./240/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./240/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./240/cgroup.cpu") = 0 [pid 5836] umount2("./240/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./240/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./240/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./240") = 0 [pid 5836] mkdir("./241", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6089 attached [pid 6089] set_robust_list(0x5555632376a0, 24) = 0 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 244 [pid 6089] chdir("./241") = 0 [pid 6089] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6089] setpgid(0, 0) = 0 [pid 6089] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6089] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6089] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6089] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6089] write(3, "1000", 4) = 4 [pid 6089] close(3) = 0 [pid 6089] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6089] write(1, "executing program\n", 18) = 18 [pid 6089] memfd_create("syzkaller", 0) = 3 [pid 6089] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6089] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6089] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6089] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6089] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6089] close(3) = 0 [pid 6089] close(4) = 0 [pid 6089] mkdir("./file2", 0777) = 0 [pid 6089] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6089] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6089] chdir("./file2") = 0 [pid 6089] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6089] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6089] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6089] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [ 225.710131][ T6089] loop0: detected capacity change from 0 to 128 [pid 6089] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6089] close(3) = 0 [pid 6089] close(4) = 0 [pid 6089] close(5) = -1 EBADF (Bad file descriptor) [pid 6089] close(6) = -1 EBADF (Bad file descriptor) [pid 6089] close(7) = -1 EBADF (Bad file descriptor) [pid 6089] close(8) = -1 EBADF (Bad file descriptor) [pid 6089] close(9) = -1 EBADF (Bad file descriptor) [pid 6089] close(10) = -1 EBADF (Bad file descriptor) [pid 6089] close(11) = -1 EBADF (Bad file descriptor) [pid 6089] close(12) = -1 EBADF (Bad file descriptor) [pid 6089] close(13) = -1 EBADF (Bad file descriptor) [pid 6089] close(14) = -1 EBADF (Bad file descriptor) [pid 6089] close(15) = -1 EBADF (Bad file descriptor) [pid 6089] close(16) = -1 EBADF (Bad file descriptor) [pid 6089] close(17) = -1 EBADF (Bad file descriptor) [pid 6089] close(18) = -1 EBADF (Bad file descriptor) [pid 6089] close(19) = -1 EBADF (Bad file descriptor) [pid 6089] close(20) = -1 EBADF (Bad file descriptor) [pid 6089] close(21) = -1 EBADF (Bad file descriptor) [pid 6089] close(22) = -1 EBADF (Bad file descriptor) [pid 6089] close(23) = -1 EBADF (Bad file descriptor) [pid 6089] close(24) = -1 EBADF (Bad file descriptor) [pid 6089] close(25) = -1 EBADF (Bad file descriptor) [pid 6089] close(26) = -1 EBADF (Bad file descriptor) [pid 6089] close(27) = -1 EBADF (Bad file descriptor) [pid 6089] close(28) = -1 EBADF (Bad file descriptor) [pid 6089] close(29) = -1 EBADF (Bad file descriptor) [pid 6089] exit_group(0) = ? [pid 6089] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=244, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./241", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./241", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./241/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./241/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./241/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./241/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./241/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./241/file2") = 0 [pid 5836] umount2("./241/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./241/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./241/binderfs") = 0 [pid 5836] umount2("./241/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./241/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./241/cgroup.net") = 0 [pid 5836] umount2("./241/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./241/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./241/cgroup.cpu") = 0 [pid 5836] umount2("./241/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./241/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./241/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./241") = 0 [pid 5836] mkdir("./242", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6090 attached [pid 6090] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 245 [pid 6090] <... set_robust_list resumed>) = 0 [pid 6090] chdir("./242") = 0 [pid 6090] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6090] setpgid(0, 0) = 0 [pid 6090] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6090] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6090] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6090] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6090] write(3, "1000", 4) = 4 [pid 6090] close(3) = 0 [pid 6090] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6090] write(1, "executing program\n", 18executing program ) = 18 [pid 6090] memfd_create("syzkaller", 0) = 3 [pid 6090] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6090] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6090] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6090] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6090] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6090] close(3) = 0 [pid 6090] close(4) = 0 [pid 6090] mkdir("./file2", 0777) = 0 [pid 6090] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6090] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6090] chdir("./file2") = 0 [pid 6090] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6090] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6090] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6090] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6090] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [ 226.225432][ T6090] loop0: detected capacity change from 0 to 128 [pid 6090] close(3) = 0 [pid 6090] close(4) = 0 [pid 6090] close(5) = -1 EBADF (Bad file descriptor) [pid 6090] close(6) = -1 EBADF (Bad file descriptor) [pid 6090] close(7) = -1 EBADF (Bad file descriptor) [pid 6090] close(8) = -1 EBADF (Bad file descriptor) [pid 6090] close(9) = -1 EBADF (Bad file descriptor) [pid 6090] close(10) = -1 EBADF (Bad file descriptor) [pid 6090] close(11) = -1 EBADF (Bad file descriptor) [pid 6090] close(12) = -1 EBADF (Bad file descriptor) [pid 6090] close(13) = -1 EBADF (Bad file descriptor) [pid 6090] close(14) = -1 EBADF (Bad file descriptor) [pid 6090] close(15) = -1 EBADF (Bad file descriptor) [pid 6090] close(16) = -1 EBADF (Bad file descriptor) [pid 6090] close(17) = -1 EBADF (Bad file descriptor) [pid 6090] close(18) = -1 EBADF (Bad file descriptor) [pid 6090] close(19) = -1 EBADF (Bad file descriptor) [pid 6090] close(20) = -1 EBADF (Bad file descriptor) [pid 6090] close(21) = -1 EBADF (Bad file descriptor) [pid 6090] close(22) = -1 EBADF (Bad file descriptor) [pid 6090] close(23) = -1 EBADF (Bad file descriptor) [pid 6090] close(24) = -1 EBADF (Bad file descriptor) [pid 6090] close(25) = -1 EBADF (Bad file descriptor) [pid 6090] close(26) = -1 EBADF (Bad file descriptor) [pid 6090] close(27) = -1 EBADF (Bad file descriptor) [pid 6090] close(28) = -1 EBADF (Bad file descriptor) [pid 6090] close(29) = -1 EBADF (Bad file descriptor) [pid 6090] exit_group(0) = ? [pid 6090] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=245, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./242", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./242", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./242/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./242/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./242/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./242/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./242/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./242/file2") = 0 [pid 5836] umount2("./242/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./242/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./242/binderfs") = 0 [pid 5836] umount2("./242/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./242/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./242/cgroup.net") = 0 [pid 5836] umount2("./242/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./242/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./242/cgroup.cpu") = 0 [pid 5836] umount2("./242/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./242/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./242/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./242") = 0 [pid 5836] mkdir("./243", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6091 attached [pid 6091] set_robust_list(0x5555632376a0, 24) = 0 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 246 [pid 6091] chdir("./243") = 0 [pid 6091] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6091] setpgid(0, 0) = 0 [pid 6091] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6091] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6091] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6091] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6091] write(3, "1000", 4) = 4 [pid 6091] close(3) = 0 [pid 6091] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6091] write(1, "executing program\n", 18) = 18 [pid 6091] memfd_create("syzkaller", 0) = 3 [pid 6091] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6091] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6091] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6091] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6091] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6091] close(3) = 0 [pid 6091] close(4) = 0 [pid 6091] mkdir("./file2", 0777) = 0 [pid 6091] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6091] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6091] chdir("./file2") = 0 [pid 6091] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6091] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6091] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [ 226.798975][ T6091] loop0: detected capacity change from 0 to 128 [pid 6091] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6091] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6091] close(3) = 0 [pid 6091] close(4) = 0 [pid 6091] close(5) = -1 EBADF (Bad file descriptor) [pid 6091] close(6) = -1 EBADF (Bad file descriptor) [pid 6091] close(7) = -1 EBADF (Bad file descriptor) [pid 6091] close(8) = -1 EBADF (Bad file descriptor) [pid 6091] close(9) = -1 EBADF (Bad file descriptor) [pid 6091] close(10) = -1 EBADF (Bad file descriptor) [pid 6091] close(11) = -1 EBADF (Bad file descriptor) [pid 6091] close(12) = -1 EBADF (Bad file descriptor) [pid 6091] close(13) = -1 EBADF (Bad file descriptor) [pid 6091] close(14) = -1 EBADF (Bad file descriptor) [pid 6091] close(15) = -1 EBADF (Bad file descriptor) [pid 6091] close(16) = -1 EBADF (Bad file descriptor) [pid 6091] close(17) = -1 EBADF (Bad file descriptor) [pid 6091] close(18) = -1 EBADF (Bad file descriptor) [pid 6091] close(19) = -1 EBADF (Bad file descriptor) [pid 6091] close(20) = -1 EBADF (Bad file descriptor) [pid 6091] close(21) = -1 EBADF (Bad file descriptor) [pid 6091] close(22) = -1 EBADF (Bad file descriptor) [pid 6091] close(23) = -1 EBADF (Bad file descriptor) [pid 6091] close(24) = -1 EBADF (Bad file descriptor) [pid 6091] close(25) = -1 EBADF (Bad file descriptor) [pid 6091] close(26) = -1 EBADF (Bad file descriptor) [pid 6091] close(27) = -1 EBADF (Bad file descriptor) [pid 6091] close(28) = -1 EBADF (Bad file descriptor) [pid 6091] close(29) = -1 EBADF (Bad file descriptor) [pid 6091] exit_group(0) = ? [pid 6091] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=246, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./243", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./243", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./243/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./243/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./243/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./243/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./243/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./243/file2") = 0 [pid 5836] umount2("./243/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./243/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./243/binderfs") = 0 [pid 5836] umount2("./243/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./243/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./243/cgroup.net") = 0 [pid 5836] umount2("./243/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./243/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./243/cgroup.cpu") = 0 [pid 5836] umount2("./243/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./243/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./243/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./243") = 0 [pid 5836] mkdir("./244", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6092 attached [pid 6092] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 247 [pid 6092] <... set_robust_list resumed>) = 0 [pid 6092] chdir("./244") = 0 [pid 6092] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6092] setpgid(0, 0) = 0 [pid 6092] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6092] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6092] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6092] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6092] write(3, "1000", 4) = 4 [pid 6092] close(3) = 0 [pid 6092] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6092] write(1, "executing program\n", 18executing program ) = 18 [pid 6092] memfd_create("syzkaller", 0) = 3 [pid 6092] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6092] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6092] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6092] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6092] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6092] close(3) = 0 [pid 6092] close(4) = 0 [pid 6092] mkdir("./file2", 0777) = 0 [pid 6092] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6092] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6092] chdir("./file2") = 0 [pid 6092] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6092] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6092] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6092] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6092] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6092] close(3) = 0 [pid 6092] close(4) = 0 [ 227.313698][ T6092] loop0: detected capacity change from 0 to 128 [pid 6092] close(5) = -1 EBADF (Bad file descriptor) [pid 6092] close(6) = -1 EBADF (Bad file descriptor) [pid 6092] close(7) = -1 EBADF (Bad file descriptor) [pid 6092] close(8) = -1 EBADF (Bad file descriptor) [pid 6092] close(9) = -1 EBADF (Bad file descriptor) [pid 6092] close(10) = -1 EBADF (Bad file descriptor) [pid 6092] close(11) = -1 EBADF (Bad file descriptor) [pid 6092] close(12) = -1 EBADF (Bad file descriptor) [pid 6092] close(13) = -1 EBADF (Bad file descriptor) [pid 6092] close(14) = -1 EBADF (Bad file descriptor) [pid 6092] close(15) = -1 EBADF (Bad file descriptor) [pid 6092] close(16) = -1 EBADF (Bad file descriptor) [pid 6092] close(17) = -1 EBADF (Bad file descriptor) [pid 6092] close(18) = -1 EBADF (Bad file descriptor) [pid 6092] close(19) = -1 EBADF (Bad file descriptor) [pid 6092] close(20) = -1 EBADF (Bad file descriptor) [pid 6092] close(21) = -1 EBADF (Bad file descriptor) [pid 6092] close(22) = -1 EBADF (Bad file descriptor) [pid 6092] close(23) = -1 EBADF (Bad file descriptor) [pid 6092] close(24) = -1 EBADF (Bad file descriptor) [pid 6092] close(25) = -1 EBADF (Bad file descriptor) [pid 6092] close(26) = -1 EBADF (Bad file descriptor) [pid 6092] close(27) = -1 EBADF (Bad file descriptor) [pid 6092] close(28) = -1 EBADF (Bad file descriptor) [pid 6092] close(29) = -1 EBADF (Bad file descriptor) [pid 6092] exit_group(0) = ? [pid 6092] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=247, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./244", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./244", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./244/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./244/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./244/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./244/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./244/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./244/file2") = 0 [pid 5836] umount2("./244/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./244/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./244/binderfs") = 0 [pid 5836] umount2("./244/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./244/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./244/cgroup.net") = 0 [pid 5836] umount2("./244/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./244/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./244/cgroup.cpu") = 0 [pid 5836] umount2("./244/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./244/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./244/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./244") = 0 [pid 5836] mkdir("./245", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6093 attached [pid 6093] set_robust_list(0x5555632376a0, 24) = 0 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 248 [pid 6093] chdir("./245") = 0 [pid 6093] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6093] setpgid(0, 0) = 0 [pid 6093] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6093] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6093] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6093] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6093] write(3, "1000", 4) = 4 [pid 6093] close(3) = 0 [pid 6093] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6093] write(1, "executing program\n", 18executing program ) = 18 [pid 6093] memfd_create("syzkaller", 0) = 3 [pid 6093] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6093] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6093] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6093] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6093] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6093] close(3) = 0 [pid 6093] close(4) = 0 [pid 6093] mkdir("./file2", 0777) = 0 [pid 6093] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6093] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6093] chdir("./file2") = 0 [pid 6093] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6093] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6093] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6093] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6093] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6093] close(3) = 0 [ 227.904330][ T6093] loop0: detected capacity change from 0 to 128 [pid 6093] close(4) = 0 [pid 6093] close(5) = -1 EBADF (Bad file descriptor) [pid 6093] close(6) = -1 EBADF (Bad file descriptor) [pid 6093] close(7) = -1 EBADF (Bad file descriptor) [pid 6093] close(8) = -1 EBADF (Bad file descriptor) [pid 6093] close(9) = -1 EBADF (Bad file descriptor) [pid 6093] close(10) = -1 EBADF (Bad file descriptor) [pid 6093] close(11) = -1 EBADF (Bad file descriptor) [pid 6093] close(12) = -1 EBADF (Bad file descriptor) [pid 6093] close(13) = -1 EBADF (Bad file descriptor) [pid 6093] close(14) = -1 EBADF (Bad file descriptor) [pid 6093] close(15) = -1 EBADF (Bad file descriptor) [pid 6093] close(16) = -1 EBADF (Bad file descriptor) [pid 6093] close(17) = -1 EBADF (Bad file descriptor) [pid 6093] close(18) = -1 EBADF (Bad file descriptor) [pid 6093] close(19) = -1 EBADF (Bad file descriptor) [pid 6093] close(20) = -1 EBADF (Bad file descriptor) [pid 6093] close(21) = -1 EBADF (Bad file descriptor) [pid 6093] close(22) = -1 EBADF (Bad file descriptor) [pid 6093] close(23) = -1 EBADF (Bad file descriptor) [pid 6093] close(24) = -1 EBADF (Bad file descriptor) [pid 6093] close(25) = -1 EBADF (Bad file descriptor) [pid 6093] close(26) = -1 EBADF (Bad file descriptor) [pid 6093] close(27) = -1 EBADF (Bad file descriptor) [pid 6093] close(28) = -1 EBADF (Bad file descriptor) [pid 6093] close(29) = -1 EBADF (Bad file descriptor) [pid 6093] exit_group(0) = ? [pid 6093] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=248, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./245", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./245", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./245/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./245/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./245/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./245/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./245/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./245/file2") = 0 [pid 5836] umount2("./245/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./245/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./245/binderfs") = 0 [pid 5836] umount2("./245/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./245/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./245/cgroup.net") = 0 [pid 5836] umount2("./245/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./245/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./245/cgroup.cpu") = 0 [pid 5836] umount2("./245/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./245/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./245/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./245") = 0 [pid 5836] mkdir("./246", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6094 attached [pid 6094] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 249 [pid 6094] <... set_robust_list resumed>) = 0 [pid 6094] chdir("./246") = 0 [pid 6094] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6094] setpgid(0, 0) = 0 [pid 6094] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6094] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6094] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6094] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6094] write(3, "1000", 4) = 4 [pid 6094] close(3) = 0 [pid 6094] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6094] write(1, "executing program\n", 18executing program ) = 18 [pid 6094] memfd_create("syzkaller", 0) = 3 [pid 6094] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6094] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6094] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6094] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6094] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6094] close(3) = 0 [pid 6094] close(4) = 0 [pid 6094] mkdir("./file2", 0777) = 0 [pid 6094] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6094] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6094] chdir("./file2") = 0 [pid 6094] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 228.503799][ T6094] loop0: detected capacity change from 0 to 128 [pid 6094] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6094] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6094] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6094] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6094] close(3) = 0 [pid 6094] close(4) = 0 [pid 6094] close(5) = -1 EBADF (Bad file descriptor) [pid 6094] close(6) = -1 EBADF (Bad file descriptor) [pid 6094] close(7) = -1 EBADF (Bad file descriptor) [pid 6094] close(8) = -1 EBADF (Bad file descriptor) [pid 6094] close(9) = -1 EBADF (Bad file descriptor) [pid 6094] close(10) = -1 EBADF (Bad file descriptor) [pid 6094] close(11) = -1 EBADF (Bad file descriptor) [pid 6094] close(12) = -1 EBADF (Bad file descriptor) [pid 6094] close(13) = -1 EBADF (Bad file descriptor) [pid 6094] close(14) = -1 EBADF (Bad file descriptor) [pid 6094] close(15) = -1 EBADF (Bad file descriptor) [pid 6094] close(16) = -1 EBADF (Bad file descriptor) [pid 6094] close(17) = -1 EBADF (Bad file descriptor) [pid 6094] close(18) = -1 EBADF (Bad file descriptor) [pid 6094] close(19) = -1 EBADF (Bad file descriptor) [pid 6094] close(20) = -1 EBADF (Bad file descriptor) [pid 6094] close(21) = -1 EBADF (Bad file descriptor) [pid 6094] close(22) = -1 EBADF (Bad file descriptor) [pid 6094] close(23) = -1 EBADF (Bad file descriptor) [pid 6094] close(24) = -1 EBADF (Bad file descriptor) [pid 6094] close(25) = -1 EBADF (Bad file descriptor) [pid 6094] close(26) = -1 EBADF (Bad file descriptor) [pid 6094] close(27) = -1 EBADF (Bad file descriptor) [pid 6094] close(28) = -1 EBADF (Bad file descriptor) [pid 6094] close(29) = -1 EBADF (Bad file descriptor) [pid 6094] exit_group(0) = ? [pid 6094] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=249, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./246", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./246", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./246/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./246/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./246/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./246/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./246/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./246/file2") = 0 [pid 5836] umount2("./246/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./246/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./246/binderfs") = 0 [pid 5836] umount2("./246/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./246/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./246/cgroup.net") = 0 [pid 5836] umount2("./246/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./246/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./246/cgroup.cpu") = 0 [pid 5836] umount2("./246/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./246/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./246/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./246") = 0 [pid 5836] mkdir("./247", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6095 attached , child_tidptr=0x555563237690) = 250 [pid 6095] set_robust_list(0x5555632376a0, 24) = 0 [pid 6095] chdir("./247") = 0 [pid 6095] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6095] setpgid(0, 0) = 0 [pid 6095] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6095] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6095] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6095] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6095] write(3, "1000", 4) = 4 [pid 6095] close(3) = 0 [pid 6095] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6095] write(1, "executing program\n", 18) = 18 [pid 6095] memfd_create("syzkaller", 0) = 3 [pid 6095] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6095] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6095] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6095] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6095] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6095] close(3) = 0 [pid 6095] close(4) = 0 [pid 6095] mkdir("./file2", 0777) = 0 [pid 6095] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6095] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6095] chdir("./file2") = 0 [pid 6095] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 229.075112][ T6095] loop0: detected capacity change from 0 to 128 [pid 6095] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6095] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6095] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6095] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6095] close(3) = 0 [pid 6095] close(4) = 0 [pid 6095] close(5) = -1 EBADF (Bad file descriptor) [pid 6095] close(6) = -1 EBADF (Bad file descriptor) [pid 6095] close(7) = -1 EBADF (Bad file descriptor) [pid 6095] close(8) = -1 EBADF (Bad file descriptor) [pid 6095] close(9) = -1 EBADF (Bad file descriptor) [pid 6095] close(10) = -1 EBADF (Bad file descriptor) [pid 6095] close(11) = -1 EBADF (Bad file descriptor) [pid 6095] close(12) = -1 EBADF (Bad file descriptor) [pid 6095] close(13) = -1 EBADF (Bad file descriptor) [pid 6095] close(14) = -1 EBADF (Bad file descriptor) [pid 6095] close(15) = -1 EBADF (Bad file descriptor) [pid 6095] close(16) = -1 EBADF (Bad file descriptor) [pid 6095] close(17) = -1 EBADF (Bad file descriptor) [pid 6095] close(18) = -1 EBADF (Bad file descriptor) [pid 6095] close(19) = -1 EBADF (Bad file descriptor) [pid 6095] close(20) = -1 EBADF (Bad file descriptor) [pid 6095] close(21) = -1 EBADF (Bad file descriptor) [pid 6095] close(22) = -1 EBADF (Bad file descriptor) [pid 6095] close(23) = -1 EBADF (Bad file descriptor) [pid 6095] close(24) = -1 EBADF (Bad file descriptor) [pid 6095] close(25) = -1 EBADF (Bad file descriptor) [pid 6095] close(26) = -1 EBADF (Bad file descriptor) [pid 6095] close(27) = -1 EBADF (Bad file descriptor) [pid 6095] close(28) = -1 EBADF (Bad file descriptor) [pid 6095] close(29) = -1 EBADF (Bad file descriptor) [pid 6095] exit_group(0) = ? [pid 6095] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=250, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] umount2("./247", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./247", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./247/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./247/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./247/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./247/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./247/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./247/file2") = 0 [pid 5836] umount2("./247/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./247/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./247/binderfs") = 0 [pid 5836] umount2("./247/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./247/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./247/cgroup.net") = 0 [pid 5836] umount2("./247/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./247/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./247/cgroup.cpu") = 0 [pid 5836] umount2("./247/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./247/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./247/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./247") = 0 [pid 5836] mkdir("./248", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6096 attached [pid 6096] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 251 [pid 6096] <... set_robust_list resumed>) = 0 [pid 6096] chdir("./248") = 0 [pid 6096] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6096] setpgid(0, 0) = 0 [pid 6096] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6096] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6096] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6096] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6096] write(3, "1000", 4) = 4 [pid 6096] close(3) = 0 [pid 6096] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6096] write(1, "executing program\n", 18executing program ) = 18 [pid 6096] memfd_create("syzkaller", 0) = 3 [pid 6096] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6096] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6096] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6096] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6096] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6096] close(3) = 0 [pid 6096] close(4) = 0 [pid 6096] mkdir("./file2", 0777) = 0 [pid 6096] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6096] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [ 229.614867][ T6096] loop0: detected capacity change from 0 to 128 [pid 6096] chdir("./file2") = 0 [pid 6096] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6096] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6096] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6096] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6096] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6096] close(3) = 0 [pid 6096] close(4) = 0 [pid 6096] close(5) = -1 EBADF (Bad file descriptor) [pid 6096] close(6) = -1 EBADF (Bad file descriptor) [pid 6096] close(7) = -1 EBADF (Bad file descriptor) [pid 6096] close(8) = -1 EBADF (Bad file descriptor) [pid 6096] close(9) = -1 EBADF (Bad file descriptor) [pid 6096] close(10) = -1 EBADF (Bad file descriptor) [pid 6096] close(11) = -1 EBADF (Bad file descriptor) [pid 6096] close(12) = -1 EBADF (Bad file descriptor) [pid 6096] close(13) = -1 EBADF (Bad file descriptor) [pid 6096] close(14) = -1 EBADF (Bad file descriptor) [pid 6096] close(15) = -1 EBADF (Bad file descriptor) [pid 6096] close(16) = -1 EBADF (Bad file descriptor) [pid 6096] close(17) = -1 EBADF (Bad file descriptor) [pid 6096] close(18) = -1 EBADF (Bad file descriptor) [pid 6096] close(19) = -1 EBADF (Bad file descriptor) [pid 6096] close(20) = -1 EBADF (Bad file descriptor) [pid 6096] close(21) = -1 EBADF (Bad file descriptor) [pid 6096] close(22) = -1 EBADF (Bad file descriptor) [pid 6096] close(23) = -1 EBADF (Bad file descriptor) [pid 6096] close(24) = -1 EBADF (Bad file descriptor) [pid 6096] close(25) = -1 EBADF (Bad file descriptor) [pid 6096] close(26) = -1 EBADF (Bad file descriptor) [pid 6096] close(27) = -1 EBADF (Bad file descriptor) [pid 6096] close(28) = -1 EBADF (Bad file descriptor) [pid 6096] close(29) = -1 EBADF (Bad file descriptor) [pid 6096] exit_group(0) = ? [pid 6096] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=251, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5836] umount2("./248", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./248", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./248/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./248/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./248/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./248/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./248/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./248/file2") = 0 [pid 5836] umount2("./248/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./248/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./248/binderfs") = 0 [pid 5836] umount2("./248/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./248/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./248/cgroup.net") = 0 [pid 5836] umount2("./248/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./248/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./248/cgroup.cpu") = 0 [pid 5836] umount2("./248/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./248/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./248/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./248") = 0 [pid 5836] mkdir("./249", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6097 attached [pid 6097] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 252 [pid 6097] <... set_robust_list resumed>) = 0 [pid 6097] chdir("./249") = 0 [pid 6097] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6097] setpgid(0, 0) = 0 [pid 6097] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6097] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6097] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6097] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6097] write(3, "1000", 4) = 4 [pid 6097] close(3) = 0 [pid 6097] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6097] write(1, "executing program\n", 18) = 18 [pid 6097] memfd_create("syzkaller", 0) = 3 [pid 6097] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6097] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6097] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6097] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6097] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6097] close(3) = 0 [pid 6097] close(4) = 0 [pid 6097] mkdir("./file2", 0777) = 0 [pid 6097] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6097] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6097] chdir("./file2") = 0 [pid 6097] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6097] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6097] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6097] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6097] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6097] close(3) = 0 [pid 6097] close(4) = 0 [ 230.182316][ T6097] loop0: detected capacity change from 0 to 128 [pid 6097] close(5) = -1 EBADF (Bad file descriptor) [pid 6097] close(6) = -1 EBADF (Bad file descriptor) [pid 6097] close(7) = -1 EBADF (Bad file descriptor) [pid 6097] close(8) = -1 EBADF (Bad file descriptor) [pid 6097] close(9) = -1 EBADF (Bad file descriptor) [pid 6097] close(10) = -1 EBADF (Bad file descriptor) [pid 6097] close(11) = -1 EBADF (Bad file descriptor) [pid 6097] close(12) = -1 EBADF (Bad file descriptor) [pid 6097] close(13) = -1 EBADF (Bad file descriptor) [pid 6097] close(14) = -1 EBADF (Bad file descriptor) [pid 6097] close(15) = -1 EBADF (Bad file descriptor) [pid 6097] close(16) = -1 EBADF (Bad file descriptor) [pid 6097] close(17) = -1 EBADF (Bad file descriptor) [pid 6097] close(18) = -1 EBADF (Bad file descriptor) [pid 6097] close(19) = -1 EBADF (Bad file descriptor) [pid 6097] close(20) = -1 EBADF (Bad file descriptor) [pid 6097] close(21) = -1 EBADF (Bad file descriptor) [pid 6097] close(22) = -1 EBADF (Bad file descriptor) [pid 6097] close(23) = -1 EBADF (Bad file descriptor) [pid 6097] close(24) = -1 EBADF (Bad file descriptor) [pid 6097] close(25) = -1 EBADF (Bad file descriptor) [pid 6097] close(26) = -1 EBADF (Bad file descriptor) [pid 6097] close(27) = -1 EBADF (Bad file descriptor) [pid 6097] close(28) = -1 EBADF (Bad file descriptor) [pid 6097] close(29) = -1 EBADF (Bad file descriptor) [pid 6097] exit_group(0) = ? [pid 6097] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=252, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./249", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./249", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./249/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./249/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./249/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./249/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./249/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./249/file2") = 0 [pid 5836] umount2("./249/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./249/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./249/binderfs") = 0 [pid 5836] umount2("./249/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./249/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./249/cgroup.net") = 0 [pid 5836] umount2("./249/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./249/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./249/cgroup.cpu") = 0 [pid 5836] umount2("./249/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./249/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./249/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./249") = 0 [pid 5836] mkdir("./250", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6098 attached [pid 6098] set_robust_list(0x5555632376a0, 24) = 0 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 253 [pid 6098] chdir("./250") = 0 [pid 6098] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6098] setpgid(0, 0) = 0 [pid 6098] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6098] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6098] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6098] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6098] write(3, "1000", 4) = 4 [pid 6098] close(3) = 0 [pid 6098] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6098] write(1, "executing program\n", 18executing program ) = 18 [pid 6098] memfd_create("syzkaller", 0) = 3 [pid 6098] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6098] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6098] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6098] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6098] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6098] close(3) = 0 [pid 6098] close(4) = 0 [pid 6098] mkdir("./file2", 0777) = 0 [ 230.637432][ T6098] loop0: detected capacity change from 0 to 128 [pid 6098] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6098] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6098] chdir("./file2") = 0 [pid 6098] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6098] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6098] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6098] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6098] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6098] close(3) = 0 [pid 6098] close(4) = 0 [pid 6098] close(5) = -1 EBADF (Bad file descriptor) [pid 6098] close(6) = -1 EBADF (Bad file descriptor) [pid 6098] close(7) = -1 EBADF (Bad file descriptor) [pid 6098] close(8) = -1 EBADF (Bad file descriptor) [pid 6098] close(9) = -1 EBADF (Bad file descriptor) [pid 6098] close(10) = -1 EBADF (Bad file descriptor) [pid 6098] close(11) = -1 EBADF (Bad file descriptor) [pid 6098] close(12) = -1 EBADF (Bad file descriptor) [pid 6098] close(13) = -1 EBADF (Bad file descriptor) [pid 6098] close(14) = -1 EBADF (Bad file descriptor) [pid 6098] close(15) = -1 EBADF (Bad file descriptor) [pid 6098] close(16) = -1 EBADF (Bad file descriptor) [pid 6098] close(17) = -1 EBADF (Bad file descriptor) [pid 6098] close(18) = -1 EBADF (Bad file descriptor) [pid 6098] close(19) = -1 EBADF (Bad file descriptor) [pid 6098] close(20) = -1 EBADF (Bad file descriptor) [pid 6098] close(21) = -1 EBADF (Bad file descriptor) [pid 6098] close(22) = -1 EBADF (Bad file descriptor) [pid 6098] close(23) = -1 EBADF (Bad file descriptor) [pid 6098] close(24) = -1 EBADF (Bad file descriptor) [pid 6098] close(25) = -1 EBADF (Bad file descriptor) [pid 6098] close(26) = -1 EBADF (Bad file descriptor) [pid 6098] close(27) = -1 EBADF (Bad file descriptor) [pid 6098] close(28) = -1 EBADF (Bad file descriptor) [pid 6098] close(29) = -1 EBADF (Bad file descriptor) [pid 6098] exit_group(0) = ? [pid 6098] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=253, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5836] umount2("./250", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./250", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./250/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./250/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./250/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./250/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./250/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./250/file2") = 0 [pid 5836] umount2("./250/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./250/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./250/binderfs") = 0 [pid 5836] umount2("./250/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./250/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./250/cgroup.net") = 0 [pid 5836] umount2("./250/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./250/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./250/cgroup.cpu") = 0 [pid 5836] umount2("./250/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./250/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./250/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./250") = 0 [pid 5836] mkdir("./251", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6099 attached [pid 6099] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 254 [pid 6099] <... set_robust_list resumed>) = 0 [pid 6099] chdir("./251") = 0 [pid 6099] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6099] setpgid(0, 0) = 0 [pid 6099] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6099] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6099] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6099] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6099] write(3, "1000", 4) = 4 [pid 6099] close(3) = 0 [pid 6099] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6099] write(1, "executing program\n", 18) = 18 [pid 6099] memfd_create("syzkaller", 0) = 3 [pid 6099] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6099] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6099] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6099] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6099] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6099] close(3) = 0 [pid 6099] close(4) = 0 [pid 6099] mkdir("./file2", 0777) = 0 [pid 6099] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [ 231.168336][ T6099] loop0: detected capacity change from 0 to 128 [pid 6099] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6099] chdir("./file2") = 0 [pid 6099] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6099] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6099] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6099] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6099] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6099] close(3) = 0 [pid 6099] close(4) = 0 [pid 6099] close(5) = -1 EBADF (Bad file descriptor) [pid 6099] close(6) = -1 EBADF (Bad file descriptor) [pid 6099] close(7) = -1 EBADF (Bad file descriptor) [pid 6099] close(8) = -1 EBADF (Bad file descriptor) [pid 6099] close(9) = -1 EBADF (Bad file descriptor) [pid 6099] close(10) = -1 EBADF (Bad file descriptor) [pid 6099] close(11) = -1 EBADF (Bad file descriptor) [pid 6099] close(12) = -1 EBADF (Bad file descriptor) [pid 6099] close(13) = -1 EBADF (Bad file descriptor) [pid 6099] close(14) = -1 EBADF (Bad file descriptor) [pid 6099] close(15) = -1 EBADF (Bad file descriptor) [pid 6099] close(16) = -1 EBADF (Bad file descriptor) [pid 6099] close(17) = -1 EBADF (Bad file descriptor) [pid 6099] close(18) = -1 EBADF (Bad file descriptor) [pid 6099] close(19) = -1 EBADF (Bad file descriptor) [pid 6099] close(20) = -1 EBADF (Bad file descriptor) [pid 6099] close(21) = -1 EBADF (Bad file descriptor) [pid 6099] close(22) = -1 EBADF (Bad file descriptor) [pid 6099] close(23) = -1 EBADF (Bad file descriptor) [pid 6099] close(24) = -1 EBADF (Bad file descriptor) [pid 6099] close(25) = -1 EBADF (Bad file descriptor) [pid 6099] close(26) = -1 EBADF (Bad file descriptor) [pid 6099] close(27) = -1 EBADF (Bad file descriptor) [pid 6099] close(28) = -1 EBADF (Bad file descriptor) [pid 6099] close(29) = -1 EBADF (Bad file descriptor) [pid 6099] exit_group(0) = ? [pid 6099] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=254, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] umount2("./251", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./251", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./251/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./251/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./251/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./251/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./251/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./251/file2") = 0 [pid 5836] umount2("./251/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./251/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./251/binderfs") = 0 [pid 5836] umount2("./251/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./251/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./251/cgroup.net") = 0 [pid 5836] umount2("./251/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./251/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./251/cgroup.cpu") = 0 [pid 5836] umount2("./251/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./251/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./251/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./251") = 0 [pid 5836] mkdir("./252", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6100 attached , child_tidptr=0x555563237690) = 255 [pid 6100] set_robust_list(0x5555632376a0, 24) = 0 [pid 6100] chdir("./252") = 0 [pid 6100] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6100] setpgid(0, 0) = 0 [pid 6100] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6100] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6100] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6100] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6100] write(3, "1000", 4) = 4 [pid 6100] close(3) = 0 [pid 6100] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6100] write(1, "executing program\n", 18executing program ) = 18 [pid 6100] memfd_create("syzkaller", 0) = 3 [pid 6100] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6100] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6100] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6100] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6100] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6100] close(3) = 0 [pid 6100] close(4) = 0 [pid 6100] mkdir("./file2", 0777) = 0 [pid 6100] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6100] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6100] chdir("./file2") = 0 [pid 6100] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 231.793050][ T6100] loop0: detected capacity change from 0 to 128 [pid 6100] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6100] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6100] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6100] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6100] close(3) = 0 [pid 6100] close(4) = 0 [pid 6100] close(5) = -1 EBADF (Bad file descriptor) [pid 6100] close(6) = -1 EBADF (Bad file descriptor) [pid 6100] close(7) = -1 EBADF (Bad file descriptor) [pid 6100] close(8) = -1 EBADF (Bad file descriptor) [pid 6100] close(9) = -1 EBADF (Bad file descriptor) [pid 6100] close(10) = -1 EBADF (Bad file descriptor) [pid 6100] close(11) = -1 EBADF (Bad file descriptor) [pid 6100] close(12) = -1 EBADF (Bad file descriptor) [pid 6100] close(13) = -1 EBADF (Bad file descriptor) [pid 6100] close(14) = -1 EBADF (Bad file descriptor) [pid 6100] close(15) = -1 EBADF (Bad file descriptor) [pid 6100] close(16) = -1 EBADF (Bad file descriptor) [pid 6100] close(17) = -1 EBADF (Bad file descriptor) [pid 6100] close(18) = -1 EBADF (Bad file descriptor) [pid 6100] close(19) = -1 EBADF (Bad file descriptor) [pid 6100] close(20) = -1 EBADF (Bad file descriptor) [pid 6100] close(21) = -1 EBADF (Bad file descriptor) [pid 6100] close(22) = -1 EBADF (Bad file descriptor) [pid 6100] close(23) = -1 EBADF (Bad file descriptor) [pid 6100] close(24) = -1 EBADF (Bad file descriptor) [pid 6100] close(25) = -1 EBADF (Bad file descriptor) [pid 6100] close(26) = -1 EBADF (Bad file descriptor) [pid 6100] close(27) = -1 EBADF (Bad file descriptor) [pid 6100] close(28) = -1 EBADF (Bad file descriptor) [pid 6100] close(29) = -1 EBADF (Bad file descriptor) [pid 6100] exit_group(0) = ? [pid 6100] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=255, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] umount2("./252", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./252", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./252/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./252/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./252/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./252/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./252/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./252/file2") = 0 [pid 5836] umount2("./252/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./252/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./252/binderfs") = 0 [pid 5836] umount2("./252/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./252/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./252/cgroup.net") = 0 [pid 5836] umount2("./252/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./252/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./252/cgroup.cpu") = 0 [pid 5836] umount2("./252/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./252/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./252/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./252") = 0 [pid 5836] mkdir("./253", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6101 attached [pid 6101] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 256 [pid 6101] <... set_robust_list resumed>) = 0 [pid 6101] chdir("./253") = 0 [pid 6101] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6101] setpgid(0, 0) = 0 [pid 6101] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6101] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6101] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6101] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6101] write(3, "1000", 4) = 4 [pid 6101] close(3) = 0 [pid 6101] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6101] write(1, "executing program\n", 18) = 18 [pid 6101] memfd_create("syzkaller", 0) = 3 [pid 6101] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6101] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6101] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6101] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6101] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6101] close(3) = 0 [pid 6101] close(4) = 0 [pid 6101] mkdir("./file2", 0777) = 0 [pid 6101] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6101] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6101] chdir("./file2") = 0 [pid 6101] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6101] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6101] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6101] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [ 232.370375][ T6101] loop0: detected capacity change from 0 to 128 [ 232.377265][ T5837] Bluetooth: hci0: command 0x0406 tx timeout [pid 6101] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6101] close(3) = 0 [pid 6101] close(4) = 0 [pid 6101] close(5) = -1 EBADF (Bad file descriptor) [pid 6101] close(6) = -1 EBADF (Bad file descriptor) [pid 6101] close(7) = -1 EBADF (Bad file descriptor) [pid 6101] close(8) = -1 EBADF (Bad file descriptor) [pid 6101] close(9) = -1 EBADF (Bad file descriptor) [pid 6101] close(10) = -1 EBADF (Bad file descriptor) [pid 6101] close(11) = -1 EBADF (Bad file descriptor) [pid 6101] close(12) = -1 EBADF (Bad file descriptor) [pid 6101] close(13) = -1 EBADF (Bad file descriptor) [pid 6101] close(14) = -1 EBADF (Bad file descriptor) [pid 6101] close(15) = -1 EBADF (Bad file descriptor) [pid 6101] close(16) = -1 EBADF (Bad file descriptor) [pid 6101] close(17) = -1 EBADF (Bad file descriptor) [pid 6101] close(18) = -1 EBADF (Bad file descriptor) [pid 6101] close(19) = -1 EBADF (Bad file descriptor) [pid 6101] close(20) = -1 EBADF (Bad file descriptor) [pid 6101] close(21) = -1 EBADF (Bad file descriptor) [pid 6101] close(22) = -1 EBADF (Bad file descriptor) [pid 6101] close(23) = -1 EBADF (Bad file descriptor) [pid 6101] close(24) = -1 EBADF (Bad file descriptor) [pid 6101] close(25) = -1 EBADF (Bad file descriptor) [pid 6101] close(26) = -1 EBADF (Bad file descriptor) [pid 6101] close(27) = -1 EBADF (Bad file descriptor) [pid 6101] close(28) = -1 EBADF (Bad file descriptor) [pid 6101] close(29) = -1 EBADF (Bad file descriptor) [pid 6101] exit_group(0) = ? [pid 6101] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=256, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./253", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./253", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./253/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./253/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./253/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./253/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./253/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./253/file2") = 0 [pid 5836] umount2("./253/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./253/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./253/binderfs") = 0 [pid 5836] umount2("./253/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./253/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./253/cgroup.net") = 0 [pid 5836] umount2("./253/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./253/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./253/cgroup.cpu") = 0 [pid 5836] umount2("./253/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./253/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./253/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./253") = 0 [pid 5836] mkdir("./254", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6102 attached [pid 6102] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 257 [pid 6102] <... set_robust_list resumed>) = 0 [pid 6102] chdir("./254") = 0 [pid 6102] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6102] setpgid(0, 0) = 0 [pid 6102] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6102] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6102] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6102] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6102] write(3, "1000", 4) = 4 [pid 6102] close(3) = 0 [pid 6102] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6102] write(1, "executing program\n", 18executing program ) = 18 [pid 6102] memfd_create("syzkaller", 0) = 3 [pid 6102] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6102] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6102] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6102] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6102] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6102] close(3) = 0 [pid 6102] close(4) = 0 [pid 6102] mkdir("./file2", 0777) = 0 [pid 6102] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6102] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6102] chdir("./file2") = 0 [ 232.983471][ T6102] loop0: detected capacity change from 0 to 128 [pid 6102] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6102] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6102] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6102] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6102] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6102] close(3) = 0 [pid 6102] close(4) = 0 [pid 6102] close(5) = -1 EBADF (Bad file descriptor) [pid 6102] close(6) = -1 EBADF (Bad file descriptor) [pid 6102] close(7) = -1 EBADF (Bad file descriptor) [pid 6102] close(8) = -1 EBADF (Bad file descriptor) [pid 6102] close(9) = -1 EBADF (Bad file descriptor) [pid 6102] close(10) = -1 EBADF (Bad file descriptor) [pid 6102] close(11) = -1 EBADF (Bad file descriptor) [pid 6102] close(12) = -1 EBADF (Bad file descriptor) [pid 6102] close(13) = -1 EBADF (Bad file descriptor) [pid 6102] close(14) = -1 EBADF (Bad file descriptor) [pid 6102] close(15) = -1 EBADF (Bad file descriptor) [pid 6102] close(16) = -1 EBADF (Bad file descriptor) [pid 6102] close(17) = -1 EBADF (Bad file descriptor) [pid 6102] close(18) = -1 EBADF (Bad file descriptor) [pid 6102] close(19) = -1 EBADF (Bad file descriptor) [pid 6102] close(20) = -1 EBADF (Bad file descriptor) [pid 6102] close(21) = -1 EBADF (Bad file descriptor) [pid 6102] close(22) = -1 EBADF (Bad file descriptor) [pid 6102] close(23) = -1 EBADF (Bad file descriptor) [pid 6102] close(24) = -1 EBADF (Bad file descriptor) [pid 6102] close(25) = -1 EBADF (Bad file descriptor) [pid 6102] close(26) = -1 EBADF (Bad file descriptor) [pid 6102] close(27) = -1 EBADF (Bad file descriptor) [pid 6102] close(28) = -1 EBADF (Bad file descriptor) [pid 6102] close(29) = -1 EBADF (Bad file descriptor) [pid 6102] exit_group(0) = ? [pid 6102] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=257, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./254", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./254", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./254/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./254/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./254/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./254/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./254/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./254/file2") = 0 [pid 5836] umount2("./254/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./254/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./254/binderfs") = 0 [pid 5836] umount2("./254/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./254/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./254/cgroup.net") = 0 [pid 5836] umount2("./254/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./254/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./254/cgroup.cpu") = 0 [pid 5836] umount2("./254/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./254/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./254/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./254") = 0 [pid 5836] mkdir("./255", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6103 attached [pid 6103] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 258 [pid 6103] <... set_robust_list resumed>) = 0 [pid 6103] chdir("./255") = 0 [pid 6103] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6103] setpgid(0, 0) = 0 [pid 6103] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6103] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6103] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6103] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6103] write(3, "1000", 4) = 4 [pid 6103] close(3) = 0 [pid 6103] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6103] write(1, "executing program\n", 18) = 18 [pid 6103] memfd_create("syzkaller", 0) = 3 [pid 6103] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6103] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6103] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6103] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6103] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6103] close(3) = 0 [pid 6103] close(4) = 0 [pid 6103] mkdir("./file2", 0777) = 0 [pid 6103] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6103] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6103] chdir("./file2") = 0 [pid 6103] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6103] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6103] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6103] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [ 233.585290][ T6103] loop0: detected capacity change from 0 to 128 [pid 6103] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6103] close(3) = 0 [pid 6103] close(4) = 0 [pid 6103] close(5) = -1 EBADF (Bad file descriptor) [pid 6103] close(6) = -1 EBADF (Bad file descriptor) [pid 6103] close(7) = -1 EBADF (Bad file descriptor) [pid 6103] close(8) = -1 EBADF (Bad file descriptor) [pid 6103] close(9) = -1 EBADF (Bad file descriptor) [pid 6103] close(10) = -1 EBADF (Bad file descriptor) [pid 6103] close(11) = -1 EBADF (Bad file descriptor) [pid 6103] close(12) = -1 EBADF (Bad file descriptor) [pid 6103] close(13) = -1 EBADF (Bad file descriptor) [pid 6103] close(14) = -1 EBADF (Bad file descriptor) [pid 6103] close(15) = -1 EBADF (Bad file descriptor) [pid 6103] close(16) = -1 EBADF (Bad file descriptor) [pid 6103] close(17) = -1 EBADF (Bad file descriptor) [pid 6103] close(18) = -1 EBADF (Bad file descriptor) [pid 6103] close(19) = -1 EBADF (Bad file descriptor) [pid 6103] close(20) = -1 EBADF (Bad file descriptor) [pid 6103] close(21) = -1 EBADF (Bad file descriptor) [pid 6103] close(22) = -1 EBADF (Bad file descriptor) [pid 6103] close(23) = -1 EBADF (Bad file descriptor) [pid 6103] close(24) = -1 EBADF (Bad file descriptor) [pid 6103] close(25) = -1 EBADF (Bad file descriptor) [pid 6103] close(26) = -1 EBADF (Bad file descriptor) [pid 6103] close(27) = -1 EBADF (Bad file descriptor) [pid 6103] close(28) = -1 EBADF (Bad file descriptor) [pid 6103] close(29) = -1 EBADF (Bad file descriptor) [pid 6103] exit_group(0) = ? [pid 6103] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=258, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5836] umount2("./255", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./255", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./255/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./255/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./255/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./255/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./255/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./255/file2") = 0 [pid 5836] umount2("./255/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./255/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./255/binderfs") = 0 [pid 5836] umount2("./255/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./255/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./255/cgroup.net") = 0 [pid 5836] umount2("./255/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./255/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./255/cgroup.cpu") = 0 [pid 5836] umount2("./255/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./255/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./255/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./255") = 0 [pid 5836] mkdir("./256", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6104 attached [pid 6104] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 259 [pid 6104] <... set_robust_list resumed>) = 0 [pid 6104] chdir("./256") = 0 [pid 6104] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6104] setpgid(0, 0) = 0 [pid 6104] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6104] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6104] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6104] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6104] write(3, "1000", 4) = 4 [pid 6104] close(3) = 0 [pid 6104] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6104] write(1, "executing program\n", 18executing program ) = 18 [pid 6104] memfd_create("syzkaller", 0) = 3 [pid 6104] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6104] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6104] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6104] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6104] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6104] close(3) = 0 [pid 6104] close(4) = 0 [pid 6104] mkdir("./file2", 0777) = 0 [pid 6104] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6104] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6104] chdir("./file2") = 0 [pid 6104] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6104] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6104] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6104] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [ 234.122218][ T6104] loop0: detected capacity change from 0 to 128 [pid 6104] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6104] close(3) = 0 [pid 6104] close(4) = 0 [pid 6104] close(5) = -1 EBADF (Bad file descriptor) [pid 6104] close(6) = -1 EBADF (Bad file descriptor) [pid 6104] close(7) = -1 EBADF (Bad file descriptor) [pid 6104] close(8) = -1 EBADF (Bad file descriptor) [pid 6104] close(9) = -1 EBADF (Bad file descriptor) [pid 6104] close(10) = -1 EBADF (Bad file descriptor) [pid 6104] close(11) = -1 EBADF (Bad file descriptor) [pid 6104] close(12) = -1 EBADF (Bad file descriptor) [pid 6104] close(13) = -1 EBADF (Bad file descriptor) [pid 6104] close(14) = -1 EBADF (Bad file descriptor) [pid 6104] close(15) = -1 EBADF (Bad file descriptor) [pid 6104] close(16) = -1 EBADF (Bad file descriptor) [pid 6104] close(17) = -1 EBADF (Bad file descriptor) [pid 6104] close(18) = -1 EBADF (Bad file descriptor) [pid 6104] close(19) = -1 EBADF (Bad file descriptor) [pid 6104] close(20) = -1 EBADF (Bad file descriptor) [pid 6104] close(21) = -1 EBADF (Bad file descriptor) [pid 6104] close(22) = -1 EBADF (Bad file descriptor) [pid 6104] close(23) = -1 EBADF (Bad file descriptor) [pid 6104] close(24) = -1 EBADF (Bad file descriptor) [pid 6104] close(25) = -1 EBADF (Bad file descriptor) [pid 6104] close(26) = -1 EBADF (Bad file descriptor) [pid 6104] close(27) = -1 EBADF (Bad file descriptor) [pid 6104] close(28) = -1 EBADF (Bad file descriptor) [pid 6104] close(29) = -1 EBADF (Bad file descriptor) [pid 6104] exit_group(0) = ? [pid 6104] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=259, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] umount2("./256", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./256", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./256/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./256/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./256/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./256/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./256/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./256/file2") = 0 [pid 5836] umount2("./256/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./256/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./256/binderfs") = 0 [pid 5836] umount2("./256/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./256/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./256/cgroup.net") = 0 [pid 5836] umount2("./256/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./256/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./256/cgroup.cpu") = 0 [pid 5836] umount2("./256/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./256/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./256/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./256") = 0 [pid 5836] mkdir("./257", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6105 attached [pid 6105] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 260 [pid 6105] <... set_robust_list resumed>) = 0 [pid 6105] chdir("./257") = 0 [pid 6105] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6105] setpgid(0, 0) = 0 [pid 6105] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6105] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6105] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6105] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6105] write(3, "1000", 4) = 4 [pid 6105] close(3) = 0 [pid 6105] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6105] write(1, "executing program\n", 18) = 18 [pid 6105] memfd_create("syzkaller", 0) = 3 [pid 6105] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6105] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6105] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6105] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6105] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6105] close(3) = 0 [pid 6105] close(4) = 0 [pid 6105] mkdir("./file2", 0777) = 0 [pid 6105] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6105] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6105] chdir("./file2") = 0 [pid 6105] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6105] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6105] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6105] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6105] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6105] close(3) = 0 [ 234.665103][ T6105] loop0: detected capacity change from 0 to 128 [pid 6105] close(4) = 0 [pid 6105] close(5) = -1 EBADF (Bad file descriptor) [pid 6105] close(6) = -1 EBADF (Bad file descriptor) [pid 6105] close(7) = -1 EBADF (Bad file descriptor) [pid 6105] close(8) = -1 EBADF (Bad file descriptor) [pid 6105] close(9) = -1 EBADF (Bad file descriptor) [pid 6105] close(10) = -1 EBADF (Bad file descriptor) [pid 6105] close(11) = -1 EBADF (Bad file descriptor) [pid 6105] close(12) = -1 EBADF (Bad file descriptor) [pid 6105] close(13) = -1 EBADF (Bad file descriptor) [pid 6105] close(14) = -1 EBADF (Bad file descriptor) [pid 6105] close(15) = -1 EBADF (Bad file descriptor) [pid 6105] close(16) = -1 EBADF (Bad file descriptor) [pid 6105] close(17) = -1 EBADF (Bad file descriptor) [pid 6105] close(18) = -1 EBADF (Bad file descriptor) [pid 6105] close(19) = -1 EBADF (Bad file descriptor) [pid 6105] close(20) = -1 EBADF (Bad file descriptor) [pid 6105] close(21) = -1 EBADF (Bad file descriptor) [pid 6105] close(22) = -1 EBADF (Bad file descriptor) [pid 6105] close(23) = -1 EBADF (Bad file descriptor) [pid 6105] close(24) = -1 EBADF (Bad file descriptor) [pid 6105] close(25) = -1 EBADF (Bad file descriptor) [pid 6105] close(26) = -1 EBADF (Bad file descriptor) [pid 6105] close(27) = -1 EBADF (Bad file descriptor) [pid 6105] close(28) = -1 EBADF (Bad file descriptor) [pid 6105] close(29) = -1 EBADF (Bad file descriptor) [pid 6105] exit_group(0) = ? [pid 6105] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=260, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./257", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./257", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./257/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./257/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./257/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./257/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./257/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./257/file2") = 0 [pid 5836] umount2("./257/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./257/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./257/binderfs") = 0 [pid 5836] umount2("./257/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./257/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./257/cgroup.net") = 0 [pid 5836] umount2("./257/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./257/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./257/cgroup.cpu") = 0 [pid 5836] umount2("./257/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./257/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./257/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./257") = 0 [pid 5836] mkdir("./258", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6106 attached [pid 6106] set_robust_list(0x5555632376a0, 24) = 0 [pid 6106] chdir("./258" [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 261 [pid 6106] <... chdir resumed>) = 0 [pid 6106] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6106] setpgid(0, 0) = 0 [pid 6106] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6106] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6106] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6106] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6106] write(3, "1000", 4) = 4 [pid 6106] close(3) = 0 [pid 6106] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6106] write(1, "executing program\n", 18) = 18 [pid 6106] memfd_create("syzkaller", 0) = 3 [pid 6106] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6106] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6106] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6106] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6106] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6106] close(3) = 0 [pid 6106] close(4) = 0 [pid 6106] mkdir("./file2", 0777) = 0 [pid 6106] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6106] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6106] chdir("./file2") = 0 [pid 6106] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6106] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6106] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6106] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6106] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6106] close(3) = 0 [pid 6106] close(4) = 0 [pid 6106] close(5) = -1 EBADF (Bad file descriptor) [pid 6106] close(6) = -1 EBADF (Bad file descriptor) [ 235.176160][ T6106] loop0: detected capacity change from 0 to 128 [pid 6106] close(7) = -1 EBADF (Bad file descriptor) [pid 6106] close(8) = -1 EBADF (Bad file descriptor) [pid 6106] close(9) = -1 EBADF (Bad file descriptor) [pid 6106] close(10) = -1 EBADF (Bad file descriptor) [pid 6106] close(11) = -1 EBADF (Bad file descriptor) [pid 6106] close(12) = -1 EBADF (Bad file descriptor) [pid 6106] close(13) = -1 EBADF (Bad file descriptor) [pid 6106] close(14) = -1 EBADF (Bad file descriptor) [pid 6106] close(15) = -1 EBADF (Bad file descriptor) [pid 6106] close(16) = -1 EBADF (Bad file descriptor) [pid 6106] close(17) = -1 EBADF (Bad file descriptor) [pid 6106] close(18) = -1 EBADF (Bad file descriptor) [pid 6106] close(19) = -1 EBADF (Bad file descriptor) [pid 6106] close(20) = -1 EBADF (Bad file descriptor) [pid 6106] close(21) = -1 EBADF (Bad file descriptor) [pid 6106] close(22) = -1 EBADF (Bad file descriptor) [pid 6106] close(23) = -1 EBADF (Bad file descriptor) [pid 6106] close(24) = -1 EBADF (Bad file descriptor) [pid 6106] close(25) = -1 EBADF (Bad file descriptor) [pid 6106] close(26) = -1 EBADF (Bad file descriptor) [pid 6106] close(27) = -1 EBADF (Bad file descriptor) [pid 6106] close(28) = -1 EBADF (Bad file descriptor) [pid 6106] close(29) = -1 EBADF (Bad file descriptor) [pid 6106] exit_group(0) = ? [pid 6106] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=261, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] umount2("./258", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./258", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./258/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./258/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./258/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./258/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./258/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./258/file2") = 0 [pid 5836] umount2("./258/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./258/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./258/binderfs") = 0 [pid 5836] umount2("./258/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./258/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./258/cgroup.net") = 0 [pid 5836] umount2("./258/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./258/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./258/cgroup.cpu") = 0 [pid 5836] umount2("./258/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./258/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./258/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./258") = 0 [pid 5836] mkdir("./259", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6107 attached [pid 6107] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 262 [pid 6107] <... set_robust_list resumed>) = 0 [pid 6107] chdir("./259") = 0 [pid 6107] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6107] setpgid(0, 0) = 0 [pid 6107] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6107] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6107] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6107] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6107] write(3, "1000", 4) = 4 [pid 6107] close(3) = 0 [pid 6107] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6107] write(1, "executing program\n", 18executing program ) = 18 [pid 6107] memfd_create("syzkaller", 0) = 3 [pid 6107] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6107] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6107] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6107] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6107] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6107] close(3) = 0 [pid 6107] close(4) = 0 [pid 6107] mkdir("./file2", 0777) = 0 [pid 6107] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6107] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6107] chdir("./file2") = 0 [ 235.690076][ T6107] loop0: detected capacity change from 0 to 128 [pid 6107] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6107] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6107] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6107] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6107] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6107] close(3) = 0 [pid 6107] close(4) = 0 [pid 6107] close(5) = -1 EBADF (Bad file descriptor) [pid 6107] close(6) = -1 EBADF (Bad file descriptor) [pid 6107] close(7) = -1 EBADF (Bad file descriptor) [pid 6107] close(8) = -1 EBADF (Bad file descriptor) [pid 6107] close(9) = -1 EBADF (Bad file descriptor) [pid 6107] close(10) = -1 EBADF (Bad file descriptor) [pid 6107] close(11) = -1 EBADF (Bad file descriptor) [pid 6107] close(12) = -1 EBADF (Bad file descriptor) [pid 6107] close(13) = -1 EBADF (Bad file descriptor) [pid 6107] close(14) = -1 EBADF (Bad file descriptor) [pid 6107] close(15) = -1 EBADF (Bad file descriptor) [pid 6107] close(16) = -1 EBADF (Bad file descriptor) [pid 6107] close(17) = -1 EBADF (Bad file descriptor) [pid 6107] close(18) = -1 EBADF (Bad file descriptor) [pid 6107] close(19) = -1 EBADF (Bad file descriptor) [pid 6107] close(20) = -1 EBADF (Bad file descriptor) [pid 6107] close(21) = -1 EBADF (Bad file descriptor) [pid 6107] close(22) = -1 EBADF (Bad file descriptor) [pid 6107] close(23) = -1 EBADF (Bad file descriptor) [pid 6107] close(24) = -1 EBADF (Bad file descriptor) [pid 6107] close(25) = -1 EBADF (Bad file descriptor) [pid 6107] close(26) = -1 EBADF (Bad file descriptor) [pid 6107] close(27) = -1 EBADF (Bad file descriptor) [pid 6107] close(28) = -1 EBADF (Bad file descriptor) [pid 6107] close(29) = -1 EBADF (Bad file descriptor) [pid 6107] exit_group(0) = ? [pid 6107] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=262, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] umount2("./259", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./259", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./259/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./259/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./259/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./259/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./259/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./259/file2") = 0 [pid 5836] umount2("./259/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./259/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./259/binderfs") = 0 [pid 5836] umount2("./259/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./259/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./259/cgroup.net") = 0 [pid 5836] umount2("./259/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./259/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./259/cgroup.cpu") = 0 [pid 5836] umount2("./259/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./259/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./259/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./259") = 0 [pid 5836] mkdir("./260", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6108 attached , child_tidptr=0x555563237690) = 263 [pid 6108] set_robust_list(0x5555632376a0, 24) = 0 [pid 6108] chdir("./260") = 0 [pid 6108] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6108] setpgid(0, 0) = 0 [pid 6108] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6108] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6108] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6108] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6108] write(3, "1000", 4) = 4 [pid 6108] close(3) = 0 [pid 6108] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6108] write(1, "executing program\n", 18) = 18 [pid 6108] memfd_create("syzkaller", 0) = 3 [pid 6108] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6108] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6108] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6108] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6108] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6108] close(3) = 0 [pid 6108] close(4) = 0 [pid 6108] mkdir("./file2", 0777) = 0 [pid 6108] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6108] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6108] chdir("./file2") = 0 [pid 6108] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 236.173980][ T6108] loop0: detected capacity change from 0 to 128 [pid 6108] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6108] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6108] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6108] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6108] close(3) = 0 [pid 6108] close(4) = 0 [pid 6108] close(5) = -1 EBADF (Bad file descriptor) [pid 6108] close(6) = -1 EBADF (Bad file descriptor) [pid 6108] close(7) = -1 EBADF (Bad file descriptor) [pid 6108] close(8) = -1 EBADF (Bad file descriptor) [pid 6108] close(9) = -1 EBADF (Bad file descriptor) [pid 6108] close(10) = -1 EBADF (Bad file descriptor) [pid 6108] close(11) = -1 EBADF (Bad file descriptor) [pid 6108] close(12) = -1 EBADF (Bad file descriptor) [pid 6108] close(13) = -1 EBADF (Bad file descriptor) [pid 6108] close(14) = -1 EBADF (Bad file descriptor) [pid 6108] close(15) = -1 EBADF (Bad file descriptor) [pid 6108] close(16) = -1 EBADF (Bad file descriptor) [pid 6108] close(17) = -1 EBADF (Bad file descriptor) [pid 6108] close(18) = -1 EBADF (Bad file descriptor) [pid 6108] close(19) = -1 EBADF (Bad file descriptor) [pid 6108] close(20) = -1 EBADF (Bad file descriptor) [pid 6108] close(21) = -1 EBADF (Bad file descriptor) [pid 6108] close(22) = -1 EBADF (Bad file descriptor) [pid 6108] close(23) = -1 EBADF (Bad file descriptor) [pid 6108] close(24) = -1 EBADF (Bad file descriptor) [pid 6108] close(25) = -1 EBADF (Bad file descriptor) [pid 6108] close(26) = -1 EBADF (Bad file descriptor) [pid 6108] close(27) = -1 EBADF (Bad file descriptor) [pid 6108] close(28) = -1 EBADF (Bad file descriptor) [pid 6108] close(29) = -1 EBADF (Bad file descriptor) [pid 6108] exit_group(0) = ? [pid 6108] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=263, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5836] umount2("./260", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./260", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./260/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./260/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./260/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./260/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./260/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./260/file2") = 0 [pid 5836] umount2("./260/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./260/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./260/binderfs") = 0 [pid 5836] umount2("./260/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./260/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./260/cgroup.net") = 0 [pid 5836] umount2("./260/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./260/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./260/cgroup.cpu") = 0 [pid 5836] umount2("./260/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./260/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./260/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./260") = 0 [pid 5836] mkdir("./261", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6109 attached [pid 6109] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 264 [pid 6109] <... set_robust_list resumed>) = 0 [pid 6109] chdir("./261") = 0 [pid 6109] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6109] setpgid(0, 0) = 0 [pid 6109] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6109] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6109] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6109] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6109] write(3, "1000", 4) = 4 [pid 6109] close(3) = 0 [pid 6109] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6109] write(1, "executing program\n", 18executing program ) = 18 [pid 6109] memfd_create("syzkaller", 0) = 3 [pid 6109] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6109] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6109] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6109] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6109] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6109] close(3) = 0 [pid 6109] close(4) = 0 [pid 6109] mkdir("./file2", 0777) = 0 [pid 6109] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6109] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6109] chdir("./file2") = 0 [pid 6109] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6109] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6109] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [ 236.683799][ T6109] loop0: detected capacity change from 0 to 128 [pid 6109] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6109] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6109] close(3) = 0 [pid 6109] close(4) = 0 [pid 6109] close(5) = -1 EBADF (Bad file descriptor) [pid 6109] close(6) = -1 EBADF (Bad file descriptor) [pid 6109] close(7) = -1 EBADF (Bad file descriptor) [pid 6109] close(8) = -1 EBADF (Bad file descriptor) [pid 6109] close(9) = -1 EBADF (Bad file descriptor) [pid 6109] close(10) = -1 EBADF (Bad file descriptor) [pid 6109] close(11) = -1 EBADF (Bad file descriptor) [pid 6109] close(12) = -1 EBADF (Bad file descriptor) [pid 6109] close(13) = -1 EBADF (Bad file descriptor) [pid 6109] close(14) = -1 EBADF (Bad file descriptor) [pid 6109] close(15) = -1 EBADF (Bad file descriptor) [pid 6109] close(16) = -1 EBADF (Bad file descriptor) [pid 6109] close(17) = -1 EBADF (Bad file descriptor) [pid 6109] close(18) = -1 EBADF (Bad file descriptor) [pid 6109] close(19) = -1 EBADF (Bad file descriptor) [pid 6109] close(20) = -1 EBADF (Bad file descriptor) [pid 6109] close(21) = -1 EBADF (Bad file descriptor) [pid 6109] close(22) = -1 EBADF (Bad file descriptor) [pid 6109] close(23) = -1 EBADF (Bad file descriptor) [pid 6109] close(24) = -1 EBADF (Bad file descriptor) [pid 6109] close(25) = -1 EBADF (Bad file descriptor) [pid 6109] close(26) = -1 EBADF (Bad file descriptor) [pid 6109] close(27) = -1 EBADF (Bad file descriptor) [pid 6109] close(28) = -1 EBADF (Bad file descriptor) [pid 6109] close(29) = -1 EBADF (Bad file descriptor) [pid 6109] exit_group(0) = ? [pid 6109] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=264, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./261", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./261", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./261/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./261/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./261/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./261/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./261/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./261/file2") = 0 [pid 5836] umount2("./261/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./261/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./261/binderfs") = 0 [pid 5836] umount2("./261/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./261/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./261/cgroup.net") = 0 [pid 5836] umount2("./261/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./261/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./261/cgroup.cpu") = 0 [pid 5836] umount2("./261/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./261/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./261/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./261") = 0 [pid 5836] mkdir("./262", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6110 attached [pid 6110] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 265 [pid 6110] <... set_robust_list resumed>) = 0 [pid 6110] chdir("./262") = 0 [pid 6110] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6110] setpgid(0, 0) = 0 [pid 6110] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6110] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6110] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6110] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6110] write(3, "1000", 4) = 4 [pid 6110] close(3) = 0 [pid 6110] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6110] write(1, "executing program\n", 18) = 18 [pid 6110] memfd_create("syzkaller", 0) = 3 [pid 6110] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6110] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6110] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6110] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6110] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6110] close(3) = 0 [pid 6110] close(4) = 0 [pid 6110] mkdir("./file2", 0777) = 0 [pid 6110] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6110] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6110] chdir("./file2") = 0 [pid 6110] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6110] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6110] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6110] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6110] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [ 237.200699][ T6110] loop0: detected capacity change from 0 to 128 [pid 6110] close(3) = 0 [pid 6110] close(4) = 0 [pid 6110] close(5) = -1 EBADF (Bad file descriptor) [pid 6110] close(6) = -1 EBADF (Bad file descriptor) [pid 6110] close(7) = -1 EBADF (Bad file descriptor) [pid 6110] close(8) = -1 EBADF (Bad file descriptor) [pid 6110] close(9) = -1 EBADF (Bad file descriptor) [pid 6110] close(10) = -1 EBADF (Bad file descriptor) [pid 6110] close(11) = -1 EBADF (Bad file descriptor) [pid 6110] close(12) = -1 EBADF (Bad file descriptor) [pid 6110] close(13) = -1 EBADF (Bad file descriptor) [pid 6110] close(14) = -1 EBADF (Bad file descriptor) [pid 6110] close(15) = -1 EBADF (Bad file descriptor) [pid 6110] close(16) = -1 EBADF (Bad file descriptor) [pid 6110] close(17) = -1 EBADF (Bad file descriptor) [pid 6110] close(18) = -1 EBADF (Bad file descriptor) [pid 6110] close(19) = -1 EBADF (Bad file descriptor) [pid 6110] close(20) = -1 EBADF (Bad file descriptor) [pid 6110] close(21) = -1 EBADF (Bad file descriptor) [pid 6110] close(22) = -1 EBADF (Bad file descriptor) [pid 6110] close(23) = -1 EBADF (Bad file descriptor) [pid 6110] close(24) = -1 EBADF (Bad file descriptor) [pid 6110] close(25) = -1 EBADF (Bad file descriptor) [pid 6110] close(26) = -1 EBADF (Bad file descriptor) [pid 6110] close(27) = -1 EBADF (Bad file descriptor) [pid 6110] close(28) = -1 EBADF (Bad file descriptor) [pid 6110] close(29) = -1 EBADF (Bad file descriptor) [pid 6110] exit_group(0) = ? [pid 6110] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=265, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5836] umount2("./262", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./262", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./262/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./262/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./262/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./262/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./262/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./262/file2") = 0 [pid 5836] umount2("./262/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./262/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./262/binderfs") = 0 [pid 5836] umount2("./262/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./262/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./262/cgroup.net") = 0 [pid 5836] umount2("./262/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./262/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./262/cgroup.cpu") = 0 [pid 5836] umount2("./262/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./262/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./262/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./262") = 0 [pid 5836] mkdir("./263", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6111 attached [pid 6111] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 266 [pid 6111] <... set_robust_list resumed>) = 0 [pid 6111] chdir("./263") = 0 [pid 6111] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6111] setpgid(0, 0) = 0 [pid 6111] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6111] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6111] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6111] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6111] write(3, "1000", 4) = 4 [pid 6111] close(3) = 0 [pid 6111] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6111] write(1, "executing program\n", 18) = 18 [pid 6111] memfd_create("syzkaller", 0) = 3 [pid 6111] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6111] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6111] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6111] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6111] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6111] close(3) = 0 [pid 6111] close(4) = 0 [pid 6111] mkdir("./file2", 0777) = 0 [pid 6111] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6111] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6111] chdir("./file2") = 0 [pid 6111] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6111] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6111] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6111] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6111] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [ 237.887417][ T6111] loop0: detected capacity change from 0 to 128 [pid 6111] close(3) = 0 [pid 6111] close(4) = 0 [pid 6111] close(5) = -1 EBADF (Bad file descriptor) [pid 6111] close(6) = -1 EBADF (Bad file descriptor) [pid 6111] close(7) = -1 EBADF (Bad file descriptor) [pid 6111] close(8) = -1 EBADF (Bad file descriptor) [pid 6111] close(9) = -1 EBADF (Bad file descriptor) [pid 6111] close(10) = -1 EBADF (Bad file descriptor) [pid 6111] close(11) = -1 EBADF (Bad file descriptor) [pid 6111] close(12) = -1 EBADF (Bad file descriptor) [pid 6111] close(13) = -1 EBADF (Bad file descriptor) [pid 6111] close(14) = -1 EBADF (Bad file descriptor) [pid 6111] close(15) = -1 EBADF (Bad file descriptor) [pid 6111] close(16) = -1 EBADF (Bad file descriptor) [pid 6111] close(17) = -1 EBADF (Bad file descriptor) [pid 6111] close(18) = -1 EBADF (Bad file descriptor) [pid 6111] close(19) = -1 EBADF (Bad file descriptor) [pid 6111] close(20) = -1 EBADF (Bad file descriptor) [pid 6111] close(21) = -1 EBADF (Bad file descriptor) [pid 6111] close(22) = -1 EBADF (Bad file descriptor) [pid 6111] close(23) = -1 EBADF (Bad file descriptor) [pid 6111] close(24) = -1 EBADF (Bad file descriptor) [pid 6111] close(25) = -1 EBADF (Bad file descriptor) [pid 6111] close(26) = -1 EBADF (Bad file descriptor) [pid 6111] close(27) = -1 EBADF (Bad file descriptor) [pid 6111] close(28) = -1 EBADF (Bad file descriptor) [pid 6111] close(29) = -1 EBADF (Bad file descriptor) [pid 6111] exit_group(0) = ? [pid 6111] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=266, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5836] umount2("./263", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./263", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./263/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./263/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./263/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./263/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./263/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./263/file2") = 0 [pid 5836] umount2("./263/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./263/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./263/binderfs") = 0 [pid 5836] umount2("./263/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./263/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./263/cgroup.net") = 0 [pid 5836] umount2("./263/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./263/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./263/cgroup.cpu") = 0 [pid 5836] umount2("./263/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./263/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./263/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./263") = 0 [pid 5836] mkdir("./264", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6112 attached , child_tidptr=0x555563237690) = 267 [pid 6112] set_robust_list(0x5555632376a0, 24) = 0 [pid 6112] chdir("./264") = 0 [pid 6112] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6112] setpgid(0, 0) = 0 [pid 6112] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6112] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6112] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6112] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6112] write(3, "1000", 4) = 4 [pid 6112] close(3) = 0 [pid 6112] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6112] write(1, "executing program\n", 18) = 18 [pid 6112] memfd_create("syzkaller", 0) = 3 [pid 6112] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6112] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6112] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6112] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6112] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6112] close(3) = 0 [pid 6112] close(4) = 0 [pid 6112] mkdir("./file2", 0777) = 0 [pid 6112] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6112] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [ 238.514744][ T6112] loop0: detected capacity change from 0 to 128 [pid 6112] chdir("./file2") = 0 [pid 6112] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6112] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6112] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6112] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6112] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6112] close(3) = 0 [pid 6112] close(4) = 0 [pid 6112] close(5) = -1 EBADF (Bad file descriptor) [pid 6112] close(6) = -1 EBADF (Bad file descriptor) [pid 6112] close(7) = -1 EBADF (Bad file descriptor) [pid 6112] close(8) = -1 EBADF (Bad file descriptor) [pid 6112] close(9) = -1 EBADF (Bad file descriptor) [pid 6112] close(10) = -1 EBADF (Bad file descriptor) [pid 6112] close(11) = -1 EBADF (Bad file descriptor) [pid 6112] close(12) = -1 EBADF (Bad file descriptor) [pid 6112] close(13) = -1 EBADF (Bad file descriptor) [pid 6112] close(14) = -1 EBADF (Bad file descriptor) [pid 6112] close(15) = -1 EBADF (Bad file descriptor) [pid 6112] close(16) = -1 EBADF (Bad file descriptor) [pid 6112] close(17) = -1 EBADF (Bad file descriptor) [pid 6112] close(18) = -1 EBADF (Bad file descriptor) [pid 6112] close(19) = -1 EBADF (Bad file descriptor) [pid 6112] close(20) = -1 EBADF (Bad file descriptor) [pid 6112] close(21) = -1 EBADF (Bad file descriptor) [pid 6112] close(22) = -1 EBADF (Bad file descriptor) [pid 6112] close(23) = -1 EBADF (Bad file descriptor) [pid 6112] close(24) = -1 EBADF (Bad file descriptor) [pid 6112] close(25) = -1 EBADF (Bad file descriptor) [pid 6112] close(26) = -1 EBADF (Bad file descriptor) [pid 6112] close(27) = -1 EBADF (Bad file descriptor) [pid 6112] close(28) = -1 EBADF (Bad file descriptor) [pid 6112] close(29) = -1 EBADF (Bad file descriptor) [pid 6112] exit_group(0) = ? [pid 6112] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=267, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./264", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./264", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./264/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./264/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./264/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./264/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./264/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./264/file2") = 0 [pid 5836] umount2("./264/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./264/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./264/binderfs") = 0 [pid 5836] umount2("./264/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./264/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./264/cgroup.net") = 0 [pid 5836] umount2("./264/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./264/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./264/cgroup.cpu") = 0 [pid 5836] umount2("./264/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./264/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./264/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./264") = 0 [pid 5836] mkdir("./265", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6113 attached , child_tidptr=0x555563237690) = 268 [pid 6113] set_robust_list(0x5555632376a0, 24) = 0 [pid 6113] chdir("./265") = 0 [pid 6113] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6113] setpgid(0, 0) = 0 [pid 6113] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6113] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6113] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6113] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6113] write(3, "1000", 4) = 4 [pid 6113] close(3) = 0 [pid 6113] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6113] write(1, "executing program\n", 18) = 18 [pid 6113] memfd_create("syzkaller", 0) = 3 [pid 6113] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6113] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6113] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6113] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6113] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6113] close(3) = 0 [pid 6113] close(4) = 0 [pid 6113] mkdir("./file2", 0777) = 0 [pid 6113] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6113] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6113] chdir("./file2") = 0 [pid 6113] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 239.107212][ T6113] loop0: detected capacity change from 0 to 128 [pid 6113] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6113] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6113] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6113] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6113] close(3) = 0 [pid 6113] close(4) = 0 [pid 6113] close(5) = -1 EBADF (Bad file descriptor) [pid 6113] close(6) = -1 EBADF (Bad file descriptor) [pid 6113] close(7) = -1 EBADF (Bad file descriptor) [pid 6113] close(8) = -1 EBADF (Bad file descriptor) [pid 6113] close(9) = -1 EBADF (Bad file descriptor) [pid 6113] close(10) = -1 EBADF (Bad file descriptor) [pid 6113] close(11) = -1 EBADF (Bad file descriptor) [pid 6113] close(12) = -1 EBADF (Bad file descriptor) [pid 6113] close(13) = -1 EBADF (Bad file descriptor) [pid 6113] close(14) = -1 EBADF (Bad file descriptor) [pid 6113] close(15) = -1 EBADF (Bad file descriptor) [pid 6113] close(16) = -1 EBADF (Bad file descriptor) [pid 6113] close(17) = -1 EBADF (Bad file descriptor) [pid 6113] close(18) = -1 EBADF (Bad file descriptor) [pid 6113] close(19) = -1 EBADF (Bad file descriptor) [pid 6113] close(20) = -1 EBADF (Bad file descriptor) [pid 6113] close(21) = -1 EBADF (Bad file descriptor) [pid 6113] close(22) = -1 EBADF (Bad file descriptor) [pid 6113] close(23) = -1 EBADF (Bad file descriptor) [pid 6113] close(24) = -1 EBADF (Bad file descriptor) [pid 6113] close(25) = -1 EBADF (Bad file descriptor) [pid 6113] close(26) = -1 EBADF (Bad file descriptor) [pid 6113] close(27) = -1 EBADF (Bad file descriptor) [pid 6113] close(28) = -1 EBADF (Bad file descriptor) [pid 6113] close(29) = -1 EBADF (Bad file descriptor) [pid 6113] exit_group(0) = ? [pid 6113] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=268, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] umount2("./265", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./265", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./265/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./265/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./265/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./265/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./265/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./265/file2") = 0 [pid 5836] umount2("./265/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./265/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./265/binderfs") = 0 [pid 5836] umount2("./265/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./265/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./265/cgroup.net") = 0 [pid 5836] umount2("./265/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./265/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./265/cgroup.cpu") = 0 [pid 5836] umount2("./265/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./265/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./265/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./265") = 0 [pid 5836] mkdir("./266", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6114 attached , child_tidptr=0x555563237690) = 269 [pid 6114] set_robust_list(0x5555632376a0, 24) = 0 [pid 6114] chdir("./266") = 0 [pid 6114] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6114] setpgid(0, 0) = 0 [pid 6114] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6114] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6114] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6114] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6114] write(3, "1000", 4) = 4 [pid 6114] close(3) = 0 [pid 6114] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6114] write(1, "executing program\n", 18) = 18 [pid 6114] memfd_create("syzkaller", 0) = 3 [pid 6114] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6114] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6114] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6114] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6114] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6114] close(3) = 0 [pid 6114] close(4) = 0 [pid 6114] mkdir("./file2", 0777) = 0 [pid 6114] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6114] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6114] chdir("./file2") = 0 [pid 6114] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6114] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6114] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6114] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [ 239.732150][ T6114] loop0: detected capacity change from 0 to 128 [pid 6114] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6114] close(3) = 0 [pid 6114] close(4) = 0 [pid 6114] close(5) = -1 EBADF (Bad file descriptor) [pid 6114] close(6) = -1 EBADF (Bad file descriptor) [pid 6114] close(7) = -1 EBADF (Bad file descriptor) [pid 6114] close(8) = -1 EBADF (Bad file descriptor) [pid 6114] close(9) = -1 EBADF (Bad file descriptor) [pid 6114] close(10) = -1 EBADF (Bad file descriptor) [pid 6114] close(11) = -1 EBADF (Bad file descriptor) [pid 6114] close(12) = -1 EBADF (Bad file descriptor) [pid 6114] close(13) = -1 EBADF (Bad file descriptor) [pid 6114] close(14) = -1 EBADF (Bad file descriptor) [pid 6114] close(15) = -1 EBADF (Bad file descriptor) [pid 6114] close(16) = -1 EBADF (Bad file descriptor) [pid 6114] close(17) = -1 EBADF (Bad file descriptor) [pid 6114] close(18) = -1 EBADF (Bad file descriptor) [pid 6114] close(19) = -1 EBADF (Bad file descriptor) [pid 6114] close(20) = -1 EBADF (Bad file descriptor) [pid 6114] close(21) = -1 EBADF (Bad file descriptor) [pid 6114] close(22) = -1 EBADF (Bad file descriptor) [pid 6114] close(23) = -1 EBADF (Bad file descriptor) [pid 6114] close(24) = -1 EBADF (Bad file descriptor) [pid 6114] close(25) = -1 EBADF (Bad file descriptor) [pid 6114] close(26) = -1 EBADF (Bad file descriptor) [pid 6114] close(27) = -1 EBADF (Bad file descriptor) [pid 6114] close(28) = -1 EBADF (Bad file descriptor) [pid 6114] close(29) = -1 EBADF (Bad file descriptor) [pid 6114] exit_group(0) = ? [pid 6114] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=269, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] umount2("./266", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./266", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./266/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./266/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./266/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./266/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./266/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./266/file2") = 0 [pid 5836] umount2("./266/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./266/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./266/binderfs") = 0 [pid 5836] umount2("./266/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./266/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./266/cgroup.net") = 0 [pid 5836] umount2("./266/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./266/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./266/cgroup.cpu") = 0 [pid 5836] umount2("./266/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./266/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./266/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./266") = 0 [pid 5836] mkdir("./267", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6115 attached [pid 6115] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 270 [pid 6115] <... set_robust_list resumed>) = 0 [pid 6115] chdir("./267") = 0 [pid 6115] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6115] setpgid(0, 0) = 0 [pid 6115] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6115] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6115] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6115] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6115] write(3, "1000", 4) = 4 [pid 6115] close(3) = 0 [pid 6115] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6115] write(1, "executing program\n", 18executing program ) = 18 [pid 6115] memfd_create("syzkaller", 0) = 3 [pid 6115] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6115] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6115] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6115] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6115] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6115] close(3) = 0 [pid 6115] close(4) = 0 [pid 6115] mkdir("./file2", 0777) = 0 [pid 6115] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6115] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6115] chdir("./file2") = 0 [pid 6115] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6115] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6115] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6115] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [ 240.354889][ T6115] loop0: detected capacity change from 0 to 128 [pid 6115] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6115] close(3) = 0 [pid 6115] close(4) = 0 [pid 6115] close(5) = -1 EBADF (Bad file descriptor) [pid 6115] close(6) = -1 EBADF (Bad file descriptor) [pid 6115] close(7) = -1 EBADF (Bad file descriptor) [pid 6115] close(8) = -1 EBADF (Bad file descriptor) [pid 6115] close(9) = -1 EBADF (Bad file descriptor) [pid 6115] close(10) = -1 EBADF (Bad file descriptor) [pid 6115] close(11) = -1 EBADF (Bad file descriptor) [pid 6115] close(12) = -1 EBADF (Bad file descriptor) [pid 6115] close(13) = -1 EBADF (Bad file descriptor) [pid 6115] close(14) = -1 EBADF (Bad file descriptor) [pid 6115] close(15) = -1 EBADF (Bad file descriptor) [pid 6115] close(16) = -1 EBADF (Bad file descriptor) [pid 6115] close(17) = -1 EBADF (Bad file descriptor) [pid 6115] close(18) = -1 EBADF (Bad file descriptor) [pid 6115] close(19) = -1 EBADF (Bad file descriptor) [pid 6115] close(20) = -1 EBADF (Bad file descriptor) [pid 6115] close(21) = -1 EBADF (Bad file descriptor) [pid 6115] close(22) = -1 EBADF (Bad file descriptor) [pid 6115] close(23) = -1 EBADF (Bad file descriptor) [pid 6115] close(24) = -1 EBADF (Bad file descriptor) [pid 6115] close(25) = -1 EBADF (Bad file descriptor) [pid 6115] close(26) = -1 EBADF (Bad file descriptor) [pid 6115] close(27) = -1 EBADF (Bad file descriptor) [pid 6115] close(28) = -1 EBADF (Bad file descriptor) [pid 6115] close(29) = -1 EBADF (Bad file descriptor) [pid 6115] exit_group(0) = ? [pid 6115] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=270, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] umount2("./267", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./267", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./267/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./267/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./267/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./267/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./267/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./267/file2") = 0 [pid 5836] umount2("./267/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./267/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./267/binderfs") = 0 [pid 5836] umount2("./267/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./267/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./267/cgroup.net") = 0 [pid 5836] umount2("./267/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./267/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./267/cgroup.cpu") = 0 [pid 5836] umount2("./267/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./267/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./267/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./267") = 0 [pid 5836] mkdir("./268", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6116 attached [pid 6116] set_robust_list(0x5555632376a0, 24) = 0 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 271 [pid 6116] chdir("./268") = 0 [pid 6116] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6116] setpgid(0, 0) = 0 [pid 6116] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6116] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6116] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6116] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6116] write(3, "1000", 4) = 4 [pid 6116] close(3) = 0 [pid 6116] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6116] write(1, "executing program\n", 18) = 18 [pid 6116] memfd_create("syzkaller", 0) = 3 [pid 6116] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6116] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6116] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6116] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6116] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6116] close(3) = 0 [pid 6116] close(4) = 0 [pid 6116] mkdir("./file2", 0777) = 0 [pid 6116] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6116] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6116] chdir("./file2") = 0 [pid 6116] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 240.571587][ T6116] loop0: detected capacity change from 0 to 128 [pid 6116] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6116] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6116] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6116] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6116] close(3) = 0 [pid 6116] close(4) = 0 [pid 6116] close(5) = -1 EBADF (Bad file descriptor) [pid 6116] close(6) = -1 EBADF (Bad file descriptor) [pid 6116] close(7) = -1 EBADF (Bad file descriptor) [pid 6116] close(8) = -1 EBADF (Bad file descriptor) [pid 6116] close(9) = -1 EBADF (Bad file descriptor) [pid 6116] close(10) = -1 EBADF (Bad file descriptor) [pid 6116] close(11) = -1 EBADF (Bad file descriptor) [pid 6116] close(12) = -1 EBADF (Bad file descriptor) [pid 6116] close(13) = -1 EBADF (Bad file descriptor) [pid 6116] close(14) = -1 EBADF (Bad file descriptor) [pid 6116] close(15) = -1 EBADF (Bad file descriptor) [pid 6116] close(16) = -1 EBADF (Bad file descriptor) [pid 6116] close(17) = -1 EBADF (Bad file descriptor) [pid 6116] close(18) = -1 EBADF (Bad file descriptor) [pid 6116] close(19) = -1 EBADF (Bad file descriptor) [pid 6116] close(20) = -1 EBADF (Bad file descriptor) [pid 6116] close(21) = -1 EBADF (Bad file descriptor) [pid 6116] close(22) = -1 EBADF (Bad file descriptor) [pid 6116] close(23) = -1 EBADF (Bad file descriptor) [pid 6116] close(24) = -1 EBADF (Bad file descriptor) [pid 6116] close(25) = -1 EBADF (Bad file descriptor) [pid 6116] close(26) = -1 EBADF (Bad file descriptor) [pid 6116] close(27) = -1 EBADF (Bad file descriptor) [pid 6116] close(28) = -1 EBADF (Bad file descriptor) [pid 6116] close(29) = -1 EBADF (Bad file descriptor) [pid 6116] exit_group(0) = ? [pid 6116] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=271, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] umount2("./268", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./268", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./268/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./268/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./268/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./268/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./268/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./268/file2") = 0 [pid 5836] umount2("./268/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./268/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./268/binderfs") = 0 [pid 5836] umount2("./268/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./268/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./268/cgroup.net") = 0 [pid 5836] umount2("./268/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./268/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./268/cgroup.cpu") = 0 [pid 5836] umount2("./268/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./268/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./268/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./268") = 0 [pid 5836] mkdir("./269", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6117 attached [pid 6117] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 272 [pid 6117] <... set_robust_list resumed>) = 0 [pid 6117] chdir("./269") = 0 [pid 6117] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6117] setpgid(0, 0) = 0 [pid 6117] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6117] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6117] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6117] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6117] write(3, "1000", 4) = 4 [pid 6117] close(3) = 0 [pid 6117] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6117] write(1, "executing program\n", 18) = 18 [pid 6117] memfd_create("syzkaller", 0) = 3 [pid 6117] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6117] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6117] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6117] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6117] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6117] close(3) = 0 [pid 6117] close(4) = 0 [pid 6117] mkdir("./file2", 0777) = 0 [pid 6117] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6117] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6117] chdir("./file2") = 0 [pid 6117] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6117] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6117] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6117] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6117] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [ 241.149413][ T6117] loop0: detected capacity change from 0 to 128 [pid 6117] close(3) = 0 [pid 6117] close(4) = 0 [pid 6117] close(5) = -1 EBADF (Bad file descriptor) [pid 6117] close(6) = -1 EBADF (Bad file descriptor) [pid 6117] close(7) = -1 EBADF (Bad file descriptor) [pid 6117] close(8) = -1 EBADF (Bad file descriptor) [pid 6117] close(9) = -1 EBADF (Bad file descriptor) [pid 6117] close(10) = -1 EBADF (Bad file descriptor) [pid 6117] close(11) = -1 EBADF (Bad file descriptor) [pid 6117] close(12) = -1 EBADF (Bad file descriptor) [pid 6117] close(13) = -1 EBADF (Bad file descriptor) [pid 6117] close(14) = -1 EBADF (Bad file descriptor) [pid 6117] close(15) = -1 EBADF (Bad file descriptor) [pid 6117] close(16) = -1 EBADF (Bad file descriptor) [pid 6117] close(17) = -1 EBADF (Bad file descriptor) [pid 6117] close(18) = -1 EBADF (Bad file descriptor) [pid 6117] close(19) = -1 EBADF (Bad file descriptor) [pid 6117] close(20) = -1 EBADF (Bad file descriptor) [pid 6117] close(21) = -1 EBADF (Bad file descriptor) [pid 6117] close(22) = -1 EBADF (Bad file descriptor) [pid 6117] close(23) = -1 EBADF (Bad file descriptor) [pid 6117] close(24) = -1 EBADF (Bad file descriptor) [pid 6117] close(25) = -1 EBADF (Bad file descriptor) [pid 6117] close(26) = -1 EBADF (Bad file descriptor) [pid 6117] close(27) = -1 EBADF (Bad file descriptor) [pid 6117] close(28) = -1 EBADF (Bad file descriptor) [pid 6117] close(29) = -1 EBADF (Bad file descriptor) [pid 6117] exit_group(0) = ? [pid 6117] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=272, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] umount2("./269", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./269", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./269/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./269/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./269/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./269/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./269/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./269/file2") = 0 [pid 5836] umount2("./269/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./269/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./269/binderfs") = 0 [pid 5836] umount2("./269/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./269/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./269/cgroup.net") = 0 [pid 5836] umount2("./269/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./269/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./269/cgroup.cpu") = 0 [pid 5836] umount2("./269/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./269/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./269/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./269") = 0 [pid 5836] mkdir("./270", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6118 attached [pid 6118] set_robust_list(0x5555632376a0, 24) = 0 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 273 [pid 6118] chdir("./270") = 0 [pid 6118] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6118] setpgid(0, 0) = 0 [pid 6118] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6118] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6118] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6118] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6118] write(3, "1000", 4) = 4 [pid 6118] close(3) = 0 [pid 6118] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6118] write(1, "executing program\n", 18executing program ) = 18 [pid 6118] memfd_create("syzkaller", 0) = 3 [pid 6118] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6118] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6118] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6118] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6118] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6118] close(3) = 0 [pid 6118] close(4) = 0 [pid 6118] mkdir("./file2", 0777) = 0 [pid 6118] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6118] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [ 241.779084][ T6118] loop0: detected capacity change from 0 to 128 [pid 6118] chdir("./file2") = 0 [pid 6118] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6118] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6118] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6118] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6118] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6118] close(3) = 0 [pid 6118] close(4) = 0 [pid 6118] close(5) = -1 EBADF (Bad file descriptor) [pid 6118] close(6) = -1 EBADF (Bad file descriptor) [pid 6118] close(7) = -1 EBADF (Bad file descriptor) [pid 6118] close(8) = -1 EBADF (Bad file descriptor) [pid 6118] close(9) = -1 EBADF (Bad file descriptor) [pid 6118] close(10) = -1 EBADF (Bad file descriptor) [pid 6118] close(11) = -1 EBADF (Bad file descriptor) [pid 6118] close(12) = -1 EBADF (Bad file descriptor) [pid 6118] close(13) = -1 EBADF (Bad file descriptor) [pid 6118] close(14) = -1 EBADF (Bad file descriptor) [pid 6118] close(15) = -1 EBADF (Bad file descriptor) [pid 6118] close(16) = -1 EBADF (Bad file descriptor) [pid 6118] close(17) = -1 EBADF (Bad file descriptor) [pid 6118] close(18) = -1 EBADF (Bad file descriptor) [pid 6118] close(19) = -1 EBADF (Bad file descriptor) [pid 6118] close(20) = -1 EBADF (Bad file descriptor) [pid 6118] close(21) = -1 EBADF (Bad file descriptor) [pid 6118] close(22) = -1 EBADF (Bad file descriptor) [pid 6118] close(23) = -1 EBADF (Bad file descriptor) [pid 6118] close(24) = -1 EBADF (Bad file descriptor) [pid 6118] close(25) = -1 EBADF (Bad file descriptor) [pid 6118] close(26) = -1 EBADF (Bad file descriptor) [pid 6118] close(27) = -1 EBADF (Bad file descriptor) [pid 6118] close(28) = -1 EBADF (Bad file descriptor) [pid 6118] close(29) = -1 EBADF (Bad file descriptor) [pid 6118] exit_group(0) = ? [pid 6118] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=273, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./270", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./270", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./270/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./270/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./270/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./270/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./270/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./270/file2") = 0 [pid 5836] umount2("./270/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./270/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./270/binderfs") = 0 [pid 5836] umount2("./270/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./270/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./270/cgroup.net") = 0 [pid 5836] umount2("./270/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./270/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./270/cgroup.cpu") = 0 [pid 5836] umount2("./270/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./270/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./270/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./270") = 0 [pid 5836] mkdir("./271", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6119 attached [pid 6119] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 274 [pid 6119] <... set_robust_list resumed>) = 0 [pid 6119] chdir("./271") = 0 [pid 6119] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6119] setpgid(0, 0) = 0 [pid 6119] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6119] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6119] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6119] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6119] write(3, "1000", 4) = 4 [pid 6119] close(3) = 0 [pid 6119] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6119] write(1, "executing program\n", 18executing program ) = 18 [pid 6119] memfd_create("syzkaller", 0) = 3 [pid 6119] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6119] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6119] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6119] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6119] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6119] close(3) = 0 [pid 6119] close(4) = 0 [pid 6119] mkdir("./file2", 0777) = 0 [pid 6119] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6119] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6119] chdir("./file2") = 0 [pid 6119] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 242.409794][ T6119] loop0: detected capacity change from 0 to 128 [pid 6119] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6119] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6119] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6119] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6119] close(3) = 0 [pid 6119] close(4) = 0 [pid 6119] close(5) = -1 EBADF (Bad file descriptor) [pid 6119] close(6) = -1 EBADF (Bad file descriptor) [pid 6119] close(7) = -1 EBADF (Bad file descriptor) [pid 6119] close(8) = -1 EBADF (Bad file descriptor) [pid 6119] close(9) = -1 EBADF (Bad file descriptor) [pid 6119] close(10) = -1 EBADF (Bad file descriptor) [pid 6119] close(11) = -1 EBADF (Bad file descriptor) [pid 6119] close(12) = -1 EBADF (Bad file descriptor) [pid 6119] close(13) = -1 EBADF (Bad file descriptor) [pid 6119] close(14) = -1 EBADF (Bad file descriptor) [pid 6119] close(15) = -1 EBADF (Bad file descriptor) [pid 6119] close(16) = -1 EBADF (Bad file descriptor) [pid 6119] close(17) = -1 EBADF (Bad file descriptor) [pid 6119] close(18) = -1 EBADF (Bad file descriptor) [pid 6119] close(19) = -1 EBADF (Bad file descriptor) [pid 6119] close(20) = -1 EBADF (Bad file descriptor) [pid 6119] close(21) = -1 EBADF (Bad file descriptor) [pid 6119] close(22) = -1 EBADF (Bad file descriptor) [pid 6119] close(23) = -1 EBADF (Bad file descriptor) [pid 6119] close(24) = -1 EBADF (Bad file descriptor) [pid 6119] close(25) = -1 EBADF (Bad file descriptor) [pid 6119] close(26) = -1 EBADF (Bad file descriptor) [pid 6119] close(27) = -1 EBADF (Bad file descriptor) [pid 6119] close(28) = -1 EBADF (Bad file descriptor) [pid 6119] close(29) = -1 EBADF (Bad file descriptor) [pid 6119] exit_group(0) = ? [pid 6119] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=274, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5836] umount2("./271", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./271", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./271/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./271/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./271/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./271/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./271/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./271/file2") = 0 [pid 5836] umount2("./271/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./271/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./271/binderfs") = 0 [pid 5836] umount2("./271/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./271/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./271/cgroup.net") = 0 [pid 5836] umount2("./271/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./271/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./271/cgroup.cpu") = 0 [pid 5836] umount2("./271/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./271/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./271/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./271") = 0 [pid 5836] mkdir("./272", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6120 attached [pid 6120] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 275 [pid 6120] <... set_robust_list resumed>) = 0 [pid 6120] chdir("./272") = 0 [pid 6120] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6120] setpgid(0, 0) = 0 [pid 6120] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6120] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6120] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6120] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6120] write(3, "1000", 4) = 4 [pid 6120] close(3) = 0 [pid 6120] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6120] write(1, "executing program\n", 18executing program ) = 18 [pid 6120] memfd_create("syzkaller", 0) = 3 [pid 6120] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6120] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6120] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6120] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6120] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6120] close(3) = 0 [pid 6120] close(4) = 0 [pid 6120] mkdir("./file2", 0777) = 0 [pid 6120] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6120] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [ 242.905752][ T6120] loop0: detected capacity change from 0 to 128 [pid 6120] chdir("./file2") = 0 [pid 6120] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6120] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6120] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6120] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6120] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6120] close(3) = 0 [pid 6120] close(4) = 0 [pid 6120] close(5) = -1 EBADF (Bad file descriptor) [pid 6120] close(6) = -1 EBADF (Bad file descriptor) [pid 6120] close(7) = -1 EBADF (Bad file descriptor) [pid 6120] close(8) = -1 EBADF (Bad file descriptor) [pid 6120] close(9) = -1 EBADF (Bad file descriptor) [pid 6120] close(10) = -1 EBADF (Bad file descriptor) [pid 6120] close(11) = -1 EBADF (Bad file descriptor) [pid 6120] close(12) = -1 EBADF (Bad file descriptor) [pid 6120] close(13) = -1 EBADF (Bad file descriptor) [pid 6120] close(14) = -1 EBADF (Bad file descriptor) [pid 6120] close(15) = -1 EBADF (Bad file descriptor) [pid 6120] close(16) = -1 EBADF (Bad file descriptor) [pid 6120] close(17) = -1 EBADF (Bad file descriptor) [pid 6120] close(18) = -1 EBADF (Bad file descriptor) [pid 6120] close(19) = -1 EBADF (Bad file descriptor) [pid 6120] close(20) = -1 EBADF (Bad file descriptor) [pid 6120] close(21) = -1 EBADF (Bad file descriptor) [pid 6120] close(22) = -1 EBADF (Bad file descriptor) [pid 6120] close(23) = -1 EBADF (Bad file descriptor) [pid 6120] close(24) = -1 EBADF (Bad file descriptor) [pid 6120] close(25) = -1 EBADF (Bad file descriptor) [pid 6120] close(26) = -1 EBADF (Bad file descriptor) [pid 6120] close(27) = -1 EBADF (Bad file descriptor) [pid 6120] close(28) = -1 EBADF (Bad file descriptor) [pid 6120] close(29) = -1 EBADF (Bad file descriptor) [pid 6120] exit_group(0) = ? [pid 6120] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=275, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./272", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./272", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./272/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./272/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./272/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./272/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./272/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./272/file2") = 0 [pid 5836] umount2("./272/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./272/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./272/binderfs") = 0 [pid 5836] umount2("./272/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./272/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./272/cgroup.net") = 0 [pid 5836] umount2("./272/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./272/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./272/cgroup.cpu") = 0 [pid 5836] umount2("./272/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./272/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./272/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./272") = 0 [pid 5836] mkdir("./273", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6121 attached [pid 6121] set_robust_list(0x5555632376a0, 24) = 0 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 276 [pid 6121] chdir("./273") = 0 [pid 6121] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6121] setpgid(0, 0) = 0 [pid 6121] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6121] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6121] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6121] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6121] write(3, "1000", 4) = 4 [pid 6121] close(3) = 0 [pid 6121] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6121] write(1, "executing program\n", 18) = 18 executing program [pid 6121] memfd_create("syzkaller", 0) = 3 [pid 6121] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6121] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6121] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6121] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6121] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6121] close(3) = 0 [pid 6121] close(4) = 0 [pid 6121] mkdir("./file2", 0777) = 0 [pid 6121] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6121] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [ 243.383482][ T6121] loop0: detected capacity change from 0 to 128 [pid 6121] chdir("./file2") = 0 [pid 6121] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6121] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6121] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6121] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6121] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6121] close(3) = 0 [pid 6121] close(4) = 0 [pid 6121] close(5) = -1 EBADF (Bad file descriptor) [pid 6121] close(6) = -1 EBADF (Bad file descriptor) [pid 6121] close(7) = -1 EBADF (Bad file descriptor) [pid 6121] close(8) = -1 EBADF (Bad file descriptor) [pid 6121] close(9) = -1 EBADF (Bad file descriptor) [pid 6121] close(10) = -1 EBADF (Bad file descriptor) [pid 6121] close(11) = -1 EBADF (Bad file descriptor) [pid 6121] close(12) = -1 EBADF (Bad file descriptor) [pid 6121] close(13) = -1 EBADF (Bad file descriptor) [pid 6121] close(14) = -1 EBADF (Bad file descriptor) [pid 6121] close(15) = -1 EBADF (Bad file descriptor) [pid 6121] close(16) = -1 EBADF (Bad file descriptor) [pid 6121] close(17) = -1 EBADF (Bad file descriptor) [pid 6121] close(18) = -1 EBADF (Bad file descriptor) [pid 6121] close(19) = -1 EBADF (Bad file descriptor) [pid 6121] close(20) = -1 EBADF (Bad file descriptor) [pid 6121] close(21) = -1 EBADF (Bad file descriptor) [pid 6121] close(22) = -1 EBADF (Bad file descriptor) [pid 6121] close(23) = -1 EBADF (Bad file descriptor) [pid 6121] close(24) = -1 EBADF (Bad file descriptor) [pid 6121] close(25) = -1 EBADF (Bad file descriptor) [pid 6121] close(26) = -1 EBADF (Bad file descriptor) [pid 6121] close(27) = -1 EBADF (Bad file descriptor) [pid 6121] close(28) = -1 EBADF (Bad file descriptor) [pid 6121] close(29) = -1 EBADF (Bad file descriptor) [pid 6121] exit_group(0) = ? [pid 6121] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=276, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./273", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./273", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./273/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./273/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./273/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./273/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./273/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./273/file2") = 0 [pid 5836] umount2("./273/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./273/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./273/binderfs") = 0 [pid 5836] umount2("./273/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./273/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./273/cgroup.net") = 0 [pid 5836] umount2("./273/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./273/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./273/cgroup.cpu") = 0 [pid 5836] umount2("./273/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./273/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./273/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./273") = 0 [pid 5836] mkdir("./274", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6122 attached [pid 6122] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 277 [pid 6122] <... set_robust_list resumed>) = 0 [pid 6122] chdir("./274") = 0 [pid 6122] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6122] setpgid(0, 0) = 0 [pid 6122] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6122] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6122] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6122] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6122] write(3, "1000", 4) = 4 [pid 6122] close(3) = 0 [pid 6122] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6122] write(1, "executing program\n", 18) = 18 [pid 6122] memfd_create("syzkaller", 0) = 3 [pid 6122] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6122] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6122] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6122] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6122] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6122] close(3) = 0 [pid 6122] close(4) = 0 [pid 6122] mkdir("./file2", 0777) = 0 [pid 6122] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6122] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6122] chdir("./file2") = 0 [pid 6122] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6122] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6122] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6122] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6122] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6122] close(3) = 0 [pid 6122] close(4) = 0 [pid 6122] close(5) = -1 EBADF (Bad file descriptor) [pid 6122] close(6) = -1 EBADF (Bad file descriptor) [ 243.987526][ T6122] loop0: detected capacity change from 0 to 128 [pid 6122] close(7) = -1 EBADF (Bad file descriptor) [pid 6122] close(8) = -1 EBADF (Bad file descriptor) [pid 6122] close(9) = -1 EBADF (Bad file descriptor) [pid 6122] close(10) = -1 EBADF (Bad file descriptor) [pid 6122] close(11) = -1 EBADF (Bad file descriptor) [pid 6122] close(12) = -1 EBADF (Bad file descriptor) [pid 6122] close(13) = -1 EBADF (Bad file descriptor) [pid 6122] close(14) = -1 EBADF (Bad file descriptor) [pid 6122] close(15) = -1 EBADF (Bad file descriptor) [pid 6122] close(16) = -1 EBADF (Bad file descriptor) [pid 6122] close(17) = -1 EBADF (Bad file descriptor) [pid 6122] close(18) = -1 EBADF (Bad file descriptor) [pid 6122] close(19) = -1 EBADF (Bad file descriptor) [pid 6122] close(20) = -1 EBADF (Bad file descriptor) [pid 6122] close(21) = -1 EBADF (Bad file descriptor) [pid 6122] close(22) = -1 EBADF (Bad file descriptor) [pid 6122] close(23) = -1 EBADF (Bad file descriptor) [pid 6122] close(24) = -1 EBADF (Bad file descriptor) [pid 6122] close(25) = -1 EBADF (Bad file descriptor) [pid 6122] close(26) = -1 EBADF (Bad file descriptor) [pid 6122] close(27) = -1 EBADF (Bad file descriptor) [pid 6122] close(28) = -1 EBADF (Bad file descriptor) [pid 6122] close(29) = -1 EBADF (Bad file descriptor) [pid 6122] exit_group(0) = ? [pid 6122] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=277, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] umount2("./274", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./274", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./274/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./274/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./274/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./274/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./274/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./274/file2") = 0 [pid 5836] umount2("./274/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./274/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./274/binderfs") = 0 [pid 5836] umount2("./274/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./274/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./274/cgroup.net") = 0 [pid 5836] umount2("./274/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./274/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./274/cgroup.cpu") = 0 [pid 5836] umount2("./274/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./274/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./274/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./274") = 0 [pid 5836] mkdir("./275", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6123 attached [pid 6123] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 278 [pid 6123] <... set_robust_list resumed>) = 0 [pid 6123] chdir("./275") = 0 [pid 6123] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6123] setpgid(0, 0) = 0 [pid 6123] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6123] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6123] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6123] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6123] write(3, "1000", 4) = 4 [pid 6123] close(3) = 0 [pid 6123] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6123] write(1, "executing program\n", 18executing program ) = 18 [pid 6123] memfd_create("syzkaller", 0) = 3 [pid 6123] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6123] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6123] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6123] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6123] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6123] close(3) = 0 [pid 6123] close(4) = 0 [pid 6123] mkdir("./file2", 0777) = 0 [pid 6123] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6123] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6123] chdir("./file2") = 0 [pid 6123] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 244.526089][ T6123] loop0: detected capacity change from 0 to 128 [pid 6123] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6123] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6123] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6123] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6123] close(3) = 0 [pid 6123] close(4) = 0 [pid 6123] close(5) = -1 EBADF (Bad file descriptor) [pid 6123] close(6) = -1 EBADF (Bad file descriptor) [pid 6123] close(7) = -1 EBADF (Bad file descriptor) [pid 6123] close(8) = -1 EBADF (Bad file descriptor) [pid 6123] close(9) = -1 EBADF (Bad file descriptor) [pid 6123] close(10) = -1 EBADF (Bad file descriptor) [pid 6123] close(11) = -1 EBADF (Bad file descriptor) [pid 6123] close(12) = -1 EBADF (Bad file descriptor) [pid 6123] close(13) = -1 EBADF (Bad file descriptor) [pid 6123] close(14) = -1 EBADF (Bad file descriptor) [pid 6123] close(15) = -1 EBADF (Bad file descriptor) [pid 6123] close(16) = -1 EBADF (Bad file descriptor) [pid 6123] close(17) = -1 EBADF (Bad file descriptor) [pid 6123] close(18) = -1 EBADF (Bad file descriptor) [pid 6123] close(19) = -1 EBADF (Bad file descriptor) [pid 6123] close(20) = -1 EBADF (Bad file descriptor) [pid 6123] close(21) = -1 EBADF (Bad file descriptor) [pid 6123] close(22) = -1 EBADF (Bad file descriptor) [pid 6123] close(23) = -1 EBADF (Bad file descriptor) [pid 6123] close(24) = -1 EBADF (Bad file descriptor) [pid 6123] close(25) = -1 EBADF (Bad file descriptor) [pid 6123] close(26) = -1 EBADF (Bad file descriptor) [pid 6123] close(27) = -1 EBADF (Bad file descriptor) [pid 6123] close(28) = -1 EBADF (Bad file descriptor) [pid 6123] close(29) = -1 EBADF (Bad file descriptor) [pid 6123] exit_group(0) = ? [pid 6123] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=278, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./275", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./275", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./275/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./275/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./275/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./275/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./275/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./275/file2") = 0 [pid 5836] umount2("./275/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./275/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./275/binderfs") = 0 [pid 5836] umount2("./275/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./275/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./275/cgroup.net") = 0 [pid 5836] umount2("./275/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./275/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./275/cgroup.cpu") = 0 [pid 5836] umount2("./275/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./275/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./275/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./275") = 0 [pid 5836] mkdir("./276", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6124 attached , child_tidptr=0x555563237690) = 279 [pid 6124] set_robust_list(0x5555632376a0, 24) = 0 [pid 6124] chdir("./276") = 0 [pid 6124] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6124] setpgid(0, 0) = 0 [pid 6124] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6124] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6124] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6124] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6124] write(3, "1000", 4) = 4 [pid 6124] close(3) = 0 [pid 6124] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6124] write(1, "executing program\n", 18) = 18 [pid 6124] memfd_create("syzkaller", 0) = 3 [pid 6124] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6124] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6124] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6124] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6124] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6124] close(3) = 0 [pid 6124] close(4) = 0 [pid 6124] mkdir("./file2", 0777) = 0 [pid 6124] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6124] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6124] chdir("./file2") = 0 [ 245.017349][ T6124] loop0: detected capacity change from 0 to 128 [pid 6124] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6124] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6124] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6124] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6124] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6124] close(3) = 0 [pid 6124] close(4) = 0 [pid 6124] close(5) = -1 EBADF (Bad file descriptor) [pid 6124] close(6) = -1 EBADF (Bad file descriptor) [pid 6124] close(7) = -1 EBADF (Bad file descriptor) [pid 6124] close(8) = -1 EBADF (Bad file descriptor) [pid 6124] close(9) = -1 EBADF (Bad file descriptor) [pid 6124] close(10) = -1 EBADF (Bad file descriptor) [pid 6124] close(11) = -1 EBADF (Bad file descriptor) [pid 6124] close(12) = -1 EBADF (Bad file descriptor) [pid 6124] close(13) = -1 EBADF (Bad file descriptor) [pid 6124] close(14) = -1 EBADF (Bad file descriptor) [pid 6124] close(15) = -1 EBADF (Bad file descriptor) [pid 6124] close(16) = -1 EBADF (Bad file descriptor) [pid 6124] close(17) = -1 EBADF (Bad file descriptor) [pid 6124] close(18) = -1 EBADF (Bad file descriptor) [pid 6124] close(19) = -1 EBADF (Bad file descriptor) [pid 6124] close(20) = -1 EBADF (Bad file descriptor) [pid 6124] close(21) = -1 EBADF (Bad file descriptor) [pid 6124] close(22) = -1 EBADF (Bad file descriptor) [pid 6124] close(23) = -1 EBADF (Bad file descriptor) [pid 6124] close(24) = -1 EBADF (Bad file descriptor) [pid 6124] close(25) = -1 EBADF (Bad file descriptor) [pid 6124] close(26) = -1 EBADF (Bad file descriptor) [pid 6124] close(27) = -1 EBADF (Bad file descriptor) [pid 6124] close(28) = -1 EBADF (Bad file descriptor) [pid 6124] close(29) = -1 EBADF (Bad file descriptor) [pid 6124] exit_group(0) = ? [pid 6124] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=279, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./276", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./276", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./276/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./276/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./276/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./276/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./276/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./276/file2") = 0 [pid 5836] umount2("./276/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./276/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./276/binderfs") = 0 [pid 5836] umount2("./276/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./276/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./276/cgroup.net") = 0 [pid 5836] umount2("./276/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./276/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./276/cgroup.cpu") = 0 [pid 5836] umount2("./276/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./276/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./276/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./276") = 0 [pid 5836] mkdir("./277", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6125 attached [pid 6125] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 280 [pid 6125] <... set_robust_list resumed>) = 0 [pid 6125] chdir("./277") = 0 [pid 6125] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6125] setpgid(0, 0) = 0 [pid 6125] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6125] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6125] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6125] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6125] write(3, "1000", 4) = 4 [pid 6125] close(3) = 0 [pid 6125] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6125] write(1, "executing program\n", 18) = 18 [pid 6125] memfd_create("syzkaller", 0) = 3 [pid 6125] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6125] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6125] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6125] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6125] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6125] close(3) = 0 [pid 6125] close(4) = 0 [pid 6125] mkdir("./file2", 0777) = 0 [pid 6125] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6125] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6125] chdir("./file2") = 0 [pid 6125] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 245.562748][ T6125] loop0: detected capacity change from 0 to 128 [pid 6125] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6125] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6125] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6125] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6125] close(3) = 0 [pid 6125] close(4) = 0 [pid 6125] close(5) = -1 EBADF (Bad file descriptor) [pid 6125] close(6) = -1 EBADF (Bad file descriptor) [pid 6125] close(7) = -1 EBADF (Bad file descriptor) [pid 6125] close(8) = -1 EBADF (Bad file descriptor) [pid 6125] close(9) = -1 EBADF (Bad file descriptor) [pid 6125] close(10) = -1 EBADF (Bad file descriptor) [pid 6125] close(11) = -1 EBADF (Bad file descriptor) [pid 6125] close(12) = -1 EBADF (Bad file descriptor) [pid 6125] close(13) = -1 EBADF (Bad file descriptor) [pid 6125] close(14) = -1 EBADF (Bad file descriptor) [pid 6125] close(15) = -1 EBADF (Bad file descriptor) [pid 6125] close(16) = -1 EBADF (Bad file descriptor) [pid 6125] close(17) = -1 EBADF (Bad file descriptor) [pid 6125] close(18) = -1 EBADF (Bad file descriptor) [pid 6125] close(19) = -1 EBADF (Bad file descriptor) [pid 6125] close(20) = -1 EBADF (Bad file descriptor) [pid 6125] close(21) = -1 EBADF (Bad file descriptor) [pid 6125] close(22) = -1 EBADF (Bad file descriptor) [pid 6125] close(23) = -1 EBADF (Bad file descriptor) [pid 6125] close(24) = -1 EBADF (Bad file descriptor) [pid 6125] close(25) = -1 EBADF (Bad file descriptor) [pid 6125] close(26) = -1 EBADF (Bad file descriptor) [pid 6125] close(27) = -1 EBADF (Bad file descriptor) [pid 6125] close(28) = -1 EBADF (Bad file descriptor) [pid 6125] close(29) = -1 EBADF (Bad file descriptor) [pid 6125] exit_group(0) = ? [pid 6125] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=280, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] umount2("./277", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./277", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./277/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./277/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./277/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./277/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./277/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./277/file2") = 0 [pid 5836] umount2("./277/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./277/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./277/binderfs") = 0 [pid 5836] umount2("./277/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./277/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./277/cgroup.net") = 0 [pid 5836] umount2("./277/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./277/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./277/cgroup.cpu") = 0 [pid 5836] umount2("./277/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./277/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./277/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./277") = 0 [pid 5836] mkdir("./278", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6126 attached [pid 6126] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 281 [pid 6126] <... set_robust_list resumed>) = 0 [pid 6126] chdir("./278") = 0 [pid 6126] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6126] setpgid(0, 0) = 0 [pid 6126] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6126] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6126] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6126] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6126] write(3, "1000", 4) = 4 [pid 6126] close(3) = 0 [pid 6126] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6126] write(1, "executing program\n", 18) = 18 [pid 6126] memfd_create("syzkaller", 0) = 3 [pid 6126] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6126] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6126] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6126] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6126] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6126] close(3) = 0 [pid 6126] close(4) = 0 [pid 6126] mkdir("./file2", 0777) = 0 [pid 6126] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [ 245.766927][ T6126] loop0: detected capacity change from 0 to 128 [pid 6126] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6126] chdir("./file2") = 0 [pid 6126] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6126] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6126] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6126] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6126] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6126] close(3) = 0 [pid 6126] close(4) = 0 [pid 6126] close(5) = -1 EBADF (Bad file descriptor) [pid 6126] close(6) = -1 EBADF (Bad file descriptor) [pid 6126] close(7) = -1 EBADF (Bad file descriptor) [pid 6126] close(8) = -1 EBADF (Bad file descriptor) [pid 6126] close(9) = -1 EBADF (Bad file descriptor) [pid 6126] close(10) = -1 EBADF (Bad file descriptor) [pid 6126] close(11) = -1 EBADF (Bad file descriptor) [pid 6126] close(12) = -1 EBADF (Bad file descriptor) [pid 6126] close(13) = -1 EBADF (Bad file descriptor) [pid 6126] close(14) = -1 EBADF (Bad file descriptor) [pid 6126] close(15) = -1 EBADF (Bad file descriptor) [pid 6126] close(16) = -1 EBADF (Bad file descriptor) [pid 6126] close(17) = -1 EBADF (Bad file descriptor) [pid 6126] close(18) = -1 EBADF (Bad file descriptor) [pid 6126] close(19) = -1 EBADF (Bad file descriptor) [pid 6126] close(20) = -1 EBADF (Bad file descriptor) [pid 6126] close(21) = -1 EBADF (Bad file descriptor) [pid 6126] close(22) = -1 EBADF (Bad file descriptor) [pid 6126] close(23) = -1 EBADF (Bad file descriptor) [pid 6126] close(24) = -1 EBADF (Bad file descriptor) [pid 6126] close(25) = -1 EBADF (Bad file descriptor) [pid 6126] close(26) = -1 EBADF (Bad file descriptor) [pid 6126] close(27) = -1 EBADF (Bad file descriptor) [pid 6126] close(28) = -1 EBADF (Bad file descriptor) [pid 6126] close(29) = -1 EBADF (Bad file descriptor) [pid 6126] exit_group(0) = ? [pid 6126] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=281, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./278", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./278", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./278/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./278/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./278/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./278/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./278/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./278/file2") = 0 [pid 5836] umount2("./278/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./278/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./278/binderfs") = 0 [pid 5836] umount2("./278/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./278/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./278/cgroup.net") = 0 [pid 5836] umount2("./278/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./278/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./278/cgroup.cpu") = 0 [pid 5836] umount2("./278/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./278/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./278/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./278") = 0 [pid 5836] mkdir("./279", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6127 attached [pid 6127] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 282 [pid 6127] <... set_robust_list resumed>) = 0 [pid 6127] chdir("./279") = 0 [pid 6127] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6127] setpgid(0, 0) = 0 [pid 6127] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6127] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6127] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6127] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6127] write(3, "1000", 4) = 4 [pid 6127] close(3) = 0 [pid 6127] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6127] write(1, "executing program\n", 18executing program ) = 18 [pid 6127] memfd_create("syzkaller", 0) = 3 [pid 6127] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6127] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6127] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6127] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6127] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6127] close(3) = 0 [pid 6127] close(4) = 0 [pid 6127] mkdir("./file2", 0777) = 0 [pid 6127] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6127] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6127] chdir("./file2") = 0 [pid 6127] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6127] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6127] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6127] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6127] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6127] close(3) = 0 [ 246.036503][ T6127] loop0: detected capacity change from 0 to 128 [pid 6127] close(4) = 0 [pid 6127] close(5) = -1 EBADF (Bad file descriptor) [pid 6127] close(6) = -1 EBADF (Bad file descriptor) [pid 6127] close(7) = -1 EBADF (Bad file descriptor) [pid 6127] close(8) = -1 EBADF (Bad file descriptor) [pid 6127] close(9) = -1 EBADF (Bad file descriptor) [pid 6127] close(10) = -1 EBADF (Bad file descriptor) [pid 6127] close(11) = -1 EBADF (Bad file descriptor) [pid 6127] close(12) = -1 EBADF (Bad file descriptor) [pid 6127] close(13) = -1 EBADF (Bad file descriptor) [pid 6127] close(14) = -1 EBADF (Bad file descriptor) [pid 6127] close(15) = -1 EBADF (Bad file descriptor) [pid 6127] close(16) = -1 EBADF (Bad file descriptor) [pid 6127] close(17) = -1 EBADF (Bad file descriptor) [pid 6127] close(18) = -1 EBADF (Bad file descriptor) [pid 6127] close(19) = -1 EBADF (Bad file descriptor) [pid 6127] close(20) = -1 EBADF (Bad file descriptor) [pid 6127] close(21) = -1 EBADF (Bad file descriptor) [pid 6127] close(22) = -1 EBADF (Bad file descriptor) [pid 6127] close(23) = -1 EBADF (Bad file descriptor) [pid 6127] close(24) = -1 EBADF (Bad file descriptor) [pid 6127] close(25) = -1 EBADF (Bad file descriptor) [pid 6127] close(26) = -1 EBADF (Bad file descriptor) [pid 6127] close(27) = -1 EBADF (Bad file descriptor) [pid 6127] close(28) = -1 EBADF (Bad file descriptor) [pid 6127] close(29) = -1 EBADF (Bad file descriptor) [pid 6127] exit_group(0) = ? [pid 6127] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=282, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./279", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./279", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./279/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./279/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./279/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./279/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./279/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./279/file2") = 0 [pid 5836] umount2("./279/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./279/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./279/binderfs") = 0 [pid 5836] umount2("./279/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./279/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./279/cgroup.net") = 0 [pid 5836] umount2("./279/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./279/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./279/cgroup.cpu") = 0 [pid 5836] umount2("./279/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./279/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./279/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./279") = 0 [pid 5836] mkdir("./280", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6128 attached [pid 6128] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 283 [pid 6128] <... set_robust_list resumed>) = 0 [pid 6128] chdir("./280") = 0 [pid 6128] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6128] setpgid(0, 0) = 0 [pid 6128] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6128] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6128] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6128] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6128] write(3, "1000", 4) = 4 [pid 6128] close(3) = 0 [pid 6128] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6128] write(1, "executing program\n", 18) = 18 [pid 6128] memfd_create("syzkaller", 0) = 3 [pid 6128] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6128] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6128] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6128] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6128] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6128] close(3) = 0 [pid 6128] close(4) = 0 [pid 6128] mkdir("./file2", 0777) = 0 [pid 6128] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6128] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6128] chdir("./file2") = 0 [pid 6128] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6128] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6128] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [ 246.475427][ T6128] loop0: detected capacity change from 0 to 128 [pid 6128] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6128] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6128] close(3) = 0 [pid 6128] close(4) = 0 [pid 6128] close(5) = -1 EBADF (Bad file descriptor) [pid 6128] close(6) = -1 EBADF (Bad file descriptor) [pid 6128] close(7) = -1 EBADF (Bad file descriptor) [pid 6128] close(8) = -1 EBADF (Bad file descriptor) [pid 6128] close(9) = -1 EBADF (Bad file descriptor) [pid 6128] close(10) = -1 EBADF (Bad file descriptor) [pid 6128] close(11) = -1 EBADF (Bad file descriptor) [pid 6128] close(12) = -1 EBADF (Bad file descriptor) [pid 6128] close(13) = -1 EBADF (Bad file descriptor) [pid 6128] close(14) = -1 EBADF (Bad file descriptor) [pid 6128] close(15) = -1 EBADF (Bad file descriptor) [pid 6128] close(16) = -1 EBADF (Bad file descriptor) [pid 6128] close(17) = -1 EBADF (Bad file descriptor) [pid 6128] close(18) = -1 EBADF (Bad file descriptor) [pid 6128] close(19) = -1 EBADF (Bad file descriptor) [pid 6128] close(20) = -1 EBADF (Bad file descriptor) [pid 6128] close(21) = -1 EBADF (Bad file descriptor) [pid 6128] close(22) = -1 EBADF (Bad file descriptor) [pid 6128] close(23) = -1 EBADF (Bad file descriptor) [pid 6128] close(24) = -1 EBADF (Bad file descriptor) [pid 6128] close(25) = -1 EBADF (Bad file descriptor) [pid 6128] close(26) = -1 EBADF (Bad file descriptor) [pid 6128] close(27) = -1 EBADF (Bad file descriptor) [pid 6128] close(28) = -1 EBADF (Bad file descriptor) [pid 6128] close(29) = -1 EBADF (Bad file descriptor) [pid 6128] exit_group(0) = ? [pid 6128] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=283, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./280", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./280", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./280/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./280/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./280/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./280/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./280/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./280/file2") = 0 [pid 5836] umount2("./280/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./280/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./280/binderfs") = 0 [pid 5836] umount2("./280/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./280/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./280/cgroup.net") = 0 [pid 5836] umount2("./280/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./280/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./280/cgroup.cpu") = 0 [pid 5836] umount2("./280/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./280/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./280/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./280") = 0 [pid 5836] mkdir("./281", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6129 attached [pid 6129] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 284 [pid 6129] <... set_robust_list resumed>) = 0 [pid 6129] chdir("./281") = 0 [pid 6129] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6129] setpgid(0, 0) = 0 [pid 6129] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6129] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6129] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6129] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6129] write(3, "1000", 4) = 4 [pid 6129] close(3) = 0 [pid 6129] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6129] write(1, "executing program\n", 18executing program ) = 18 [pid 6129] memfd_create("syzkaller", 0) = 3 [pid 6129] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6129] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6129] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6129] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6129] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6129] close(3) = 0 [pid 6129] close(4) = 0 [pid 6129] mkdir("./file2", 0777) = 0 [pid 6129] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6129] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6129] chdir("./file2") = 0 [pid 6129] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6129] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6129] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6129] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6129] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [ 246.991913][ T6129] loop0: detected capacity change from 0 to 128 [pid 6129] close(3) = 0 [pid 6129] close(4) = 0 [pid 6129] close(5) = -1 EBADF (Bad file descriptor) [pid 6129] close(6) = -1 EBADF (Bad file descriptor) [pid 6129] close(7) = -1 EBADF (Bad file descriptor) [pid 6129] close(8) = -1 EBADF (Bad file descriptor) [pid 6129] close(9) = -1 EBADF (Bad file descriptor) [pid 6129] close(10) = -1 EBADF (Bad file descriptor) [pid 6129] close(11) = -1 EBADF (Bad file descriptor) [pid 6129] close(12) = -1 EBADF (Bad file descriptor) [pid 6129] close(13) = -1 EBADF (Bad file descriptor) [pid 6129] close(14) = -1 EBADF (Bad file descriptor) [pid 6129] close(15) = -1 EBADF (Bad file descriptor) [pid 6129] close(16) = -1 EBADF (Bad file descriptor) [pid 6129] close(17) = -1 EBADF (Bad file descriptor) [pid 6129] close(18) = -1 EBADF (Bad file descriptor) [pid 6129] close(19) = -1 EBADF (Bad file descriptor) [pid 6129] close(20) = -1 EBADF (Bad file descriptor) [pid 6129] close(21) = -1 EBADF (Bad file descriptor) [pid 6129] close(22) = -1 EBADF (Bad file descriptor) [pid 6129] close(23) = -1 EBADF (Bad file descriptor) [pid 6129] close(24) = -1 EBADF (Bad file descriptor) [pid 6129] close(25) = -1 EBADF (Bad file descriptor) [pid 6129] close(26) = -1 EBADF (Bad file descriptor) [pid 6129] close(27) = -1 EBADF (Bad file descriptor) [pid 6129] close(28) = -1 EBADF (Bad file descriptor) [pid 6129] close(29) = -1 EBADF (Bad file descriptor) [pid 6129] exit_group(0) = ? [pid 6129] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=284, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] umount2("./281", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./281", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./281/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./281/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./281/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./281/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./281/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./281/file2") = 0 [pid 5836] umount2("./281/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./281/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./281/binderfs") = 0 [pid 5836] umount2("./281/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./281/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./281/cgroup.net") = 0 [pid 5836] umount2("./281/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./281/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./281/cgroup.cpu") = 0 [pid 5836] umount2("./281/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./281/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./281/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./281") = 0 [pid 5836] mkdir("./282", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6130 attached [pid 6130] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 285 [pid 6130] <... set_robust_list resumed>) = 0 [pid 6130] chdir("./282") = 0 [pid 6130] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6130] setpgid(0, 0) = 0 [pid 6130] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6130] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6130] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6130] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6130] write(3, "1000", 4) = 4 [pid 6130] close(3) = 0 [pid 6130] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6130] write(1, "executing program\n", 18executing program ) = 18 [pid 6130] memfd_create("syzkaller", 0) = 3 [pid 6130] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6130] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6130] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6130] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6130] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6130] close(3) = 0 [pid 6130] close(4) = 0 [pid 6130] mkdir("./file2", 0777) = 0 [pid 6130] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6130] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6130] chdir("./file2") = 0 [pid 6130] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6130] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6130] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [ 247.453253][ T6130] loop0: detected capacity change from 0 to 128 [pid 6130] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6130] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6130] close(3) = 0 [pid 6130] close(4) = 0 [pid 6130] close(5) = -1 EBADF (Bad file descriptor) [pid 6130] close(6) = -1 EBADF (Bad file descriptor) [pid 6130] close(7) = -1 EBADF (Bad file descriptor) [pid 6130] close(8) = -1 EBADF (Bad file descriptor) [pid 6130] close(9) = -1 EBADF (Bad file descriptor) [pid 6130] close(10) = -1 EBADF (Bad file descriptor) [pid 6130] close(11) = -1 EBADF (Bad file descriptor) [pid 6130] close(12) = -1 EBADF (Bad file descriptor) [pid 6130] close(13) = -1 EBADF (Bad file descriptor) [pid 6130] close(14) = -1 EBADF (Bad file descriptor) [pid 6130] close(15) = -1 EBADF (Bad file descriptor) [pid 6130] close(16) = -1 EBADF (Bad file descriptor) [pid 6130] close(17) = -1 EBADF (Bad file descriptor) [pid 6130] close(18) = -1 EBADF (Bad file descriptor) [pid 6130] close(19) = -1 EBADF (Bad file descriptor) [pid 6130] close(20) = -1 EBADF (Bad file descriptor) [pid 6130] close(21) = -1 EBADF (Bad file descriptor) [pid 6130] close(22) = -1 EBADF (Bad file descriptor) [pid 6130] close(23) = -1 EBADF (Bad file descriptor) [pid 6130] close(24) = -1 EBADF (Bad file descriptor) [pid 6130] close(25) = -1 EBADF (Bad file descriptor) [pid 6130] close(26) = -1 EBADF (Bad file descriptor) [pid 6130] close(27) = -1 EBADF (Bad file descriptor) [pid 6130] close(28) = -1 EBADF (Bad file descriptor) [pid 6130] close(29) = -1 EBADF (Bad file descriptor) [pid 6130] exit_group(0) = ? [pid 6130] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=285, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./282", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./282", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./282/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./282/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./282/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./282/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./282/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./282/file2") = 0 [pid 5836] umount2("./282/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./282/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./282/binderfs") = 0 [pid 5836] umount2("./282/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./282/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./282/cgroup.net") = 0 [pid 5836] umount2("./282/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./282/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./282/cgroup.cpu") = 0 [pid 5836] umount2("./282/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./282/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./282/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./282") = 0 [pid 5836] mkdir("./283", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6131 attached [pid 6131] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 286 [pid 6131] <... set_robust_list resumed>) = 0 [pid 6131] chdir("./283") = 0 [pid 6131] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6131] setpgid(0, 0) = 0 [pid 6131] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6131] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6131] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6131] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6131] write(3, "1000", 4) = 4 [pid 6131] close(3) = 0 [pid 6131] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6131] write(1, "executing program\n", 18executing program ) = 18 [pid 6131] memfd_create("syzkaller", 0) = 3 [pid 6131] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6131] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6131] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6131] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6131] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6131] close(3) = 0 [pid 6131] close(4) = 0 [pid 6131] mkdir("./file2", 0777) = 0 [pid 6131] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6131] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6131] chdir("./file2") = 0 [pid 6131] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 248.030805][ T6131] loop0: detected capacity change from 0 to 128 [pid 6131] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6131] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6131] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6131] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6131] close(3) = 0 [pid 6131] close(4) = 0 [pid 6131] close(5) = -1 EBADF (Bad file descriptor) [pid 6131] close(6) = -1 EBADF (Bad file descriptor) [pid 6131] close(7) = -1 EBADF (Bad file descriptor) [pid 6131] close(8) = -1 EBADF (Bad file descriptor) [pid 6131] close(9) = -1 EBADF (Bad file descriptor) [pid 6131] close(10) = -1 EBADF (Bad file descriptor) [pid 6131] close(11) = -1 EBADF (Bad file descriptor) [pid 6131] close(12) = -1 EBADF (Bad file descriptor) [pid 6131] close(13) = -1 EBADF (Bad file descriptor) [pid 6131] close(14) = -1 EBADF (Bad file descriptor) [pid 6131] close(15) = -1 EBADF (Bad file descriptor) [pid 6131] close(16) = -1 EBADF (Bad file descriptor) [pid 6131] close(17) = -1 EBADF (Bad file descriptor) [pid 6131] close(18) = -1 EBADF (Bad file descriptor) [pid 6131] close(19) = -1 EBADF (Bad file descriptor) [pid 6131] close(20) = -1 EBADF (Bad file descriptor) [pid 6131] close(21) = -1 EBADF (Bad file descriptor) [pid 6131] close(22) = -1 EBADF (Bad file descriptor) [pid 6131] close(23) = -1 EBADF (Bad file descriptor) [pid 6131] close(24) = -1 EBADF (Bad file descriptor) [pid 6131] close(25) = -1 EBADF (Bad file descriptor) [pid 6131] close(26) = -1 EBADF (Bad file descriptor) [pid 6131] close(27) = -1 EBADF (Bad file descriptor) [pid 6131] close(28) = -1 EBADF (Bad file descriptor) [pid 6131] close(29) = -1 EBADF (Bad file descriptor) [pid 6131] exit_group(0) = ? [pid 6131] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=286, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./283", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./283", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./283/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./283/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./283/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./283/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./283/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./283/file2") = 0 [pid 5836] umount2("./283/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./283/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./283/binderfs") = 0 [pid 5836] umount2("./283/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./283/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./283/cgroup.net") = 0 [pid 5836] umount2("./283/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./283/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./283/cgroup.cpu") = 0 [pid 5836] umount2("./283/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./283/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./283/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./283") = 0 [pid 5836] mkdir("./284", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6132 attached [pid 6132] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 287 [pid 6132] <... set_robust_list resumed>) = 0 [pid 6132] chdir("./284") = 0 [pid 6132] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6132] setpgid(0, 0) = 0 [pid 6132] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6132] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6132] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6132] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6132] write(3, "1000", 4) = 4 [pid 6132] close(3) = 0 [pid 6132] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6132] write(1, "executing program\n", 18) = 18 [pid 6132] memfd_create("syzkaller", 0) = 3 [pid 6132] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6132] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6132] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6132] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6132] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6132] close(3) = 0 [pid 6132] close(4) = 0 [pid 6132] mkdir("./file2", 0777) = 0 [pid 6132] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6132] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6132] chdir("./file2") = 0 [ 248.232075][ T6132] loop0: detected capacity change from 0 to 128 [pid 6132] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6132] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6132] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6132] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6132] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6132] close(3) = 0 [pid 6132] close(4) = 0 [pid 6132] close(5) = -1 EBADF (Bad file descriptor) [pid 6132] close(6) = -1 EBADF (Bad file descriptor) [pid 6132] close(7) = -1 EBADF (Bad file descriptor) [pid 6132] close(8) = -1 EBADF (Bad file descriptor) [pid 6132] close(9) = -1 EBADF (Bad file descriptor) [pid 6132] close(10) = -1 EBADF (Bad file descriptor) [pid 6132] close(11) = -1 EBADF (Bad file descriptor) [pid 6132] close(12) = -1 EBADF (Bad file descriptor) [pid 6132] close(13) = -1 EBADF (Bad file descriptor) [pid 6132] close(14) = -1 EBADF (Bad file descriptor) [pid 6132] close(15) = -1 EBADF (Bad file descriptor) [pid 6132] close(16) = -1 EBADF (Bad file descriptor) [pid 6132] close(17) = -1 EBADF (Bad file descriptor) [pid 6132] close(18) = -1 EBADF (Bad file descriptor) [pid 6132] close(19) = -1 EBADF (Bad file descriptor) [pid 6132] close(20) = -1 EBADF (Bad file descriptor) [pid 6132] close(21) = -1 EBADF (Bad file descriptor) [pid 6132] close(22) = -1 EBADF (Bad file descriptor) [pid 6132] close(23) = -1 EBADF (Bad file descriptor) [pid 6132] close(24) = -1 EBADF (Bad file descriptor) [pid 6132] close(25) = -1 EBADF (Bad file descriptor) [pid 6132] close(26) = -1 EBADF (Bad file descriptor) [pid 6132] close(27) = -1 EBADF (Bad file descriptor) [pid 6132] close(28) = -1 EBADF (Bad file descriptor) [pid 6132] close(29) = -1 EBADF (Bad file descriptor) [pid 6132] exit_group(0) = ? [pid 6132] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=287, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./284", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./284", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./284/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./284/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./284/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./284/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./284/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./284/file2") = 0 [pid 5836] umount2("./284/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./284/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./284/binderfs") = 0 [pid 5836] umount2("./284/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./284/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./284/cgroup.net") = 0 [pid 5836] umount2("./284/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./284/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./284/cgroup.cpu") = 0 [pid 5836] umount2("./284/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./284/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./284/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./284") = 0 [pid 5836] mkdir("./285", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6133 attached [pid 6133] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 288 [pid 6133] <... set_robust_list resumed>) = 0 [pid 6133] chdir("./285") = 0 [pid 6133] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6133] setpgid(0, 0) = 0 [pid 6133] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6133] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6133] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6133] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6133] write(3, "1000", 4) = 4 [pid 6133] close(3) = 0 [pid 6133] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6133] write(1, "executing program\n", 18executing program ) = 18 [pid 6133] memfd_create("syzkaller", 0) = 3 [pid 6133] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6133] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6133] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6133] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6133] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6133] close(3) = 0 [pid 6133] close(4) = 0 [pid 6133] mkdir("./file2", 0777) = 0 [pid 6133] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6133] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6133] chdir("./file2") = 0 [pid 6133] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6133] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6133] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6133] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6133] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6133] close(3) = 0 [pid 6133] close(4) = 0 [pid 6133] close(5) = -1 EBADF (Bad file descriptor) [pid 6133] close(6) = -1 EBADF (Bad file descriptor) [pid 6133] close(7) = -1 EBADF (Bad file descriptor) [pid 6133] close(8) = -1 EBADF (Bad file descriptor) [pid 6133] close(9) = -1 EBADF (Bad file descriptor) [pid 6133] close(10) = -1 EBADF (Bad file descriptor) [pid 6133] close(11) = -1 EBADF (Bad file descriptor) [pid 6133] close(12) = -1 EBADF (Bad file descriptor) [pid 6133] close(13) = -1 EBADF (Bad file descriptor) [pid 6133] close(14) = -1 EBADF (Bad file descriptor) [pid 6133] close(15) = -1 EBADF (Bad file descriptor) [pid 6133] close(16) = -1 EBADF (Bad file descriptor) [pid 6133] close(17) = -1 EBADF (Bad file descriptor) [pid 6133] close(18) = -1 EBADF (Bad file descriptor) [pid 6133] close(19) = -1 EBADF (Bad file descriptor) [pid 6133] close(20) = -1 EBADF (Bad file descriptor) [ 248.484686][ T6133] loop0: detected capacity change from 0 to 128 [pid 6133] close(21) = -1 EBADF (Bad file descriptor) [pid 6133] close(22) = -1 EBADF (Bad file descriptor) [pid 6133] close(23) = -1 EBADF (Bad file descriptor) [pid 6133] close(24) = -1 EBADF (Bad file descriptor) [pid 6133] close(25) = -1 EBADF (Bad file descriptor) [pid 6133] close(26) = -1 EBADF (Bad file descriptor) [pid 6133] close(27) = -1 EBADF (Bad file descriptor) [pid 6133] close(28) = -1 EBADF (Bad file descriptor) [pid 6133] close(29) = -1 EBADF (Bad file descriptor) [pid 6133] exit_group(0) = ? [pid 6133] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=288, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./285", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./285", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./285/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./285/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./285/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./285/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./285/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./285/file2") = 0 [pid 5836] umount2("./285/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./285/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./285/binderfs") = 0 [pid 5836] umount2("./285/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./285/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./285/cgroup.net") = 0 [pid 5836] umount2("./285/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./285/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./285/cgroup.cpu") = 0 [pid 5836] umount2("./285/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./285/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./285/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./285") = 0 [pid 5836] mkdir("./286", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6134 attached [pid 6134] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 289 [pid 6134] <... set_robust_list resumed>) = 0 [pid 6134] chdir("./286") = 0 [pid 6134] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6134] setpgid(0, 0) = 0 [pid 6134] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6134] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6134] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6134] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6134] write(3, "1000", 4) = 4 [pid 6134] close(3) = 0 [pid 6134] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6134] write(1, "executing program\n", 18) = 18 [pid 6134] memfd_create("syzkaller", 0) = 3 [pid 6134] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6134] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6134] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6134] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6134] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6134] close(3) = 0 [pid 6134] close(4) = 0 [pid 6134] mkdir("./file2", 0777) = 0 [pid 6134] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6134] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6134] chdir("./file2") = 0 [pid 6134] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6134] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6134] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6134] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6134] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6134] close(3) = 0 [ 248.873972][ T6134] loop0: detected capacity change from 0 to 128 [pid 6134] close(4) = 0 [pid 6134] close(5) = -1 EBADF (Bad file descriptor) [pid 6134] close(6) = -1 EBADF (Bad file descriptor) [pid 6134] close(7) = -1 EBADF (Bad file descriptor) [pid 6134] close(8) = -1 EBADF (Bad file descriptor) [pid 6134] close(9) = -1 EBADF (Bad file descriptor) [pid 6134] close(10) = -1 EBADF (Bad file descriptor) [pid 6134] close(11) = -1 EBADF (Bad file descriptor) [pid 6134] close(12) = -1 EBADF (Bad file descriptor) [pid 6134] close(13) = -1 EBADF (Bad file descriptor) [pid 6134] close(14) = -1 EBADF (Bad file descriptor) [pid 6134] close(15) = -1 EBADF (Bad file descriptor) [pid 6134] close(16) = -1 EBADF (Bad file descriptor) [pid 6134] close(17) = -1 EBADF (Bad file descriptor) [pid 6134] close(18) = -1 EBADF (Bad file descriptor) [pid 6134] close(19) = -1 EBADF (Bad file descriptor) [pid 6134] close(20) = -1 EBADF (Bad file descriptor) [pid 6134] close(21) = -1 EBADF (Bad file descriptor) [pid 6134] close(22) = -1 EBADF (Bad file descriptor) [pid 6134] close(23) = -1 EBADF (Bad file descriptor) [pid 6134] close(24) = -1 EBADF (Bad file descriptor) [pid 6134] close(25) = -1 EBADF (Bad file descriptor) [pid 6134] close(26) = -1 EBADF (Bad file descriptor) [pid 6134] close(27) = -1 EBADF (Bad file descriptor) [pid 6134] close(28) = -1 EBADF (Bad file descriptor) [pid 6134] close(29) = -1 EBADF (Bad file descriptor) [pid 6134] exit_group(0) = ? [pid 6134] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=289, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5836] umount2("./286", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./286", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./286/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./286/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./286/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./286/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./286/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./286/file2") = 0 [pid 5836] umount2("./286/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./286/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./286/binderfs") = 0 [pid 5836] umount2("./286/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./286/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./286/cgroup.net") = 0 [pid 5836] umount2("./286/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./286/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./286/cgroup.cpu") = 0 [pid 5836] umount2("./286/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./286/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./286/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./286") = 0 [pid 5836] mkdir("./287", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6135 attached [pid 6135] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 290 [pid 6135] <... set_robust_list resumed>) = 0 [pid 6135] chdir("./287") = 0 [pid 6135] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6135] setpgid(0, 0) = 0 [pid 6135] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6135] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6135] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6135] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6135] write(3, "1000", 4) = 4 [pid 6135] close(3) = 0 [pid 6135] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6135] write(1, "executing program\n", 18) = 18 [pid 6135] memfd_create("syzkaller", 0) = 3 [pid 6135] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6135] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6135] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6135] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6135] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6135] close(3) = 0 [pid 6135] close(4) = 0 [pid 6135] mkdir("./file2", 0777) = 0 [pid 6135] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6135] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6135] chdir("./file2") = 0 [pid 6135] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 249.516244][ T6135] loop0: detected capacity change from 0 to 128 [pid 6135] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6135] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6135] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6135] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6135] close(3) = 0 [pid 6135] close(4) = 0 [pid 6135] close(5) = -1 EBADF (Bad file descriptor) [pid 6135] close(6) = -1 EBADF (Bad file descriptor) [pid 6135] close(7) = -1 EBADF (Bad file descriptor) [pid 6135] close(8) = -1 EBADF (Bad file descriptor) [pid 6135] close(9) = -1 EBADF (Bad file descriptor) [pid 6135] close(10) = -1 EBADF (Bad file descriptor) [pid 6135] close(11) = -1 EBADF (Bad file descriptor) [pid 6135] close(12) = -1 EBADF (Bad file descriptor) [pid 6135] close(13) = -1 EBADF (Bad file descriptor) [pid 6135] close(14) = -1 EBADF (Bad file descriptor) [pid 6135] close(15) = -1 EBADF (Bad file descriptor) [pid 6135] close(16) = -1 EBADF (Bad file descriptor) [pid 6135] close(17) = -1 EBADF (Bad file descriptor) [pid 6135] close(18) = -1 EBADF (Bad file descriptor) [pid 6135] close(19) = -1 EBADF (Bad file descriptor) [pid 6135] close(20) = -1 EBADF (Bad file descriptor) [pid 6135] close(21) = -1 EBADF (Bad file descriptor) [pid 6135] close(22) = -1 EBADF (Bad file descriptor) [pid 6135] close(23) = -1 EBADF (Bad file descriptor) [pid 6135] close(24) = -1 EBADF (Bad file descriptor) [pid 6135] close(25) = -1 EBADF (Bad file descriptor) [pid 6135] close(26) = -1 EBADF (Bad file descriptor) [pid 6135] close(27) = -1 EBADF (Bad file descriptor) [pid 6135] close(28) = -1 EBADF (Bad file descriptor) [pid 6135] close(29) = -1 EBADF (Bad file descriptor) [pid 6135] exit_group(0) = ? [pid 6135] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=290, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5836] umount2("./287", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./287", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./287/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./287/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./287/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./287/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./287/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./287/file2") = 0 [pid 5836] umount2("./287/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./287/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./287/binderfs") = 0 [pid 5836] umount2("./287/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./287/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./287/cgroup.net") = 0 [pid 5836] umount2("./287/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./287/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./287/cgroup.cpu") = 0 [pid 5836] umount2("./287/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./287/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./287/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./287") = 0 [pid 5836] mkdir("./288", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6136 attached , child_tidptr=0x555563237690) = 291 [pid 6136] set_robust_list(0x5555632376a0, 24) = 0 [pid 6136] chdir("./288") = 0 [pid 6136] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6136] setpgid(0, 0) = 0 [pid 6136] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6136] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6136] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6136] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6136] write(3, "1000", 4) = 4 [pid 6136] close(3) = 0 [pid 6136] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6136] write(1, "executing program\n", 18) = 18 [pid 6136] memfd_create("syzkaller", 0) = 3 [pid 6136] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6136] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6136] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6136] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6136] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6136] close(3) = 0 [pid 6136] close(4) = 0 [pid 6136] mkdir("./file2", 0777) = 0 [pid 6136] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6136] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6136] chdir("./file2") = 0 [pid 6136] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6136] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [ 249.761331][ T6136] loop0: detected capacity change from 0 to 128 [pid 6136] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6136] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6136] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6136] close(3) = 0 [pid 6136] close(4) = 0 [pid 6136] close(5) = -1 EBADF (Bad file descriptor) [pid 6136] close(6) = -1 EBADF (Bad file descriptor) [pid 6136] close(7) = -1 EBADF (Bad file descriptor) [pid 6136] close(8) = -1 EBADF (Bad file descriptor) [pid 6136] close(9) = -1 EBADF (Bad file descriptor) [pid 6136] close(10) = -1 EBADF (Bad file descriptor) [pid 6136] close(11) = -1 EBADF (Bad file descriptor) [pid 6136] close(12) = -1 EBADF (Bad file descriptor) [pid 6136] close(13) = -1 EBADF (Bad file descriptor) [pid 6136] close(14) = -1 EBADF (Bad file descriptor) [pid 6136] close(15) = -1 EBADF (Bad file descriptor) [pid 6136] close(16) = -1 EBADF (Bad file descriptor) [pid 6136] close(17) = -1 EBADF (Bad file descriptor) [pid 6136] close(18) = -1 EBADF (Bad file descriptor) [pid 6136] close(19) = -1 EBADF (Bad file descriptor) [pid 6136] close(20) = -1 EBADF (Bad file descriptor) [pid 6136] close(21) = -1 EBADF (Bad file descriptor) [pid 6136] close(22) = -1 EBADF (Bad file descriptor) [pid 6136] close(23) = -1 EBADF (Bad file descriptor) [pid 6136] close(24) = -1 EBADF (Bad file descriptor) [pid 6136] close(25) = -1 EBADF (Bad file descriptor) [pid 6136] close(26) = -1 EBADF (Bad file descriptor) [pid 6136] close(27) = -1 EBADF (Bad file descriptor) [pid 6136] close(28) = -1 EBADF (Bad file descriptor) [pid 6136] close(29) = -1 EBADF (Bad file descriptor) [pid 6136] exit_group(0) = ? [pid 6136] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=291, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] umount2("./288", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./288", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./288/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./288/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./288/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./288/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./288/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./288/file2") = 0 [pid 5836] umount2("./288/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./288/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./288/binderfs") = 0 [pid 5836] umount2("./288/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./288/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./288/cgroup.net") = 0 [pid 5836] umount2("./288/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./288/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./288/cgroup.cpu") = 0 [pid 5836] umount2("./288/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./288/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./288/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./288") = 0 [pid 5836] mkdir("./289", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6137 attached [pid 6137] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 292 [pid 6137] <... set_robust_list resumed>) = 0 [pid 6137] chdir("./289") = 0 [pid 6137] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6137] setpgid(0, 0) = 0 [pid 6137] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6137] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6137] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6137] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXECexecuting program ) = 3 [pid 6137] write(3, "1000", 4) = 4 [pid 6137] close(3) = 0 [pid 6137] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6137] write(1, "executing program\n", 18) = 18 [pid 6137] memfd_create("syzkaller", 0) = 3 [pid 6137] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6137] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6137] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6137] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6137] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6137] close(3) = 0 [pid 6137] close(4) = 0 [pid 6137] mkdir("./file2", 0777) = 0 [pid 6137] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6137] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6137] chdir("./file2") = 0 [pid 6137] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6137] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6137] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6137] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6137] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6137] close(3) = 0 [pid 6137] close(4) = 0 [pid 6137] close(5) = -1 EBADF (Bad file descriptor) [pid 6137] close(6) = -1 EBADF (Bad file descriptor) [pid 6137] close(7) = -1 EBADF (Bad file descriptor) [pid 6137] close(8) = -1 EBADF (Bad file descriptor) [pid 6137] close(9) = -1 EBADF (Bad file descriptor) [pid 6137] close(10) = -1 EBADF (Bad file descriptor) [pid 6137] close(11) = -1 EBADF (Bad file descriptor) [pid 6137] close(12) = -1 EBADF (Bad file descriptor) [pid 6137] close(13) = -1 EBADF (Bad file descriptor) [pid 6137] close(14) = -1 EBADF (Bad file descriptor) [pid 6137] close(15) = -1 EBADF (Bad file descriptor) [pid 6137] close(16) = -1 EBADF (Bad file descriptor) [pid 6137] close(17) = -1 EBADF (Bad file descriptor) [pid 6137] close(18) = -1 EBADF (Bad file descriptor) [pid 6137] close(19) = -1 EBADF (Bad file descriptor) [pid 6137] close(20) = -1 EBADF (Bad file descriptor) [pid 6137] close(21) = -1 EBADF (Bad file descriptor) [pid 6137] close(22) = -1 EBADF (Bad file descriptor) [ 249.972054][ T6137] loop0: detected capacity change from 0 to 128 [pid 6137] close(23) = -1 EBADF (Bad file descriptor) [pid 6137] close(24) = -1 EBADF (Bad file descriptor) [pid 6137] close(25) = -1 EBADF (Bad file descriptor) [pid 6137] close(26) = -1 EBADF (Bad file descriptor) [pid 6137] close(27) = -1 EBADF (Bad file descriptor) [pid 6137] close(28) = -1 EBADF (Bad file descriptor) [pid 6137] close(29) = -1 EBADF (Bad file descriptor) [pid 6137] exit_group(0) = ? [pid 6137] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=292, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5836] umount2("./289", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./289", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./289/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./289/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./289/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./289/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./289/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./289/file2") = 0 [pid 5836] umount2("./289/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./289/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./289/binderfs") = 0 [pid 5836] umount2("./289/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./289/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./289/cgroup.net") = 0 [pid 5836] umount2("./289/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./289/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./289/cgroup.cpu") = 0 [pid 5836] umount2("./289/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./289/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./289/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./289") = 0 [pid 5836] mkdir("./290", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6138 attached [pid 6138] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 293 [pid 6138] <... set_robust_list resumed>) = 0 [pid 6138] chdir("./290") = 0 [pid 6138] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6138] setpgid(0, 0) = 0 [pid 6138] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6138] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6138] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6138] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6138] write(3, "1000", 4) = 4 [pid 6138] close(3) = 0 [pid 6138] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6138] write(1, "executing program\n", 18executing program ) = 18 [pid 6138] memfd_create("syzkaller", 0) = 3 [pid 6138] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6138] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6138] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6138] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6138] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6138] close(3) = 0 [pid 6138] close(4) = 0 [pid 6138] mkdir("./file2", 0777) = 0 [pid 6138] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6138] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6138] chdir("./file2") = 0 [pid 6138] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6138] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6138] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6138] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6138] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6138] close(3) = 0 [pid 6138] close(4) = 0 [ 250.519117][ T6138] loop0: detected capacity change from 0 to 128 [pid 6138] close(5) = -1 EBADF (Bad file descriptor) [pid 6138] close(6) = -1 EBADF (Bad file descriptor) [pid 6138] close(7) = -1 EBADF (Bad file descriptor) [pid 6138] close(8) = -1 EBADF (Bad file descriptor) [pid 6138] close(9) = -1 EBADF (Bad file descriptor) [pid 6138] close(10) = -1 EBADF (Bad file descriptor) [pid 6138] close(11) = -1 EBADF (Bad file descriptor) [pid 6138] close(12) = -1 EBADF (Bad file descriptor) [pid 6138] close(13) = -1 EBADF (Bad file descriptor) [pid 6138] close(14) = -1 EBADF (Bad file descriptor) [pid 6138] close(15) = -1 EBADF (Bad file descriptor) [pid 6138] close(16) = -1 EBADF (Bad file descriptor) [pid 6138] close(17) = -1 EBADF (Bad file descriptor) [pid 6138] close(18) = -1 EBADF (Bad file descriptor) [pid 6138] close(19) = -1 EBADF (Bad file descriptor) [pid 6138] close(20) = -1 EBADF (Bad file descriptor) [pid 6138] close(21) = -1 EBADF (Bad file descriptor) [pid 6138] close(22) = -1 EBADF (Bad file descriptor) [pid 6138] close(23) = -1 EBADF (Bad file descriptor) [pid 6138] close(24) = -1 EBADF (Bad file descriptor) [pid 6138] close(25) = -1 EBADF (Bad file descriptor) [pid 6138] close(26) = -1 EBADF (Bad file descriptor) [pid 6138] close(27) = -1 EBADF (Bad file descriptor) [pid 6138] close(28) = -1 EBADF (Bad file descriptor) [pid 6138] close(29) = -1 EBADF (Bad file descriptor) [pid 6138] exit_group(0) = ? [pid 6138] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=293, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5836] umount2("./290", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./290", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./290/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./290/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./290/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./290/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./290/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./290/file2") = 0 [pid 5836] umount2("./290/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./290/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./290/binderfs") = 0 [pid 5836] umount2("./290/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./290/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./290/cgroup.net") = 0 [pid 5836] umount2("./290/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./290/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./290/cgroup.cpu") = 0 [pid 5836] umount2("./290/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./290/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./290/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./290") = 0 [pid 5836] mkdir("./291", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6139 attached [pid 6139] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 294 [pid 6139] <... set_robust_list resumed>) = 0 [pid 6139] chdir("./291") = 0 [pid 6139] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6139] setpgid(0, 0) = 0 [pid 6139] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6139] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6139] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6139] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6139] write(3, "1000", 4) = 4 [pid 6139] close(3) = 0 [pid 6139] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6139] write(1, "executing program\n", 18) = 18 [pid 6139] memfd_create("syzkaller", 0) = 3 [pid 6139] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6139] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6139] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6139] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6139] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6139] close(3) = 0 [pid 6139] close(4) = 0 [pid 6139] mkdir("./file2", 0777) = 0 [pid 6139] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6139] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6139] chdir("./file2") = 0 [pid 6139] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6139] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6139] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6139] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6139] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6139] close(3) = 0 [pid 6139] close(4) = 0 [ 251.103778][ T6139] loop0: detected capacity change from 0 to 128 [pid 6139] close(5) = -1 EBADF (Bad file descriptor) [pid 6139] close(6) = -1 EBADF (Bad file descriptor) [pid 6139] close(7) = -1 EBADF (Bad file descriptor) [pid 6139] close(8) = -1 EBADF (Bad file descriptor) [pid 6139] close(9) = -1 EBADF (Bad file descriptor) [pid 6139] close(10) = -1 EBADF (Bad file descriptor) [pid 6139] close(11) = -1 EBADF (Bad file descriptor) [pid 6139] close(12) = -1 EBADF (Bad file descriptor) [pid 6139] close(13) = -1 EBADF (Bad file descriptor) [pid 6139] close(14) = -1 EBADF (Bad file descriptor) [pid 6139] close(15) = -1 EBADF (Bad file descriptor) [pid 6139] close(16) = -1 EBADF (Bad file descriptor) [pid 6139] close(17) = -1 EBADF (Bad file descriptor) [pid 6139] close(18) = -1 EBADF (Bad file descriptor) [pid 6139] close(19) = -1 EBADF (Bad file descriptor) [pid 6139] close(20) = -1 EBADF (Bad file descriptor) [pid 6139] close(21) = -1 EBADF (Bad file descriptor) [pid 6139] close(22) = -1 EBADF (Bad file descriptor) [pid 6139] close(23) = -1 EBADF (Bad file descriptor) [pid 6139] close(24) = -1 EBADF (Bad file descriptor) [pid 6139] close(25) = -1 EBADF (Bad file descriptor) [pid 6139] close(26) = -1 EBADF (Bad file descriptor) [pid 6139] close(27) = -1 EBADF (Bad file descriptor) [pid 6139] close(28) = -1 EBADF (Bad file descriptor) [pid 6139] close(29) = -1 EBADF (Bad file descriptor) [pid 6139] exit_group(0) = ? [pid 6139] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=294, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] umount2("./291", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./291", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./291/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./291/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./291/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./291/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./291/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./291/file2") = 0 [pid 5836] umount2("./291/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./291/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./291/binderfs") = 0 [pid 5836] umount2("./291/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./291/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./291/cgroup.net") = 0 [pid 5836] umount2("./291/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./291/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./291/cgroup.cpu") = 0 [pid 5836] umount2("./291/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./291/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./291/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./291") = 0 [pid 5836] mkdir("./292", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6140 attached [pid 6140] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 295 [pid 6140] <... set_robust_list resumed>) = 0 [pid 6140] chdir("./292") = 0 [pid 6140] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6140] setpgid(0, 0) = 0 [pid 6140] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6140] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6140] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6140] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6140] write(3, "1000", 4) = 4 [pid 6140] close(3) = 0 [pid 6140] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6140] write(1, "executing program\n", 18) = 18 [pid 6140] memfd_create("syzkaller", 0) = 3 [pid 6140] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6140] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6140] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6140] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6140] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6140] close(3) = 0 [pid 6140] close(4) = 0 [pid 6140] mkdir("./file2", 0777) = 0 [pid 6140] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6140] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6140] chdir("./file2") = 0 [pid 6140] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6140] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6140] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6140] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6140] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [ 251.664867][ T6140] loop0: detected capacity change from 0 to 128 [pid 6140] close(3) = 0 [pid 6140] close(4) = 0 [pid 6140] close(5) = -1 EBADF (Bad file descriptor) [pid 6140] close(6) = -1 EBADF (Bad file descriptor) [pid 6140] close(7) = -1 EBADF (Bad file descriptor) [pid 6140] close(8) = -1 EBADF (Bad file descriptor) [pid 6140] close(9) = -1 EBADF (Bad file descriptor) [pid 6140] close(10) = -1 EBADF (Bad file descriptor) [pid 6140] close(11) = -1 EBADF (Bad file descriptor) [pid 6140] close(12) = -1 EBADF (Bad file descriptor) [pid 6140] close(13) = -1 EBADF (Bad file descriptor) [pid 6140] close(14) = -1 EBADF (Bad file descriptor) [pid 6140] close(15) = -1 EBADF (Bad file descriptor) [pid 6140] close(16) = -1 EBADF (Bad file descriptor) [pid 6140] close(17) = -1 EBADF (Bad file descriptor) [pid 6140] close(18) = -1 EBADF (Bad file descriptor) [pid 6140] close(19) = -1 EBADF (Bad file descriptor) [pid 6140] close(20) = -1 EBADF (Bad file descriptor) [pid 6140] close(21) = -1 EBADF (Bad file descriptor) [pid 6140] close(22) = -1 EBADF (Bad file descriptor) [pid 6140] close(23) = -1 EBADF (Bad file descriptor) [pid 6140] close(24) = -1 EBADF (Bad file descriptor) [pid 6140] close(25) = -1 EBADF (Bad file descriptor) [pid 6140] close(26) = -1 EBADF (Bad file descriptor) [pid 6140] close(27) = -1 EBADF (Bad file descriptor) [pid 6140] close(28) = -1 EBADF (Bad file descriptor) [pid 6140] close(29) = -1 EBADF (Bad file descriptor) [pid 6140] exit_group(0) = ? [pid 6140] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=295, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./292", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./292", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./292/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./292/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./292/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./292/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./292/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./292/file2") = 0 [pid 5836] umount2("./292/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./292/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./292/binderfs") = 0 [pid 5836] umount2("./292/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./292/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./292/cgroup.net") = 0 [pid 5836] umount2("./292/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./292/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./292/cgroup.cpu") = 0 [pid 5836] umount2("./292/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./292/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./292/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./292") = 0 [pid 5836] mkdir("./293", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6141 attached [pid 6141] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 296 [pid 6141] <... set_robust_list resumed>) = 0 [pid 6141] chdir("./293") = 0 [pid 6141] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6141] setpgid(0, 0) = 0 [pid 6141] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6141] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6141] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6141] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6141] write(3, "1000", 4) = 4 [pid 6141] close(3) = 0 [pid 6141] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6141] write(1, "executing program\n", 18) = 18 [pid 6141] memfd_create("syzkaller", 0) = 3 [pid 6141] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6141] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6141] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6141] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6141] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6141] close(3) = 0 [pid 6141] close(4) = 0 [pid 6141] mkdir("./file2", 0777) = 0 [pid 6141] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6141] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6141] chdir("./file2") = 0 [pid 6141] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6141] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6141] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6141] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [ 252.252432][ T6141] loop0: detected capacity change from 0 to 128 [pid 6141] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6141] close(3) = 0 [pid 6141] close(4) = 0 [pid 6141] close(5) = -1 EBADF (Bad file descriptor) [pid 6141] close(6) = -1 EBADF (Bad file descriptor) [pid 6141] close(7) = -1 EBADF (Bad file descriptor) [pid 6141] close(8) = -1 EBADF (Bad file descriptor) [pid 6141] close(9) = -1 EBADF (Bad file descriptor) [pid 6141] close(10) = -1 EBADF (Bad file descriptor) [pid 6141] close(11) = -1 EBADF (Bad file descriptor) [pid 6141] close(12) = -1 EBADF (Bad file descriptor) [pid 6141] close(13) = -1 EBADF (Bad file descriptor) [pid 6141] close(14) = -1 EBADF (Bad file descriptor) [pid 6141] close(15) = -1 EBADF (Bad file descriptor) [pid 6141] close(16) = -1 EBADF (Bad file descriptor) [pid 6141] close(17) = -1 EBADF (Bad file descriptor) [pid 6141] close(18) = -1 EBADF (Bad file descriptor) [pid 6141] close(19) = -1 EBADF (Bad file descriptor) [pid 6141] close(20) = -1 EBADF (Bad file descriptor) [pid 6141] close(21) = -1 EBADF (Bad file descriptor) [pid 6141] close(22) = -1 EBADF (Bad file descriptor) [pid 6141] close(23) = -1 EBADF (Bad file descriptor) [pid 6141] close(24) = -1 EBADF (Bad file descriptor) [pid 6141] close(25) = -1 EBADF (Bad file descriptor) [pid 6141] close(26) = -1 EBADF (Bad file descriptor) [pid 6141] close(27) = -1 EBADF (Bad file descriptor) [pid 6141] close(28) = -1 EBADF (Bad file descriptor) [pid 6141] close(29) = -1 EBADF (Bad file descriptor) [pid 6141] exit_group(0) = ? [pid 6141] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=296, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] umount2("./293", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./293", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./293/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./293/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./293/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./293/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./293/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./293/file2") = 0 [pid 5836] umount2("./293/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./293/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./293/binderfs") = 0 [pid 5836] umount2("./293/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./293/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./293/cgroup.net") = 0 [pid 5836] umount2("./293/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./293/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./293/cgroup.cpu") = 0 [pid 5836] umount2("./293/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./293/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./293/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./293") = 0 [pid 5836] mkdir("./294", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6142 attached , child_tidptr=0x555563237690) = 297 [pid 6142] set_robust_list(0x5555632376a0, 24) = 0 [pid 6142] chdir("./294") = 0 [pid 6142] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6142] setpgid(0, 0) = 0 [pid 6142] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6142] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6142] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6142] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6142] write(3, "1000", 4) = 4 [pid 6142] close(3) = 0 [pid 6142] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6142] write(1, "executing program\n", 18) = 18 [pid 6142] memfd_create("syzkaller", 0) = 3 [pid 6142] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6142] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6142] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6142] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6142] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6142] close(3) = 0 [pid 6142] close(4) = 0 [pid 6142] mkdir("./file2", 0777) = 0 [pid 6142] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6142] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6142] chdir("./file2") = 0 [pid 6142] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 252.889216][ T6142] loop0: detected capacity change from 0 to 128 [pid 6142] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6142] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6142] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6142] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6142] close(3) = 0 [pid 6142] close(4) = 0 [pid 6142] close(5) = -1 EBADF (Bad file descriptor) [pid 6142] close(6) = -1 EBADF (Bad file descriptor) [pid 6142] close(7) = -1 EBADF (Bad file descriptor) [pid 6142] close(8) = -1 EBADF (Bad file descriptor) [pid 6142] close(9) = -1 EBADF (Bad file descriptor) [pid 6142] close(10) = -1 EBADF (Bad file descriptor) [pid 6142] close(11) = -1 EBADF (Bad file descriptor) [pid 6142] close(12) = -1 EBADF (Bad file descriptor) [pid 6142] close(13) = -1 EBADF (Bad file descriptor) [pid 6142] close(14) = -1 EBADF (Bad file descriptor) [pid 6142] close(15) = -1 EBADF (Bad file descriptor) [pid 6142] close(16) = -1 EBADF (Bad file descriptor) [pid 6142] close(17) = -1 EBADF (Bad file descriptor) [pid 6142] close(18) = -1 EBADF (Bad file descriptor) [pid 6142] close(19) = -1 EBADF (Bad file descriptor) [pid 6142] close(20) = -1 EBADF (Bad file descriptor) [pid 6142] close(21) = -1 EBADF (Bad file descriptor) [pid 6142] close(22) = -1 EBADF (Bad file descriptor) [pid 6142] close(23) = -1 EBADF (Bad file descriptor) [pid 6142] close(24) = -1 EBADF (Bad file descriptor) [pid 6142] close(25) = -1 EBADF (Bad file descriptor) [pid 6142] close(26) = -1 EBADF (Bad file descriptor) [pid 6142] close(27) = -1 EBADF (Bad file descriptor) [pid 6142] close(28) = -1 EBADF (Bad file descriptor) [pid 6142] close(29) = -1 EBADF (Bad file descriptor) [pid 6142] exit_group(0) = ? [pid 6142] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=297, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./294", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./294", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./294/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./294/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./294/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./294/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./294/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./294/file2") = 0 [pid 5836] umount2("./294/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./294/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./294/binderfs") = 0 [pid 5836] umount2("./294/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./294/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./294/cgroup.net") = 0 [pid 5836] umount2("./294/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./294/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./294/cgroup.cpu") = 0 [pid 5836] umount2("./294/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./294/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./294/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./294") = 0 [pid 5836] mkdir("./295", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6143 attached , child_tidptr=0x555563237690) = 298 [pid 6143] set_robust_list(0x5555632376a0, 24) = 0 [pid 6143] chdir("./295") = 0 [pid 6143] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6143] setpgid(0, 0) = 0 [pid 6143] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6143] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6143] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6143] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6143] write(3, "1000", 4) = 4 [pid 6143] close(3) = 0 [pid 6143] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6143] write(1, "executing program\n", 18) = 18 [pid 6143] memfd_create("syzkaller", 0) = 3 [pid 6143] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6143] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6143] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6143] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6143] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6143] close(3) = 0 [pid 6143] close(4) = 0 [pid 6143] mkdir("./file2", 0777) = 0 [pid 6143] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6143] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6143] chdir("./file2") = 0 [pid 6143] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6143] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6143] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6143] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6143] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6143] close(3) = 0 [pid 6143] close(4) = 0 [ 253.467735][ T6143] loop0: detected capacity change from 0 to 128 [pid 6143] close(5) = -1 EBADF (Bad file descriptor) [pid 6143] close(6) = -1 EBADF (Bad file descriptor) [pid 6143] close(7) = -1 EBADF (Bad file descriptor) [pid 6143] close(8) = -1 EBADF (Bad file descriptor) [pid 6143] close(9) = -1 EBADF (Bad file descriptor) [pid 6143] close(10) = -1 EBADF (Bad file descriptor) [pid 6143] close(11) = -1 EBADF (Bad file descriptor) [pid 6143] close(12) = -1 EBADF (Bad file descriptor) [pid 6143] close(13) = -1 EBADF (Bad file descriptor) [pid 6143] close(14) = -1 EBADF (Bad file descriptor) [pid 6143] close(15) = -1 EBADF (Bad file descriptor) [pid 6143] close(16) = -1 EBADF (Bad file descriptor) [pid 6143] close(17) = -1 EBADF (Bad file descriptor) [pid 6143] close(18) = -1 EBADF (Bad file descriptor) [pid 6143] close(19) = -1 EBADF (Bad file descriptor) [pid 6143] close(20) = -1 EBADF (Bad file descriptor) [pid 6143] close(21) = -1 EBADF (Bad file descriptor) [pid 6143] close(22) = -1 EBADF (Bad file descriptor) [pid 6143] close(23) = -1 EBADF (Bad file descriptor) [pid 6143] close(24) = -1 EBADF (Bad file descriptor) [pid 6143] close(25) = -1 EBADF (Bad file descriptor) [pid 6143] close(26) = -1 EBADF (Bad file descriptor) [pid 6143] close(27) = -1 EBADF (Bad file descriptor) [pid 6143] close(28) = -1 EBADF (Bad file descriptor) [pid 6143] close(29) = -1 EBADF (Bad file descriptor) [pid 6143] exit_group(0) = ? [pid 6143] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=298, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./295", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./295", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./295/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./295/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./295/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./295/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./295/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./295/file2") = 0 [pid 5836] umount2("./295/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./295/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./295/binderfs") = 0 [pid 5836] umount2("./295/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./295/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./295/cgroup.net") = 0 [pid 5836] umount2("./295/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./295/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./295/cgroup.cpu") = 0 [pid 5836] umount2("./295/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./295/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./295/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./295") = 0 [pid 5836] mkdir("./296", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6144 attached , child_tidptr=0x555563237690) = 299 [pid 6144] set_robust_list(0x5555632376a0, 24) = 0 [pid 6144] chdir("./296") = 0 [pid 6144] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6144] setpgid(0, 0) = 0 [pid 6144] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6144] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6144] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6144] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6144] write(3, "1000", 4) = 4 [pid 6144] close(3) = 0 [pid 6144] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6144] write(1, "executing program\n", 18executing program ) = 18 [pid 6144] memfd_create("syzkaller", 0) = 3 [pid 6144] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6144] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6144] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6144] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6144] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6144] close(3) = 0 [pid 6144] close(4) = 0 [pid 6144] mkdir("./file2", 0777) = 0 [pid 6144] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6144] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6144] chdir("./file2") = 0 [pid 6144] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6144] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6144] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6144] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6144] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6144] close(3) = 0 [pid 6144] close(4) = 0 [pid 6144] close(5) = -1 EBADF (Bad file descriptor) [pid 6144] close(6) = -1 EBADF (Bad file descriptor) [pid 6144] close(7) = -1 EBADF (Bad file descriptor) [pid 6144] close(8) = -1 EBADF (Bad file descriptor) [pid 6144] close(9) = -1 EBADF (Bad file descriptor) [pid 6144] close(10) = -1 EBADF (Bad file descriptor) [pid 6144] close(11) = -1 EBADF (Bad file descriptor) [pid 6144] close(12) = -1 EBADF (Bad file descriptor) [pid 6144] close(13) = -1 EBADF (Bad file descriptor) [pid 6144] close(14) = -1 EBADF (Bad file descriptor) [pid 6144] close(15) = -1 EBADF (Bad file descriptor) [pid 6144] close(16) = -1 EBADF (Bad file descriptor) [pid 6144] close(17) = -1 EBADF (Bad file descriptor) [pid 6144] close(18) = -1 EBADF (Bad file descriptor) [pid 6144] close(19) = -1 EBADF (Bad file descriptor) [pid 6144] close(20) = -1 EBADF (Bad file descriptor) [pid 6144] close(21) = -1 EBADF (Bad file descriptor) [pid 6144] close(22) = -1 EBADF (Bad file descriptor) [pid 6144] close(23) = -1 EBADF (Bad file descriptor) [pid 6144] close(24) = -1 EBADF (Bad file descriptor) [pid 6144] close(25) = -1 EBADF (Bad file descriptor) [ 254.098082][ T6144] loop0: detected capacity change from 0 to 128 [pid 6144] close(26) = -1 EBADF (Bad file descriptor) [pid 6144] close(27) = -1 EBADF (Bad file descriptor) [pid 6144] close(28) = -1 EBADF (Bad file descriptor) [pid 6144] close(29) = -1 EBADF (Bad file descriptor) [pid 6144] exit_group(0) = ? [pid 6144] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=299, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./296", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./296", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./296/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./296/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./296/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./296/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./296/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./296/file2") = 0 [pid 5836] umount2("./296/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./296/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./296/binderfs") = 0 [pid 5836] umount2("./296/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./296/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./296/cgroup.net") = 0 [pid 5836] umount2("./296/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./296/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./296/cgroup.cpu") = 0 [pid 5836] umount2("./296/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./296/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./296/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./296") = 0 [pid 5836] mkdir("./297", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6145 attached [pid 6145] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 300 [pid 6145] <... set_robust_list resumed>) = 0 [pid 6145] chdir("./297") = 0 [pid 6145] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6145] setpgid(0, 0) = 0 [pid 6145] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6145] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6145] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6145] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6145] write(3, "1000", 4) = 4 [pid 6145] close(3) = 0 [pid 6145] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6145] write(1, "executing program\n", 18) = 18 [pid 6145] memfd_create("syzkaller", 0) = 3 [pid 6145] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6145] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6145] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6145] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6145] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6145] close(3) = 0 [pid 6145] close(4) = 0 [pid 6145] mkdir("./file2", 0777) = 0 [pid 6145] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6145] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6145] chdir("./file2") = 0 [pid 6145] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6145] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6145] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6145] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6145] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6145] close(3) = 0 [pid 6145] close(4) = 0 [ 254.362785][ T6145] loop0: detected capacity change from 0 to 128 [pid 6145] close(5) = -1 EBADF (Bad file descriptor) [pid 6145] close(6) = -1 EBADF (Bad file descriptor) [pid 6145] close(7) = -1 EBADF (Bad file descriptor) [pid 6145] close(8) = -1 EBADF (Bad file descriptor) [pid 6145] close(9) = -1 EBADF (Bad file descriptor) [pid 6145] close(10) = -1 EBADF (Bad file descriptor) [pid 6145] close(11) = -1 EBADF (Bad file descriptor) [pid 6145] close(12) = -1 EBADF (Bad file descriptor) [pid 6145] close(13) = -1 EBADF (Bad file descriptor) [pid 6145] close(14) = -1 EBADF (Bad file descriptor) [pid 6145] close(15) = -1 EBADF (Bad file descriptor) [pid 6145] close(16) = -1 EBADF (Bad file descriptor) [pid 6145] close(17) = -1 EBADF (Bad file descriptor) [pid 6145] close(18) = -1 EBADF (Bad file descriptor) [pid 6145] close(19) = -1 EBADF (Bad file descriptor) [pid 6145] close(20) = -1 EBADF (Bad file descriptor) [pid 6145] close(21) = -1 EBADF (Bad file descriptor) [pid 6145] close(22) = -1 EBADF (Bad file descriptor) [pid 6145] close(23) = -1 EBADF (Bad file descriptor) [pid 6145] close(24) = -1 EBADF (Bad file descriptor) [pid 6145] close(25) = -1 EBADF (Bad file descriptor) [pid 6145] close(26) = -1 EBADF (Bad file descriptor) [pid 6145] close(27) = -1 EBADF (Bad file descriptor) [pid 6145] close(28) = -1 EBADF (Bad file descriptor) [pid 6145] close(29) = -1 EBADF (Bad file descriptor) [pid 6145] exit_group(0) = ? [pid 6145] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=300, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./297", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./297", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./297/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./297/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./297/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./297/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./297/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./297/file2") = 0 [pid 5836] umount2("./297/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./297/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./297/binderfs") = 0 [pid 5836] umount2("./297/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./297/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./297/cgroup.net") = 0 [pid 5836] umount2("./297/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./297/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./297/cgroup.cpu") = 0 [pid 5836] umount2("./297/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./297/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./297/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./297") = 0 [pid 5836] mkdir("./298", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6146 attached [pid 6146] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 301 [pid 6146] <... set_robust_list resumed>) = 0 [pid 6146] chdir("./298") = 0 [pid 6146] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6146] setpgid(0, 0) = 0 [pid 6146] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6146] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6146] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6146] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6146] write(3, "1000", 4) = 4 [pid 6146] close(3) = 0 [pid 6146] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6146] write(1, "executing program\n", 18executing program ) = 18 [pid 6146] memfd_create("syzkaller", 0) = 3 [pid 6146] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6146] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6146] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6146] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6146] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6146] close(3) = 0 [pid 6146] close(4) = 0 [pid 6146] mkdir("./file2", 0777) = 0 [pid 6146] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6146] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6146] chdir("./file2") = 0 [pid 6146] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 254.880541][ T6146] loop0: detected capacity change from 0 to 128 [pid 6146] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6146] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6146] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6146] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6146] close(3) = 0 [pid 6146] close(4) = 0 [pid 6146] close(5) = -1 EBADF (Bad file descriptor) [pid 6146] close(6) = -1 EBADF (Bad file descriptor) [pid 6146] close(7) = -1 EBADF (Bad file descriptor) [pid 6146] close(8) = -1 EBADF (Bad file descriptor) [pid 6146] close(9) = -1 EBADF (Bad file descriptor) [pid 6146] close(10) = -1 EBADF (Bad file descriptor) [pid 6146] close(11) = -1 EBADF (Bad file descriptor) [pid 6146] close(12) = -1 EBADF (Bad file descriptor) [pid 6146] close(13) = -1 EBADF (Bad file descriptor) [pid 6146] close(14) = -1 EBADF (Bad file descriptor) [pid 6146] close(15) = -1 EBADF (Bad file descriptor) [pid 6146] close(16) = -1 EBADF (Bad file descriptor) [pid 6146] close(17) = -1 EBADF (Bad file descriptor) [pid 6146] close(18) = -1 EBADF (Bad file descriptor) [pid 6146] close(19) = -1 EBADF (Bad file descriptor) [pid 6146] close(20) = -1 EBADF (Bad file descriptor) [pid 6146] close(21) = -1 EBADF (Bad file descriptor) [pid 6146] close(22) = -1 EBADF (Bad file descriptor) [pid 6146] close(23) = -1 EBADF (Bad file descriptor) [pid 6146] close(24) = -1 EBADF (Bad file descriptor) [pid 6146] close(25) = -1 EBADF (Bad file descriptor) [pid 6146] close(26) = -1 EBADF (Bad file descriptor) [pid 6146] close(27) = -1 EBADF (Bad file descriptor) [pid 6146] close(28) = -1 EBADF (Bad file descriptor) [pid 6146] close(29) = -1 EBADF (Bad file descriptor) [pid 6146] exit_group(0) = ? [pid 6146] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=301, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5836] umount2("./298", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./298", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./298/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./298/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./298/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./298/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./298/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./298/file2") = 0 [pid 5836] umount2("./298/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./298/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./298/binderfs") = 0 [pid 5836] umount2("./298/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./298/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./298/cgroup.net") = 0 [pid 5836] umount2("./298/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./298/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./298/cgroup.cpu") = 0 [pid 5836] umount2("./298/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./298/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./298/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./298") = 0 [pid 5836] mkdir("./299", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6147 attached [pid 6147] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 302 [pid 6147] <... set_robust_list resumed>) = 0 [pid 6147] chdir("./299") = 0 [pid 6147] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6147] setpgid(0, 0) = 0 [pid 6147] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6147] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6147] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6147] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6147] write(3, "1000", 4) = 4 [pid 6147] close(3) = 0 [pid 6147] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6147] write(1, "executing program\n", 18executing program ) = 18 [pid 6147] memfd_create("syzkaller", 0) = 3 [pid 6147] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6147] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6147] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6147] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6147] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6147] close(3) = 0 [pid 6147] close(4) = 0 [pid 6147] mkdir("./file2", 0777) = 0 [pid 6147] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6147] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6147] chdir("./file2") = 0 [pid 6147] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6147] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6147] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6147] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6147] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6147] close(3) = 0 [pid 6147] close(4) = 0 [ 255.126691][ T6147] loop0: detected capacity change from 0 to 128 [pid 6147] close(5) = -1 EBADF (Bad file descriptor) [pid 6147] close(6) = -1 EBADF (Bad file descriptor) [pid 6147] close(7) = -1 EBADF (Bad file descriptor) [pid 6147] close(8) = -1 EBADF (Bad file descriptor) [pid 6147] close(9) = -1 EBADF (Bad file descriptor) [pid 6147] close(10) = -1 EBADF (Bad file descriptor) [pid 6147] close(11) = -1 EBADF (Bad file descriptor) [pid 6147] close(12) = -1 EBADF (Bad file descriptor) [pid 6147] close(13) = -1 EBADF (Bad file descriptor) [pid 6147] close(14) = -1 EBADF (Bad file descriptor) [pid 6147] close(15) = -1 EBADF (Bad file descriptor) [pid 6147] close(16) = -1 EBADF (Bad file descriptor) [pid 6147] close(17) = -1 EBADF (Bad file descriptor) [pid 6147] close(18) = -1 EBADF (Bad file descriptor) [pid 6147] close(19) = -1 EBADF (Bad file descriptor) [pid 6147] close(20) = -1 EBADF (Bad file descriptor) [pid 6147] close(21) = -1 EBADF (Bad file descriptor) [pid 6147] close(22) = -1 EBADF (Bad file descriptor) [pid 6147] close(23) = -1 EBADF (Bad file descriptor) [pid 6147] close(24) = -1 EBADF (Bad file descriptor) [pid 6147] close(25) = -1 EBADF (Bad file descriptor) [pid 6147] close(26) = -1 EBADF (Bad file descriptor) [pid 6147] close(27) = -1 EBADF (Bad file descriptor) [pid 6147] close(28) = -1 EBADF (Bad file descriptor) [pid 6147] close(29) = -1 EBADF (Bad file descriptor) [pid 6147] exit_group(0) = ? [pid 6147] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=302, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./299", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./299", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./299/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./299/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./299/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./299/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./299/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./299/file2") = 0 [pid 5836] umount2("./299/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./299/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./299/binderfs") = 0 [pid 5836] umount2("./299/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./299/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./299/cgroup.net") = 0 [pid 5836] umount2("./299/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./299/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./299/cgroup.cpu") = 0 [pid 5836] umount2("./299/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./299/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./299/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./299") = 0 [pid 5836] mkdir("./300", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6148 attached [pid 6148] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 303 [pid 6148] <... set_robust_list resumed>) = 0 [pid 6148] chdir("./300") = 0 [pid 6148] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6148] setpgid(0, 0) = 0 [pid 6148] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6148] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6148] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6148] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6148] write(3, "1000", 4) = 4 [pid 6148] close(3) = 0 [pid 6148] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6148] write(1, "executing program\n", 18executing program ) = 18 [pid 6148] memfd_create("syzkaller", 0) = 3 [pid 6148] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6148] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6148] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6148] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6148] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6148] close(3) = 0 [pid 6148] close(4) = 0 [pid 6148] mkdir("./file2", 0777) = 0 [pid 6148] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6148] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6148] chdir("./file2") = 0 [pid 6148] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6148] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6148] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6148] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6148] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6148] close(3) = 0 [pid 6148] close(4) = 0 [pid 6148] close(5) = -1 EBADF (Bad file descriptor) [ 255.545951][ T6148] loop0: detected capacity change from 0 to 128 [pid 6148] close(6) = -1 EBADF (Bad file descriptor) [pid 6148] close(7) = -1 EBADF (Bad file descriptor) [pid 6148] close(8) = -1 EBADF (Bad file descriptor) [pid 6148] close(9) = -1 EBADF (Bad file descriptor) [pid 6148] close(10) = -1 EBADF (Bad file descriptor) [pid 6148] close(11) = -1 EBADF (Bad file descriptor) [pid 6148] close(12) = -1 EBADF (Bad file descriptor) [pid 6148] close(13) = -1 EBADF (Bad file descriptor) [pid 6148] close(14) = -1 EBADF (Bad file descriptor) [pid 6148] close(15) = -1 EBADF (Bad file descriptor) [pid 6148] close(16) = -1 EBADF (Bad file descriptor) [pid 6148] close(17) = -1 EBADF (Bad file descriptor) [pid 6148] close(18) = -1 EBADF (Bad file descriptor) [pid 6148] close(19) = -1 EBADF (Bad file descriptor) [pid 6148] close(20) = -1 EBADF (Bad file descriptor) [pid 6148] close(21) = -1 EBADF (Bad file descriptor) [pid 6148] close(22) = -1 EBADF (Bad file descriptor) [pid 6148] close(23) = -1 EBADF (Bad file descriptor) [pid 6148] close(24) = -1 EBADF (Bad file descriptor) [pid 6148] close(25) = -1 EBADF (Bad file descriptor) [pid 6148] close(26) = -1 EBADF (Bad file descriptor) [pid 6148] close(27) = -1 EBADF (Bad file descriptor) [pid 6148] close(28) = -1 EBADF (Bad file descriptor) [pid 6148] close(29) = -1 EBADF (Bad file descriptor) [pid 6148] exit_group(0) = ? [pid 6148] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=303, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./300", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./300", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./300/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./300/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./300/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./300/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./300/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./300/file2") = 0 [pid 5836] umount2("./300/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./300/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./300/binderfs") = 0 [pid 5836] umount2("./300/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./300/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./300/cgroup.net") = 0 [pid 5836] umount2("./300/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./300/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./300/cgroup.cpu") = 0 [pid 5836] umount2("./300/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./300/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./300/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./300") = 0 [pid 5836] mkdir("./301", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6149 attached [pid 6149] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 304 [pid 6149] <... set_robust_list resumed>) = 0 [pid 6149] chdir("./301") = 0 [pid 6149] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6149] setpgid(0, 0) = 0 [pid 6149] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6149] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6149] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6149] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6149] write(3, "1000", 4) = 4 [pid 6149] close(3) = 0 [pid 6149] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6149] write(1, "executing program\n", 18) = 18 [pid 6149] memfd_create("syzkaller", 0) = 3 [pid 6149] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6149] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6149] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6149] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6149] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6149] close(3) = 0 [pid 6149] close(4) = 0 [pid 6149] mkdir("./file2", 0777) = 0 [pid 6149] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6149] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6149] chdir("./file2") = 0 [pid 6149] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6149] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6149] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6149] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [ 256.156860][ T6149] loop0: detected capacity change from 0 to 128 [pid 6149] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6149] close(3) = 0 [pid 6149] close(4) = 0 [pid 6149] close(5) = -1 EBADF (Bad file descriptor) [pid 6149] close(6) = -1 EBADF (Bad file descriptor) [pid 6149] close(7) = -1 EBADF (Bad file descriptor) [pid 6149] close(8) = -1 EBADF (Bad file descriptor) [pid 6149] close(9) = -1 EBADF (Bad file descriptor) [pid 6149] close(10) = -1 EBADF (Bad file descriptor) [pid 6149] close(11) = -1 EBADF (Bad file descriptor) [pid 6149] close(12) = -1 EBADF (Bad file descriptor) [pid 6149] close(13) = -1 EBADF (Bad file descriptor) [pid 6149] close(14) = -1 EBADF (Bad file descriptor) [pid 6149] close(15) = -1 EBADF (Bad file descriptor) [pid 6149] close(16) = -1 EBADF (Bad file descriptor) [pid 6149] close(17) = -1 EBADF (Bad file descriptor) [pid 6149] close(18) = -1 EBADF (Bad file descriptor) [pid 6149] close(19) = -1 EBADF (Bad file descriptor) [pid 6149] close(20) = -1 EBADF (Bad file descriptor) [pid 6149] close(21) = -1 EBADF (Bad file descriptor) [pid 6149] close(22) = -1 EBADF (Bad file descriptor) [pid 6149] close(23) = -1 EBADF (Bad file descriptor) [pid 6149] close(24) = -1 EBADF (Bad file descriptor) [pid 6149] close(25) = -1 EBADF (Bad file descriptor) [pid 6149] close(26) = -1 EBADF (Bad file descriptor) [pid 6149] close(27) = -1 EBADF (Bad file descriptor) [pid 6149] close(28) = -1 EBADF (Bad file descriptor) [pid 6149] close(29) = -1 EBADF (Bad file descriptor) [pid 6149] exit_group(0) = ? [pid 6149] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=304, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./301", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./301", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./301/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./301/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./301/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./301/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./301/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./301/file2") = 0 [pid 5836] umount2("./301/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./301/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./301/binderfs") = 0 [pid 5836] umount2("./301/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./301/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./301/cgroup.net") = 0 [pid 5836] umount2("./301/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./301/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./301/cgroup.cpu") = 0 [pid 5836] umount2("./301/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./301/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./301/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./301") = 0 [pid 5836] mkdir("./302", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6151 attached [pid 6151] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 305 [pid 6151] <... set_robust_list resumed>) = 0 [pid 6151] chdir("./302") = 0 [pid 6151] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6151] setpgid(0, 0) = 0 [pid 6151] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6151] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6151] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6151] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6151] write(3, "1000", 4) = 4 [pid 6151] close(3) = 0 [pid 6151] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6151] write(1, "executing program\n", 18) = 18 [pid 6151] memfd_create("syzkaller", 0) = 3 [pid 6151] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6151] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6151] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6151] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6151] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6151] close(3) = 0 [pid 6151] close(4) = 0 [pid 6151] mkdir("./file2", 0777) = 0 [pid 6151] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6151] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6151] chdir("./file2") = 0 [pid 6151] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6151] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6151] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6151] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6151] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6151] close(3) = 0 [pid 6151] close(4) = 0 [ 256.773389][ T6151] loop0: detected capacity change from 0 to 128 [pid 6151] close(5) = -1 EBADF (Bad file descriptor) [pid 6151] close(6) = -1 EBADF (Bad file descriptor) [pid 6151] close(7) = -1 EBADF (Bad file descriptor) [pid 6151] close(8) = -1 EBADF (Bad file descriptor) [pid 6151] close(9) = -1 EBADF (Bad file descriptor) [pid 6151] close(10) = -1 EBADF (Bad file descriptor) [pid 6151] close(11) = -1 EBADF (Bad file descriptor) [pid 6151] close(12) = -1 EBADF (Bad file descriptor) [pid 6151] close(13) = -1 EBADF (Bad file descriptor) [pid 6151] close(14) = -1 EBADF (Bad file descriptor) [pid 6151] close(15) = -1 EBADF (Bad file descriptor) [pid 6151] close(16) = -1 EBADF (Bad file descriptor) [pid 6151] close(17) = -1 EBADF (Bad file descriptor) [pid 6151] close(18) = -1 EBADF (Bad file descriptor) [pid 6151] close(19) = -1 EBADF (Bad file descriptor) [pid 6151] close(20) = -1 EBADF (Bad file descriptor) [pid 6151] close(21) = -1 EBADF (Bad file descriptor) [pid 6151] close(22) = -1 EBADF (Bad file descriptor) [pid 6151] close(23) = -1 EBADF (Bad file descriptor) [pid 6151] close(24) = -1 EBADF (Bad file descriptor) [pid 6151] close(25) = -1 EBADF (Bad file descriptor) [pid 6151] close(26) = -1 EBADF (Bad file descriptor) [pid 6151] close(27) = -1 EBADF (Bad file descriptor) [pid 6151] close(28) = -1 EBADF (Bad file descriptor) [pid 6151] close(29) = -1 EBADF (Bad file descriptor) [pid 6151] exit_group(0) = ? [pid 6151] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=305, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./302", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./302", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./302/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./302/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./302/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./302/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./302/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./302/file2") = 0 [pid 5836] umount2("./302/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./302/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./302/binderfs") = 0 [pid 5836] umount2("./302/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./302/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./302/cgroup.net") = 0 [pid 5836] umount2("./302/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./302/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./302/cgroup.cpu") = 0 [pid 5836] umount2("./302/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./302/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./302/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./302") = 0 [pid 5836] mkdir("./303", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6153 attached [pid 6153] set_robust_list(0x5555632376a0, 24) = 0 [pid 6153] chdir("./303" [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 306 [pid 6153] <... chdir resumed>) = 0 [pid 6153] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6153] setpgid(0, 0) = 0 [pid 6153] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6153] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6153] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6153] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6153] write(3, "1000", 4) = 4 [pid 6153] close(3) = 0 [pid 6153] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6153] write(1, "executing program\n", 18executing program ) = 18 [pid 6153] memfd_create("syzkaller", 0) = 3 [pid 6153] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6153] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6153] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6153] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6153] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6153] close(3) = 0 [pid 6153] close(4) = 0 [pid 6153] mkdir("./file2", 0777) = 0 [pid 6153] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6153] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6153] chdir("./file2") = 0 [pid 6153] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6153] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [ 257.250351][ T6153] loop0: detected capacity change from 0 to 128 [pid 6153] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6153] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6153] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6153] close(3) = 0 [pid 6153] close(4) = 0 [pid 6153] close(5) = -1 EBADF (Bad file descriptor) [pid 6153] close(6) = -1 EBADF (Bad file descriptor) [pid 6153] close(7) = -1 EBADF (Bad file descriptor) [pid 6153] close(8) = -1 EBADF (Bad file descriptor) [pid 6153] close(9) = -1 EBADF (Bad file descriptor) [pid 6153] close(10) = -1 EBADF (Bad file descriptor) [pid 6153] close(11) = -1 EBADF (Bad file descriptor) [pid 6153] close(12) = -1 EBADF (Bad file descriptor) [pid 6153] close(13) = -1 EBADF (Bad file descriptor) [pid 6153] close(14) = -1 EBADF (Bad file descriptor) [pid 6153] close(15) = -1 EBADF (Bad file descriptor) [pid 6153] close(16) = -1 EBADF (Bad file descriptor) [pid 6153] close(17) = -1 EBADF (Bad file descriptor) [pid 6153] close(18) = -1 EBADF (Bad file descriptor) [pid 6153] close(19) = -1 EBADF (Bad file descriptor) [pid 6153] close(20) = -1 EBADF (Bad file descriptor) [pid 6153] close(21) = -1 EBADF (Bad file descriptor) [pid 6153] close(22) = -1 EBADF (Bad file descriptor) [pid 6153] close(23) = -1 EBADF (Bad file descriptor) [pid 6153] close(24) = -1 EBADF (Bad file descriptor) [pid 6153] close(25) = -1 EBADF (Bad file descriptor) [pid 6153] close(26) = -1 EBADF (Bad file descriptor) [pid 6153] close(27) = -1 EBADF (Bad file descriptor) [pid 6153] close(28) = -1 EBADF (Bad file descriptor) [pid 6153] close(29) = -1 EBADF (Bad file descriptor) [pid 6153] exit_group(0) = ? [pid 6153] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=306, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./303", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./303", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./303/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./303/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./303/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./303/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./303/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./303/file2") = 0 [pid 5836] umount2("./303/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./303/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./303/binderfs") = 0 [pid 5836] umount2("./303/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./303/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./303/cgroup.net") = 0 [pid 5836] umount2("./303/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./303/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./303/cgroup.cpu") = 0 [pid 5836] umount2("./303/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./303/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./303/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./303") = 0 [pid 5836] mkdir("./304", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6154 attached [pid 6154] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 307 [pid 6154] <... set_robust_list resumed>) = 0 [pid 6154] chdir("./304") = 0 [pid 6154] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6154] setpgid(0, 0) = 0 [pid 6154] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6154] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6154] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6154] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6154] write(3, "1000", 4) = 4 [pid 6154] close(3) = 0 [pid 6154] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6154] write(1, "executing program\n", 18) = 18 [pid 6154] memfd_create("syzkaller", 0) = 3 [pid 6154] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6154] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6154] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6154] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6154] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6154] close(3) = 0 [pid 6154] close(4) = 0 [pid 6154] mkdir("./file2", 0777) = 0 [pid 6154] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6154] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6154] chdir("./file2") = 0 [pid 6154] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6154] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6154] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6154] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [ 257.690754][ T6154] loop0: detected capacity change from 0 to 128 [pid 6154] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6154] close(3) = 0 [pid 6154] close(4) = 0 [pid 6154] close(5) = -1 EBADF (Bad file descriptor) [pid 6154] close(6) = -1 EBADF (Bad file descriptor) [pid 6154] close(7) = -1 EBADF (Bad file descriptor) [pid 6154] close(8) = -1 EBADF (Bad file descriptor) [pid 6154] close(9) = -1 EBADF (Bad file descriptor) [pid 6154] close(10) = -1 EBADF (Bad file descriptor) [pid 6154] close(11) = -1 EBADF (Bad file descriptor) [pid 6154] close(12) = -1 EBADF (Bad file descriptor) [pid 6154] close(13) = -1 EBADF (Bad file descriptor) [pid 6154] close(14) = -1 EBADF (Bad file descriptor) [pid 6154] close(15) = -1 EBADF (Bad file descriptor) [pid 6154] close(16) = -1 EBADF (Bad file descriptor) [pid 6154] close(17) = -1 EBADF (Bad file descriptor) [pid 6154] close(18) = -1 EBADF (Bad file descriptor) [pid 6154] close(19) = -1 EBADF (Bad file descriptor) [pid 6154] close(20) = -1 EBADF (Bad file descriptor) [pid 6154] close(21) = -1 EBADF (Bad file descriptor) [pid 6154] close(22) = -1 EBADF (Bad file descriptor) [pid 6154] close(23) = -1 EBADF (Bad file descriptor) [pid 6154] close(24) = -1 EBADF (Bad file descriptor) [pid 6154] close(25) = -1 EBADF (Bad file descriptor) [pid 6154] close(26) = -1 EBADF (Bad file descriptor) [pid 6154] close(27) = -1 EBADF (Bad file descriptor) [pid 6154] close(28) = -1 EBADF (Bad file descriptor) [pid 6154] close(29) = -1 EBADF (Bad file descriptor) [pid 6154] exit_group(0) = ? [pid 6154] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=307, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] umount2("./304", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./304", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./304/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./304/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./304/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./304/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./304/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./304/file2") = 0 [pid 5836] umount2("./304/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./304/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./304/binderfs") = 0 [pid 5836] umount2("./304/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./304/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./304/cgroup.net") = 0 [pid 5836] umount2("./304/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./304/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./304/cgroup.cpu") = 0 [pid 5836] umount2("./304/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./304/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./304/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./304") = 0 [pid 5836] mkdir("./305", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6158 attached , child_tidptr=0x555563237690) = 308 [pid 6158] set_robust_list(0x5555632376a0, 24) = 0 [pid 6158] chdir("./305") = 0 [pid 6158] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6158] setpgid(0, 0) = 0 [pid 6158] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6158] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6158] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6158] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6158] write(3, "1000", 4) = 4 [pid 6158] close(3) = 0 [pid 6158] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6158] write(1, "executing program\n", 18) = 18 [pid 6158] memfd_create("syzkaller", 0) = 3 [pid 6158] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6158] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6158] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6158] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6158] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6158] close(3) = 0 [pid 6158] close(4) = 0 [pid 6158] mkdir("./file2", 0777) = 0 [pid 6158] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6158] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6158] chdir("./file2") = 0 [pid 6158] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 258.291663][ T6158] loop0: detected capacity change from 0 to 128 [pid 6158] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6158] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6158] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6158] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6158] close(3) = 0 [pid 6158] close(4) = 0 [pid 6158] close(5) = -1 EBADF (Bad file descriptor) [pid 6158] close(6) = -1 EBADF (Bad file descriptor) [pid 6158] close(7) = -1 EBADF (Bad file descriptor) [pid 6158] close(8) = -1 EBADF (Bad file descriptor) [pid 6158] close(9) = -1 EBADF (Bad file descriptor) [pid 6158] close(10) = -1 EBADF (Bad file descriptor) [pid 6158] close(11) = -1 EBADF (Bad file descriptor) [pid 6158] close(12) = -1 EBADF (Bad file descriptor) [pid 6158] close(13) = -1 EBADF (Bad file descriptor) [pid 6158] close(14) = -1 EBADF (Bad file descriptor) [pid 6158] close(15) = -1 EBADF (Bad file descriptor) [pid 6158] close(16) = -1 EBADF (Bad file descriptor) [pid 6158] close(17) = -1 EBADF (Bad file descriptor) [pid 6158] close(18) = -1 EBADF (Bad file descriptor) [pid 6158] close(19) = -1 EBADF (Bad file descriptor) [pid 6158] close(20) = -1 EBADF (Bad file descriptor) [pid 6158] close(21) = -1 EBADF (Bad file descriptor) [pid 6158] close(22) = -1 EBADF (Bad file descriptor) [pid 6158] close(23) = -1 EBADF (Bad file descriptor) [pid 6158] close(24) = -1 EBADF (Bad file descriptor) [pid 6158] close(25) = -1 EBADF (Bad file descriptor) [pid 6158] close(26) = -1 EBADF (Bad file descriptor) [pid 6158] close(27) = -1 EBADF (Bad file descriptor) [pid 6158] close(28) = -1 EBADF (Bad file descriptor) [pid 6158] close(29) = -1 EBADF (Bad file descriptor) [pid 6158] exit_group(0) = ? [pid 6158] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=308, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./305", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./305", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./305/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./305/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./305/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./305/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./305/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./305/file2") = 0 [pid 5836] umount2("./305/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./305/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./305/binderfs") = 0 [pid 5836] umount2("./305/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./305/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./305/cgroup.net") = 0 [pid 5836] umount2("./305/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./305/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./305/cgroup.cpu") = 0 [pid 5836] umount2("./305/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./305/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./305/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./305") = 0 [pid 5836] mkdir("./306", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6159 attached [pid 6159] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 309 [pid 6159] <... set_robust_list resumed>) = 0 [pid 6159] chdir("./306") = 0 [pid 6159] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6159] setpgid(0, 0) = 0 [pid 6159] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6159] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6159] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6159] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6159] write(3, "1000", 4) = 4 [pid 6159] close(3) = 0 [pid 6159] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6159] write(1, "executing program\n", 18executing program ) = 18 [pid 6159] memfd_create("syzkaller", 0) = 3 [pid 6159] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6159] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6159] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6159] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6159] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6159] close(3) = 0 [pid 6159] close(4) = 0 [pid 6159] mkdir("./file2", 0777) = 0 [pid 6159] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6159] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6159] chdir("./file2") = 0 [pid 6159] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6159] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6159] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6159] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [ 258.885143][ T6159] loop0: detected capacity change from 0 to 128 [pid 6159] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6159] close(3) = 0 [pid 6159] close(4) = 0 [pid 6159] close(5) = -1 EBADF (Bad file descriptor) [pid 6159] close(6) = -1 EBADF (Bad file descriptor) [pid 6159] close(7) = -1 EBADF (Bad file descriptor) [pid 6159] close(8) = -1 EBADF (Bad file descriptor) [pid 6159] close(9) = -1 EBADF (Bad file descriptor) [pid 6159] close(10) = -1 EBADF (Bad file descriptor) [pid 6159] close(11) = -1 EBADF (Bad file descriptor) [pid 6159] close(12) = -1 EBADF (Bad file descriptor) [pid 6159] close(13) = -1 EBADF (Bad file descriptor) [pid 6159] close(14) = -1 EBADF (Bad file descriptor) [pid 6159] close(15) = -1 EBADF (Bad file descriptor) [pid 6159] close(16) = -1 EBADF (Bad file descriptor) [pid 6159] close(17) = -1 EBADF (Bad file descriptor) [pid 6159] close(18) = -1 EBADF (Bad file descriptor) [pid 6159] close(19) = -1 EBADF (Bad file descriptor) [pid 6159] close(20) = -1 EBADF (Bad file descriptor) [pid 6159] close(21) = -1 EBADF (Bad file descriptor) [pid 6159] close(22) = -1 EBADF (Bad file descriptor) [pid 6159] close(23) = -1 EBADF (Bad file descriptor) [pid 6159] close(24) = -1 EBADF (Bad file descriptor) [pid 6159] close(25) = -1 EBADF (Bad file descriptor) [pid 6159] close(26) = -1 EBADF (Bad file descriptor) [pid 6159] close(27) = -1 EBADF (Bad file descriptor) [pid 6159] close(28) = -1 EBADF (Bad file descriptor) [pid 6159] close(29) = -1 EBADF (Bad file descriptor) [pid 6159] exit_group(0) = ? [pid 6159] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=309, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5836] umount2("./306", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./306", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./306/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./306/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./306/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./306/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./306/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./306/file2") = 0 [pid 5836] umount2("./306/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./306/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./306/binderfs") = 0 [pid 5836] umount2("./306/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./306/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./306/cgroup.net") = 0 [pid 5836] umount2("./306/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./306/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./306/cgroup.cpu") = 0 [pid 5836] umount2("./306/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./306/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./306/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./306") = 0 [pid 5836] mkdir("./307", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6161 attached [pid 6161] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 310 [pid 6161] <... set_robust_list resumed>) = 0 [pid 6161] chdir("./307") = 0 [pid 6161] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6161] setpgid(0, 0) = 0 [pid 6161] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6161] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6161] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6161] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6161] write(3, "1000", 4) = 4 [pid 6161] close(3) = 0 [pid 6161] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6161] write(1, "executing program\n", 18) = 18 [pid 6161] memfd_create("syzkaller", 0) = 3 [pid 6161] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6161] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6161] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6161] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6161] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6161] close(3) = 0 [pid 6161] close(4) = 0 [pid 6161] mkdir("./file2", 0777) = 0 [pid 6161] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6161] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6161] chdir("./file2") = 0 [pid 6161] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 259.418954][ T6161] loop0: detected capacity change from 0 to 128 [pid 6161] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6161] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6161] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6161] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6161] close(3) = 0 [pid 6161] close(4) = 0 [pid 6161] close(5) = -1 EBADF (Bad file descriptor) [pid 6161] close(6) = -1 EBADF (Bad file descriptor) [pid 6161] close(7) = -1 EBADF (Bad file descriptor) [pid 6161] close(8) = -1 EBADF (Bad file descriptor) [pid 6161] close(9) = -1 EBADF (Bad file descriptor) [pid 6161] close(10) = -1 EBADF (Bad file descriptor) [pid 6161] close(11) = -1 EBADF (Bad file descriptor) [pid 6161] close(12) = -1 EBADF (Bad file descriptor) [pid 6161] close(13) = -1 EBADF (Bad file descriptor) [pid 6161] close(14) = -1 EBADF (Bad file descriptor) [pid 6161] close(15) = -1 EBADF (Bad file descriptor) [pid 6161] close(16) = -1 EBADF (Bad file descriptor) [pid 6161] close(17) = -1 EBADF (Bad file descriptor) [pid 6161] close(18) = -1 EBADF (Bad file descriptor) [pid 6161] close(19) = -1 EBADF (Bad file descriptor) [pid 6161] close(20) = -1 EBADF (Bad file descriptor) [pid 6161] close(21) = -1 EBADF (Bad file descriptor) [pid 6161] close(22) = -1 EBADF (Bad file descriptor) [pid 6161] close(23) = -1 EBADF (Bad file descriptor) [pid 6161] close(24) = -1 EBADF (Bad file descriptor) [pid 6161] close(25) = -1 EBADF (Bad file descriptor) [pid 6161] close(26) = -1 EBADF (Bad file descriptor) [pid 6161] close(27) = -1 EBADF (Bad file descriptor) [pid 6161] close(28) = -1 EBADF (Bad file descriptor) [pid 6161] close(29) = -1 EBADF (Bad file descriptor) [pid 6161] exit_group(0) = ? [pid 6161] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=310, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5836] umount2("./307", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./307", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./307/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./307/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./307/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./307/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./307/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./307/file2") = 0 [pid 5836] umount2("./307/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./307/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./307/binderfs") = 0 [pid 5836] umount2("./307/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./307/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./307/cgroup.net") = 0 [pid 5836] umount2("./307/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./307/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./307/cgroup.cpu") = 0 [pid 5836] umount2("./307/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./307/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./307/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./307") = 0 [pid 5836] mkdir("./308", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6162 attached [pid 6162] set_robust_list(0x5555632376a0, 24) = 0 [pid 6162] chdir("./308" [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 311 [pid 6162] <... chdir resumed>) = 0 [pid 6162] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6162] setpgid(0, 0) = 0 [pid 6162] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6162] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6162] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6162] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6162] write(3, "1000", 4) = 4 [pid 6162] close(3) = 0 [pid 6162] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6162] write(1, "executing program\n", 18executing program ) = 18 [pid 6162] memfd_create("syzkaller", 0) = 3 [pid 6162] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6162] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6162] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6162] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6162] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6162] close(3) = 0 [pid 6162] close(4) = 0 [pid 6162] mkdir("./file2", 0777) = 0 [pid 6162] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6162] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6162] chdir("./file2") = 0 [pid 6162] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6162] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6162] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6162] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [ 260.003845][ T6162] loop0: detected capacity change from 0 to 128 [pid 6162] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6162] close(3) = 0 [pid 6162] close(4) = 0 [pid 6162] close(5) = -1 EBADF (Bad file descriptor) [pid 6162] close(6) = -1 EBADF (Bad file descriptor) [pid 6162] close(7) = -1 EBADF (Bad file descriptor) [pid 6162] close(8) = -1 EBADF (Bad file descriptor) [pid 6162] close(9) = -1 EBADF (Bad file descriptor) [pid 6162] close(10) = -1 EBADF (Bad file descriptor) [pid 6162] close(11) = -1 EBADF (Bad file descriptor) [pid 6162] close(12) = -1 EBADF (Bad file descriptor) [pid 6162] close(13) = -1 EBADF (Bad file descriptor) [pid 6162] close(14) = -1 EBADF (Bad file descriptor) [pid 6162] close(15) = -1 EBADF (Bad file descriptor) [pid 6162] close(16) = -1 EBADF (Bad file descriptor) [pid 6162] close(17) = -1 EBADF (Bad file descriptor) [pid 6162] close(18) = -1 EBADF (Bad file descriptor) [pid 6162] close(19) = -1 EBADF (Bad file descriptor) [pid 6162] close(20) = -1 EBADF (Bad file descriptor) [pid 6162] close(21) = -1 EBADF (Bad file descriptor) [pid 6162] close(22) = -1 EBADF (Bad file descriptor) [pid 6162] close(23) = -1 EBADF (Bad file descriptor) [pid 6162] close(24) = -1 EBADF (Bad file descriptor) [pid 6162] close(25) = -1 EBADF (Bad file descriptor) [pid 6162] close(26) = -1 EBADF (Bad file descriptor) [pid 6162] close(27) = -1 EBADF (Bad file descriptor) [pid 6162] close(28) = -1 EBADF (Bad file descriptor) [pid 6162] close(29) = -1 EBADF (Bad file descriptor) [pid 6162] exit_group(0) = ? [pid 6162] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=311, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./308", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./308", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./308/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./308/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./308/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./308/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./308/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./308/file2") = 0 [pid 5836] umount2("./308/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./308/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./308/binderfs") = 0 [pid 5836] umount2("./308/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./308/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./308/cgroup.net") = 0 [pid 5836] umount2("./308/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./308/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./308/cgroup.cpu") = 0 [pid 5836] umount2("./308/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./308/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./308/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./308") = 0 [pid 5836] mkdir("./309", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6163 attached [pid 6163] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 312 [pid 6163] <... set_robust_list resumed>) = 0 [pid 6163] chdir("./309") = 0 [pid 6163] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6163] setpgid(0, 0) = 0 [pid 6163] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6163] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6163] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6163] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6163] write(3, "1000", 4) = 4 [pid 6163] close(3) = 0 [pid 6163] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6163] write(1, "executing program\n", 18executing program ) = 18 [pid 6163] memfd_create("syzkaller", 0) = 3 [pid 6163] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6163] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6163] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6163] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6163] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6163] close(3) = 0 [pid 6163] close(4) = 0 [pid 6163] mkdir("./file2", 0777) = 0 [pid 6163] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6163] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6163] chdir("./file2") = 0 [pid 6163] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6163] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6163] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6163] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6163] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [ 260.608150][ T6163] loop0: detected capacity change from 0 to 128 [pid 6163] close(3) = 0 [pid 6163] close(4) = 0 [pid 6163] close(5) = -1 EBADF (Bad file descriptor) [pid 6163] close(6) = -1 EBADF (Bad file descriptor) [pid 6163] close(7) = -1 EBADF (Bad file descriptor) [pid 6163] close(8) = -1 EBADF (Bad file descriptor) [pid 6163] close(9) = -1 EBADF (Bad file descriptor) [pid 6163] close(10) = -1 EBADF (Bad file descriptor) [pid 6163] close(11) = -1 EBADF (Bad file descriptor) [pid 6163] close(12) = -1 EBADF (Bad file descriptor) [pid 6163] close(13) = -1 EBADF (Bad file descriptor) [pid 6163] close(14) = -1 EBADF (Bad file descriptor) [pid 6163] close(15) = -1 EBADF (Bad file descriptor) [pid 6163] close(16) = -1 EBADF (Bad file descriptor) [pid 6163] close(17) = -1 EBADF (Bad file descriptor) [pid 6163] close(18) = -1 EBADF (Bad file descriptor) [pid 6163] close(19) = -1 EBADF (Bad file descriptor) [pid 6163] close(20) = -1 EBADF (Bad file descriptor) [pid 6163] close(21) = -1 EBADF (Bad file descriptor) [pid 6163] close(22) = -1 EBADF (Bad file descriptor) [pid 6163] close(23) = -1 EBADF (Bad file descriptor) [pid 6163] close(24) = -1 EBADF (Bad file descriptor) [pid 6163] close(25) = -1 EBADF (Bad file descriptor) [pid 6163] close(26) = -1 EBADF (Bad file descriptor) [pid 6163] close(27) = -1 EBADF (Bad file descriptor) [pid 6163] close(28) = -1 EBADF (Bad file descriptor) [pid 6163] close(29) = -1 EBADF (Bad file descriptor) [pid 6163] exit_group(0) = ? [pid 6163] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=312, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5836] umount2("./309", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./309", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./309/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./309/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./309/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./309/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./309/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./309/file2") = 0 [pid 5836] umount2("./309/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./309/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./309/binderfs") = 0 [pid 5836] umount2("./309/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./309/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./309/cgroup.net") = 0 [pid 5836] umount2("./309/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./309/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./309/cgroup.cpu") = 0 [pid 5836] umount2("./309/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./309/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./309/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./309") = 0 [pid 5836] mkdir("./310", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6164 attached [pid 6164] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 313 [pid 6164] <... set_robust_list resumed>) = 0 [pid 6164] chdir("./310") = 0 [pid 6164] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6164] setpgid(0, 0) = 0 [pid 6164] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6164] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6164] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6164] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6164] write(3, "1000", 4) = 4 [pid 6164] close(3) = 0 [pid 6164] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6164] write(1, "executing program\n", 18) = 18 [pid 6164] memfd_create("syzkaller", 0) = 3 [pid 6164] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6164] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6164] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6164] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6164] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6164] close(3) = 0 [pid 6164] close(4) = 0 [pid 6164] mkdir("./file2", 0777) = 0 [pid 6164] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6164] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6164] chdir("./file2") = 0 [pid 6164] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6164] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6164] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6164] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6164] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6164] close(3) = 0 [pid 6164] close(4) = 0 [pid 6164] close(5) = -1 EBADF (Bad file descriptor) [pid 6164] close(6) = -1 EBADF (Bad file descriptor) [pid 6164] close(7) = -1 EBADF (Bad file descriptor) [pid 6164] close(8) = -1 EBADF (Bad file descriptor) [pid 6164] close(9) = -1 EBADF (Bad file descriptor) [pid 6164] close(10) = -1 EBADF (Bad file descriptor) [pid 6164] close(11) = -1 EBADF (Bad file descriptor) [pid 6164] close(12) = -1 EBADF (Bad file descriptor) [pid 6164] close(13) = -1 EBADF (Bad file descriptor) [pid 6164] close(14) = -1 EBADF (Bad file descriptor) [pid 6164] close(15) = -1 EBADF (Bad file descriptor) [pid 6164] close(16) = -1 EBADF (Bad file descriptor) [pid 6164] close(17) = -1 EBADF (Bad file descriptor) [pid 6164] close(18) = -1 EBADF (Bad file descriptor) [pid 6164] close(19) = -1 EBADF (Bad file descriptor) [pid 6164] close(20) = -1 EBADF (Bad file descriptor) [pid 6164] close(21) = -1 EBADF (Bad file descriptor) [pid 6164] close(22) = -1 EBADF (Bad file descriptor) [pid 6164] close(23) = -1 EBADF (Bad file descriptor) [pid 6164] close(24) = -1 EBADF (Bad file descriptor) [pid 6164] close(25) = -1 EBADF (Bad file descriptor) [pid 6164] close(26) = -1 EBADF (Bad file descriptor) [pid 6164] close(27) = -1 EBADF (Bad file descriptor) [pid 6164] close(28) = -1 EBADF (Bad file descriptor) [pid 6164] close(29) = -1 EBADF (Bad file descriptor) [pid 6164] exit_group(0) = ? [ 261.168853][ T6164] loop0: detected capacity change from 0 to 128 [pid 6164] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=313, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] umount2("./310", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./310", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./310/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./310/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./310/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./310/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./310/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./310/file2") = 0 [pid 5836] umount2("./310/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./310/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./310/binderfs") = 0 [pid 5836] umount2("./310/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./310/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./310/cgroup.net") = 0 [pid 5836] umount2("./310/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./310/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./310/cgroup.cpu") = 0 [pid 5836] umount2("./310/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./310/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./310/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./310") = 0 [pid 5836] mkdir("./311", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6165 attached , child_tidptr=0x555563237690) = 314 [pid 6165] set_robust_list(0x5555632376a0, 24) = 0 [pid 6165] chdir("./311") = 0 [pid 6165] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6165] setpgid(0, 0) = 0 [pid 6165] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6165] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6165] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6165] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6165] write(3, "1000", 4) = 4 [pid 6165] close(3) = 0 [pid 6165] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6165] write(1, "executing program\n", 18) = 18 [pid 6165] memfd_create("syzkaller", 0) = 3 [pid 6165] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6165] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6165] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6165] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6165] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6165] close(3) = 0 [pid 6165] close(4) = 0 [pid 6165] mkdir("./file2", 0777) = 0 [pid 6165] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6165] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6165] chdir("./file2") = 0 [pid 6165] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6165] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6165] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6165] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6165] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6165] close(3) = 0 [pid 6165] close(4) = 0 [pid 6165] close(5) = -1 EBADF (Bad file descriptor) [pid 6165] close(6) = -1 EBADF (Bad file descriptor) [pid 6165] close(7) = -1 EBADF (Bad file descriptor) [pid 6165] close(8) = -1 EBADF (Bad file descriptor) [pid 6165] close(9) = -1 EBADF (Bad file descriptor) [pid 6165] close(10) = -1 EBADF (Bad file descriptor) [pid 6165] close(11) = -1 EBADF (Bad file descriptor) [pid 6165] close(12) = -1 EBADF (Bad file descriptor) [pid 6165] close(13) = -1 EBADF (Bad file descriptor) [ 261.753444][ T6165] loop0: detected capacity change from 0 to 128 [pid 6165] close(14) = -1 EBADF (Bad file descriptor) [pid 6165] close(15) = -1 EBADF (Bad file descriptor) [pid 6165] close(16) = -1 EBADF (Bad file descriptor) [pid 6165] close(17) = -1 EBADF (Bad file descriptor) [pid 6165] close(18) = -1 EBADF (Bad file descriptor) [pid 6165] close(19) = -1 EBADF (Bad file descriptor) [pid 6165] close(20) = -1 EBADF (Bad file descriptor) [pid 6165] close(21) = -1 EBADF (Bad file descriptor) [pid 6165] close(22) = -1 EBADF (Bad file descriptor) [pid 6165] close(23) = -1 EBADF (Bad file descriptor) [pid 6165] close(24) = -1 EBADF (Bad file descriptor) [pid 6165] close(25) = -1 EBADF (Bad file descriptor) [pid 6165] close(26) = -1 EBADF (Bad file descriptor) [pid 6165] close(27) = -1 EBADF (Bad file descriptor) [pid 6165] close(28) = -1 EBADF (Bad file descriptor) [pid 6165] close(29) = -1 EBADF (Bad file descriptor) [pid 6165] exit_group(0) = ? [pid 6165] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=314, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./311", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./311", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./311/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./311/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./311/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./311/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./311/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./311/file2") = 0 [pid 5836] umount2("./311/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./311/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./311/binderfs") = 0 [pid 5836] umount2("./311/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./311/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./311/cgroup.net") = 0 [pid 5836] umount2("./311/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./311/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./311/cgroup.cpu") = 0 [pid 5836] umount2("./311/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./311/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./311/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./311") = 0 [pid 5836] mkdir("./312", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6166 attached , child_tidptr=0x555563237690) = 315 [pid 6166] set_robust_list(0x5555632376a0, 24) = 0 [pid 6166] chdir("./312") = 0 [pid 6166] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6166] setpgid(0, 0) = 0 [pid 6166] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6166] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6166] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6166] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6166] write(3, "1000", 4) = 4 [pid 6166] close(3) = 0 [pid 6166] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6166] write(1, "executing program\n", 18executing program ) = 18 [pid 6166] memfd_create("syzkaller", 0) = 3 [pid 6166] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6166] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6166] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6166] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6166] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6166] close(3) = 0 [pid 6166] close(4) = 0 [pid 6166] mkdir("./file2", 0777) = 0 [pid 6166] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6166] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6166] chdir("./file2") = 0 [pid 6166] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6166] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6166] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6166] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6166] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6166] close(3) = 0 [pid 6166] close(4) = 0 [pid 6166] close(5) = -1 EBADF (Bad file descriptor) [pid 6166] close(6) = -1 EBADF (Bad file descriptor) [pid 6166] close(7) = -1 EBADF (Bad file descriptor) [pid 6166] close(8) = -1 EBADF (Bad file descriptor) [pid 6166] close(9) = -1 EBADF (Bad file descriptor) [pid 6166] close(10) = -1 EBADF (Bad file descriptor) [pid 6166] close(11) = -1 EBADF (Bad file descriptor) [pid 6166] close(12) = -1 EBADF (Bad file descriptor) [pid 6166] close(13) = -1 EBADF (Bad file descriptor) [pid 6166] close(14) = -1 EBADF (Bad file descriptor) [pid 6166] close(15) = -1 EBADF (Bad file descriptor) [pid 6166] close(16) = -1 EBADF (Bad file descriptor) [pid 6166] close(17) = -1 EBADF (Bad file descriptor) [pid 6166] close(18) = -1 EBADF (Bad file descriptor) [pid 6166] close(19) = -1 EBADF (Bad file descriptor) [pid 6166] close(20) = -1 EBADF (Bad file descriptor) [pid 6166] close(21) = -1 EBADF (Bad file descriptor) [pid 6166] close(22) = -1 EBADF (Bad file descriptor) [pid 6166] close(23) = -1 EBADF (Bad file descriptor) [pid 6166] close(24) = -1 EBADF (Bad file descriptor) [pid 6166] close(25) = -1 EBADF (Bad file descriptor) [pid 6166] close(26) = -1 EBADF (Bad file descriptor) [pid 6166] close(27) = -1 EBADF (Bad file descriptor) [pid 6166] close(28) = -1 EBADF (Bad file descriptor) [pid 6166] close(29) = -1 EBADF (Bad file descriptor) [pid 6166] exit_group(0) = ? [ 262.204794][ T6166] loop0: detected capacity change from 0 to 128 [pid 6166] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=315, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./312", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./312", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./312/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./312/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./312/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./312/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./312/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./312/file2") = 0 [pid 5836] umount2("./312/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./312/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./312/binderfs") = 0 [pid 5836] umount2("./312/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./312/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./312/cgroup.net") = 0 [pid 5836] umount2("./312/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./312/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./312/cgroup.cpu") = 0 [pid 5836] umount2("./312/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./312/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./312/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./312") = 0 [pid 5836] mkdir("./313", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6167 attached [pid 6167] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 316 [pid 6167] <... set_robust_list resumed>) = 0 [pid 6167] chdir("./313") = 0 [pid 6167] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6167] setpgid(0, 0) = 0 [pid 6167] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6167] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6167] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6167] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6167] write(3, "1000", 4) = 4 [pid 6167] close(3) = 0 [pid 6167] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6167] write(1, "executing program\n", 18) = 18 [pid 6167] memfd_create("syzkaller", 0) = 3 [pid 6167] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6167] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6167] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6167] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6167] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6167] close(3) = 0 [pid 6167] close(4) = 0 [pid 6167] mkdir("./file2", 0777) = 0 [pid 6167] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6167] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6167] chdir("./file2") = 0 [pid 6167] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6167] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6167] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6167] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6167] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [ 262.760716][ T6167] loop0: detected capacity change from 0 to 128 [pid 6167] close(3) = 0 [pid 6167] close(4) = 0 [pid 6167] close(5) = -1 EBADF (Bad file descriptor) [pid 6167] close(6) = -1 EBADF (Bad file descriptor) [pid 6167] close(7) = -1 EBADF (Bad file descriptor) [pid 6167] close(8) = -1 EBADF (Bad file descriptor) [pid 6167] close(9) = -1 EBADF (Bad file descriptor) [pid 6167] close(10) = -1 EBADF (Bad file descriptor) [pid 6167] close(11) = -1 EBADF (Bad file descriptor) [pid 6167] close(12) = -1 EBADF (Bad file descriptor) [pid 6167] close(13) = -1 EBADF (Bad file descriptor) [pid 6167] close(14) = -1 EBADF (Bad file descriptor) [pid 6167] close(15) = -1 EBADF (Bad file descriptor) [pid 6167] close(16) = -1 EBADF (Bad file descriptor) [pid 6167] close(17) = -1 EBADF (Bad file descriptor) [pid 6167] close(18) = -1 EBADF (Bad file descriptor) [pid 6167] close(19) = -1 EBADF (Bad file descriptor) [pid 6167] close(20) = -1 EBADF (Bad file descriptor) [pid 6167] close(21) = -1 EBADF (Bad file descriptor) [pid 6167] close(22) = -1 EBADF (Bad file descriptor) [pid 6167] close(23) = -1 EBADF (Bad file descriptor) [pid 6167] close(24) = -1 EBADF (Bad file descriptor) [pid 6167] close(25) = -1 EBADF (Bad file descriptor) [pid 6167] close(26) = -1 EBADF (Bad file descriptor) [pid 6167] close(27) = -1 EBADF (Bad file descriptor) [pid 6167] close(28) = -1 EBADF (Bad file descriptor) [pid 6167] close(29) = -1 EBADF (Bad file descriptor) [pid 6167] exit_group(0) = ? [pid 6167] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=316, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] umount2("./313", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./313", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./313/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./313/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./313/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./313/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./313/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./313/file2") = 0 [pid 5836] umount2("./313/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./313/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./313/binderfs") = 0 [pid 5836] umount2("./313/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./313/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./313/cgroup.net") = 0 [pid 5836] umount2("./313/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./313/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./313/cgroup.cpu") = 0 [pid 5836] umount2("./313/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./313/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./313/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./313") = 0 [pid 5836] mkdir("./314", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6168 attached , child_tidptr=0x555563237690) = 317 [pid 6168] set_robust_list(0x5555632376a0, 24) = 0 [pid 6168] chdir("./314") = 0 [pid 6168] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6168] setpgid(0, 0) = 0 [pid 6168] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6168] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6168] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6168] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6168] write(3, "1000", 4) = 4 [pid 6168] close(3) = 0 [pid 6168] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6168] write(1, "executing program\n", 18executing program ) = 18 [pid 6168] memfd_create("syzkaller", 0) = 3 [pid 6168] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6168] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6168] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6168] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6168] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6168] close(3) = 0 [pid 6168] close(4) = 0 [pid 6168] mkdir("./file2", 0777) = 0 [pid 6168] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6168] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6168] chdir("./file2") = 0 [pid 6168] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6168] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6168] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6168] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6168] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6168] close(3) = 0 [pid 6168] close(4) = 0 [pid 6168] close(5) = -1 EBADF (Bad file descriptor) [pid 6168] close(6) = -1 EBADF (Bad file descriptor) [pid 6168] close(7) = -1 EBADF (Bad file descriptor) [pid 6168] close(8) = -1 EBADF (Bad file descriptor) [pid 6168] close(9) = -1 EBADF (Bad file descriptor) [pid 6168] close(10) = -1 EBADF (Bad file descriptor) [pid 6168] close(11) = -1 EBADF (Bad file descriptor) [pid 6168] close(12) = -1 EBADF (Bad file descriptor) [pid 6168] close(13) = -1 EBADF (Bad file descriptor) [pid 6168] close(14) = -1 EBADF (Bad file descriptor) [pid 6168] close(15) = -1 EBADF (Bad file descriptor) [pid 6168] close(16) = -1 EBADF (Bad file descriptor) [pid 6168] close(17) = -1 EBADF (Bad file descriptor) [pid 6168] close(18) = -1 EBADF (Bad file descriptor) [pid 6168] close(19) = -1 EBADF (Bad file descriptor) [pid 6168] close(20) = -1 EBADF (Bad file descriptor) [pid 6168] close(21) = -1 EBADF (Bad file descriptor) [pid 6168] close(22) = -1 EBADF (Bad file descriptor) [pid 6168] close(23) = -1 EBADF (Bad file descriptor) [pid 6168] close(24) = -1 EBADF (Bad file descriptor) [pid 6168] close(25) = -1 EBADF (Bad file descriptor) [pid 6168] close(26) = -1 EBADF (Bad file descriptor) [pid 6168] close(27) = -1 EBADF (Bad file descriptor) [pid 6168] close(28) = -1 EBADF (Bad file descriptor) [pid 6168] close(29) = -1 EBADF (Bad file descriptor) [pid 6168] exit_group(0) = ? [ 263.308775][ T6168] loop0: detected capacity change from 0 to 128 [pid 6168] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=317, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5836] umount2("./314", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./314", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./314/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./314/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./314/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./314/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./314/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./314/file2") = 0 [pid 5836] umount2("./314/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./314/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./314/binderfs") = 0 [pid 5836] umount2("./314/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./314/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./314/cgroup.net") = 0 [pid 5836] umount2("./314/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./314/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./314/cgroup.cpu") = 0 [pid 5836] umount2("./314/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./314/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./314/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./314") = 0 [pid 5836] mkdir("./315", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6169 attached [pid 6169] set_robust_list(0x5555632376a0, 24) = 0 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 318 [pid 6169] chdir("./315") = 0 [pid 6169] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6169] setpgid(0, 0) = 0 [pid 6169] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6169] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6169] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6169] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6169] write(3, "1000", 4) = 4 [pid 6169] close(3) = 0 [pid 6169] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6169] write(1, "executing program\n", 18executing program ) = 18 [pid 6169] memfd_create("syzkaller", 0) = 3 [pid 6169] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6169] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6169] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6169] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6169] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6169] close(3) = 0 [pid 6169] close(4) = 0 [pid 6169] mkdir("./file2", 0777) = 0 [pid 6169] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6169] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6169] chdir("./file2") = 0 [pid 6169] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 263.820864][ T6169] loop0: detected capacity change from 0 to 128 [pid 6169] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6169] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6169] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6169] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6169] close(3) = 0 [pid 6169] close(4) = 0 [pid 6169] close(5) = -1 EBADF (Bad file descriptor) [pid 6169] close(6) = -1 EBADF (Bad file descriptor) [pid 6169] close(7) = -1 EBADF (Bad file descriptor) [pid 6169] close(8) = -1 EBADF (Bad file descriptor) [pid 6169] close(9) = -1 EBADF (Bad file descriptor) [pid 6169] close(10) = -1 EBADF (Bad file descriptor) [pid 6169] close(11) = -1 EBADF (Bad file descriptor) [pid 6169] close(12) = -1 EBADF (Bad file descriptor) [pid 6169] close(13) = -1 EBADF (Bad file descriptor) [pid 6169] close(14) = -1 EBADF (Bad file descriptor) [pid 6169] close(15) = -1 EBADF (Bad file descriptor) [pid 6169] close(16) = -1 EBADF (Bad file descriptor) [pid 6169] close(17) = -1 EBADF (Bad file descriptor) [pid 6169] close(18) = -1 EBADF (Bad file descriptor) [pid 6169] close(19) = -1 EBADF (Bad file descriptor) [pid 6169] close(20) = -1 EBADF (Bad file descriptor) [pid 6169] close(21) = -1 EBADF (Bad file descriptor) [pid 6169] close(22) = -1 EBADF (Bad file descriptor) [pid 6169] close(23) = -1 EBADF (Bad file descriptor) [pid 6169] close(24) = -1 EBADF (Bad file descriptor) [pid 6169] close(25) = -1 EBADF (Bad file descriptor) [pid 6169] close(26) = -1 EBADF (Bad file descriptor) [pid 6169] close(27) = -1 EBADF (Bad file descriptor) [pid 6169] close(28) = -1 EBADF (Bad file descriptor) [pid 6169] close(29) = -1 EBADF (Bad file descriptor) [pid 6169] exit_group(0) = ? [pid 6169] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=318, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] umount2("./315", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./315", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./315/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./315/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./315/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./315/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./315/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./315/file2") = 0 [pid 5836] umount2("./315/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./315/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./315/binderfs") = 0 [pid 5836] umount2("./315/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./315/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./315/cgroup.net") = 0 [pid 5836] umount2("./315/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./315/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./315/cgroup.cpu") = 0 [pid 5836] umount2("./315/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./315/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./315/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./315") = 0 [pid 5836] mkdir("./316", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6170 attached [pid 6170] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 319 [pid 6170] <... set_robust_list resumed>) = 0 [pid 6170] chdir("./316") = 0 [pid 6170] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6170] setpgid(0, 0) = 0 [pid 6170] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6170] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6170] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6170] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6170] write(3, "1000", 4) = 4 [pid 6170] close(3) = 0 [pid 6170] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6170] write(1, "executing program\n", 18) = 18 [pid 6170] memfd_create("syzkaller", 0) = 3 [pid 6170] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6170] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6170] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6170] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6170] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6170] close(3) = 0 [pid 6170] close(4) = 0 [pid 6170] mkdir("./file2", 0777) = 0 [pid 6170] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6170] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6170] chdir("./file2") = 0 [pid 6170] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6170] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6170] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6170] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6170] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6170] close(3) = 0 [pid 6170] close(4) = 0 [pid 6170] close(5) = -1 EBADF (Bad file descriptor) [pid 6170] close(6) = -1 EBADF (Bad file descriptor) [pid 6170] close(7) = -1 EBADF (Bad file descriptor) [pid 6170] close(8) = -1 EBADF (Bad file descriptor) [pid 6170] close(9) = -1 EBADF (Bad file descriptor) [pid 6170] close(10) = -1 EBADF (Bad file descriptor) [pid 6170] close(11) = -1 EBADF (Bad file descriptor) [pid 6170] close(12) = -1 EBADF (Bad file descriptor) [pid 6170] close(13) = -1 EBADF (Bad file descriptor) [pid 6170] close(14) = -1 EBADF (Bad file descriptor) [pid 6170] close(15) = -1 EBADF (Bad file descriptor) [pid 6170] close(16) = -1 EBADF (Bad file descriptor) [pid 6170] close(17) = -1 EBADF (Bad file descriptor) [pid 6170] close(18) = -1 EBADF (Bad file descriptor) [pid 6170] close(19) = -1 EBADF (Bad file descriptor) [pid 6170] close(20) = -1 EBADF (Bad file descriptor) [pid 6170] close(21) = -1 EBADF (Bad file descriptor) [pid 6170] close(22) = -1 EBADF (Bad file descriptor) [pid 6170] close(23) = -1 EBADF (Bad file descriptor) [pid 6170] close(24) = -1 EBADF (Bad file descriptor) [pid 6170] close(25) = -1 EBADF (Bad file descriptor) [pid 6170] close(26) = -1 EBADF (Bad file descriptor) [pid 6170] close(27) = -1 EBADF (Bad file descriptor) [pid 6170] close(28) = -1 EBADF (Bad file descriptor) [pid 6170] close(29) = -1 EBADF (Bad file descriptor) [pid 6170] exit_group(0) = ? [ 264.438126][ T6170] loop0: detected capacity change from 0 to 128 [pid 6170] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=319, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5836] umount2("./316", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./316", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./316/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./316/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./316/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./316/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./316/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./316/file2") = 0 [pid 5836] umount2("./316/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./316/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./316/binderfs") = 0 [pid 5836] umount2("./316/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./316/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./316/cgroup.net") = 0 [pid 5836] umount2("./316/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./316/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./316/cgroup.cpu") = 0 [pid 5836] umount2("./316/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./316/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./316/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./316") = 0 [pid 5836] mkdir("./317", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6171 attached [pid 6171] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 320 [pid 6171] <... set_robust_list resumed>) = 0 [pid 6171] chdir("./317") = 0 [pid 6171] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6171] setpgid(0, 0) = 0 [pid 6171] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6171] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu"executing program ) = 0 [pid 6171] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6171] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6171] write(3, "1000", 4) = 4 [pid 6171] close(3) = 0 [pid 6171] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6171] write(1, "executing program\n", 18) = 18 [pid 6171] memfd_create("syzkaller", 0) = 3 [pid 6171] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6171] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6171] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6171] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6171] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6171] close(3) = 0 [pid 6171] close(4) = 0 [pid 6171] mkdir("./file2", 0777) = 0 [pid 6171] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6171] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6171] chdir("./file2") = 0 [pid 6171] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6171] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6171] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6171] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6171] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6171] close(3) = 0 [ 264.923450][ T6171] loop0: detected capacity change from 0 to 128 [pid 6171] close(4) = 0 [pid 6171] close(5) = -1 EBADF (Bad file descriptor) [pid 6171] close(6) = -1 EBADF (Bad file descriptor) [pid 6171] close(7) = -1 EBADF (Bad file descriptor) [pid 6171] close(8) = -1 EBADF (Bad file descriptor) [pid 6171] close(9) = -1 EBADF (Bad file descriptor) [pid 6171] close(10) = -1 EBADF (Bad file descriptor) [pid 6171] close(11) = -1 EBADF (Bad file descriptor) [pid 6171] close(12) = -1 EBADF (Bad file descriptor) [pid 6171] close(13) = -1 EBADF (Bad file descriptor) [pid 6171] close(14) = -1 EBADF (Bad file descriptor) [pid 6171] close(15) = -1 EBADF (Bad file descriptor) [pid 6171] close(16) = -1 EBADF (Bad file descriptor) [pid 6171] close(17) = -1 EBADF (Bad file descriptor) [pid 6171] close(18) = -1 EBADF (Bad file descriptor) [pid 6171] close(19) = -1 EBADF (Bad file descriptor) [pid 6171] close(20) = -1 EBADF (Bad file descriptor) [pid 6171] close(21) = -1 EBADF (Bad file descriptor) [pid 6171] close(22) = -1 EBADF (Bad file descriptor) [pid 6171] close(23) = -1 EBADF (Bad file descriptor) [pid 6171] close(24) = -1 EBADF (Bad file descriptor) [pid 6171] close(25) = -1 EBADF (Bad file descriptor) [pid 6171] close(26) = -1 EBADF (Bad file descriptor) [pid 6171] close(27) = -1 EBADF (Bad file descriptor) [pid 6171] close(28) = -1 EBADF (Bad file descriptor) [pid 6171] close(29) = -1 EBADF (Bad file descriptor) [pid 6171] exit_group(0) = ? [pid 6171] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=320, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./317", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./317", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./317/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./317/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./317/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./317/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./317/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./317/file2") = 0 [pid 5836] umount2("./317/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./317/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./317/binderfs") = 0 [pid 5836] umount2("./317/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./317/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./317/cgroup.net") = 0 [pid 5836] umount2("./317/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./317/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./317/cgroup.cpu") = 0 [pid 5836] umount2("./317/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./317/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./317/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./317") = 0 [pid 5836] mkdir("./318", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6172 attached [pid 6172] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 321 [pid 6172] <... set_robust_list resumed>) = 0 [pid 6172] chdir("./318") = 0 [pid 6172] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6172] setpgid(0, 0) = 0 [pid 6172] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6172] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6172] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6172] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6172] write(3, "1000", 4) = 4 [pid 6172] close(3) = 0 [pid 6172] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6172] write(1, "executing program\n", 18) = 18 [pid 6172] memfd_create("syzkaller", 0) = 3 [pid 6172] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6172] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6172] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6172] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6172] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6172] close(3) = 0 [pid 6172] close(4) = 0 [pid 6172] mkdir("./file2", 0777) = 0 [pid 6172] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6172] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [ 265.410662][ T6172] loop0: detected capacity change from 0 to 128 [pid 6172] chdir("./file2") = 0 [pid 6172] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6172] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6172] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6172] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6172] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6172] close(3) = 0 [pid 6172] close(4) = 0 [pid 6172] close(5) = -1 EBADF (Bad file descriptor) [pid 6172] close(6) = -1 EBADF (Bad file descriptor) [pid 6172] close(7) = -1 EBADF (Bad file descriptor) [pid 6172] close(8) = -1 EBADF (Bad file descriptor) [pid 6172] close(9) = -1 EBADF (Bad file descriptor) [pid 6172] close(10) = -1 EBADF (Bad file descriptor) [pid 6172] close(11) = -1 EBADF (Bad file descriptor) [pid 6172] close(12) = -1 EBADF (Bad file descriptor) [pid 6172] close(13) = -1 EBADF (Bad file descriptor) [pid 6172] close(14) = -1 EBADF (Bad file descriptor) [pid 6172] close(15) = -1 EBADF (Bad file descriptor) [pid 6172] close(16) = -1 EBADF (Bad file descriptor) [pid 6172] close(17) = -1 EBADF (Bad file descriptor) [pid 6172] close(18) = -1 EBADF (Bad file descriptor) [pid 6172] close(19) = -1 EBADF (Bad file descriptor) [pid 6172] close(20) = -1 EBADF (Bad file descriptor) [pid 6172] close(21) = -1 EBADF (Bad file descriptor) [pid 6172] close(22) = -1 EBADF (Bad file descriptor) [pid 6172] close(23) = -1 EBADF (Bad file descriptor) [pid 6172] close(24) = -1 EBADF (Bad file descriptor) [pid 6172] close(25) = -1 EBADF (Bad file descriptor) [pid 6172] close(26) = -1 EBADF (Bad file descriptor) [pid 6172] close(27) = -1 EBADF (Bad file descriptor) [pid 6172] close(28) = -1 EBADF (Bad file descriptor) [pid 6172] close(29) = -1 EBADF (Bad file descriptor) [pid 6172] exit_group(0) = ? [pid 6172] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=321, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./318", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./318", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./318/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./318/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./318/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./318/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./318/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./318/file2") = 0 [pid 5836] umount2("./318/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./318/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./318/binderfs") = 0 [pid 5836] umount2("./318/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./318/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./318/cgroup.net") = 0 [pid 5836] umount2("./318/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./318/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./318/cgroup.cpu") = 0 [pid 5836] umount2("./318/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./318/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./318/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./318") = 0 [pid 5836] mkdir("./319", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6173 attached [pid 6173] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 322 [pid 6173] <... set_robust_list resumed>) = 0 [pid 6173] chdir("./319") = 0 [pid 6173] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6173] setpgid(0, 0) = 0 [pid 6173] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6173] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6173] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6173] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6173] write(3, "1000", 4) = 4 [pid 6173] close(3) = 0 [pid 6173] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6173] write(1, "executing program\n", 18) = 18 [pid 6173] memfd_create("syzkaller", 0) = 3 [pid 6173] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6173] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6173] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6173] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6173] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6173] close(3) = 0 [pid 6173] close(4) = 0 [pid 6173] mkdir("./file2", 0777) = 0 [pid 6173] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6173] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6173] chdir("./file2") = 0 [pid 6173] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6173] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6173] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6173] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6173] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [ 266.013367][ T6173] loop0: detected capacity change from 0 to 128 [pid 6173] close(3) = 0 [pid 6173] close(4) = 0 [pid 6173] close(5) = -1 EBADF (Bad file descriptor) [pid 6173] close(6) = -1 EBADF (Bad file descriptor) [pid 6173] close(7) = -1 EBADF (Bad file descriptor) [pid 6173] close(8) = -1 EBADF (Bad file descriptor) [pid 6173] close(9) = -1 EBADF (Bad file descriptor) [pid 6173] close(10) = -1 EBADF (Bad file descriptor) [pid 6173] close(11) = -1 EBADF (Bad file descriptor) [pid 6173] close(12) = -1 EBADF (Bad file descriptor) [pid 6173] close(13) = -1 EBADF (Bad file descriptor) [pid 6173] close(14) = -1 EBADF (Bad file descriptor) [pid 6173] close(15) = -1 EBADF (Bad file descriptor) [pid 6173] close(16) = -1 EBADF (Bad file descriptor) [pid 6173] close(17) = -1 EBADF (Bad file descriptor) [pid 6173] close(18) = -1 EBADF (Bad file descriptor) [pid 6173] close(19) = -1 EBADF (Bad file descriptor) [pid 6173] close(20) = -1 EBADF (Bad file descriptor) [pid 6173] close(21) = -1 EBADF (Bad file descriptor) [pid 6173] close(22) = -1 EBADF (Bad file descriptor) [pid 6173] close(23) = -1 EBADF (Bad file descriptor) [pid 6173] close(24) = -1 EBADF (Bad file descriptor) [pid 6173] close(25) = -1 EBADF (Bad file descriptor) [pid 6173] close(26) = -1 EBADF (Bad file descriptor) [pid 6173] close(27) = -1 EBADF (Bad file descriptor) [pid 6173] close(28) = -1 EBADF (Bad file descriptor) [pid 6173] close(29) = -1 EBADF (Bad file descriptor) [pid 6173] exit_group(0) = ? [pid 6173] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=322, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] umount2("./319", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./319", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./319/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./319/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./319/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./319/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./319/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./319/file2") = 0 [pid 5836] umount2("./319/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./319/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./319/binderfs") = 0 [pid 5836] umount2("./319/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./319/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./319/cgroup.net") = 0 [pid 5836] umount2("./319/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./319/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./319/cgroup.cpu") = 0 [pid 5836] umount2("./319/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./319/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./319/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./319") = 0 [pid 5836] mkdir("./320", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6174 attached , child_tidptr=0x555563237690) = 323 [pid 6174] set_robust_list(0x5555632376a0, 24) = 0 [pid 6174] chdir("./320") = 0 [pid 6174] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6174] setpgid(0, 0) = 0 [pid 6174] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6174] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6174] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6174] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6174] write(3, "1000", 4) = 4 [pid 6174] close(3) = 0 [pid 6174] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6174] write(1, "executing program\n", 18) = 18 [pid 6174] memfd_create("syzkaller", 0) = 3 [pid 6174] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6174] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6174] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6174] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6174] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6174] close(3) = 0 [pid 6174] close(4) = 0 [pid 6174] mkdir("./file2", 0777) = 0 [pid 6174] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6174] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6174] chdir("./file2") = 0 [pid 6174] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6174] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6174] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6174] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6174] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6174] close(3) = 0 [pid 6174] close(4) = 0 [ 266.580005][ T6174] loop0: detected capacity change from 0 to 128 [pid 6174] close(5) = -1 EBADF (Bad file descriptor) [pid 6174] close(6) = -1 EBADF (Bad file descriptor) [pid 6174] close(7) = -1 EBADF (Bad file descriptor) [pid 6174] close(8) = -1 EBADF (Bad file descriptor) [pid 6174] close(9) = -1 EBADF (Bad file descriptor) [pid 6174] close(10) = -1 EBADF (Bad file descriptor) [pid 6174] close(11) = -1 EBADF (Bad file descriptor) [pid 6174] close(12) = -1 EBADF (Bad file descriptor) [pid 6174] close(13) = -1 EBADF (Bad file descriptor) [pid 6174] close(14) = -1 EBADF (Bad file descriptor) [pid 6174] close(15) = -1 EBADF (Bad file descriptor) [pid 6174] close(16) = -1 EBADF (Bad file descriptor) [pid 6174] close(17) = -1 EBADF (Bad file descriptor) [pid 6174] close(18) = -1 EBADF (Bad file descriptor) [pid 6174] close(19) = -1 EBADF (Bad file descriptor) [pid 6174] close(20) = -1 EBADF (Bad file descriptor) [pid 6174] close(21) = -1 EBADF (Bad file descriptor) [pid 6174] close(22) = -1 EBADF (Bad file descriptor) [pid 6174] close(23) = -1 EBADF (Bad file descriptor) [pid 6174] close(24) = -1 EBADF (Bad file descriptor) [pid 6174] close(25) = -1 EBADF (Bad file descriptor) [pid 6174] close(26) = -1 EBADF (Bad file descriptor) [pid 6174] close(27) = -1 EBADF (Bad file descriptor) [pid 6174] close(28) = -1 EBADF (Bad file descriptor) [pid 6174] close(29) = -1 EBADF (Bad file descriptor) [pid 6174] exit_group(0) = ? [pid 6174] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=323, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./320", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./320", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./320/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./320/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./320/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./320/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./320/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./320/file2") = 0 [pid 5836] umount2("./320/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./320/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./320/binderfs") = 0 [pid 5836] umount2("./320/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./320/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./320/cgroup.net") = 0 [pid 5836] umount2("./320/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./320/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./320/cgroup.cpu") = 0 [pid 5836] umount2("./320/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./320/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./320/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./320") = 0 [pid 5836] mkdir("./321", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6175 attached [pid 6175] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 324 [pid 6175] <... set_robust_list resumed>) = 0 [pid 6175] chdir("./321") = 0 [pid 6175] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6175] setpgid(0, 0) = 0 [pid 6175] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6175] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6175] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6175] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6175] write(3, "1000", 4) = 4 [pid 6175] close(3) = 0 [pid 6175] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6175] write(1, "executing program\n", 18executing program ) = 18 [pid 6175] memfd_create("syzkaller", 0) = 3 [pid 6175] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6175] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6175] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6175] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6175] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6175] close(3) = 0 [pid 6175] close(4) = 0 [pid 6175] mkdir("./file2", 0777) = 0 [pid 6175] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6175] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6175] chdir("./file2") = 0 [pid 6175] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6175] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6175] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6175] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6175] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6175] close(3) = 0 [pid 6175] close(4) = 0 [pid 6175] close(5) = -1 EBADF (Bad file descriptor) [pid 6175] close(6) = -1 EBADF (Bad file descriptor) [pid 6175] close(7) = -1 EBADF (Bad file descriptor) [pid 6175] close(8) = -1 EBADF (Bad file descriptor) [pid 6175] close(9) = -1 EBADF (Bad file descriptor) [pid 6175] close(10) = -1 EBADF (Bad file descriptor) [pid 6175] close(11) = -1 EBADF (Bad file descriptor) [pid 6175] close(12) = -1 EBADF (Bad file descriptor) [pid 6175] close(13) = -1 EBADF (Bad file descriptor) [pid 6175] close(14) = -1 EBADF (Bad file descriptor) [pid 6175] close(15) = -1 EBADF (Bad file descriptor) [pid 6175] close(16) = -1 EBADF (Bad file descriptor) [pid 6175] close(17) = -1 EBADF (Bad file descriptor) [pid 6175] close(18) = -1 EBADF (Bad file descriptor) [pid 6175] close(19) = -1 EBADF (Bad file descriptor) [pid 6175] close(20) = -1 EBADF (Bad file descriptor) [pid 6175] close(21) = -1 EBADF (Bad file descriptor) [pid 6175] close(22) = -1 EBADF (Bad file descriptor) [pid 6175] close(23) = -1 EBADF (Bad file descriptor) [pid 6175] close(24) = -1 EBADF (Bad file descriptor) [pid 6175] close(25) = -1 EBADF (Bad file descriptor) [pid 6175] close(26) = -1 EBADF (Bad file descriptor) [pid 6175] close(27) = -1 EBADF (Bad file descriptor) [pid 6175] close(28) = -1 EBADF (Bad file descriptor) [pid 6175] close(29) = -1 EBADF (Bad file descriptor) [pid 6175] exit_group(0) = ? [ 266.951583][ T6175] loop0: detected capacity change from 0 to 128 [pid 6175] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=324, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] umount2("./321", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./321", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./321/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./321/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./321/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./321/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./321/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./321/file2") = 0 [pid 5836] umount2("./321/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./321/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./321/binderfs") = 0 [pid 5836] umount2("./321/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./321/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./321/cgroup.net") = 0 [pid 5836] umount2("./321/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./321/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./321/cgroup.cpu") = 0 [pid 5836] umount2("./321/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./321/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./321/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./321") = 0 [pid 5836] mkdir("./322", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6176 attached [pid 6176] set_robust_list(0x5555632376a0, 24) = 0 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 325 [pid 6176] chdir("./322") = 0 [pid 6176] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6176] setpgid(0, 0) = 0 [pid 6176] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6176] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6176] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6176] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6176] write(3, "1000", 4) = 4 [pid 6176] close(3) = 0 [pid 6176] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6176] write(1, "executing program\n", 18executing program ) = 18 [pid 6176] memfd_create("syzkaller", 0) = 3 [pid 6176] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6176] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6176] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6176] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6176] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6176] close(3) = 0 [pid 6176] close(4) = 0 [pid 6176] mkdir("./file2", 0777) = 0 [pid 6176] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6176] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6176] chdir("./file2") = 0 [pid 6176] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 267.516852][ T6176] loop0: detected capacity change from 0 to 128 [pid 6176] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6176] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6176] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6176] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6176] close(3) = 0 [pid 6176] close(4) = 0 [pid 6176] close(5) = -1 EBADF (Bad file descriptor) [pid 6176] close(6) = -1 EBADF (Bad file descriptor) [pid 6176] close(7) = -1 EBADF (Bad file descriptor) [pid 6176] close(8) = -1 EBADF (Bad file descriptor) [pid 6176] close(9) = -1 EBADF (Bad file descriptor) [pid 6176] close(10) = -1 EBADF (Bad file descriptor) [pid 6176] close(11) = -1 EBADF (Bad file descriptor) [pid 6176] close(12) = -1 EBADF (Bad file descriptor) [pid 6176] close(13) = -1 EBADF (Bad file descriptor) [pid 6176] close(14) = -1 EBADF (Bad file descriptor) [pid 6176] close(15) = -1 EBADF (Bad file descriptor) [pid 6176] close(16) = -1 EBADF (Bad file descriptor) [pid 6176] close(17) = -1 EBADF (Bad file descriptor) [pid 6176] close(18) = -1 EBADF (Bad file descriptor) [pid 6176] close(19) = -1 EBADF (Bad file descriptor) [pid 6176] close(20) = -1 EBADF (Bad file descriptor) [pid 6176] close(21) = -1 EBADF (Bad file descriptor) [pid 6176] close(22) = -1 EBADF (Bad file descriptor) [pid 6176] close(23) = -1 EBADF (Bad file descriptor) [pid 6176] close(24) = -1 EBADF (Bad file descriptor) [pid 6176] close(25) = -1 EBADF (Bad file descriptor) [pid 6176] close(26) = -1 EBADF (Bad file descriptor) [pid 6176] close(27) = -1 EBADF (Bad file descriptor) [pid 6176] close(28) = -1 EBADF (Bad file descriptor) [pid 6176] close(29) = -1 EBADF (Bad file descriptor) [pid 6176] exit_group(0) = ? [pid 6176] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=325, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./322", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./322", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./322/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./322/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./322/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./322/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./322/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./322/file2") = 0 [pid 5836] umount2("./322/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./322/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./322/binderfs") = 0 [pid 5836] umount2("./322/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./322/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./322/cgroup.net") = 0 [pid 5836] umount2("./322/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./322/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./322/cgroup.cpu") = 0 [pid 5836] umount2("./322/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./322/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./322/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./322") = 0 [pid 5836] mkdir("./323", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6177 attached [pid 6177] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 326 [pid 6177] <... set_robust_list resumed>) = 0 [pid 6177] chdir("./323") = 0 [pid 6177] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6177] setpgid(0, 0) = 0 [pid 6177] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6177] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6177] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6177] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6177] write(3, "1000", 4) = 4 [pid 6177] close(3) = 0 [pid 6177] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6177] write(1, "executing program\n", 18executing program ) = 18 [pid 6177] memfd_create("syzkaller", 0) = 3 [pid 6177] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6177] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6177] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6177] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6177] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6177] close(3) = 0 [pid 6177] close(4) = 0 [pid 6177] mkdir("./file2", 0777) = 0 [pid 6177] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6177] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6177] chdir("./file2") = 0 [pid 6177] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6177] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6177] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6177] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6177] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6177] close(3) = 0 [pid 6177] close(4) = 0 [pid 6177] close(5) = -1 EBADF (Bad file descriptor) [pid 6177] close(6) = -1 EBADF (Bad file descriptor) [pid 6177] close(7) = -1 EBADF (Bad file descriptor) [pid 6177] close(8) = -1 EBADF (Bad file descriptor) [pid 6177] close(9) = -1 EBADF (Bad file descriptor) [pid 6177] close(10) = -1 EBADF (Bad file descriptor) [pid 6177] close(11) = -1 EBADF (Bad file descriptor) [pid 6177] close(12) = -1 EBADF (Bad file descriptor) [pid 6177] close(13) = -1 EBADF (Bad file descriptor) [pid 6177] close(14) = -1 EBADF (Bad file descriptor) [pid 6177] close(15) = -1 EBADF (Bad file descriptor) [pid 6177] close(16) = -1 EBADF (Bad file descriptor) [pid 6177] close(17) = -1 EBADF (Bad file descriptor) [pid 6177] close(18) = -1 EBADF (Bad file descriptor) [ 268.016728][ T6177] loop0: detected capacity change from 0 to 128 [pid 6177] close(19) = -1 EBADF (Bad file descriptor) [pid 6177] close(20) = -1 EBADF (Bad file descriptor) [pid 6177] close(21) = -1 EBADF (Bad file descriptor) [pid 6177] close(22) = -1 EBADF (Bad file descriptor) [pid 6177] close(23) = -1 EBADF (Bad file descriptor) [pid 6177] close(24) = -1 EBADF (Bad file descriptor) [pid 6177] close(25) = -1 EBADF (Bad file descriptor) [pid 6177] close(26) = -1 EBADF (Bad file descriptor) [pid 6177] close(27) = -1 EBADF (Bad file descriptor) [pid 6177] close(28) = -1 EBADF (Bad file descriptor) [pid 6177] close(29) = -1 EBADF (Bad file descriptor) [pid 6177] exit_group(0) = ? [pid 6177] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=326, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5836] umount2("./323", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./323", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./323/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./323/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./323/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./323/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./323/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./323/file2") = 0 [pid 5836] umount2("./323/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./323/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./323/binderfs") = 0 [pid 5836] umount2("./323/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./323/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./323/cgroup.net") = 0 [pid 5836] umount2("./323/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./323/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./323/cgroup.cpu") = 0 [pid 5836] umount2("./323/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./323/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./323/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./323") = 0 [pid 5836] mkdir("./324", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6178 attached [pid 6178] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 327 [pid 6178] <... set_robust_list resumed>) = 0 [pid 6178] chdir("./324") = 0 [pid 6178] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6178] setpgid(0, 0) = 0 [pid 6178] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6178] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6178] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6178] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6178] write(3, "1000", 4) = 4 [pid 6178] close(3) = 0 [pid 6178] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6178] write(1, "executing program\n", 18executing program ) = 18 [pid 6178] memfd_create("syzkaller", 0) = 3 [pid 6178] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6178] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6178] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6178] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6178] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6178] close(3) = 0 [pid 6178] close(4) = 0 [pid 6178] mkdir("./file2", 0777) = 0 [pid 6178] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6178] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6178] chdir("./file2") = 0 [pid 6178] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6178] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6178] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6178] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6178] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6178] close(3) = 0 [ 268.520920][ T6178] loop0: detected capacity change from 0 to 128 [pid 6178] close(4) = 0 [pid 6178] close(5) = -1 EBADF (Bad file descriptor) [pid 6178] close(6) = -1 EBADF (Bad file descriptor) [pid 6178] close(7) = -1 EBADF (Bad file descriptor) [pid 6178] close(8) = -1 EBADF (Bad file descriptor) [pid 6178] close(9) = -1 EBADF (Bad file descriptor) [pid 6178] close(10) = -1 EBADF (Bad file descriptor) [pid 6178] close(11) = -1 EBADF (Bad file descriptor) [pid 6178] close(12) = -1 EBADF (Bad file descriptor) [pid 6178] close(13) = -1 EBADF (Bad file descriptor) [pid 6178] close(14) = -1 EBADF (Bad file descriptor) [pid 6178] close(15) = -1 EBADF (Bad file descriptor) [pid 6178] close(16) = -1 EBADF (Bad file descriptor) [pid 6178] close(17) = -1 EBADF (Bad file descriptor) [pid 6178] close(18) = -1 EBADF (Bad file descriptor) [pid 6178] close(19) = -1 EBADF (Bad file descriptor) [pid 6178] close(20) = -1 EBADF (Bad file descriptor) [pid 6178] close(21) = -1 EBADF (Bad file descriptor) [pid 6178] close(22) = -1 EBADF (Bad file descriptor) [pid 6178] close(23) = -1 EBADF (Bad file descriptor) [pid 6178] close(24) = -1 EBADF (Bad file descriptor) [pid 6178] close(25) = -1 EBADF (Bad file descriptor) [pid 6178] close(26) = -1 EBADF (Bad file descriptor) [pid 6178] close(27) = -1 EBADF (Bad file descriptor) [pid 6178] close(28) = -1 EBADF (Bad file descriptor) [pid 6178] close(29) = -1 EBADF (Bad file descriptor) [pid 6178] exit_group(0) = ? [pid 6178] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=327, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./324", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./324", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./324/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./324/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./324/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./324/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./324/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./324/file2") = 0 [pid 5836] umount2("./324/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./324/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./324/binderfs") = 0 [pid 5836] umount2("./324/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./324/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./324/cgroup.net") = 0 [pid 5836] umount2("./324/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./324/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./324/cgroup.cpu") = 0 [pid 5836] umount2("./324/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./324/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./324/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./324") = 0 [pid 5836] mkdir("./325", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6179 attached , child_tidptr=0x555563237690) = 328 [pid 6179] set_robust_list(0x5555632376a0, 24) = 0 [pid 6179] chdir("./325") = 0 [pid 6179] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6179] setpgid(0, 0) = 0 [pid 6179] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6179] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6179] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6179] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6179] write(3, "1000", 4) = 4 [pid 6179] close(3) = 0 [pid 6179] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6179] write(1, "executing program\n", 18executing program ) = 18 [pid 6179] memfd_create("syzkaller", 0) = 3 [pid 6179] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6179] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6179] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6179] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6179] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6179] close(3) = 0 [pid 6179] close(4) = 0 [pid 6179] mkdir("./file2", 0777) = 0 [pid 6179] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6179] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6179] chdir("./file2") = 0 [pid 6179] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6179] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6179] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6179] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6179] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6179] close(3) = 0 [pid 6179] close(4) = 0 [ 268.984769][ T6179] loop0: detected capacity change from 0 to 128 [pid 6179] close(5) = -1 EBADF (Bad file descriptor) [pid 6179] close(6) = -1 EBADF (Bad file descriptor) [pid 6179] close(7) = -1 EBADF (Bad file descriptor) [pid 6179] close(8) = -1 EBADF (Bad file descriptor) [pid 6179] close(9) = -1 EBADF (Bad file descriptor) [pid 6179] close(10) = -1 EBADF (Bad file descriptor) [pid 6179] close(11) = -1 EBADF (Bad file descriptor) [pid 6179] close(12) = -1 EBADF (Bad file descriptor) [pid 6179] close(13) = -1 EBADF (Bad file descriptor) [pid 6179] close(14) = -1 EBADF (Bad file descriptor) [pid 6179] close(15) = -1 EBADF (Bad file descriptor) [pid 6179] close(16) = -1 EBADF (Bad file descriptor) [pid 6179] close(17) = -1 EBADF (Bad file descriptor) [pid 6179] close(18) = -1 EBADF (Bad file descriptor) [pid 6179] close(19) = -1 EBADF (Bad file descriptor) [pid 6179] close(20) = -1 EBADF (Bad file descriptor) [pid 6179] close(21) = -1 EBADF (Bad file descriptor) [pid 6179] close(22) = -1 EBADF (Bad file descriptor) [pid 6179] close(23) = -1 EBADF (Bad file descriptor) [pid 6179] close(24) = -1 EBADF (Bad file descriptor) [pid 6179] close(25) = -1 EBADF (Bad file descriptor) [pid 6179] close(26) = -1 EBADF (Bad file descriptor) [pid 6179] close(27) = -1 EBADF (Bad file descriptor) [pid 6179] close(28) = -1 EBADF (Bad file descriptor) [pid 6179] close(29) = -1 EBADF (Bad file descriptor) [pid 6179] exit_group(0) = ? [pid 6179] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=328, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./325", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./325", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./325/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./325/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./325/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./325/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./325/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./325/file2") = 0 [pid 5836] umount2("./325/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./325/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./325/binderfs") = 0 [pid 5836] umount2("./325/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./325/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./325/cgroup.net") = 0 [pid 5836] umount2("./325/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./325/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./325/cgroup.cpu") = 0 [pid 5836] umount2("./325/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./325/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./325/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./325") = 0 [pid 5836] mkdir("./326", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6180 attached [pid 6180] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 329 [pid 6180] <... set_robust_list resumed>) = 0 [pid 6180] chdir("./326") = 0 [pid 6180] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6180] setpgid(0, 0) = 0 [pid 6180] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6180] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6180] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6180] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6180] write(3, "1000", 4) = 4 [pid 6180] close(3) = 0 [pid 6180] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6180] write(1, "executing program\n", 18executing program ) = 18 [pid 6180] memfd_create("syzkaller", 0) = 3 [pid 6180] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6180] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6180] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6180] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6180] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6180] close(3) = 0 [pid 6180] close(4) = 0 [pid 6180] mkdir("./file2", 0777) = 0 [pid 6180] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6180] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6180] chdir("./file2") = 0 [pid 6180] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 269.333409][ T6180] loop0: detected capacity change from 0 to 128 [pid 6180] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6180] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6180] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6180] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6180] close(3) = 0 [pid 6180] close(4) = 0 [pid 6180] close(5) = -1 EBADF (Bad file descriptor) [pid 6180] close(6) = -1 EBADF (Bad file descriptor) [pid 6180] close(7) = -1 EBADF (Bad file descriptor) [pid 6180] close(8) = -1 EBADF (Bad file descriptor) [pid 6180] close(9) = -1 EBADF (Bad file descriptor) [pid 6180] close(10) = -1 EBADF (Bad file descriptor) [pid 6180] close(11) = -1 EBADF (Bad file descriptor) [pid 6180] close(12) = -1 EBADF (Bad file descriptor) [pid 6180] close(13) = -1 EBADF (Bad file descriptor) [pid 6180] close(14) = -1 EBADF (Bad file descriptor) [pid 6180] close(15) = -1 EBADF (Bad file descriptor) [pid 6180] close(16) = -1 EBADF (Bad file descriptor) [pid 6180] close(17) = -1 EBADF (Bad file descriptor) [pid 6180] close(18) = -1 EBADF (Bad file descriptor) [pid 6180] close(19) = -1 EBADF (Bad file descriptor) [pid 6180] close(20) = -1 EBADF (Bad file descriptor) [pid 6180] close(21) = -1 EBADF (Bad file descriptor) [pid 6180] close(22) = -1 EBADF (Bad file descriptor) [pid 6180] close(23) = -1 EBADF (Bad file descriptor) [pid 6180] close(24) = -1 EBADF (Bad file descriptor) [pid 6180] close(25) = -1 EBADF (Bad file descriptor) [pid 6180] close(26) = -1 EBADF (Bad file descriptor) [pid 6180] close(27) = -1 EBADF (Bad file descriptor) [pid 6180] close(28) = -1 EBADF (Bad file descriptor) [pid 6180] close(29) = -1 EBADF (Bad file descriptor) [pid 6180] exit_group(0) = ? [pid 6180] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=329, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./326", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./326", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./326/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./326/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./326/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./326/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./326/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./326/file2") = 0 [pid 5836] umount2("./326/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./326/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./326/binderfs") = 0 [pid 5836] umount2("./326/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./326/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./326/cgroup.net") = 0 [pid 5836] umount2("./326/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./326/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./326/cgroup.cpu") = 0 [pid 5836] umount2("./326/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./326/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./326/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./326") = 0 [pid 5836] mkdir("./327", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6181 attached [pid 6181] set_robust_list(0x5555632376a0, 24) = 0 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 330 [pid 6181] chdir("./327") = 0 [pid 6181] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6181] setpgid(0, 0) = 0 [pid 6181] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6181] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6181] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6181] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6181] write(3, "1000", 4) = 4 [pid 6181] close(3) = 0 [pid 6181] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6181] write(1, "executing program\n", 18executing program ) = 18 [pid 6181] memfd_create("syzkaller", 0) = 3 [pid 6181] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6181] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6181] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6181] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6181] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6181] close(3) = 0 [pid 6181] close(4) = 0 [pid 6181] mkdir("./file2", 0777) = 0 [pid 6181] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6181] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6181] chdir("./file2") = 0 [pid 6181] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6181] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6181] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6181] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6181] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6181] close(3) = 0 [pid 6181] close(4) = 0 [ 269.950062][ T6181] loop0: detected capacity change from 0 to 128 [pid 6181] close(5) = -1 EBADF (Bad file descriptor) [pid 6181] close(6) = -1 EBADF (Bad file descriptor) [pid 6181] close(7) = -1 EBADF (Bad file descriptor) [pid 6181] close(8) = -1 EBADF (Bad file descriptor) [pid 6181] close(9) = -1 EBADF (Bad file descriptor) [pid 6181] close(10) = -1 EBADF (Bad file descriptor) [pid 6181] close(11) = -1 EBADF (Bad file descriptor) [pid 6181] close(12) = -1 EBADF (Bad file descriptor) [pid 6181] close(13) = -1 EBADF (Bad file descriptor) [pid 6181] close(14) = -1 EBADF (Bad file descriptor) [pid 6181] close(15) = -1 EBADF (Bad file descriptor) [pid 6181] close(16) = -1 EBADF (Bad file descriptor) [pid 6181] close(17) = -1 EBADF (Bad file descriptor) [pid 6181] close(18) = -1 EBADF (Bad file descriptor) [pid 6181] close(19) = -1 EBADF (Bad file descriptor) [pid 6181] close(20) = -1 EBADF (Bad file descriptor) [pid 6181] close(21) = -1 EBADF (Bad file descriptor) [pid 6181] close(22) = -1 EBADF (Bad file descriptor) [pid 6181] close(23) = -1 EBADF (Bad file descriptor) [pid 6181] close(24) = -1 EBADF (Bad file descriptor) [pid 6181] close(25) = -1 EBADF (Bad file descriptor) [pid 6181] close(26) = -1 EBADF (Bad file descriptor) [pid 6181] close(27) = -1 EBADF (Bad file descriptor) [pid 6181] close(28) = -1 EBADF (Bad file descriptor) [pid 6181] close(29) = -1 EBADF (Bad file descriptor) [pid 6181] exit_group(0) = ? [pid 6181] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=330, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./327", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./327", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./327/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./327/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./327/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./327/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./327/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./327/file2") = 0 [pid 5836] umount2("./327/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./327/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./327/binderfs") = 0 [pid 5836] umount2("./327/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./327/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./327/cgroup.net") = 0 [pid 5836] umount2("./327/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./327/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./327/cgroup.cpu") = 0 [pid 5836] umount2("./327/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./327/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./327/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./327") = 0 [pid 5836] mkdir("./328", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6182 attached , child_tidptr=0x555563237690) = 331 [pid 6182] set_robust_list(0x5555632376a0, 24) = 0 [pid 6182] chdir("./328") = 0 [pid 6182] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6182] setpgid(0, 0) = 0 [pid 6182] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6182] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6182] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6182] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6182] write(3, "1000", 4) = 4 [pid 6182] close(3) = 0 [pid 6182] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6182] write(1, "executing program\n", 18) = 18 [pid 6182] memfd_create("syzkaller", 0) = 3 [pid 6182] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6182] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6182] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6182] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6182] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6182] close(3) = 0 [pid 6182] close(4) = 0 [pid 6182] mkdir("./file2", 0777) = 0 [pid 6182] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6182] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6182] chdir("./file2") = 0 [pid 6182] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6182] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6182] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6182] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6182] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6182] close(3) = 0 [pid 6182] close(4) = 0 [ 270.471467][ T6182] loop0: detected capacity change from 0 to 128 [pid 6182] close(5) = -1 EBADF (Bad file descriptor) [pid 6182] close(6) = -1 EBADF (Bad file descriptor) [pid 6182] close(7) = -1 EBADF (Bad file descriptor) [pid 6182] close(8) = -1 EBADF (Bad file descriptor) [pid 6182] close(9) = -1 EBADF (Bad file descriptor) [pid 6182] close(10) = -1 EBADF (Bad file descriptor) [pid 6182] close(11) = -1 EBADF (Bad file descriptor) [pid 6182] close(12) = -1 EBADF (Bad file descriptor) [pid 6182] close(13) = -1 EBADF (Bad file descriptor) [pid 6182] close(14) = -1 EBADF (Bad file descriptor) [pid 6182] close(15) = -1 EBADF (Bad file descriptor) [pid 6182] close(16) = -1 EBADF (Bad file descriptor) [pid 6182] close(17) = -1 EBADF (Bad file descriptor) [pid 6182] close(18) = -1 EBADF (Bad file descriptor) [pid 6182] close(19) = -1 EBADF (Bad file descriptor) [pid 6182] close(20) = -1 EBADF (Bad file descriptor) [pid 6182] close(21) = -1 EBADF (Bad file descriptor) [pid 6182] close(22) = -1 EBADF (Bad file descriptor) [pid 6182] close(23) = -1 EBADF (Bad file descriptor) [pid 6182] close(24) = -1 EBADF (Bad file descriptor) [pid 6182] close(25) = -1 EBADF (Bad file descriptor) [pid 6182] close(26) = -1 EBADF (Bad file descriptor) [pid 6182] close(27) = -1 EBADF (Bad file descriptor) [pid 6182] close(28) = -1 EBADF (Bad file descriptor) [pid 6182] close(29) = -1 EBADF (Bad file descriptor) [pid 6182] exit_group(0) = ? [pid 6182] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=331, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./328", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./328", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./328/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./328/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./328/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./328/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./328/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./328/file2") = 0 [pid 5836] umount2("./328/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./328/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./328/binderfs") = 0 [pid 5836] umount2("./328/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./328/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./328/cgroup.net") = 0 [pid 5836] umount2("./328/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./328/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./328/cgroup.cpu") = 0 [pid 5836] umount2("./328/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./328/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./328/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./328") = 0 [pid 5836] mkdir("./329", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6183 attached [pid 6183] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 332 [pid 6183] <... set_robust_list resumed>) = 0 [pid 6183] chdir("./329") = 0 [pid 6183] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6183] setpgid(0, 0) = 0 [pid 6183] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6183] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6183] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6183] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6183] write(3, "1000", 4) = 4 [pid 6183] close(3) = 0 [pid 6183] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6183] write(1, "executing program\n", 18) = 18 [pid 6183] memfd_create("syzkaller", 0) = 3 [pid 6183] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6183] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6183] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6183] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6183] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6183] close(3) = 0 [pid 6183] close(4) = 0 [pid 6183] mkdir("./file2", 0777) = 0 [pid 6183] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6183] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6183] chdir("./file2") = 0 [pid 6183] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6183] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6183] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6183] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6183] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6183] close(3) = 0 [pid 6183] close(4) = 0 [ 270.987220][ T6183] loop0: detected capacity change from 0 to 128 [pid 6183] close(5) = -1 EBADF (Bad file descriptor) [pid 6183] close(6) = -1 EBADF (Bad file descriptor) [pid 6183] close(7) = -1 EBADF (Bad file descriptor) [pid 6183] close(8) = -1 EBADF (Bad file descriptor) [pid 6183] close(9) = -1 EBADF (Bad file descriptor) [pid 6183] close(10) = -1 EBADF (Bad file descriptor) [pid 6183] close(11) = -1 EBADF (Bad file descriptor) [pid 6183] close(12) = -1 EBADF (Bad file descriptor) [pid 6183] close(13) = -1 EBADF (Bad file descriptor) [pid 6183] close(14) = -1 EBADF (Bad file descriptor) [pid 6183] close(15) = -1 EBADF (Bad file descriptor) [pid 6183] close(16) = -1 EBADF (Bad file descriptor) [pid 6183] close(17) = -1 EBADF (Bad file descriptor) [pid 6183] close(18) = -1 EBADF (Bad file descriptor) [pid 6183] close(19) = -1 EBADF (Bad file descriptor) [pid 6183] close(20) = -1 EBADF (Bad file descriptor) [pid 6183] close(21) = -1 EBADF (Bad file descriptor) [pid 6183] close(22) = -1 EBADF (Bad file descriptor) [pid 6183] close(23) = -1 EBADF (Bad file descriptor) [pid 6183] close(24) = -1 EBADF (Bad file descriptor) [pid 6183] close(25) = -1 EBADF (Bad file descriptor) [pid 6183] close(26) = -1 EBADF (Bad file descriptor) [pid 6183] close(27) = -1 EBADF (Bad file descriptor) [pid 6183] close(28) = -1 EBADF (Bad file descriptor) [pid 6183] close(29) = -1 EBADF (Bad file descriptor) [pid 6183] exit_group(0) = ? [pid 6183] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=332, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./329", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./329", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./329/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./329/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./329/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./329/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./329/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./329/file2") = 0 [pid 5836] umount2("./329/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./329/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./329/binderfs") = 0 [pid 5836] umount2("./329/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./329/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./329/cgroup.net") = 0 [pid 5836] umount2("./329/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./329/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./329/cgroup.cpu") = 0 [pid 5836] umount2("./329/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./329/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./329/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./329") = 0 [pid 5836] mkdir("./330", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6184 attached , child_tidptr=0x555563237690) = 333 [pid 6184] set_robust_list(0x5555632376a0, 24) = 0 [pid 6184] chdir("./330") = 0 [pid 6184] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6184] setpgid(0, 0) = 0 [pid 6184] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6184] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6184] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6184] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6184] write(3, "1000", 4) = 4 [pid 6184] close(3) = 0 [pid 6184] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6184] write(1, "executing program\n", 18executing program ) = 18 [pid 6184] memfd_create("syzkaller", 0) = 3 [pid 6184] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6184] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6184] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6184] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6184] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6184] close(3) = 0 [pid 6184] close(4) = 0 [pid 6184] mkdir("./file2", 0777) = 0 [pid 6184] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6184] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6184] chdir("./file2") = 0 [pid 6184] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6184] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6184] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6184] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6184] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6184] close(3) = 0 [pid 6184] close(4) = 0 [ 271.518741][ T6184] loop0: detected capacity change from 0 to 128 [pid 6184] close(5) = -1 EBADF (Bad file descriptor) [pid 6184] close(6) = -1 EBADF (Bad file descriptor) [pid 6184] close(7) = -1 EBADF (Bad file descriptor) [pid 6184] close(8) = -1 EBADF (Bad file descriptor) [pid 6184] close(9) = -1 EBADF (Bad file descriptor) [pid 6184] close(10) = -1 EBADF (Bad file descriptor) [pid 6184] close(11) = -1 EBADF (Bad file descriptor) [pid 6184] close(12) = -1 EBADF (Bad file descriptor) [pid 6184] close(13) = -1 EBADF (Bad file descriptor) [pid 6184] close(14) = -1 EBADF (Bad file descriptor) [pid 6184] close(15) = -1 EBADF (Bad file descriptor) [pid 6184] close(16) = -1 EBADF (Bad file descriptor) [pid 6184] close(17) = -1 EBADF (Bad file descriptor) [pid 6184] close(18) = -1 EBADF (Bad file descriptor) [pid 6184] close(19) = -1 EBADF (Bad file descriptor) [pid 6184] close(20) = -1 EBADF (Bad file descriptor) [pid 6184] close(21) = -1 EBADF (Bad file descriptor) [pid 6184] close(22) = -1 EBADF (Bad file descriptor) [pid 6184] close(23) = -1 EBADF (Bad file descriptor) [pid 6184] close(24) = -1 EBADF (Bad file descriptor) [pid 6184] close(25) = -1 EBADF (Bad file descriptor) [pid 6184] close(26) = -1 EBADF (Bad file descriptor) [pid 6184] close(27) = -1 EBADF (Bad file descriptor) [pid 6184] close(28) = -1 EBADF (Bad file descriptor) [pid 6184] close(29) = -1 EBADF (Bad file descriptor) [pid 6184] exit_group(0) = ? [pid 6184] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=333, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] umount2("./330", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./330", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./330/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./330/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./330/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./330/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./330/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./330/file2") = 0 [pid 5836] umount2("./330/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./330/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./330/binderfs") = 0 [pid 5836] umount2("./330/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./330/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./330/cgroup.net") = 0 [pid 5836] umount2("./330/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./330/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./330/cgroup.cpu") = 0 [pid 5836] umount2("./330/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./330/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./330/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./330") = 0 [pid 5836] mkdir("./331", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6185 attached [pid 6185] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 334 [pid 6185] <... set_robust_list resumed>) = 0 [pid 6185] chdir("./331") = 0 [pid 6185] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6185] setpgid(0, 0) = 0 [pid 6185] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6185] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6185] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6185] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6185] write(3, "1000", 4) = 4 [pid 6185] close(3) = 0 [pid 6185] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6185] write(1, "executing program\n", 18) = 18 [pid 6185] memfd_create("syzkaller", 0) = 3 [pid 6185] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6185] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6185] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6185] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6185] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6185] close(3) = 0 [pid 6185] close(4) = 0 [pid 6185] mkdir("./file2", 0777) = 0 [pid 6185] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6185] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6185] chdir("./file2") = 0 [pid 6185] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 272.005535][ T6185] loop0: detected capacity change from 0 to 128 [pid 6185] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6185] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6185] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6185] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6185] close(3) = 0 [pid 6185] close(4) = 0 [pid 6185] close(5) = -1 EBADF (Bad file descriptor) [pid 6185] close(6) = -1 EBADF (Bad file descriptor) [pid 6185] close(7) = -1 EBADF (Bad file descriptor) [pid 6185] close(8) = -1 EBADF (Bad file descriptor) [pid 6185] close(9) = -1 EBADF (Bad file descriptor) [pid 6185] close(10) = -1 EBADF (Bad file descriptor) [pid 6185] close(11) = -1 EBADF (Bad file descriptor) [pid 6185] close(12) = -1 EBADF (Bad file descriptor) [pid 6185] close(13) = -1 EBADF (Bad file descriptor) [pid 6185] close(14) = -1 EBADF (Bad file descriptor) [pid 6185] close(15) = -1 EBADF (Bad file descriptor) [pid 6185] close(16) = -1 EBADF (Bad file descriptor) [pid 6185] close(17) = -1 EBADF (Bad file descriptor) [pid 6185] close(18) = -1 EBADF (Bad file descriptor) [pid 6185] close(19) = -1 EBADF (Bad file descriptor) [pid 6185] close(20) = -1 EBADF (Bad file descriptor) [pid 6185] close(21) = -1 EBADF (Bad file descriptor) [pid 6185] close(22) = -1 EBADF (Bad file descriptor) [pid 6185] close(23) = -1 EBADF (Bad file descriptor) [pid 6185] close(24) = -1 EBADF (Bad file descriptor) [pid 6185] close(25) = -1 EBADF (Bad file descriptor) [pid 6185] close(26) = -1 EBADF (Bad file descriptor) [pid 6185] close(27) = -1 EBADF (Bad file descriptor) [pid 6185] close(28) = -1 EBADF (Bad file descriptor) [pid 6185] close(29) = -1 EBADF (Bad file descriptor) [pid 6185] exit_group(0) = ? [pid 6185] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=334, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] umount2("./331", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./331", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./331/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./331/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./331/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./331/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./331/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./331/file2") = 0 [pid 5836] umount2("./331/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./331/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./331/binderfs") = 0 [pid 5836] umount2("./331/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./331/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./331/cgroup.net") = 0 [pid 5836] umount2("./331/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./331/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./331/cgroup.cpu") = 0 [pid 5836] umount2("./331/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./331/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./331/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./331") = 0 [pid 5836] mkdir("./332", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6186 attached , child_tidptr=0x555563237690) = 335 [pid 6186] set_robust_list(0x5555632376a0, 24) = 0 [pid 6186] chdir("./332") = 0 [pid 6186] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6186] setpgid(0, 0) = 0 [pid 6186] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6186] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6186] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6186] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6186] write(3, "1000", 4) = 4 [pid 6186] close(3) = 0 [pid 6186] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6186] write(1, "executing program\n", 18executing program ) = 18 [pid 6186] memfd_create("syzkaller", 0) = 3 [pid 6186] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6186] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6186] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6186] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6186] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6186] close(3) = 0 [pid 6186] close(4) = 0 [pid 6186] mkdir("./file2", 0777) = 0 [pid 6186] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6186] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6186] chdir("./file2") = 0 [pid 6186] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6186] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6186] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [ 272.586084][ T6186] loop0: detected capacity change from 0 to 128 [pid 6186] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6186] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6186] close(3) = 0 [pid 6186] close(4) = 0 [pid 6186] close(5) = -1 EBADF (Bad file descriptor) [pid 6186] close(6) = -1 EBADF (Bad file descriptor) [pid 6186] close(7) = -1 EBADF (Bad file descriptor) [pid 6186] close(8) = -1 EBADF (Bad file descriptor) [pid 6186] close(9) = -1 EBADF (Bad file descriptor) [pid 6186] close(10) = -1 EBADF (Bad file descriptor) [pid 6186] close(11) = -1 EBADF (Bad file descriptor) [pid 6186] close(12) = -1 EBADF (Bad file descriptor) [pid 6186] close(13) = -1 EBADF (Bad file descriptor) [pid 6186] close(14) = -1 EBADF (Bad file descriptor) [pid 6186] close(15) = -1 EBADF (Bad file descriptor) [pid 6186] close(16) = -1 EBADF (Bad file descriptor) [pid 6186] close(17) = -1 EBADF (Bad file descriptor) [pid 6186] close(18) = -1 EBADF (Bad file descriptor) [pid 6186] close(19) = -1 EBADF (Bad file descriptor) [pid 6186] close(20) = -1 EBADF (Bad file descriptor) [pid 6186] close(21) = -1 EBADF (Bad file descriptor) [pid 6186] close(22) = -1 EBADF (Bad file descriptor) [pid 6186] close(23) = -1 EBADF (Bad file descriptor) [pid 6186] close(24) = -1 EBADF (Bad file descriptor) [pid 6186] close(25) = -1 EBADF (Bad file descriptor) [pid 6186] close(26) = -1 EBADF (Bad file descriptor) [pid 6186] close(27) = -1 EBADF (Bad file descriptor) [pid 6186] close(28) = -1 EBADF (Bad file descriptor) [pid 6186] close(29) = -1 EBADF (Bad file descriptor) [pid 6186] exit_group(0) = ? [pid 6186] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=335, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] umount2("./332", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./332", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./332/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./332/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./332/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./332/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./332/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./332/file2") = 0 [pid 5836] umount2("./332/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./332/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./332/binderfs") = 0 [pid 5836] umount2("./332/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./332/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./332/cgroup.net") = 0 [pid 5836] umount2("./332/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./332/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./332/cgroup.cpu") = 0 [pid 5836] umount2("./332/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./332/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./332/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./332") = 0 [pid 5836] mkdir("./333", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6187 attached , child_tidptr=0x555563237690) = 336 [pid 6187] set_robust_list(0x5555632376a0, 24) = 0 [pid 6187] chdir("./333") = 0 [pid 6187] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6187] setpgid(0, 0) = 0 [pid 6187] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6187] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6187] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6187] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6187] write(3, "1000", 4) = 4 [pid 6187] close(3) = 0 [pid 6187] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6187] write(1, "executing program\n", 18executing program ) = 18 [pid 6187] memfd_create("syzkaller", 0) = 3 [pid 6187] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6187] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6187] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6187] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6187] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6187] close(3) = 0 [pid 6187] close(4) = 0 [pid 6187] mkdir("./file2", 0777) = 0 [pid 6187] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6187] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6187] chdir("./file2") = 0 [pid 6187] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6187] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6187] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [ 273.166926][ T6187] loop0: detected capacity change from 0 to 128 [pid 6187] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6187] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6187] close(3) = 0 [pid 6187] close(4) = 0 [pid 6187] close(5) = -1 EBADF (Bad file descriptor) [pid 6187] close(6) = -1 EBADF (Bad file descriptor) [pid 6187] close(7) = -1 EBADF (Bad file descriptor) [pid 6187] close(8) = -1 EBADF (Bad file descriptor) [pid 6187] close(9) = -1 EBADF (Bad file descriptor) [pid 6187] close(10) = -1 EBADF (Bad file descriptor) [pid 6187] close(11) = -1 EBADF (Bad file descriptor) [pid 6187] close(12) = -1 EBADF (Bad file descriptor) [pid 6187] close(13) = -1 EBADF (Bad file descriptor) [pid 6187] close(14) = -1 EBADF (Bad file descriptor) [pid 6187] close(15) = -1 EBADF (Bad file descriptor) [pid 6187] close(16) = -1 EBADF (Bad file descriptor) [pid 6187] close(17) = -1 EBADF (Bad file descriptor) [pid 6187] close(18) = -1 EBADF (Bad file descriptor) [pid 6187] close(19) = -1 EBADF (Bad file descriptor) [pid 6187] close(20) = -1 EBADF (Bad file descriptor) [pid 6187] close(21) = -1 EBADF (Bad file descriptor) [pid 6187] close(22) = -1 EBADF (Bad file descriptor) [pid 6187] close(23) = -1 EBADF (Bad file descriptor) [pid 6187] close(24) = -1 EBADF (Bad file descriptor) [pid 6187] close(25) = -1 EBADF (Bad file descriptor) [pid 6187] close(26) = -1 EBADF (Bad file descriptor) [pid 6187] close(27) = -1 EBADF (Bad file descriptor) [pid 6187] close(28) = -1 EBADF (Bad file descriptor) [pid 6187] close(29) = -1 EBADF (Bad file descriptor) [pid 6187] exit_group(0) = ? [pid 6187] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=336, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] umount2("./333", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./333", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./333/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./333/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./333/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./333/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./333/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./333/file2") = 0 [pid 5836] umount2("./333/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./333/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./333/binderfs") = 0 [pid 5836] umount2("./333/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./333/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./333/cgroup.net") = 0 [pid 5836] umount2("./333/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./333/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./333/cgroup.cpu") = 0 [pid 5836] umount2("./333/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./333/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./333/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./333") = 0 [pid 5836] mkdir("./334", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6188 attached [pid 6188] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 337 [pid 6188] <... set_robust_list resumed>) = 0 [pid 6188] chdir("./334") = 0 [pid 6188] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6188] setpgid(0, 0) = 0 [pid 6188] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6188] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6188] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6188] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6188] write(3, "1000", 4) = 4 [pid 6188] close(3) = 0 [pid 6188] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6188] write(1, "executing program\n", 18executing program ) = 18 [pid 6188] memfd_create("syzkaller", 0) = 3 [pid 6188] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6188] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6188] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6188] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6188] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6188] close(3) = 0 [pid 6188] close(4) = 0 [pid 6188] mkdir("./file2", 0777) = 0 [pid 6188] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6188] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6188] chdir("./file2") = 0 [pid 6188] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6188] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6188] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6188] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [ 273.744718][ T6188] loop0: detected capacity change from 0 to 128 [pid 6188] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6188] close(3) = 0 [pid 6188] close(4) = 0 [pid 6188] close(5) = -1 EBADF (Bad file descriptor) [pid 6188] close(6) = -1 EBADF (Bad file descriptor) [pid 6188] close(7) = -1 EBADF (Bad file descriptor) [pid 6188] close(8) = -1 EBADF (Bad file descriptor) [pid 6188] close(9) = -1 EBADF (Bad file descriptor) [pid 6188] close(10) = -1 EBADF (Bad file descriptor) [pid 6188] close(11) = -1 EBADF (Bad file descriptor) [pid 6188] close(12) = -1 EBADF (Bad file descriptor) [pid 6188] close(13) = -1 EBADF (Bad file descriptor) [pid 6188] close(14) = -1 EBADF (Bad file descriptor) [pid 6188] close(15) = -1 EBADF (Bad file descriptor) [pid 6188] close(16) = -1 EBADF (Bad file descriptor) [pid 6188] close(17) = -1 EBADF (Bad file descriptor) [pid 6188] close(18) = -1 EBADF (Bad file descriptor) [pid 6188] close(19) = -1 EBADF (Bad file descriptor) [pid 6188] close(20) = -1 EBADF (Bad file descriptor) [pid 6188] close(21) = -1 EBADF (Bad file descriptor) [pid 6188] close(22) = -1 EBADF (Bad file descriptor) [pid 6188] close(23) = -1 EBADF (Bad file descriptor) [pid 6188] close(24) = -1 EBADF (Bad file descriptor) [pid 6188] close(25) = -1 EBADF (Bad file descriptor) [pid 6188] close(26) = -1 EBADF (Bad file descriptor) [pid 6188] close(27) = -1 EBADF (Bad file descriptor) [pid 6188] close(28) = -1 EBADF (Bad file descriptor) [pid 6188] close(29) = -1 EBADF (Bad file descriptor) [pid 6188] exit_group(0) = ? [pid 6188] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=337, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] umount2("./334", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./334", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./334/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./334/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./334/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./334/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./334/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./334/file2") = 0 [pid 5836] umount2("./334/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./334/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./334/binderfs") = 0 [pid 5836] umount2("./334/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./334/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./334/cgroup.net") = 0 [pid 5836] umount2("./334/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./334/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./334/cgroup.cpu") = 0 [pid 5836] umount2("./334/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./334/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./334/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./334") = 0 [pid 5836] mkdir("./335", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6189 attached [pid 6189] set_robust_list(0x5555632376a0, 24) = 0 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 338 [pid 6189] chdir("./335") = 0 [pid 6189] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6189] setpgid(0, 0) = 0 [pid 6189] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6189] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6189] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6189] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6189] write(3, "1000", 4) = 4 [pid 6189] close(3) = 0 [pid 6189] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6189] write(1, "executing program\n", 18executing program ) = 18 [pid 6189] memfd_create("syzkaller", 0) = 3 [pid 6189] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6189] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6189] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6189] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6189] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6189] close(3) = 0 [pid 6189] close(4) = 0 [pid 6189] mkdir("./file2", 0777) = 0 [pid 6189] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6189] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6189] chdir("./file2") = 0 [pid 6189] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 274.223787][ T6189] loop0: detected capacity change from 0 to 128 [pid 6189] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6189] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6189] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6189] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6189] close(3) = 0 [pid 6189] close(4) = 0 [pid 6189] close(5) = -1 EBADF (Bad file descriptor) [pid 6189] close(6) = -1 EBADF (Bad file descriptor) [pid 6189] close(7) = -1 EBADF (Bad file descriptor) [pid 6189] close(8) = -1 EBADF (Bad file descriptor) [pid 6189] close(9) = -1 EBADF (Bad file descriptor) [pid 6189] close(10) = -1 EBADF (Bad file descriptor) [pid 6189] close(11) = -1 EBADF (Bad file descriptor) [pid 6189] close(12) = -1 EBADF (Bad file descriptor) [pid 6189] close(13) = -1 EBADF (Bad file descriptor) [pid 6189] close(14) = -1 EBADF (Bad file descriptor) [pid 6189] close(15) = -1 EBADF (Bad file descriptor) [pid 6189] close(16) = -1 EBADF (Bad file descriptor) [pid 6189] close(17) = -1 EBADF (Bad file descriptor) [pid 6189] close(18) = -1 EBADF (Bad file descriptor) [pid 6189] close(19) = -1 EBADF (Bad file descriptor) [pid 6189] close(20) = -1 EBADF (Bad file descriptor) [pid 6189] close(21) = -1 EBADF (Bad file descriptor) [pid 6189] close(22) = -1 EBADF (Bad file descriptor) [pid 6189] close(23) = -1 EBADF (Bad file descriptor) [pid 6189] close(24) = -1 EBADF (Bad file descriptor) [pid 6189] close(25) = -1 EBADF (Bad file descriptor) [pid 6189] close(26) = -1 EBADF (Bad file descriptor) [pid 6189] close(27) = -1 EBADF (Bad file descriptor) [pid 6189] close(28) = -1 EBADF (Bad file descriptor) [pid 6189] close(29) = -1 EBADF (Bad file descriptor) [pid 6189] exit_group(0) = ? [pid 6189] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=338, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] umount2("./335", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./335", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./335/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./335/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./335/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./335/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./335/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./335/file2") = 0 [pid 5836] umount2("./335/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./335/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./335/binderfs") = 0 [pid 5836] umount2("./335/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./335/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./335/cgroup.net") = 0 [pid 5836] umount2("./335/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./335/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./335/cgroup.cpu") = 0 [pid 5836] umount2("./335/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./335/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./335/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./335") = 0 [pid 5836] mkdir("./336", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6190 attached [pid 6190] set_robust_list(0x5555632376a0, 24) = 0 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 339 [pid 6190] chdir("./336") = 0 [pid 6190] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6190] setpgid(0, 0) = 0 [pid 6190] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6190] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6190] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6190] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6190] write(3, "1000", 4) = 4 [pid 6190] close(3) = 0 [pid 6190] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6190] write(1, "executing program\n", 18) = 18 [pid 6190] memfd_create("syzkaller", 0) = 3 [pid 6190] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6190] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6190] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6190] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6190] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6190] close(3) = 0 [pid 6190] close(4) = 0 [pid 6190] mkdir("./file2", 0777) = 0 [pid 6190] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6190] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [ 274.724021][ T6190] loop0: detected capacity change from 0 to 128 [pid 6190] chdir("./file2") = 0 [pid 6190] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6190] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6190] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6190] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6190] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6190] close(3) = 0 [pid 6190] close(4) = 0 [pid 6190] close(5) = -1 EBADF (Bad file descriptor) [pid 6190] close(6) = -1 EBADF (Bad file descriptor) [pid 6190] close(7) = -1 EBADF (Bad file descriptor) [pid 6190] close(8) = -1 EBADF (Bad file descriptor) [pid 6190] close(9) = -1 EBADF (Bad file descriptor) [pid 6190] close(10) = -1 EBADF (Bad file descriptor) [pid 6190] close(11) = -1 EBADF (Bad file descriptor) [pid 6190] close(12) = -1 EBADF (Bad file descriptor) [pid 6190] close(13) = -1 EBADF (Bad file descriptor) [pid 6190] close(14) = -1 EBADF (Bad file descriptor) [pid 6190] close(15) = -1 EBADF (Bad file descriptor) [pid 6190] close(16) = -1 EBADF (Bad file descriptor) [pid 6190] close(17) = -1 EBADF (Bad file descriptor) [pid 6190] close(18) = -1 EBADF (Bad file descriptor) [pid 6190] close(19) = -1 EBADF (Bad file descriptor) [pid 6190] close(20) = -1 EBADF (Bad file descriptor) [pid 6190] close(21) = -1 EBADF (Bad file descriptor) [pid 6190] close(22) = -1 EBADF (Bad file descriptor) [pid 6190] close(23) = -1 EBADF (Bad file descriptor) [pid 6190] close(24) = -1 EBADF (Bad file descriptor) [pid 6190] close(25) = -1 EBADF (Bad file descriptor) [pid 6190] close(26) = -1 EBADF (Bad file descriptor) [pid 6190] close(27) = -1 EBADF (Bad file descriptor) [pid 6190] close(28) = -1 EBADF (Bad file descriptor) [pid 6190] close(29) = -1 EBADF (Bad file descriptor) [pid 6190] exit_group(0) = ? [pid 6190] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=339, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./336", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./336", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./336/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./336/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./336/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./336/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./336/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./336/file2") = 0 [pid 5836] umount2("./336/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./336/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./336/binderfs") = 0 [pid 5836] umount2("./336/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./336/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./336/cgroup.net") = 0 [pid 5836] umount2("./336/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./336/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./336/cgroup.cpu") = 0 [pid 5836] umount2("./336/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./336/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./336/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./336") = 0 [pid 5836] mkdir("./337", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6191 attached [pid 6191] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 340 [pid 6191] <... set_robust_list resumed>) = 0 [pid 6191] chdir("./337") = 0 [pid 6191] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6191] setpgid(0, 0) = 0 [pid 6191] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6191] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6191] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6191] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6191] write(3, "1000", 4) = 4 [pid 6191] close(3) = 0 [pid 6191] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6191] write(1, "executing program\n", 18executing program ) = 18 [pid 6191] memfd_create("syzkaller", 0) = 3 [pid 6191] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6191] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6191] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6191] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6191] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6191] close(3) = 0 [pid 6191] close(4) = 0 [pid 6191] mkdir("./file2", 0777) = 0 [pid 6191] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6191] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6191] chdir("./file2") = 0 [pid 6191] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6191] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6191] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6191] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6191] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6191] close(3) = 0 [pid 6191] close(4) = 0 [pid 6191] close(5) = -1 EBADF (Bad file descriptor) [pid 6191] close(6) = -1 EBADF (Bad file descriptor) [pid 6191] close(7) = -1 EBADF (Bad file descriptor) [pid 6191] close(8) = -1 EBADF (Bad file descriptor) [pid 6191] close(9) = -1 EBADF (Bad file descriptor) [pid 6191] close(10) = -1 EBADF (Bad file descriptor) [pid 6191] close(11) = -1 EBADF (Bad file descriptor) [pid 6191] close(12) = -1 EBADF (Bad file descriptor) [pid 6191] close(13) = -1 EBADF (Bad file descriptor) [pid 6191] close(14) = -1 EBADF (Bad file descriptor) [pid 6191] close(15) = -1 EBADF (Bad file descriptor) [ 275.283780][ T6191] loop0: detected capacity change from 0 to 128 [pid 6191] close(16) = -1 EBADF (Bad file descriptor) [pid 6191] close(17) = -1 EBADF (Bad file descriptor) [pid 6191] close(18) = -1 EBADF (Bad file descriptor) [pid 6191] close(19) = -1 EBADF (Bad file descriptor) [pid 6191] close(20) = -1 EBADF (Bad file descriptor) [pid 6191] close(21) = -1 EBADF (Bad file descriptor) [pid 6191] close(22) = -1 EBADF (Bad file descriptor) [pid 6191] close(23) = -1 EBADF (Bad file descriptor) [pid 6191] close(24) = -1 EBADF (Bad file descriptor) [pid 6191] close(25) = -1 EBADF (Bad file descriptor) [pid 6191] close(26) = -1 EBADF (Bad file descriptor) [pid 6191] close(27) = -1 EBADF (Bad file descriptor) [pid 6191] close(28) = -1 EBADF (Bad file descriptor) [pid 6191] close(29) = -1 EBADF (Bad file descriptor) [pid 6191] exit_group(0) = ? [pid 6191] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=340, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./337", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./337", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./337/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./337/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./337/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./337/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./337/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./337/file2") = 0 [pid 5836] umount2("./337/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./337/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./337/binderfs") = 0 [pid 5836] umount2("./337/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./337/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./337/cgroup.net") = 0 [pid 5836] umount2("./337/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./337/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./337/cgroup.cpu") = 0 [pid 5836] umount2("./337/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./337/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./337/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./337") = 0 [pid 5836] mkdir("./338", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6192 attached , child_tidptr=0x555563237690) = 341 [pid 6192] set_robust_list(0x5555632376a0, 24) = 0 [pid 6192] chdir("./338") = 0 [pid 6192] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6192] setpgid(0, 0) = 0 [pid 6192] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6192] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6192] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6192] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6192] write(3, "1000", 4) = 4 [pid 6192] close(3) = 0 [pid 6192] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6192] write(1, "executing program\n", 18executing program ) = 18 [pid 6192] memfd_create("syzkaller", 0) = 3 [pid 6192] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6192] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6192] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6192] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6192] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6192] close(3) = 0 [pid 6192] close(4) = 0 [pid 6192] mkdir("./file2", 0777) = 0 [pid 6192] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6192] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [ 275.789282][ T6192] loop0: detected capacity change from 0 to 128 [pid 6192] chdir("./file2") = 0 [pid 6192] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6192] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6192] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6192] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6192] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6192] close(3) = 0 [pid 6192] close(4) = 0 [pid 6192] close(5) = -1 EBADF (Bad file descriptor) [pid 6192] close(6) = -1 EBADF (Bad file descriptor) [pid 6192] close(7) = -1 EBADF (Bad file descriptor) [pid 6192] close(8) = -1 EBADF (Bad file descriptor) [pid 6192] close(9) = -1 EBADF (Bad file descriptor) [pid 6192] close(10) = -1 EBADF (Bad file descriptor) [pid 6192] close(11) = -1 EBADF (Bad file descriptor) [pid 6192] close(12) = -1 EBADF (Bad file descriptor) [pid 6192] close(13) = -1 EBADF (Bad file descriptor) [pid 6192] close(14) = -1 EBADF (Bad file descriptor) [pid 6192] close(15) = -1 EBADF (Bad file descriptor) [pid 6192] close(16) = -1 EBADF (Bad file descriptor) [pid 6192] close(17) = -1 EBADF (Bad file descriptor) [pid 6192] close(18) = -1 EBADF (Bad file descriptor) [pid 6192] close(19) = -1 EBADF (Bad file descriptor) [pid 6192] close(20) = -1 EBADF (Bad file descriptor) [pid 6192] close(21) = -1 EBADF (Bad file descriptor) [pid 6192] close(22) = -1 EBADF (Bad file descriptor) [pid 6192] close(23) = -1 EBADF (Bad file descriptor) [pid 6192] close(24) = -1 EBADF (Bad file descriptor) [pid 6192] close(25) = -1 EBADF (Bad file descriptor) [pid 6192] close(26) = -1 EBADF (Bad file descriptor) [pid 6192] close(27) = -1 EBADF (Bad file descriptor) [pid 6192] close(28) = -1 EBADF (Bad file descriptor) [pid 6192] close(29) = -1 EBADF (Bad file descriptor) [pid 6192] exit_group(0) = ? [pid 6192] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=341, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5836] umount2("./338", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./338", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./338/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./338/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./338/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./338/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./338/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./338/file2") = 0 [pid 5836] umount2("./338/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./338/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./338/binderfs") = 0 [pid 5836] umount2("./338/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./338/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./338/cgroup.net") = 0 [pid 5836] umount2("./338/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./338/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./338/cgroup.cpu") = 0 [pid 5836] umount2("./338/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./338/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./338/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./338") = 0 [pid 5836] mkdir("./339", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6193 attached [pid 6193] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 342 [pid 6193] <... set_robust_list resumed>) = 0 [pid 6193] chdir("./339") = 0 [pid 6193] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6193] setpgid(0, 0) = 0 [pid 6193] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6193] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6193] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6193] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6193] write(3, "1000", 4) = 4 [pid 6193] close(3) = 0 [pid 6193] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6193] write(1, "executing program\n", 18executing program ) = 18 [pid 6193] memfd_create("syzkaller", 0) = 3 [pid 6193] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6193] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6193] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6193] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6193] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6193] close(3) = 0 [pid 6193] close(4) = 0 [pid 6193] mkdir("./file2", 0777) = 0 [pid 6193] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [ 276.345559][ T6193] loop0: detected capacity change from 0 to 128 [pid 6193] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6193] chdir("./file2") = 0 [pid 6193] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6193] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6193] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6193] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6193] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6193] close(3) = 0 [pid 6193] close(4) = 0 [pid 6193] close(5) = -1 EBADF (Bad file descriptor) [pid 6193] close(6) = -1 EBADF (Bad file descriptor) [pid 6193] close(7) = -1 EBADF (Bad file descriptor) [pid 6193] close(8) = -1 EBADF (Bad file descriptor) [pid 6193] close(9) = -1 EBADF (Bad file descriptor) [pid 6193] close(10) = -1 EBADF (Bad file descriptor) [pid 6193] close(11) = -1 EBADF (Bad file descriptor) [pid 6193] close(12) = -1 EBADF (Bad file descriptor) [pid 6193] close(13) = -1 EBADF (Bad file descriptor) [pid 6193] close(14) = -1 EBADF (Bad file descriptor) [pid 6193] close(15) = -1 EBADF (Bad file descriptor) [pid 6193] close(16) = -1 EBADF (Bad file descriptor) [pid 6193] close(17) = -1 EBADF (Bad file descriptor) [pid 6193] close(18) = -1 EBADF (Bad file descriptor) [pid 6193] close(19) = -1 EBADF (Bad file descriptor) [pid 6193] close(20) = -1 EBADF (Bad file descriptor) [pid 6193] close(21) = -1 EBADF (Bad file descriptor) [pid 6193] close(22) = -1 EBADF (Bad file descriptor) [pid 6193] close(23) = -1 EBADF (Bad file descriptor) [pid 6193] close(24) = -1 EBADF (Bad file descriptor) [pid 6193] close(25) = -1 EBADF (Bad file descriptor) [pid 6193] close(26) = -1 EBADF (Bad file descriptor) [pid 6193] close(27) = -1 EBADF (Bad file descriptor) [pid 6193] close(28) = -1 EBADF (Bad file descriptor) [pid 6193] close(29) = -1 EBADF (Bad file descriptor) [pid 6193] exit_group(0) = ? [pid 6193] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=342, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] umount2("./339", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./339", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./339/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./339/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./339/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./339/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./339/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./339/file2") = 0 [pid 5836] umount2("./339/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./339/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./339/binderfs") = 0 [pid 5836] umount2("./339/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./339/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./339/cgroup.net") = 0 [pid 5836] umount2("./339/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./339/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./339/cgroup.cpu") = 0 [pid 5836] umount2("./339/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./339/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./339/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./339") = 0 [pid 5836] mkdir("./340", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6194 attached , child_tidptr=0x555563237690) = 343 [pid 6194] set_robust_list(0x5555632376a0, 24) = 0 [pid 6194] chdir("./340") = 0 [pid 6194] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6194] setpgid(0, 0) = 0 [pid 6194] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6194] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6194] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6194] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6194] write(3, "1000", 4) = 4 [pid 6194] close(3) = 0 [pid 6194] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6194] write(1, "executing program\n", 18executing program ) = 18 [pid 6194] memfd_create("syzkaller", 0) = 3 [pid 6194] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6194] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6194] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6194] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6194] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6194] close(3) = 0 [pid 6194] close(4) = 0 [pid 6194] mkdir("./file2", 0777) = 0 [pid 6194] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6194] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6194] chdir("./file2") = 0 [pid 6194] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6194] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6194] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6194] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6194] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6194] close(3) = 0 [pid 6194] close(4) = 0 [ 276.923270][ T6194] loop0: detected capacity change from 0 to 128 [pid 6194] close(5) = -1 EBADF (Bad file descriptor) [pid 6194] close(6) = -1 EBADF (Bad file descriptor) [pid 6194] close(7) = -1 EBADF (Bad file descriptor) [pid 6194] close(8) = -1 EBADF (Bad file descriptor) [pid 6194] close(9) = -1 EBADF (Bad file descriptor) [pid 6194] close(10) = -1 EBADF (Bad file descriptor) [pid 6194] close(11) = -1 EBADF (Bad file descriptor) [pid 6194] close(12) = -1 EBADF (Bad file descriptor) [pid 6194] close(13) = -1 EBADF (Bad file descriptor) [pid 6194] close(14) = -1 EBADF (Bad file descriptor) [pid 6194] close(15) = -1 EBADF (Bad file descriptor) [pid 6194] close(16) = -1 EBADF (Bad file descriptor) [pid 6194] close(17) = -1 EBADF (Bad file descriptor) [pid 6194] close(18) = -1 EBADF (Bad file descriptor) [pid 6194] close(19) = -1 EBADF (Bad file descriptor) [pid 6194] close(20) = -1 EBADF (Bad file descriptor) [pid 6194] close(21) = -1 EBADF (Bad file descriptor) [pid 6194] close(22) = -1 EBADF (Bad file descriptor) [pid 6194] close(23) = -1 EBADF (Bad file descriptor) [pid 6194] close(24) = -1 EBADF (Bad file descriptor) [pid 6194] close(25) = -1 EBADF (Bad file descriptor) [pid 6194] close(26) = -1 EBADF (Bad file descriptor) [pid 6194] close(27) = -1 EBADF (Bad file descriptor) [pid 6194] close(28) = -1 EBADF (Bad file descriptor) [pid 6194] close(29) = -1 EBADF (Bad file descriptor) [pid 6194] exit_group(0) = ? [pid 6194] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=343, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] umount2("./340", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./340", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./340/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./340/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./340/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./340/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./340/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./340/file2") = 0 [pid 5836] umount2("./340/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./340/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./340/binderfs") = 0 [pid 5836] umount2("./340/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./340/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./340/cgroup.net") = 0 [pid 5836] umount2("./340/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./340/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./340/cgroup.cpu") = 0 [pid 5836] umount2("./340/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./340/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./340/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./340") = 0 [pid 5836] mkdir("./341", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6195 attached [pid 6195] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 344 [pid 6195] <... set_robust_list resumed>) = 0 [pid 6195] chdir("./341") = 0 [pid 6195] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6195] setpgid(0, 0) = 0 [pid 6195] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6195] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6195] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6195] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6195] write(3, "1000", 4) = 4 [pid 6195] close(3) = 0 [pid 6195] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6195] write(1, "executing program\n", 18) = 18 [pid 6195] memfd_create("syzkaller", 0) = 3 [pid 6195] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6195] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6195] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6195] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6195] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6195] close(3) = 0 [pid 6195] close(4) = 0 [pid 6195] mkdir("./file2", 0777) = 0 [pid 6195] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6195] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6195] chdir("./file2") = 0 [pid 6195] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6195] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6195] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6195] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6195] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6195] close(3) = 0 [pid 6195] close(4) = 0 [pid 6195] close(5) = -1 EBADF (Bad file descriptor) [pid 6195] close(6) = -1 EBADF (Bad file descriptor) [pid 6195] close(7) = -1 EBADF (Bad file descriptor) [pid 6195] close(8) = -1 EBADF (Bad file descriptor) [pid 6195] close(9) = -1 EBADF (Bad file descriptor) [pid 6195] close(10) = -1 EBADF (Bad file descriptor) [pid 6195] close(11) = -1 EBADF (Bad file descriptor) [pid 6195] close(12) = -1 EBADF (Bad file descriptor) [pid 6195] close(13) = -1 EBADF (Bad file descriptor) [pid 6195] close(14) = -1 EBADF (Bad file descriptor) [pid 6195] close(15) = -1 EBADF (Bad file descriptor) [ 277.514706][ T6195] loop0: detected capacity change from 0 to 128 [pid 6195] close(16) = -1 EBADF (Bad file descriptor) [pid 6195] close(17) = -1 EBADF (Bad file descriptor) [pid 6195] close(18) = -1 EBADF (Bad file descriptor) [pid 6195] close(19) = -1 EBADF (Bad file descriptor) [pid 6195] close(20) = -1 EBADF (Bad file descriptor) [pid 6195] close(21) = -1 EBADF (Bad file descriptor) [pid 6195] close(22) = -1 EBADF (Bad file descriptor) [pid 6195] close(23) = -1 EBADF (Bad file descriptor) [pid 6195] close(24) = -1 EBADF (Bad file descriptor) [pid 6195] close(25) = -1 EBADF (Bad file descriptor) [pid 6195] close(26) = -1 EBADF (Bad file descriptor) [pid 6195] close(27) = -1 EBADF (Bad file descriptor) [pid 6195] close(28) = -1 EBADF (Bad file descriptor) [pid 6195] close(29) = -1 EBADF (Bad file descriptor) [pid 6195] exit_group(0) = ? [pid 6195] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=344, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./341", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./341", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./341/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./341/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./341/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./341/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./341/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./341/file2") = 0 [pid 5836] umount2("./341/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./341/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./341/binderfs") = 0 [pid 5836] umount2("./341/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./341/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./341/cgroup.net") = 0 [pid 5836] umount2("./341/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./341/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./341/cgroup.cpu") = 0 [pid 5836] umount2("./341/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./341/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./341/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./341") = 0 [pid 5836] mkdir("./342", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6196 attached , child_tidptr=0x555563237690) = 345 [pid 6196] set_robust_list(0x5555632376a0, 24) = 0 [pid 6196] chdir("./342") = 0 [pid 6196] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6196] setpgid(0, 0) = 0 [pid 6196] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6196] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6196] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6196] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6196] write(3, "1000", 4) = 4 [pid 6196] close(3) = 0 [pid 6196] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6196] write(1, "executing program\n", 18) = 18 [pid 6196] memfd_create("syzkaller", 0) = 3 [pid 6196] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6196] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6196] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6196] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6196] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6196] close(3) = 0 [pid 6196] close(4) = 0 [pid 6196] mkdir("./file2", 0777) = 0 [pid 6196] mount("/dev/loop0", "./file2", "vfat", MS_NODEV|MS_NOEXEC|MS_REC|0x200, "") = 0 [pid 6196] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 6196] chdir("./file2") = 0 [pid 6196] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6196] prlimit64(0, RLIMIT_RTPRIO, NULL, NULL) = 0 [pid 6196] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 6196] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDWR) = -1 EACCES (Permission denied) [pid 6196] openat(AT_FDCWD, "/proc/self/net/ipv6_route", O_RDONLY) = 4 [pid 6196] close(3) = 0 [pid 6196] close(4) = 0 [ 277.661123][ T6196] loop0: detected capacity change from 0 to 128 [pid 6196] close(5) = -1 EBADF (Bad file descriptor) [pid 6196] close(6) = -1 EBADF (Bad file descriptor) [pid 6196] close(7) = -1 EBADF (Bad file descriptor) [pid 6196] close(8) = -1 EBADF (Bad file descriptor) [pid 6196] close(9) = -1 EBADF (Bad file descriptor) [pid 6196] close(10) = -1 EBADF (Bad file descriptor) [pid 6196] close(11) = -1 EBADF (Bad file descriptor) [pid 6196] close(12) = -1 EBADF (Bad file descriptor) [pid 6196] close(13) = -1 EBADF (Bad file descriptor) [pid 6196] close(14) = -1 EBADF (Bad file descriptor) [pid 6196] close(15) = -1 EBADF (Bad file descriptor) [pid 6196] close(16) = -1 EBADF (Bad file descriptor) [pid 6196] close(17) = -1 EBADF (Bad file descriptor) [pid 6196] close(18) = -1 EBADF (Bad file descriptor) [pid 6196] close(19) = -1 EBADF (Bad file descriptor) [pid 6196] close(20) = -1 EBADF (Bad file descriptor) [pid 6196] close(21) = -1 EBADF (Bad file descriptor) [pid 6196] close(22) = -1 EBADF (Bad file descriptor) [pid 6196] close(23) = -1 EBADF (Bad file descriptor) [pid 6196] close(24) = -1 EBADF (Bad file descriptor) [pid 6196] close(25) = -1 EBADF (Bad file descriptor) [pid 6196] close(26) = -1 EBADF (Bad file descriptor) [pid 6196] close(27) = -1 EBADF (Bad file descriptor) [pid 6196] close(28) = -1 EBADF (Bad file descriptor) [pid 6196] close(29) = -1 EBADF (Bad file descriptor) [pid 6196] exit_group(0) = ? [pid 6196] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=345, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./342", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./342", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555563238850 /* 7 entries */, 32768) = 208 [pid 5836] umount2("./342/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5836] umount2("./342/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./342/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./342/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./342/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555563240890 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555563240890 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./342/file2") = 0 [pid 5836] umount2("./342/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./342/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./342/binderfs") = 0 [pid 5836] umount2("./342/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./342/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./342/cgroup.net") = 0 [pid 5836] umount2("./342/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./342/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./342/cgroup.cpu") = 0 [pid 5836] umount2("./342/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./342/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./342/cgroup") = 0 [pid 5836] getdents64(3, 0x555563238850 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./342") = 0 [pid 5836] mkdir("./343", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6197 attached [pid 6197] set_robust_list(0x5555632376a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555563237690) = 346 [pid 6197] <... set_robust_list resumed>) = 0 [pid 6197] chdir("./343") = 0 [pid 6197] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6197] setpgid(0, 0) = 0 [pid 6197] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6197] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6197] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6197] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6197] write(3, "1000", 4) = 4 [pid 6197] close(3) = 0 [pid 6197] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6197] write(1, "executing program\n", 18) = 18 [pid 6197] memfd_create("syzkaller", 0) = 3 [pid 6197] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6a3e00000 [pid 6197] write(3, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x55\x08\x00\x00\x00\x00\x00\x00\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536 [pid 6197] munmap(0x7fa6a3e00000, 138412032) = 0 [pid 6197] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6197] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6197] close(3) = 0 [pid 6197] close(4) = 0 [pid 6197] mkdir("./file2", 0777) = 0 [ 278.218505][ T6197] loop0: detected capacity change from 0 to 128 [ 278.232617][ T4891] list_add double add: new=ffff8880264bea70, prev=ffff8880264bea70, next=ffff88801eb75960. [ 278.243525][ T4891] ------------[ cut here ]------------ [ 278.249023][ T4891] kernel BUG at lib/list_debug.c:37! [ 278.254370][ T4891] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 278.261306][ T4891] CPU: 1 UID: 0 PID: 4891 Comm: kworker/u8:8 Not tainted 6.14.0-rc3-next-20250218-syzkaller #0 [ 278.271615][ T4891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 278.281701][ T4891] Workqueue: loop0 loop_workfn [ 278.286516][ T4891] RIP: 0010:__list_add_valid_or_report+0xa4/0x130 [ 278.292932][ T4891] Code: f7 74 11 b0 01 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 48 c7 c7 a0 59 81 8c 4c 89 fe 4c 89 e2 4c 89 f1 e8 0d e8 27 fc 90 <0f> 0b 48 c7 c7 a0 57 81 8c e8 fe e7 27 fc 90 0f 0b 48 c7 c7 40 58 [ 278.312521][ T4891] RSP: 0018:ffffc9000e017628 EFLAGS: 00010046 [ 278.318615][ T4891] RAX: 0000000000000058 RBX: 1ffff11004c97d4e RCX: 1ce98bb855a13700 [ 278.326593][ T4891] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000 [ 278.334557][ T4891] RBP: 1ffff11003d6eb2d R08: ffffffff81a170dc R09: 1ffff92001c02e60 [ 278.342521][ T4891] R10: dffffc0000000000 R11: fffff52001c02e61 R12: ffff8880264bea70 [ 278.350478][ T4891] R13: dffffc0000000000 R14: ffff88801eb75960 R15: ffff8880264bea70 [ 278.358446][ T4891] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 278.367366][ T4891] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 278.373938][ T4891] CR2: 0000400000003240 CR3: 000000006dd08000 CR4: 00000000003526f0 [ 278.381900][ T4891] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 278.389892][ T4891] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 278.397850][ T4891] Call Trace: [ 278.401117][ T4891] [ 278.404037][ T4891] ? __die_body+0x5f/0xb0 [ 278.408370][ T4891] ? die+0x9e/0xc0 [ 278.412083][ T4891] ? do_trap+0x15a/0x3a0 [ 278.416313][ T4891] ? __list_add_valid_or_report+0xa4/0x130 [ 278.422115][ T4891] ? do_error_trap+0x1dc/0x2c0 [ 278.426870][ T4891] ? __list_add_valid_or_report+0xa4/0x130 [ 278.432672][ T4891] ? __pfx_do_error_trap+0x10/0x10 [ 278.437786][ T4891] ? report_bug+0x3cd/0x500 [ 278.442343][ T4891] ? __list_add_valid_or_report+0xa4/0x130 [ 278.448149][ T4891] ? handle_invalid_op+0x34/0x40 [ 278.453086][ T4891] ? __list_add_valid_or_report+0xa4/0x130 [ 278.458892][ T4891] ? exc_invalid_op+0x38/0x50 [ 278.463605][ T4891] ? asm_exc_invalid_op+0x1a/0x20 [ 278.468623][ T4891] ? __wake_up_klogd+0xcc/0x110 [ 278.473464][ T4891] ? __list_add_valid_or_report+0xa4/0x130 [ 278.479262][ T4891] ? __list_add_valid_or_report+0xa3/0x130 [ 278.485064][ T4891] loop_process_work+0x1f96/0x21c0 [ 278.490180][ T4891] ? __pfx_validate_chain+0x10/0x10 [ 278.495370][ T4891] ? mark_lock+0x9a/0x360 [ 278.499716][ T4891] ? __lock_acquire+0x1397/0x2100 [ 278.504740][ T4891] ? __pfx_loop_process_work+0x10/0x10 [ 278.510191][ T4891] ? register_lock_class+0x102/0x980 [ 278.515471][ T4891] ? __pfx_register_lock_class+0x10/0x10 [ 278.521102][ T4891] ? mark_lock+0x9a/0x360 [ 278.525417][ T4891] ? debug_object_deactivate+0x2d5/0x390 [ 278.531039][ T4891] ? __lock_acquire+0x1397/0x2100 [ 278.536061][ T4891] ? do_raw_spin_unlock+0x13c/0x8b0 [ 278.541274][ T4891] ? __pfx_lock_acquire+0x10/0x10 [ 278.546292][ T4891] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 278.552270][ T4891] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 278.558598][ T4891] ? process_scheduled_works+0x9c6/0x18e0 [ 278.564830][ T4891] process_scheduled_works+0xabe/0x18e0 [ 278.570404][ T4891] ? __pfx_process_scheduled_works+0x10/0x10 [ 278.576386][ T4891] ? assign_work+0x364/0x3d0 [ 278.580983][ T4891] worker_thread+0x870/0xd30 [ 278.585573][ T4891] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 278.591503][ T4891] ? __kthread_parkme+0x169/0x1d0 [ 278.596605][ T4891] ? __pfx_worker_thread+0x10/0x10 [ 278.601706][ T4891] kthread+0x7a9/0x920 [ 278.605778][ T4891] ? __pfx_kthread+0x10/0x10 [ 278.610366][ T4891] ? __pfx_worker_thread+0x10/0x10 [ 278.615473][ T4891] ? __pfx_kthread+0x10/0x10 [ 278.620053][ T4891] ? __pfx_kthread+0x10/0x10 [ 278.624632][ T4891] ? __pfx_kthread+0x10/0x10 [ 278.629207][ T4891] ? _raw_spin_unlock_irq+0x23/0x50 [ 278.634494][ T4891] ? lockdep_hardirqs_on+0x99/0x150 [ 278.639687][ T4891] ? __pfx_kthread+0x10/0x10 [ 278.644267][ T4891] ret_from_fork+0x4b/0x80 [ 278.648681][ T4891] ? __pfx_kthread+0x10/0x10 [ 278.653259][ T4891] ret_from_fork_asm+0x1a/0x30 [ 278.658025][ T4891] [ 278.661033][ T4891] Modules linked in: [ 278.664929][ T4891] ---[ end trace 0000000000000000 ]--- [ 278.670383][ T4891] RIP: 0010:__list_add_valid_or_report+0xa4/0x130 [ 278.676797][ T4891] Code: f7 74 11 b0 01 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 48 c7 c7 a0 59 81 8c 4c 89 fe 4c 89 e2 4c 89 f1 e8 0d e8 27 fc 90 <0f> 0b 48 c7 c7 a0 57 81 8c e8 fe e7 27 fc 90 0f 0b 48 c7 c7 40 58 [ 278.696403][ T4891] RSP: 0018:ffffc9000e017628 EFLAGS: 00010046 [ 278.702459][ T4891] RAX: 0000000000000058 RBX: 1ffff11004c97d4e RCX: 1ce98bb855a13700 [ 278.710415][ T4891] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000 [ 278.718372][ T4891] RBP: 1ffff11003d6eb2d R08: ffffffff81a170dc R09: 1ffff92001c02e60 [ 278.726337][ T4891] R10: dffffc0000000000 R11: fffff52001c02e61 R12: ffff8880264bea70 [ 278.734309][ T4891] R13: dffffc0000000000 R14: ffff88801eb75960 R15: ffff8880264bea70 [ 278.742273][ T4891] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 278.751191][ T4891] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 278.757764][ T4891] CR2: 0000400000003240 CR3: 000000006dd08000 CR4: 00000000003526f0 [ 278.765729][ T4891] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 278.773692][ T4891] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 278.781674][ T4891] Kernel panic - not syncing: Fatal exception [ 279.914675][ T4891] Shutting down cpus with NMI [ 279.919824][ T4891] Kernel Offset: disabled [ 279.924150][ T4891] Rebooting in 86400 seconds..