./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1412734238 <...> resumed>) = 0 [pid 5826] getdents64(3, [pid 6851] munmap(0x7f957a000000, 138412032 [pid 6850] close(3 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 6850] <... close resumed>) = 0 [pid 6852] <... ioctl resumed>) = 0 [pid 6851] <... munmap resumed>) = 0 [pid 6850] close(4 [pid 6853] <... memfd_create resumed>) = 3 [pid 6851] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6850] <... close resumed>) = 0 [ 190.405033][ T6850] loop2: detected capacity change from 0 to 128 [ 190.410899][ T6852] loop1: detected capacity change from 0 to 128 [pid 6853] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6852] close(3 [pid 6851] <... openat resumed>) = 4 [pid 6850] mkdir("./file0", 0777 [pid 5826] close(3 [pid 6851] ioctl(4, LOOP_SET_FD, 3 [pid 5826] <... close resumed>) = 0 [pid 6853] <... mmap resumed>) = 0x7f957a000000 [pid 6852] <... close resumed>) = 0 [pid 5826] rmdir("./203" [pid 6853] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6852] close(4 [pid 5826] <... rmdir resumed>) = 0 [pid 6852] <... close resumed>) = 0 [pid 5826] mkdir("./204", 0777 [pid 6852] mkdir("./file0", 0777 [pid 6850] <... mkdir resumed>) = 0 [pid 5826] <... mkdir resumed>) = 0 [pid 6853] <... write resumed>) = 65536 [pid 6852] <... mkdir resumed>) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5826] ioctl(3, LOOP_CLR_FD) = 0 [pid 6850] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6853] munmap(0x7f957a000000, 138412032 [pid 6852] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6851] <... ioctl resumed>) = 0 [pid 5826] close(3 [pid 6851] close(3) = 0 [pid 5826] <... close resumed>) = 0 [pid 6853] <... munmap resumed>) = 0 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6853] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6853] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 6854 attached [pid 6851] close(4 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 6854 [pid 6851] <... close resumed>) = 0 [pid 6851] mkdir("./file0", 0777 [pid 6854] set_robust_list(0x55557eba4660, 24 [pid 6851] <... mkdir resumed>) = 0 [pid 6854] <... set_robust_list resumed>) = 0 [ 190.466853][ T6851] loop0: detected capacity change from 0 to 128 [ 190.499220][ T6850] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 190.504332][ T6853] loop4: detected capacity change from 0 to 128 [pid 6851] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6854] chdir("./204" [pid 6850] <... mount resumed>) = 0 [pid 6850] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6854] <... chdir resumed>) = 0 [pid 6850] chdir("./file0" [pid 6853] <... ioctl resumed>) = 0 [pid 6853] close(3) = 0 [pid 6853] close(4 [pid 6854] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6850] <... chdir resumed>) = 0 [pid 6854] <... prctl resumed>) = 0 [pid 6853] <... close resumed>) = 0 [pid 6850] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6853] mkdir("./file0", 0777 [pid 6854] setpgid(0, 0 [pid 6853] <... mkdir resumed>) = 0 [pid 6850] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6850] openat(AT_FDCWD, ".", O_RDONLY [pid 6854] <... setpgid resumed>) = 0 [pid 6854] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6853] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6852] <... mount resumed>) = 0 [pid 6850] <... openat resumed>) = 4 [ 190.528659][ T6852] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 190.547433][ T6851] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [pid 6852] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6854] <... openat resumed>) = 3 [pid 6852] <... openat resumed>) = 3 [pid 6850] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6854] write(3, "1000", 4 [pid 6852] chdir("./file0") = 0 [pid 6854] <... write resumed>) = 4 [pid 6852] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6850] <... renameat2 resumed>) = 0 [pid 6854] close(3) = 0 [pid 6850] sync(executing program [pid 6854] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6852] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6852] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 6852] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6854] write(1, "executing program\n", 18) = 18 [pid 6852] <... renameat2 resumed>) = 0 [pid 6852] sync( [pid 6854] memfd_create("syzkaller", 0) = 3 [pid 6854] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 6854] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 6854] munmap(0x7f957a000000, 138412032 [pid 6851] <... mount resumed>) = 0 [pid 6854] <... munmap resumed>) = 0 [pid 6851] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6853] <... mount resumed>) = 0 [pid 6854] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6851] <... openat resumed>) = 3 [pid 6850] <... sync resumed>) = 0 [pid 6852] <... sync resumed>) = 0 [pid 6851] chdir("./file0" [pid 6854] <... openat resumed>) = 4 [ 190.579198][ T6853] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [pid 6853] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6852] exit_group(0 [pid 6851] <... chdir resumed>) = 0 [pid 6850] exit_group(0 [pid 6851] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6854] ioctl(4, LOOP_SET_FD, 3 [pid 6850] <... exit_group resumed>) = ? [pid 6853] <... openat resumed>) = 3 [pid 6852] <... exit_group resumed>) = ? [pid 6851] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6853] chdir("./file0" [pid 6850] +++ exited with 0 +++ [pid 6853] <... chdir resumed>) = 0 [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6850, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6853] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5825] restart_syscall(<... resuming interrupted clone ...> [pid 6853] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5825] <... restart_syscall resumed>) = 0 [pid 5825] umount2("./202", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./202", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5825] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 6853] openat(AT_FDCWD, ".", O_RDONLY [pid 5825] umount2("./202/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6853] <... openat resumed>) = 4 [pid 6853] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6851] openat(AT_FDCWD, ".", O_RDONLY [pid 6852] +++ exited with 0 +++ [pid 6851] <... openat resumed>) = 4 [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6852, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5825] <... umount2 resumed>) = 0 [pid 6851] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5824] umount2("./198", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./198", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6854] <... ioctl resumed>) = 0 [pid 6853] <... renameat2 resumed>) = 0 [pid 6851] <... renameat2 resumed>) = 0 [pid 5825] umount2("./202/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6853] sync( [pid 6851] sync( [pid 5825] newfstatat(AT_FDCWD, "./202/file0", [pid 5824] getdents64(3, [pid 6854] close(3 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] umount2("./202/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6854] <... close resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 6854] close(4 [pid 5825] openat(AT_FDCWD, "./202/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] umount2("./198/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6854] <... close resumed>) = 0 [pid 5825] <... openat resumed>) = 4 [pid 6854] mkdir("./file0", 0777 [pid 5825] newfstatat(4, "", [pid 6854] <... mkdir resumed>) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6854] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [ 190.630460][ T6854] loop3: detected capacity change from 0 to 128 [pid 5825] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] <... umount2 resumed>) = 0 [pid 5824] umount2("./198/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] newfstatat(AT_FDCWD, "./198/file0", [pid 5825] close(4 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] umount2("./198/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./198/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5825] <... close resumed>) = 0 [pid 5825] rmdir("./202/file0" [pid 5824] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] <... rmdir resumed>) = 0 [pid 5824] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] close(4) = 0 [pid 5824] rmdir("./198/file0") = 0 [pid 5824] umount2("./198/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./198/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./198/binderfs" [pid 5825] umount2("./202/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... unlink resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] getdents64(3, [pid 5825] newfstatat(AT_FDCWD, "./202/binderfs", [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] close(3) = 0 [pid 5824] rmdir("./198" [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 5825] unlink("./202/binderfs" [pid 5824] mkdir("./199", 0777 [pid 5825] <... unlink resumed>) = 0 [pid 5825] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] <... mkdir resumed>) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5824] ioctl(3, LOOP_CLR_FD) = 0 [pid 5824] close(3 [pid 5825] close(3 [pid 5824] <... close resumed>) = 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5825] <... close resumed>) = 0 ./strace-static-x86_64: Process 6855 attached [pid 6853] <... sync resumed>) = 0 [pid 6851] <... sync resumed>) = 0 [pid 5825] rmdir("./202" [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 6855 [pid 6855] set_robust_list(0x55557eba4660, 24 [pid 6854] <... mount resumed>) = 0 [pid 6853] exit_group(0 [pid 6851] exit_group(0 [pid 5825] <... rmdir resumed>) = 0 [pid 6855] <... set_robust_list resumed>) = 0 [pid 6853] <... exit_group resumed>) = ? [pid 6851] <... exit_group resumed>) = ? [pid 5825] mkdir("./203", 0777 [pid 6853] +++ exited with 0 +++ [pid 5825] <... mkdir resumed>) = 0 [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6853, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5827] restart_syscall(<... resuming interrupted clone ...> [pid 6855] chdir("./199" [pid 6854] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6851] +++ exited with 0 +++ [pid 6855] <... chdir resumed>) = 0 [pid 6854] <... openat resumed>) = 3 [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6851, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6855] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6854] chdir("./file0" [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 6855] <... prctl resumed>) = 0 [pid 6854] <... chdir resumed>) = 0 [pid 5823] <... restart_syscall resumed>) = 0 [pid 6854] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5827] <... restart_syscall resumed>) = 0 [pid 5823] umount2("./203", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] umount2("./198", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./203", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] openat(AT_FDCWD, "./198", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5823] <... openat resumed>) = 3 [pid 5827] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] newfstatat(3, "", [pid 5827] getdents64(3, [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] getdents64(3, [pid 5825] <... openat resumed>) = 3 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5827] umount2("./198/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6855] setpgid(0, 0 [ 190.710819][ T6854] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [pid 5823] umount2("./203/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6855] <... setpgid resumed>) = 0 [pid 6854] openat(AT_FDCWD, ".", O_RDONLY [pid 5825] ioctl(3, LOOP_CLR_FD [pid 6855] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5825] <... ioctl resumed>) = 0 [pid 6855] <... openat resumed>) = 3 [pid 5825] close(3 [pid 6854] <... openat resumed>) = 4 [pid 6854] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6855] write(3, "1000", 4 [pid 6854] <... renameat2 resumed>) = 0 [pid 5827] <... umount2 resumed>) = 0 [pid 5823] <... umount2 resumed>) = 0 [pid 6855] <... write resumed>) = 4 [pid 5825] <... close resumed>) = 0 [pid 5823] umount2("./203/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6855] close(3 [pid 6854] sync( [pid 5827] umount2("./198/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6855] <... close resumed>) = 0 ./strace-static-x86_64: Process 6856 attached [pid 6855] symlink("/dev/binderfs", "./binderfs" [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 6856 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] newfstatat(AT_FDCWD, "./198/file0", [pid 5823] newfstatat(AT_FDCWD, "./203/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] umount2("./203/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6856] set_robust_list(0x55557eba4660, 24 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] umount2("./198/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] openat(AT_FDCWD, "./203/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] openat(AT_FDCWD, "./198/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5823] <... openat resumed>) = 4 [pid 5827] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] newfstatat(4, "", [pid 5827] getdents64(4, [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6856] <... set_robust_list resumed>) = 0 [pid 5823] getdents64(4, [pid 6856] chdir("./203") = 0 [pid 6856] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6856] setpgid(0, 0) = 0 [pid 6856] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6856] write(3, "1000", 4) = 4 [pid 6856] close(3) = 0 [pid 6856] symlink("/dev/binderfs", "./binderfs" [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] close(4) = 0 [pid 5823] rmdir("./203/file0" [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] <... rmdir resumed>) = 0 [pid 6856] <... symlink resumed>) = 0 [pid 6855] <... symlink resumed>) = 0 [pid 5827] getdents64(4, [pid 6854] <... sync resumed>) = 0 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 executing program [pid 6856] write(1, "executing program\n", 18 [pid 5823] umount2("./203/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6856] <... write resumed>) = 18 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6856] memfd_create("syzkaller", 0 [pid 5823] newfstatat(AT_FDCWD, "./203/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6856] <... memfd_create resumed>) = 3 [pid 5823] unlink("./203/binderfs" [pid 6856] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5827] close(4executing program [pid 6855] write(1, "executing program\n", 18 [pid 6854] exit_group(0 [pid 5827] <... close resumed>) = 0 [pid 5823] <... unlink resumed>) = 0 [pid 6855] <... write resumed>) = 18 [pid 6854] <... exit_group resumed>) = ? [pid 5827] rmdir("./198/file0" [pid 6856] <... mmap resumed>) = 0x7f957a000000 [pid 6855] memfd_create("syzkaller", 0 [pid 6854] +++ exited with 0 +++ [pid 5827] <... rmdir resumed>) = 0 [pid 5823] getdents64(3, [pid 6856] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6855] <... memfd_create resumed>) = 3 [pid 5827] umount2("./198/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6854, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5823] close(3 [pid 6856] <... write resumed>) = 65536 [pid 6855] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5827] newfstatat(AT_FDCWD, "./198/binderfs", [pid 5826] restart_syscall(<... resuming interrupted clone ...> [pid 5823] <... close resumed>) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] <... restart_syscall resumed>) = 0 [pid 5823] rmdir("./203" [pid 6856] munmap(0x7f957a000000, 138412032 [pid 6855] <... mmap resumed>) = 0x7f957a000000 [pid 5827] unlink("./198/binderfs" [pid 5823] <... rmdir resumed>) = 0 [pid 6856] <... munmap resumed>) = 0 [pid 5827] <... unlink resumed>) = 0 [pid 5823] mkdir("./204", 0777 [pid 6856] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6855] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5827] getdents64(3, [pid 5826] umount2("./204", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... mkdir resumed>) = 0 [pid 6856] <... openat resumed>) = 4 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6856] ioctl(4, LOOP_SET_FD, 3 [pid 5826] openat(AT_FDCWD, "./204", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6855] <... write resumed>) = 65536 [pid 5827] close(3 [pid 5826] <... openat resumed>) = 3 [pid 6855] munmap(0x7f957a000000, 138412032) = 0 [pid 5827] <... close resumed>) = 0 [pid 5826] newfstatat(3, "", [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... openat resumed>) = 3 [pid 5826] getdents64(3, [pid 5823] ioctl(3, LOOP_CLR_FD [pid 6855] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5827] rmdir("./198" [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] <... ioctl resumed>) = 0 [pid 6855] <... openat resumed>) = 4 [pid 5827] <... rmdir resumed>) = 0 [pid 5826] umount2("./204/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] close(3 [pid 6855] ioctl(4, LOOP_SET_FD, 3 [pid 5827] mkdir("./199", 0777 [pid 5823] <... close resumed>) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5827] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 6857 attached [pid 6856] <... ioctl resumed>) = 0 [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 6857 [pid 6857] set_robust_list(0x55557eba4660, 24) = 0 [pid 5826] <... umount2 resumed>) = 0 [pid 6857] chdir("./204" [pid 6856] close(3 [pid 5827] <... openat resumed>) = 3 [pid 5826] umount2("./204/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] ioctl(3, LOOP_CLR_FD [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6856] <... close resumed>) = 0 [pid 5827] <... ioctl resumed>) = 0 [pid 5826] newfstatat(AT_FDCWD, "./204/file0", [pid 6856] close(4 [pid 6855] <... ioctl resumed>) = 0 [pid 5827] close(3 [pid 6857] <... chdir resumed>) = 0 [pid 6856] <... close resumed>) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6857] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6855] close(3 [pid 5826] umount2("./204/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6857] <... prctl resumed>) = 0 [pid 6856] mkdir("./file0", 0777 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6857] setpgid(0, 0 [pid 6856] <... mkdir resumed>) = 0 [pid 6855] <... close resumed>) = 0 [pid 5827] <... close resumed>) = 0 [pid 5826] openat(AT_FDCWD, "./204/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6857] <... setpgid resumed>) = 0 [pid 6855] close(4 [pid 6857] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6856] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5826] <... openat resumed>) = 4 [pid 6857] <... openat resumed>) = 3 [pid 6855] <... close resumed>) = 0 [pid 6857] write(3, "1000", 4 [pid 6855] mkdir("./file0", 0777 [pid 5826] newfstatat(4, "", [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6857] <... write resumed>) = 4 [pid 6855] <... mkdir resumed>) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6857] close(3 [pid 5826] getdents64(4, [pid 6857] <... close resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 6857] symlink("/dev/binderfs", "./binderfs" [pid 5826] getdents64(4, [pid 6857] <... symlink resumed>) = 0 executing program [pid 6857] write(1, "executing program\n", 18) = 18 [pid 6857] memfd_create("syzkaller", 0) = 3 [pid 6857] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [ 190.855842][ T6856] loop2: detected capacity change from 0 to 128 [ 190.877458][ T6855] loop1: detected capacity change from 0 to 128 [pid 6857] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 ./strace-static-x86_64: Process 6858 attached [pid 6855] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 6858 [pid 6858] set_robust_list(0x55557eba4660, 24 [pid 5826] close(4 [pid 6857] munmap(0x7f957a000000, 138412032 [pid 6858] <... set_robust_list resumed>) = 0 [pid 6857] <... munmap resumed>) = 0 [pid 5826] <... close resumed>) = 0 [pid 6858] chdir("./199") = 0 [pid 6858] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6858] setpgid(0, 0) = 0 [pid 6858] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6857] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6858] write(3, "1000", 4 [pid 6857] ioctl(4, LOOP_SET_FD, 3 [pid 6858] <... write resumed>) = 4 [pid 5826] rmdir("./204/file0"executing program [pid 6858] close(3) = 0 [pid 6858] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5826] <... rmdir resumed>) = 0 [pid 6858] write(1, "executing program\n", 18 [pid 5826] umount2("./204/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6858] <... write resumed>) = 18 [pid 6858] memfd_create("syzkaller", 0) = 3 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6858] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 6858] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 6858] munmap(0x7f957a000000, 138412032) = 0 [pid 5826] newfstatat(AT_FDCWD, "./204/binderfs", [pid 6856] <... mount resumed>) = 0 [pid 6856] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6856] chdir("./file0") = 0 [pid 6856] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6856] openat(AT_FDCWD, ".", O_RDONLY [pid 6858] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6856] <... openat resumed>) = 4 [pid 6858] <... openat resumed>) = 4 [ 190.913723][ T6856] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 190.935886][ T6855] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 190.942087][ T6857] loop0: detected capacity change from 0 to 128 [pid 6856] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6858] ioctl(4, LOOP_SET_FD, 3 [pid 6856] <... renameat2 resumed>) = 0 [pid 6856] sync( [pid 5826] unlink("./204/binderfs") = 0 [pid 5826] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] close(3) = 0 [pid 5826] rmdir("./204" [pid 6857] <... ioctl resumed>) = 0 [pid 5826] <... rmdir resumed>) = 0 [pid 6857] close(3) = 0 [pid 6857] close(4 [pid 5826] mkdir("./205", 0777 [pid 6857] <... close resumed>) = 0 [pid 5826] <... mkdir resumed>) = 0 [pid 6857] mkdir("./file0", 0777) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6857] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6855] <... mount resumed>) = 0 [pid 5826] <... openat resumed>) = 3 [pid 6855] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5826] ioctl(3, LOOP_CLR_FD [pid 6858] <... ioctl resumed>) = 0 [pid 5826] <... ioctl resumed>) = 0 [pid 6855] <... openat resumed>) = 3 [pid 5826] close(3 [pid 6855] chdir("./file0" [pid 6858] close(3 [pid 6855] <... chdir resumed>) = 0 [pid 5826] <... close resumed>) = 0 [pid 6858] <... close resumed>) = 0 [pid 6858] close(4 [pid 6855] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6858] <... close resumed>) = 0 [pid 6858] mkdir("./file0", 0777) = 0 ./strace-static-x86_64: Process 6859 attached [pid 6855] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6855] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 6858] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6859] set_robust_list(0x55557eba4660, 24 [pid 6855] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 6859 [pid 6859] <... set_robust_list resumed>) = 0 [ 190.979347][ T6858] loop4: detected capacity change from 0 to 128 [ 191.011751][ T6857] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [pid 6859] chdir("./205") = 0 [pid 6855] <... renameat2 resumed>) = 0 [pid 6859] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6859] setpgid(0, 0 [pid 6855] sync( [pid 6859] <... setpgid resumed>) = 0 [pid 6859] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6859] write(3, "1000", 4 [pid 6857] <... mount resumed>) = 0 [pid 6859] <... write resumed>) = 4 [pid 6857] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6859] close(3 [pid 6857] <... openat resumed>) = 3 [pid 6859] <... close resumed>) = 0 [pid 6859] symlink("/dev/binderfs", "./binderfs" [pid 6857] chdir("./file0") = 0 [pid 6857] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6857] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 6857] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6859] <... symlink resumed>) = 0 [pid 6857] <... renameat2 resumed>) = 0 [ 191.050501][ T6858] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [pid 6857] sync(executing program [pid 6859] write(1, "executing program\n", 18 [pid 6858] <... mount resumed>) = 0 [pid 6856] <... sync resumed>) = 0 [pid 6859] <... write resumed>) = 18 [pid 6856] exit_group(0 [pid 6859] memfd_create("syzkaller", 0 [pid 6856] <... exit_group resumed>) = ? [pid 6856] +++ exited with 0 +++ [pid 6858] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6856, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6858] chdir("./file0" [pid 6859] <... memfd_create resumed>) = 3 [pid 6858] <... chdir resumed>) = 0 [pid 5825] restart_syscall(<... resuming interrupted clone ...> [pid 6858] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6855] <... sync resumed>) = 0 [pid 5825] <... restart_syscall resumed>) = 0 [pid 6858] openat(AT_FDCWD, ".", O_RDONLY [pid 6855] exit_group(0 [pid 6859] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6858] <... openat resumed>) = 4 [pid 6855] <... exit_group resumed>) = ? [pid 6859] <... mmap resumed>) = 0x7f957a000000 [pid 6858] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6855] +++ exited with 0 +++ [pid 5825] umount2("./203", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6859] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6859] <... write resumed>) = 65536 [pid 5825] openat(AT_FDCWD, "./203", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6855, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6859] munmap(0x7f957a000000, 138412032) = 0 [pid 6858] <... renameat2 resumed>) = 0 [pid 6857] <... sync resumed>) = 0 [pid 5825] <... openat resumed>) = 3 [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 5825] newfstatat(3, "", [pid 6859] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6857] exit_group(0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6859] ioctl(4, LOOP_SET_FD, 3 [pid 6858] sync( [pid 6857] <... exit_group resumed>) = ? [pid 5825] getdents64(3, [pid 6859] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] <... restart_syscall resumed>) = 0 [pid 6859] ioctl(4, LOOP_CLR_FD [pid 5825] umount2("./203/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./199", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6859] <... ioctl resumed>) = 0 [pid 6857] +++ exited with 0 +++ [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./199", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6857, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5824] <... openat resumed>) = 3 [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 5824] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6859] ioctl(4, LOOP_SET_FD, 3 [pid 5824] getdents64(3, [pid 6859] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5823] <... restart_syscall resumed>) = 0 [pid 6859] close(4 [pid 5825] <... umount2 resumed>) = 0 [pid 6859] <... close resumed>) = 0 [pid 5825] umount2("./203/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6859] close(3 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./203/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6859] <... close resumed>) = 0 [pid 5823] umount2("./204", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./203/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./203/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5823] openat(AT_FDCWD, "./204", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] getdents64(4, [pid 5823] <... openat resumed>) = 3 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5825] close(4) = 0 [pid 5825] rmdir("./203/file0" [pid 5823] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6859] openat(AT_FDCWD, ".", O_RDONLY [pid 5823] getdents64(3, [pid 6859] <... openat resumed>) = 3 [pid 5825] <... rmdir resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 6859] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5823] umount2("./204/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6859] <... renameat2 resumed>) = -1 ENOENT (No such file or directory) [pid 5825] umount2("./203/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./199/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... umount2 resumed>) = 0 [pid 6859] sync( [pid 6858] <... sync resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... umount2 resumed>) = 0 [pid 5823] umount2("./204/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6858] exit_group(0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./204/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] umount2("./199/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] umount2("./204/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] newfstatat(AT_FDCWD, "./203/binderfs", [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6858] <... exit_group resumed>) = ? [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] newfstatat(AT_FDCWD, "./199/file0", [pid 5823] openat(AT_FDCWD, "./204/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6858] +++ exited with 0 +++ [pid 5825] unlink("./203/binderfs" [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... openat resumed>) = 4 [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6858, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5825] <... unlink resumed>) = 0 [pid 5824] umount2("./199/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] newfstatat(4, "", [pid 5827] restart_syscall(<... resuming interrupted clone ...> [pid 5825] getdents64(3, [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] getdents64(4, [pid 5827] <... restart_syscall resumed>) = 0 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] close(3 [pid 5824] openat(AT_FDCWD, "./199/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] getdents64(4, [pid 5825] <... close resumed>) = 0 [pid 5824] <... openat resumed>) = 4 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5827] umount2("./199", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] rmdir("./203" [pid 5823] close(4 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... rmdir resumed>) = 0 [pid 5824] newfstatat(4, "", [pid 5823] <... close resumed>) = 0 [pid 5827] openat(AT_FDCWD, "./199", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] rmdir("./204/file0" [pid 5827] <... openat resumed>) = 3 [pid 5825] mkdir("./204", 0777 [pid 5824] getdents64(4, [pid 5823] <... rmdir resumed>) = 0 [pid 5827] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] umount2("./204/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6859] <... sync resumed>) = 0 [pid 5827] getdents64(3, [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6859] exit_group(0 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] getdents64(4, [pid 5823] newfstatat(AT_FDCWD, "./204/binderfs", [pid 6859] <... exit_group resumed>) = ? [pid 5827] umount2("./199/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6859] +++ exited with 0 +++ [pid 5825] <... mkdir resumed>) = 0 [pid 5824] close(4 [pid 5823] unlink("./204/binderfs" [pid 5824] <... close resumed>) = 0 [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6859, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5823] <... unlink resumed>) = 0 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5824] rmdir("./199/file0" [pid 5823] getdents64(3, [pid 5825] <... openat resumed>) = 3 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] umount2("./205", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./205", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5826] newfstatat(3, "", [pid 5823] close(3 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... close resumed>) = 0 [pid 5826] getdents64(3, [pid 5824] <... rmdir resumed>) = 0 [pid 5823] rmdir("./204" [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 5824] umount2("./199/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... rmdir resumed>) = 0 [pid 5826] umount2("./205/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] ioctl(3, LOOP_CLR_FD [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] mkdir("./205", 0777 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... ioctl resumed>) = 0 [pid 5824] newfstatat(AT_FDCWD, "./199/binderfs", [pid 5823] <... mkdir resumed>) = 0 [pid 5826] newfstatat(AT_FDCWD, "./205/binderfs", [pid 5825] close(3 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... close resumed>) = 0 [pid 5824] unlink("./199/binderfs" [pid 5823] <... openat resumed>) = 3 [pid 5826] unlink("./205/binderfs" [pid 5824] <... unlink resumed>) = 0 [pid 5823] ioctl(3, LOOP_CLR_FD [pid 5826] <... unlink resumed>) = 0 [pid 5824] getdents64(3, [pid 5823] <... ioctl resumed>) = 0 [pid 5827] <... umount2 resumed>) = 0 [pid 5826] getdents64(3, [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] close(3 [pid 5827] umount2("./199/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] close(3./strace-static-x86_64: Process 6860 attached [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] close(3 [pid 5824] <... close resumed>) = 0 [pid 5827] newfstatat(AT_FDCWD, "./199/file0", [pid 5826] <... close resumed>) = 0 [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 6860 [pid 5824] rmdir("./199" [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] rmdir("./205" [pid 5824] <... rmdir resumed>) = 0 [pid 6860] set_robust_list(0x55557eba4660, 24 [pid 5827] umount2("./199/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... rmdir resumed>) = 0 [pid 5824] mkdir("./200", 0777 [pid 5823] <... close resumed>) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] mkdir("./206", 0777 [pid 5824] <... mkdir resumed>) = 0 [pid 6860] <... set_robust_list resumed>) = 0 [pid 5827] openat(AT_FDCWD, "./199/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] <... mkdir resumed>) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6861 attached [pid 5827] <... openat resumed>) = 4 [pid 5824] <... openat resumed>) = 3 [pid 5824] ioctl(3, LOOP_CLR_FD [pid 5827] newfstatat(4, "", [pid 5824] <... ioctl resumed>) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5824] close(3 [pid 5827] getdents64(4, [pid 5826] <... openat resumed>) = 3 [pid 5824] <... close resumed>) = 0 [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 6861 [pid 6861] set_robust_list(0x55557eba4660, 24 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5826] ioctl(3, LOOP_CLR_FD [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6860] chdir("./204" [pid 5826] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 6862 attached [pid 6861] <... set_robust_list resumed>) = 0 [pid 6860] <... chdir resumed>) = 0 [pid 5827] getdents64(4, [pid 5826] close(3 [pid 6862] set_robust_list(0x55557eba4660, 24 [pid 6860] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 6862] <... set_robust_list resumed>) = 0 [pid 6860] <... prctl resumed>) = 0 [pid 5827] close(4 [pid 6862] chdir("./200" [pid 6861] chdir("./205" [pid 6860] setpgid(0, 0 [pid 5827] <... close resumed>) = 0 [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 6862 [pid 6862] <... chdir resumed>) = 0 [pid 6860] <... setpgid resumed>) = 0 [pid 6862] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5827] rmdir("./199/file0" [pid 6862] <... prctl resumed>) = 0 [pid 6860] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5827] <... rmdir resumed>) = 0 [pid 6862] setpgid(0, 0 [pid 6861] <... chdir resumed>) = 0 [pid 6860] <... openat resumed>) = 3 [pid 5827] umount2("./199/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6861] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6860] write(3, "1000", 4 [pid 5827] newfstatat(AT_FDCWD, "./199/binderfs", [pid 6862] <... setpgid resumed>) = 0 [pid 6860] <... write resumed>) = 4 [pid 6861] <... prctl resumed>) = 0 [pid 6860] close(3 [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6862] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6860] <... close resumed>) = 0 [pid 5827] unlink("./199/binderfs" [pid 6862] <... openat resumed>) = 3 [pid 6860] symlink("/dev/binderfs", "./binderfs" [pid 5827] <... unlink resumed>) = 0 [pid 6862] write(3, "1000", 4) = 4 [pid 6861] setpgid(0, 0 [pid 6860] <... symlink resumed>) = 0 [pid 6862] close(3 [pid 6861] <... setpgid resumed>) = 0 [pid 5827] getdents64(3, [pid 6862] <... close resumed>) = 0 [pid 6861] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6860] write(1, "executing program\n", 18 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 6862] symlink("/dev/binderfs", "./binderfs" [pid 6861] <... openat resumed>) = 3 [pid 5827] close(3executing program [pid 6862] <... symlink resumed>) = 0 [pid 6861] write(3, "1000", 4 [pid 6860] <... write resumed>) = 18 [pid 5827] <... close resumed>) = 0 [pid 6862] write(1, "executing program\n", 18 [pid 6861] <... write resumed>) = 4 executing program [pid 5827] rmdir("./199" [pid 6862] <... write resumed>) = 18 [pid 6861] close(3 [pid 6860] memfd_create("syzkaller", 0 [pid 6862] memfd_create("syzkaller", 0 [pid 6860] <... memfd_create resumed>) = 3 [pid 6862] <... memfd_create resumed>) = 3 [pid 6860] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6862] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6860] <... mmap resumed>) = 0x7f957a000000 [pid 6862] <... mmap resumed>) = 0x7f957a000000 [pid 6860] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6862] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6861] <... close resumed>) = 0 [pid 6860] <... write resumed>) = 65536 [pid 5827] <... rmdir resumed>) = 0 [pid 6862] <... write resumed>) = 65536 [pid 6862] munmap(0x7f957a000000, 138412032) = 0 [pid 6862] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6861] symlink("/dev/binderfs", "./binderfs" [pid 6860] munmap(0x7f957a000000, 138412032 [pid 5827] mkdir("./200", 0777 [pid 5826] <... close resumed>) = 0 [pid 6862] <... openat resumed>) = 4 [pid 6861] <... symlink resumed>) = 0 [pid 6862] ioctl(4, LOOP_SET_FD, 3 [pid 6860] <... munmap resumed>) = 0 [pid 5827] <... mkdir resumed>) = 0 executing program [pid 6861] write(1, "executing program\n", 18 [pid 6860] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6860] <... openat resumed>) = 4 [pid 6860] ioctl(4, LOOP_SET_FD, 3 [pid 5827] <... openat resumed>) = 3 [pid 6861] <... write resumed>) = 18 [pid 5827] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 6863 attached [pid 6863] set_robust_list(0x55557eba4660, 24 [pid 6861] memfd_create("syzkaller", 0 [pid 5827] <... ioctl resumed>) = 0 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 6863 [pid 6863] <... set_robust_list resumed>) = 0 [pid 6863] chdir("./206" [pid 5827] close(3 [pid 6863] <... chdir resumed>) = 0 [pid 6861] <... memfd_create resumed>) = 3 [pid 5827] <... close resumed>) = 0 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6863] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6862] <... ioctl resumed>) = 0 [pid 6861] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6860] <... ioctl resumed>) = 0 [pid 6863] setpgid(0, 0 [pid 6862] close(3 [pid 6861] <... mmap resumed>) = 0x7f957a000000 [pid 6863] <... setpgid resumed>) = 0 [pid 6862] <... close resumed>) = 0 [pid 6862] close(4) = 0 [pid 6862] mkdir("./file0", 0777 [pid 6863] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6862] <... mkdir resumed>) = 0 [pid 6861] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6860] close(3 [pid 6862] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6863] <... openat resumed>) = 3 [pid 6861] <... write resumed>) = 65536 [pid 6860] <... close resumed>) = 0 [pid 6863] write(3, "1000", 4 [pid 6860] close(4 [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 6864 [pid 6863] <... write resumed>) = 4 [pid 6860] <... close resumed>) = 0 [ 191.336763][ T6862] loop1: detected capacity change from 0 to 128 [ 191.353840][ T6860] loop2: detected capacity change from 0 to 128 ./strace-static-x86_64: Process 6864 attached [pid 6863] close(3 [pid 6861] munmap(0x7f957a000000, 138412032 [pid 6860] mkdir("./file0", 0777 [pid 6864] set_robust_list(0x55557eba4660, 24) = 0 [pid 6861] <... munmap resumed>) = 0 [pid 6864] chdir("./200") = 0 [pid 6863] <... close resumed>) = 0 [pid 6861] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6860] <... mkdir resumed>) = 0 [pid 6863] symlink("/dev/binderfs", "./binderfs" [pid 6864] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6863] <... symlink resumed>) = 0 [pid 6861] <... openat resumed>) = 4 [pid 6860] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6864] <... prctl resumed>) = 0 [pid 6864] setpgid(0, 0) = 0 [pid 6864] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6861] ioctl(4, LOOP_SET_FD, 3 [pid 6864] write(3, "1000", 4 [pid 6863] write(1, "executing program\n", 18 [pid 6864] <... write resumed>) = 4 [pid 6864] close(3) = 0 [pid 6864] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6864] write(1, "executing program\n", 18) = 18 [pid 6864] memfd_create("syzkaller", 0) = 3 [pid 6864] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 executing program [pid 6863] <... write resumed>) = 18 [pid 6863] memfd_create("syzkaller", 0 [pid 6864] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 6864] munmap(0x7f957a000000, 138412032) = 0 [pid 6864] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6864] ioctl(4, LOOP_SET_FD, 3 [pid 6863] <... memfd_create resumed>) = 3 [pid 6861] <... ioctl resumed>) = 0 [ 191.380509][ T6862] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 191.402785][ T6861] loop0: detected capacity change from 0 to 128 [ 191.419710][ T6860] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [pid 6863] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 6861] close(3 [pid 6863] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6861] <... close resumed>) = 0 [pid 6861] close(4) = 0 [pid 6863] <... write resumed>) = 65536 [pid 6861] mkdir("./file0", 0777 [pid 6863] munmap(0x7f957a000000, 138412032 [pid 6861] <... mkdir resumed>) = 0 [pid 6863] <... munmap resumed>) = 0 [pid 6861] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6863] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6862] <... mount resumed>) = 0 [pid 6860] <... mount resumed>) = 0 [pid 6860] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6862] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6863] ioctl(4, LOOP_SET_FD, 3 [pid 6862] <... openat resumed>) = 3 [pid 6860] <... openat resumed>) = 3 [pid 6862] chdir("./file0" [pid 6864] <... ioctl resumed>) = 0 [pid 6860] chdir("./file0" [pid 6862] <... chdir resumed>) = 0 [pid 6860] <... chdir resumed>) = 0 [pid 6862] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6860] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6864] close(3 [pid 6863] <... ioctl resumed>) = 0 [pid 6862] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6860] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6864] <... close resumed>) = 0 [pid 6862] openat(AT_FDCWD, ".", O_RDONLY [pid 6860] openat(AT_FDCWD, ".", O_RDONLY [pid 6864] close(4 [pid 6863] close(3 [pid 6864] <... close resumed>) = 0 [pid 6863] <... close resumed>) = 0 [pid 6862] <... openat resumed>) = 4 [pid 6860] <... openat resumed>) = 4 [pid 6864] mkdir("./file0", 0777 [pid 6863] close(4 [pid 6862] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [ 191.441931][ T6864] loop4: detected capacity change from 0 to 128 [ 191.474793][ T6863] loop3: detected capacity change from 0 to 128 [pid 6860] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6864] <... mkdir resumed>) = 0 [pid 6863] <... close resumed>) = 0 [pid 6864] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6863] mkdir("./file0", 0777 [pid 6860] <... renameat2 resumed>) = 0 [pid 6863] <... mkdir resumed>) = 0 [pid 6860] sync( [pid 6863] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6862] <... renameat2 resumed>) = 0 [pid 6862] sync( [pid 6861] <... mount resumed>) = 0 [pid 6861] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6864] <... mount resumed>) = 0 [pid 6863] <... mount resumed>) = 0 [pid 6861] chdir("./file0") = 0 [pid 6861] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6864] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [ 191.497544][ T6861] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 191.520972][ T6864] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 191.532556][ T6863] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [pid 6863] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6861] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6864] <... openat resumed>) = 3 [pid 6863] <... openat resumed>) = 3 [pid 6862] <... sync resumed>) = 0 [pid 6860] <... sync resumed>) = 0 [pid 6862] exit_group(0 [pid 6860] exit_group(0 [pid 6864] chdir("./file0" [pid 6863] chdir("./file0" [pid 6862] <... exit_group resumed>) = ? [pid 6861] openat(AT_FDCWD, ".", O_RDONLY [pid 6860] <... exit_group resumed>) = ? [pid 6864] <... chdir resumed>) = 0 [pid 6863] <... chdir resumed>) = 0 [pid 6862] +++ exited with 0 +++ [pid 6861] <... openat resumed>) = 4 [pid 6860] +++ exited with 0 +++ [pid 6864] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6863] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6861] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6864] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6863] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6864] openat(AT_FDCWD, ".", O_RDONLY [pid 6863] openat(AT_FDCWD, ".", O_RDONLY [pid 6861] <... renameat2 resumed>) = 0 [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6860, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6862, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6864] <... openat resumed>) = 4 [pid 5825] restart_syscall(<... resuming interrupted clone ...> [pid 5824] umount2("./200", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6863] <... openat resumed>) = 4 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6863] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6861] sync( [pid 5824] openat(AT_FDCWD, "./200", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6864] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5824] <... openat resumed>) = 3 [pid 5824] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] umount2("./200/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6864] <... renameat2 resumed>) = 0 [pid 6864] sync( [pid 5825] <... restart_syscall resumed>) = 0 [pid 5825] umount2("./204", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./204", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5825] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(3, [pid 6863] <... renameat2 resumed>) = 0 [pid 6863] sync( [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5825] umount2("./204/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... umount2 resumed>) = 0 [pid 5824] umount2("./200/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./200/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] umount2("./200/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6864] <... sync resumed>) = 0 [pid 6864] exit_group(0) = ? [pid 5825] <... umount2 resumed>) = 0 [pid 5824] openat(AT_FDCWD, "./200/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6864] +++ exited with 0 +++ [pid 6861] <... sync resumed>) = 0 [pid 5824] <... openat resumed>) = 4 [pid 6861] exit_group(0) = ? [pid 5825] umount2("./204/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] newfstatat(4, "", [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6864, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6861] +++ exited with 0 +++ [pid 5827] restart_syscall(<... resuming interrupted clone ...> [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] <... restart_syscall resumed>) = 0 [pid 5825] newfstatat(AT_FDCWD, "./204/file0", [pid 5824] getdents64(4, [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6861, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5824] getdents64(4, [pid 5825] umount2("./204/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] umount2("./205", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./204/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] umount2("./200", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] openat(AT_FDCWD, "./205", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... openat resumed>) = 3 [pid 5827] openat(AT_FDCWD, "./200", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] <... openat resumed>) = 4 [pid 5823] newfstatat(3, "", [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5827] <... openat resumed>) = 3 [pid 5827] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5825] newfstatat(4, "", [pid 5824] close(4 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] umount2("./200/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... close resumed>) = 0 [pid 5823] getdents64(3, [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5825] getdents64(4, [pid 5824] rmdir("./200/file0" [pid 5823] umount2("./205/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] <... rmdir resumed>) = 0 [pid 5825] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] umount2("./200/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] close(4 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... close resumed>) = 0 [pid 5824] newfstatat(AT_FDCWD, "./200/binderfs", [pid 6863] <... sync resumed>) = 0 [pid 5825] rmdir("./204/file0" [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... umount2 resumed>) = 0 [pid 6863] exit_group(0 [pid 5827] <... umount2 resumed>) = 0 [pid 5825] <... rmdir resumed>) = 0 [pid 5824] unlink("./200/binderfs" [pid 5823] umount2("./205/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./204/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./205/file0", [pid 5825] newfstatat(AT_FDCWD, "./204/binderfs", [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... unlink resumed>) = 0 [pid 5823] umount2("./205/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] unlink("./204/binderfs" [pid 5823] openat(AT_FDCWD, "./205/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] <... unlink resumed>) = 0 [pid 5824] getdents64(3, [pid 5825] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] <... openat resumed>) = 4 [pid 5825] close(3 [pid 5824] close(3 [pid 5827] umount2("./200/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... close resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 5825] rmdir("./204" [pid 5824] rmdir("./200" [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] newfstatat(AT_FDCWD, "./200/file0", [pid 5823] newfstatat(4, "", [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... rmdir resumed>) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] umount2("./200/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] getdents64(4, [pid 5824] <... rmdir resumed>) = 0 [pid 5825] mkdir("./205", 0777 [pid 5824] mkdir("./201", 0777 [pid 6863] <... exit_group resumed>) = ? [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... mkdir resumed>) = 0 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] <... mkdir resumed>) = 0 [pid 5827] openat(AT_FDCWD, "./200/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5823] getdents64(4, [pid 5827] <... openat resumed>) = 4 [pid 5824] <... openat resumed>) = 3 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5827] newfstatat(4, "", [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5824] ioctl(3, LOOP_CLR_FD [pid 5823] close(4 [pid 6863] +++ exited with 0 +++ [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] <... openat resumed>) = 3 [pid 5824] <... ioctl resumed>) = 0 [pid 5823] <... close resumed>) = 0 [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6863, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5825] ioctl(3, LOOP_CLR_FD [pid 5827] getdents64(4, [pid 5825] <... ioctl resumed>) = 0 [pid 5824] close(3 [pid 5823] rmdir("./205/file0" [pid 5826] umount2("./206", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] close(3 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... close resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 5823] <... rmdir resumed>) = 0 [pid 5826] openat(AT_FDCWD, "./206", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5827] getdents64(4, [pid 5823] umount2("./205/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... openat resumed>) = 3 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] close(4 [pid 5823] newfstatat(AT_FDCWD, "./205/binderfs", [pid 5827] <... close resumed>) = 0 [pid 5826] newfstatat(3, "", [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] rmdir("./200/file0" [pid 5823] unlink("./205/binderfs"./strace-static-x86_64: Process 6866 attached ./strace-static-x86_64: Process 6865 attached [pid 5827] <... rmdir resumed>) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... unlink resumed>) = 0 [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 6865 [pid 5826] getdents64(3, [pid 6865] set_robust_list(0x55557eba4660, 24 [pid 5827] umount2("./200/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 6866 [pid 5823] getdents64(3, [pid 6865] <... set_robust_list resumed>) = 0 [pid 5826] umount2("./206/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6866] set_robust_list(0x55557eba4660, 24 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 6866] <... set_robust_list resumed>) = 0 [pid 5827] newfstatat(AT_FDCWD, "./200/binderfs", [pid 5823] close(3 [pid 6866] chdir("./201" [pid 6865] chdir("./205" [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... close resumed>) = 0 [pid 5827] unlink("./200/binderfs" [pid 5823] rmdir("./205" [pid 6866] <... chdir resumed>) = 0 [pid 5827] <... unlink resumed>) = 0 [pid 5823] <... rmdir resumed>) = 0 [pid 6866] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6866] setpgid(0, 0 [pid 6865] <... chdir resumed>) = 0 [pid 5827] getdents64(3, [pid 6865] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6866] <... setpgid resumed>) = 0 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] mkdir("./206", 0777 [pid 6865] <... prctl resumed>) = 0 [pid 6865] setpgid(0, 0 [pid 5827] close(3 [pid 5823] <... mkdir resumed>) = 0 [pid 6866] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6865] <... setpgid resumed>) = 0 [pid 5827] <... close resumed>) = 0 [pid 6865] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5827] rmdir("./200" [pid 5823] <... openat resumed>) = 3 [pid 5823] ioctl(3, LOOP_CLR_FD) = 0 [pid 5823] close(3) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6866] <... openat resumed>) = 3 [pid 5827] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 6867 attached [pid 6866] write(3, "1000", 4) = 4 [pid 6866] close(3) = 0 [pid 6866] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 6867 [pid 6867] set_robust_list(0x55557eba4660, 24 [pid 6865] <... openat resumed>) = 3 [pid 6866] write(1, "executing program\n", 18 [pid 6865] write(3, "1000", 4 [pid 5826] <... umount2 resumed>) = 0 [pid 6867] <... set_robust_list resumed>) = 0 [pid 6867] chdir("./206") = 0 [pid 6867] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5827] mkdir("./201", 0777 [pid 6865] <... write resumed>) = 4 [pid 5827] <... mkdir resumed>) = 0 [pid 5826] umount2("./206/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6865] close(3 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6865] <... close resumed>) = 0 [pid 5826] newfstatat(AT_FDCWD, "./206/file0", executing program [pid 6867] <... prctl resumed>) = 0 [pid 6866] <... write resumed>) = 18 [pid 6866] memfd_create("syzkaller", 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6866] <... memfd_create resumed>) = 3 [pid 6867] setpgid(0, 0 [pid 6866] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6866] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5827] <... openat resumed>) = 3 [pid 6867] <... setpgid resumed>) = 0 [pid 5827] ioctl(3, LOOP_CLR_FD [pid 6867] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5827] <... ioctl resumed>) = 0 [pid 5826] umount2("./206/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] close(3 [pid 6866] <... write resumed>) = 65536 [pid 5827] <... close resumed>) = 0 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6867] <... openat resumed>) = 3 [pid 6866] munmap(0x7f957a000000, 138412032) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6865] symlink("/dev/binderfs", "./binderfs" [pid 5826] openat(AT_FDCWD, "./206/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6868 attached [pid 6867] write(3, "1000", 4 [pid 6866] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 6868 [pid 5826] <... openat resumed>) = 4 [pid 6866] <... openat resumed>) = 4 [pid 6865] <... symlink resumed>) = 0 [pid 5826] newfstatat(4, "", [pid 6867] <... write resumed>) = 4 [pid 6866] ioctl(4, LOOP_SET_FD, 3 executing program [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6865] write(1, "executing program\n", 18 [pid 5826] getdents64(4, [pid 6867] close(3 [pid 6866] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 6865] <... write resumed>) = 18 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 6868] set_robust_list(0x55557eba4660, 24 [pid 6867] <... close resumed>) = 0 [pid 6866] ioctl(4, LOOP_CLR_FD [pid 5826] getdents64(4, [pid 6868] <... set_robust_list resumed>) = 0 [pid 6867] symlink("/dev/binderfs", "./binderfs" [pid 6866] <... ioctl resumed>) = 0 [pid 6865] memfd_create("syzkaller", 0 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 executing program [pid 6868] chdir("./201" [pid 6867] <... symlink resumed>) = 0 [pid 6865] <... memfd_create resumed>) = 3 [pid 5826] close(4 [pid 6868] <... chdir resumed>) = 0 [pid 6867] write(1, "executing program\n", 18 [pid 5826] <... close resumed>) = 0 [pid 6868] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6867] <... write resumed>) = 18 [pid 6865] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5826] rmdir("./206/file0" [pid 6868] <... prctl resumed>) = 0 [pid 6867] memfd_create("syzkaller", 0 [pid 6868] setpgid(0, 0 [pid 6866] ioctl(4, LOOP_SET_FD, 3 [pid 6865] <... mmap resumed>) = 0x7f957a000000 [pid 6868] <... setpgid resumed>) = 0 [pid 6866] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5826] <... rmdir resumed>) = 0 [pid 6868] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6866] close(4 [pid 6865] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5826] umount2("./206/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6868] <... openat resumed>) = 3 [pid 6867] <... memfd_create resumed>) = 3 [pid 6866] <... close resumed>) = 0 [pid 6865] <... write resumed>) = 65536 [pid 6865] munmap(0x7f957a000000, 138412032) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6866] close(3) = 0 [pid 6867] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5826] newfstatat(AT_FDCWD, "./206/binderfs", [pid 6865] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6867] <... mmap resumed>) = 0x7f957a000000 [pid 6868] write(3, "1000", 4 [pid 6867] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6865] <... openat resumed>) = 4 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6868] <... write resumed>) = 4 [pid 6866] openat(AT_FDCWD, ".", O_RDONLY [pid 5826] unlink("./206/binderfs" [pid 6865] ioctl(4, LOOP_SET_FD, 3 [pid 6868] close(3 [pid 6867] <... write resumed>) = 65536 [pid 6866] <... openat resumed>) = 3 [pid 5826] <... unlink resumed>) = 0 [pid 6867] munmap(0x7f957a000000, 138412032 [pid 6866] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6868] <... close resumed>) = 0 [pid 6867] <... munmap resumed>) = 0 [pid 6866] <... renameat2 resumed>) = -1 ENOENT (No such file or directory) [pid 6868] symlink("/dev/binderfs", "./binderfs" [pid 6867] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6866] sync( [pid 6868] <... symlink resumed>) = 0 [pid 6867] <... openat resumed>) = 4 [pid 6867] ioctl(4, LOOP_SET_FD, 3executing program [pid 5826] getdents64(3, [pid 6868] write(1, "executing program\n", 18) = 18 [pid 6868] memfd_create("syzkaller", 0) = 3 [pid 6868] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] close(3) = 0 [pid 6868] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6865] <... ioctl resumed>) = 0 [pid 5826] rmdir("./206" [pid 6865] close(3 [pid 6868] <... write resumed>) = 65536 [pid 6867] <... ioctl resumed>) = 0 [pid 6865] <... close resumed>) = 0 [pid 5826] <... rmdir resumed>) = 0 [pid 6865] close(4 [pid 5826] mkdir("./207", 0777 [pid 6865] <... close resumed>) = 0 [pid 6867] close(3 [pid 6865] mkdir("./file0", 0777 [pid 6868] munmap(0x7f957a000000, 138412032 [pid 6867] <... close resumed>) = 0 [pid 6868] <... munmap resumed>) = 0 [pid 6867] close(4 [pid 5826] <... mkdir resumed>) = 0 [pid 6865] <... mkdir resumed>) = 0 [pid 6867] <... close resumed>) = 0 [pid 6866] <... sync resumed>) = 0 [pid 6867] mkdir("./file0", 0777 [pid 6866] exit_group(0 [pid 6865] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6868] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6867] <... mkdir resumed>) = 0 [pid 6866] <... exit_group resumed>) = ? [ 191.798000][ T6865] loop2: detected capacity change from 0 to 128 [ 191.802530][ T6867] loop0: detected capacity change from 0 to 128 [pid 6868] <... openat resumed>) = 4 [pid 6866] +++ exited with 0 +++ [pid 5826] <... openat resumed>) = 3 [pid 6868] ioctl(4, LOOP_SET_FD, 3 [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6866, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 6868] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 6868] ioctl(4, LOOP_CLR_FD [pid 6867] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6868] <... ioctl resumed>) = 0 [pid 5826] ioctl(3, LOOP_CLR_FD) = 0 [pid 5824] <... restart_syscall resumed>) = 0 [pid 6868] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 6868] close(4 [pid 5824] umount2("./201", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6868] <... close resumed>) = 0 [pid 5826] close(3 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6868] close(3) = 0 [pid 5824] openat(AT_FDCWD, "./201", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6868] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 5824] <... openat resumed>) = 3 [pid 6868] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5824] newfstatat(3, "", [pid 5826] <... close resumed>) = 0 [pid 6868] <... renameat2 resumed>) = -1 ENOENT (No such file or directory) [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(3, 0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5824] umount2("./201/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6868] sync( [pid 5824] newfstatat(AT_FDCWD, "./201/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./201/binderfs") = 0 [pid 5824] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] close(3) = 0 [pid 5824] rmdir("./201") = 0 [pid 5824] mkdir("./202", 0777) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5824] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5824] close(3) = 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557eba4650) = 6870 ./strace-static-x86_64: Process 6870 attached [pid 6870] set_robust_list(0x55557eba4660, 24) = 0 [pid 6870] chdir("./202") = 0 [pid 6870] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6870] setpgid(0, 0) = 0 [pid 6865] <... mount resumed>) = 0 [pid 6865] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6865] chdir("./file0" [pid 6870] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6865] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 6869 attached [pid 6870] <... openat resumed>) = 3 [pid 6869] set_robust_list(0x55557eba4660, 24 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 6869 [pid 6865] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6869] <... set_robust_list resumed>) = 0 [pid 6865] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 191.844073][ T6865] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 191.865305][ T6867] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [pid 6870] write(3, "1000", 4 [pid 6869] chdir("./207" [pid 6865] openat(AT_FDCWD, ".", O_RDONLY [pid 6870] <... write resumed>) = 4 [pid 6865] <... openat resumed>) = 4 [pid 6870] close(3 [pid 6865] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6870] <... close resumed>) = 0 [pid 6867] <... mount resumed>) = 0 [pid 6870] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6869] <... chdir resumed>) = 0 [pid 6867] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6865] <... renameat2 resumed>) = 0 [pid 6869] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6865] sync( [pid 6869] <... prctl resumed>) = 0 [pid 6870] write(1, "executing program\n", 18 [pid 6869] setpgid(0, 0 [pid 6867] <... openat resumed>) = 3 [pid 6869] <... setpgid resumed>) = 0 executing program [pid 6870] <... write resumed>) = 18 [pid 6867] chdir("./file0" [pid 6870] memfd_create("syzkaller", 0 [pid 6869] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6867] <... chdir resumed>) = 0 [pid 6869] <... openat resumed>) = 3 [pid 6867] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6869] write(3, "1000", 4) = 4 [pid 6867] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6869] close(3 [pid 6867] openat(AT_FDCWD, ".", O_RDONLY [pid 6869] <... close resumed>) = 0 [pid 6867] <... openat resumed>) = 4 [pid 6870] <... memfd_create resumed>) = 3 [pid 6869] symlink("/dev/binderfs", "./binderfs" [pid 6867] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6870] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6869] <... symlink resumed>) = 0 [pid 6868] <... sync resumed>) = 0 [pid 6865] <... sync resumed>) = 0 [pid 6870] <... mmap resumed>) = 0x7f957a000000 [pid 6869] write(1, "executing program\n", 18 [pid 6868] exit_group(0 [pid 6870] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6869] <... write resumed>) = 18 [pid 6868] <... exit_group resumed>) = ? executing program [pid 6867] <... renameat2 resumed>) = 0 [pid 6865] exit_group(0 [pid 6869] memfd_create("syzkaller", 0 [pid 6868] +++ exited with 0 +++ [pid 6865] <... exit_group resumed>) = ? [pid 6870] <... write resumed>) = 65536 [pid 6867] sync( [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6868, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 6870] munmap(0x7f957a000000, 138412032 [pid 6869] <... memfd_create resumed>) = 3 [pid 6869] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6865] +++ exited with 0 +++ [pid 5827] umount2("./201", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6869] <... mmap resumed>) = 0x7f957a000000 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6865, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6870] <... munmap resumed>) = 0 [pid 5827] openat(AT_FDCWD, "./201", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] restart_syscall(<... resuming interrupted clone ...> [pid 6869] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6870] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5827] <... openat resumed>) = 3 [pid 6870] <... openat resumed>) = 4 [pid 5827] newfstatat(3, "", [pid 6870] ioctl(4, LOOP_SET_FD, 3 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6869] <... write resumed>) = 65536 [pid 5827] getdents64(3, [pid 5825] <... restart_syscall resumed>) = 0 [pid 6869] munmap(0x7f957a000000, 138412032) = 0 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 6869] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5827] umount2("./201/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./205", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6869] <... openat resumed>) = 4 [pid 5825] openat(AT_FDCWD, "./205", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6869] ioctl(4, LOOP_SET_FD, 3 [pid 5827] newfstatat(AT_FDCWD, "./201/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... openat resumed>) = 3 [pid 5827] unlink("./201/binderfs") = 0 [pid 5827] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5827] close(3) = 0 [pid 5827] rmdir("./201" [pid 6870] <... ioctl resumed>) = 0 [pid 5825] newfstatat(3, "", [pid 6870] close(3) = 0 [pid 6867] <... sync resumed>) = 0 [pid 5827] <... rmdir resumed>) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6867] exit_group(0 [pid 5827] mkdir("./202", 0777 [pid 5825] getdents64(3, [pid 6869] <... ioctl resumed>) = 0 [pid 6867] <... exit_group resumed>) = ? [pid 5827] <... mkdir resumed>) = 0 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 6870] close(4 [pid 6869] close(3 [pid 6867] +++ exited with 0 +++ [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5825] umount2("./205/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6870] <... close resumed>) = 0 [pid 6869] <... close resumed>) = 0 [pid 6870] mkdir("./file0", 0777 [pid 5827] <... openat resumed>) = 3 [pid 5827] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5827] close(3) = 0 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6871 attached [pid 6870] <... mkdir resumed>) = 0 [pid 6869] close(4 [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6867, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6870] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6869] <... close resumed>) = 0 [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 6871 [pid 6871] set_robust_list(0x55557eba4660, 24 [pid 6869] mkdir("./file0", 0777 [pid 5823] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 6871] <... set_robust_list resumed>) = 0 [pid 6871] chdir("./202" [pid 6869] <... mkdir resumed>) = 0 [pid 6871] <... chdir resumed>) = 0 [pid 6869] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6871] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 191.966948][ T6870] loop1: detected capacity change from 0 to 128 [ 191.992064][ T6869] loop3: detected capacity change from 0 to 128 [pid 6871] setpgid(0, 0executing program ) = 0 [pid 5823] umount2("./206", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6871] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6871] <... openat resumed>) = 3 [pid 6871] write(3, "1000", 4 [pid 5823] openat(AT_FDCWD, "./206", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6871] <... write resumed>) = 4 [pid 6871] close(3 [pid 5823] <... openat resumed>) = 3 [pid 6871] <... close resumed>) = 0 [pid 5823] newfstatat(3, "", [pid 6871] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(3, [pid 6871] write(1, "executing program\n", 18 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 6871] <... write resumed>) = 18 [pid 6871] memfd_create("syzkaller", 0 [pid 5823] umount2("./206/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6871] <... memfd_create resumed>) = 3 [pid 6871] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 6871] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5825] <... umount2 resumed>) = 0 [pid 5825] umount2("./205/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6871] <... write resumed>) = 65536 [pid 6871] munmap(0x7f957a000000, 138412032) = 0 [pid 5825] newfstatat(AT_FDCWD, "./205/file0", [pid 6871] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6871] ioctl(4, LOOP_SET_FD, 3 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... umount2 resumed>) = 0 [pid 5825] umount2("./205/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] umount2("./206/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./206/file0", [pid 5825] openat(AT_FDCWD, "./205/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... openat resumed>) = 4 [pid 5823] umount2("./206/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] getdents64(4, [pid 5823] openat(AT_FDCWD, "./206/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] <... openat resumed>) = 4 [pid 5825] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] newfstatat(4, "", [pid 5825] close(4) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6870] <... mount resumed>) = 0 [pid 5825] rmdir("./205/file0" [pid 6870] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5825] <... rmdir resumed>) = 0 [pid 5823] getdents64(4, [pid 6871] <... ioctl resumed>) = 0 [pid 6870] <... openat resumed>) = 3 [pid 5825] umount2("./205/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6870] chdir("./file0" [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] newfstatat(AT_FDCWD, "./205/binderfs", [pid 6870] <... chdir resumed>) = 0 [pid 5823] getdents64(4, [pid 6870] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 6871] close(3 [pid 5823] close(4 [pid 5825] unlink("./205/binderfs" [pid 6871] <... close resumed>) = 0 [pid 6871] close(4) = 0 [pid 6870] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6869] <... mount resumed>) = 0 [pid 5825] <... unlink resumed>) = 0 [pid 5823] <... close resumed>) = 0 [pid 6871] mkdir("./file0", 0777) = 0 [pid 6871] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6870] openat(AT_FDCWD, ".", O_RDONLY [pid 6869] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5825] getdents64(3, [pid 5823] rmdir("./206/file0" [pid 6870] <... openat resumed>) = 4 [pid 6869] <... openat resumed>) = 3 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 6870] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6869] chdir("./file0" [pid 5825] close(3 [pid 5823] <... rmdir resumed>) = 0 [ 192.040648][ T6870] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 192.060384][ T6869] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 192.071942][ T6871] loop4: detected capacity change from 0 to 128 [pid 6870] <... renameat2 resumed>) = 0 [pid 6869] <... chdir resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 5823] umount2("./206/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6869] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5825] rmdir("./205" [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6869] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5825] <... rmdir resumed>) = 0 [pid 5823] newfstatat(AT_FDCWD, "./206/binderfs", [pid 5825] mkdir("./206", 0777 [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6869] openat(AT_FDCWD, ".", O_RDONLY [pid 5823] unlink("./206/binderfs" [pid 6870] sync( [pid 6869] <... openat resumed>) = 4 [pid 5825] <... mkdir resumed>) = 0 [pid 5823] <... unlink resumed>) = 0 [pid 6869] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5823] getdents64(3, [pid 5825] <... openat resumed>) = 3 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 5823] close(3 [pid 5825] <... ioctl resumed>) = 0 [pid 5823] <... close resumed>) = 0 [pid 6869] <... renameat2 resumed>) = 0 [pid 5825] close(3 [pid 5823] rmdir("./206" [pid 5825] <... close resumed>) = 0 [pid 5823] <... rmdir resumed>) = 0 [pid 5823] mkdir("./207", 0777) = 0 [pid 6869] sync( [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6872 attached [pid 5823] <... openat resumed>) = 3 [pid 6872] set_robust_list(0x55557eba4660, 24 [pid 5823] ioctl(3, LOOP_CLR_FD [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 6872 [pid 5823] <... ioctl resumed>) = 0 [pid 6872] <... set_robust_list resumed>) = 0 [pid 5823] close(3 [pid 6872] chdir("./206") = 0 [pid 6872] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6872] setpgid(0, 0) = 0 [pid 6872] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6872] write(3, "1000", 4) = 4 [pid 6872] close(3) = 0 [pid 6872] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6872] write(1, "executing program\n", 18) = 18 [ 192.126570][ T6871] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [pid 6872] memfd_create("syzkaller", 0 [pid 6871] <... mount resumed>) = 0 [pid 5823] <... close resumed>) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6872] <... memfd_create resumed>) = 3 [pid 6872] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 6872] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 ./strace-static-x86_64: Process 6873 attached [pid 6871] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6873] set_robust_list(0x55557eba4660, 24 [pid 6871] <... openat resumed>) = 3 [pid 6869] <... sync resumed>) = 0 [pid 6870] <... sync resumed>) = 0 [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 6873 [pid 6873] <... set_robust_list resumed>) = 0 [pid 6873] chdir("./207" [pid 6872] munmap(0x7f957a000000, 138412032 [pid 6871] chdir("./file0" [pid 6870] exit_group(0 [pid 6869] exit_group(0 [pid 6873] <... chdir resumed>) = 0 [pid 6872] <... munmap resumed>) = 0 [pid 6871] <... chdir resumed>) = 0 [pid 6870] <... exit_group resumed>) = ? [pid 6869] <... exit_group resumed>) = ? [pid 6872] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6873] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6871] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6870] +++ exited with 0 +++ [pid 6869] +++ exited with 0 +++ [pid 6873] <... prctl resumed>) = 0 [pid 6872] <... openat resumed>) = 4 [pid 6871] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6869, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6873] setpgid(0, 0 [pid 6872] ioctl(4, LOOP_SET_FD, 3 [pid 6871] openat(AT_FDCWD, ".", O_RDONLY [pid 5826] restart_syscall(<... resuming interrupted clone ...> [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6870, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6873] <... setpgid resumed>) = 0 [pid 6871] <... openat resumed>) = 4 [pid 5826] <... restart_syscall resumed>) = 0 [pid 6871] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5826] umount2("./207", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./207", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6873] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6871] <... renameat2 resumed>) = 0 [pid 6872] <... ioctl resumed>) = 0 [pid 6872] close(3) = 0 [pid 5824] umount2("./202", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6873] <... openat resumed>) = 3 [pid 6872] close(4 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6873] write(3, "1000", 4 [pid 5824] openat(AT_FDCWD, "./202", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6873] <... write resumed>) = 4 [pid 6873] close(3 [pid 5824] <... openat resumed>) = 3 [pid 6873] <... close resumed>) = 0 [pid 6872] <... close resumed>) = 0 [pid 5824] newfstatat(3, "", [pid 5826] <... openat resumed>) = 3 [pid 6872] mkdir("./file0", 0777 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6871] sync( [pid 5826] newfstatat(3, "", [pid 6872] <... mkdir resumed>) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5826] umount2("./207/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] getdents64(3, [pid 6873] symlink("/dev/binderfs", "./binderfs" [pid 6872] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] umount2("./202/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6873] <... symlink resumed>) = 0 [pid 6873] write(1, "executing program\n", 18executing program ) = 18 [pid 6873] memfd_create("syzkaller", 0) = 3 [pid 5824] <... umount2 resumed>) = 0 [pid 6873] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 6873] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6872] <... mount resumed>) = 0 [pid 5826] <... umount2 resumed>) = 0 [pid 5824] umount2("./202/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6872] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6873] <... write resumed>) = 65536 [pid 6872] <... openat resumed>) = 3 [pid 5824] newfstatat(AT_FDCWD, "./202/file0", [pid 6871] <... sync resumed>) = 0 [pid 6872] chdir("./file0" [pid 6873] munmap(0x7f957a000000, 138412032 [pid 6871] exit_group(0 [pid 5826] umount2("./207/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6873] <... munmap resumed>) = 0 [pid 6872] <... chdir resumed>) = 0 [pid 6871] <... exit_group resumed>) = ? [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] umount2("./202/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] newfstatat(AT_FDCWD, "./207/file0", [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] umount2("./207/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./207/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6873] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6872] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6871] +++ exited with 0 +++ [pid 5826] newfstatat(4, "", [pid 5824] openat(AT_FDCWD, "./202/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6872] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6871, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] <... openat resumed>) = 4 [pid 6873] <... openat resumed>) = 4 [ 192.239544][ T6872] loop2: detected capacity change from 0 to 128 [ 192.272802][ T6872] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [pid 6873] ioctl(4, LOOP_SET_FD, 3 [pid 6872] openat(AT_FDCWD, ".", O_RDONLY [pid 5826] getdents64(4, [pid 5824] newfstatat(4, "", [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5826] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5826] close(4) = 0 [pid 5826] rmdir("./207/file0") = 0 [pid 5826] umount2("./207/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./207/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./207/binderfs") = 0 [pid 5826] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5827] umount2("./202", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] close(3 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... close resumed>) = 0 [pid 6872] <... openat resumed>) = 4 [pid 5827] openat(AT_FDCWD, "./202", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] rmdir("./207" [pid 5824] getdents64(4, [pid 6872] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5827] <... openat resumed>) = 3 [pid 5826] <... rmdir resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5826] mkdir("./208", 0777 [pid 5824] getdents64(4, [pid 6873] <... ioctl resumed>) = 0 [pid 6872] <... renameat2 resumed>) = 0 [pid 5827] newfstatat(3, "", [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 6872] sync( [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] close(4 [pid 6873] close(3 [pid 5826] <... mkdir resumed>) = 0 [pid 6873] <... close resumed>) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5824] <... close resumed>) = 0 [pid 5827] getdents64(3, [pid 6873] close(4 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5826] <... openat resumed>) = 3 [pid 5824] rmdir("./202/file0" [pid 6873] <... close resumed>) = 0 [pid 5826] ioctl(3, LOOP_CLR_FD [pid 6873] mkdir("./file0", 0777 [pid 5826] <... ioctl resumed>) = 0 [pid 6873] <... mkdir resumed>) = 0 [pid 5827] umount2("./202/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] close(3 [pid 5824] <... rmdir resumed>) = 0 [pid 5826] <... close resumed>) = 0 [pid 6873] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5827] <... umount2 resumed>) = 0 [pid 5824] umount2("./202/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] umount2("./202/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] newfstatat(AT_FDCWD, "./202/file0", [pid 5824] newfstatat(AT_FDCWD, "./202/binderfs", [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] umount2("./202/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] unlink("./202/binderfs" [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] openat(AT_FDCWD, "./202/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5824] <... unlink resumed>) = 0 [pid 5827] <... openat resumed>) = 4 [pid 5824] getdents64(3, [pid 5827] newfstatat(4, "", [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [ 192.318835][ T6873] loop0: detected capacity change from 0 to 128 ./strace-static-x86_64: Process 6874 attached [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] close(3 [pid 6874] set_robust_list(0x55557eba4660, 24 [pid 5827] getdents64(4, [pid 5824] <... close resumed>) = 0 [pid 6874] <... set_robust_list resumed>) = 0 [pid 5824] rmdir("./202" [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 6874 [pid 5824] <... rmdir resumed>) = 0 [pid 6874] chdir("./208" [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] mkdir("./203", 0777 [pid 6874] <... chdir resumed>) = 0 [pid 5827] getdents64(4, [pid 6874] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] <... mkdir resumed>) = 0 [pid 6874] <... prctl resumed>) = 0 [pid 5827] close(4 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6874] setpgid(0, 0 [pid 5827] <... close resumed>) = 0 [pid 6874] <... setpgid resumed>) = 0 [pid 6873] <... mount resumed>) = 0 [pid 5827] rmdir("./202/file0" [pid 5824] <... openat resumed>) = 3 [pid 6874] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6873] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6872] <... sync resumed>) = 0 [pid 5827] <... rmdir resumed>) = 0 [pid 5824] ioctl(3, LOOP_CLR_FD [pid 6874] write(3, "1000", 4 [pid 5824] <... ioctl resumed>) = 0 [pid 6874] <... write resumed>) = 4 [pid 6873] <... openat resumed>) = 3 [pid 6872] exit_group(0 [pid 5827] umount2("./202/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] close(3 [pid 6874] close(3 [pid 6873] chdir("./file0" [pid 6872] <... exit_group resumed>) = ? executing program [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... close resumed>) = 0 [pid 6874] <... close resumed>) = 0 [pid 6873] <... chdir resumed>) = 0 [pid 6872] +++ exited with 0 +++ [pid 5827] newfstatat(AT_FDCWD, "./202/binderfs", [pid 6874] symlink("/dev/binderfs", "./binderfs" [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6872, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6874] <... symlink resumed>) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] umount2("./206", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6874] write(1, "executing program\n", 18 [pid 5827] unlink("./202/binderfs" [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6874] <... write resumed>) = 18 [pid 5827] <... unlink resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./206", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6875 attached [pid 6874] memfd_create("syzkaller", 0 [pid 5827] getdents64(3, [pid 5825] <... openat resumed>) = 3 [pid 6873] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 6875] set_robust_list(0x55557eba4660, 24 [pid 6874] <... memfd_create resumed>) = 3 [pid 6873] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5825] newfstatat(3, "", [pid 6873] openat(AT_FDCWD, ".", O_RDONLY [pid 6875] <... set_robust_list resumed>) = 0 [pid 6874] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5827] close(3 [pid 6875] chdir("./203" [pid 6874] <... mmap resumed>) = 0x7f957a000000 [pid 5827] <... close resumed>) = 0 [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 6875 [pid 6875] <... chdir resumed>) = 0 [pid 6874] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5827] rmdir("./202") = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6873] <... openat resumed>) = 4 [pid 6875] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6873] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6875] <... prctl resumed>) = 0 [pid 6874] <... write resumed>) = 65536 [pid 5827] mkdir("./203", 0777 [pid 5825] getdents64(3, [pid 6875] setpgid(0, 0 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 6875] <... setpgid resumed>) = 0 [pid 6875] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6874] munmap(0x7f957a000000, 138412032 [pid 6875] <... openat resumed>) = 3 [pid 6874] <... munmap resumed>) = 0 [pid 6875] write(3, "1000", 4 [ 192.371358][ T6873] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [pid 6874] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6875] <... write resumed>) = 4 [pid 6874] <... openat resumed>) = 4 [pid 6875] close(3 [pid 6874] ioctl(4, LOOP_SET_FD, 3 [pid 6875] <... close resumed>) = 0 [pid 5825] umount2("./206/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6875] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6875] write(1, "executing program\n", 18) = 18 [pid 6875] memfd_create("syzkaller", 0 [pid 6873] <... renameat2 resumed>) = 0 [pid 5827] <... mkdir resumed>) = 0 [pid 6875] <... memfd_create resumed>) = 3 [pid 6875] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 6873] sync( [pid 5825] <... umount2 resumed>) = 0 [pid 5825] umount2("./206/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6875] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... openat resumed>) = 3 [pid 5827] ioctl(3, LOOP_CLR_FD) = 0 [pid 5827] close(3) = 0 [pid 6875] <... write resumed>) = 65536 [pid 5825] newfstatat(AT_FDCWD, "./206/file0", [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 6876 attached [pid 6875] munmap(0x7f957a000000, 138412032) = 0 [pid 6875] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6876] set_robust_list(0x55557eba4660, 24 [pid 6875] <... openat resumed>) = 4 [pid 6876] <... set_robust_list resumed>) = 0 [pid 6875] ioctl(4, LOOP_SET_FD, 3 [pid 6876] chdir("./203" [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 6876 [pid 5825] umount2("./206/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./206/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6876] <... chdir resumed>) = 0 [pid 6874] <... ioctl resumed>) = 0 [pid 5825] <... openat resumed>) = 4 [pid 6876] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6874] close(3 [pid 6876] <... prctl resumed>) = 0 [pid 6874] <... close resumed>) = 0 [pid 6876] setpgid(0, 0 [pid 6874] close(4 [pid 6876] <... setpgid resumed>) = 0 [pid 6876] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6876] write(3, "1000", 4) = 4 [pid 6876] close(3) = 0 [pid 6876] symlink("/dev/binderfs", "./binderfs" [pid 6874] <... close resumed>) = 0 [pid 6874] mkdir("./file0", 0777 [pid 6875] <... ioctl resumed>) = 0 [pid 5825] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6875] close(3 [pid 5825] getdents64(4, [pid 6875] <... close resumed>) = 0 [pid 6875] close(4) = 0 [ 192.430399][ T6874] loop3: detected capacity change from 0 to 128 [ 192.457684][ T6875] loop1: detected capacity change from 0 to 128 [pid 6875] mkdir("./file0", 0777 [pid 6876] <... symlink resumed>) = 0 [pid 6875] <... mkdir resumed>) = 0 [pid 6874] <... mkdir resumed>) = 0 executing program [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 6876] write(1, "executing program\n", 18 [pid 6875] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6874] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6876] <... write resumed>) = 18 [pid 5825] getdents64(4, [pid 6876] memfd_create("syzkaller", 0 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 6876] <... memfd_create resumed>) = 3 [pid 6873] <... sync resumed>) = 0 [pid 5825] close(4 [pid 6873] exit_group(0 [pid 5825] <... close resumed>) = 0 [pid 6876] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 6876] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6873] <... exit_group resumed>) = ? [pid 5825] rmdir("./206/file0" [pid 6873] +++ exited with 0 +++ [pid 5825] <... rmdir resumed>) = 0 [pid 5825] umount2("./206/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6873, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./206/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] umount2("./207", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6876] <... write resumed>) = 65536 [pid 5825] unlink("./206/binderfs" [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6876] munmap(0x7f957a000000, 138412032) = 0 [pid 5823] openat(AT_FDCWD, "./207", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6876] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5825] <... unlink resumed>) = 0 [pid 5823] <... openat resumed>) = 3 [pid 6876] <... openat resumed>) = 4 [pid 5825] getdents64(3, [pid 5823] newfstatat(3, "", [pid 6876] ioctl(4, LOOP_SET_FD, 3 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] close(3) = 0 [pid 5823] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] umount2("./207/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] rmdir("./206" [pid 6876] <... ioctl resumed>) = 0 [pid 5825] <... rmdir resumed>) = 0 [pid 5823] <... umount2 resumed>) = 0 [pid 5825] mkdir("./207", 0777) = 0 [pid 6876] close(3 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6876] <... close resumed>) = 0 [pid 6874] <... mount resumed>) = 0 [pid 5825] <... openat resumed>) = 3 [pid 6876] close(4) = 0 [pid 6874] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5825] ioctl(3, LOOP_CLR_FD [pid 5823] umount2("./207/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6876] mkdir("./file0", 0777) = 0 [pid 6875] <... mount resumed>) = 0 [pid 6874] <... openat resumed>) = 3 [pid 5825] <... ioctl resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6876] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5825] close(3 [pid 5823] newfstatat(AT_FDCWD, "./207/file0", [pid 6875] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6874] chdir("./file0" [pid 5825] <... close resumed>) = 0 [pid 6875] <... openat resumed>) = 3 [pid 6874] <... chdir resumed>) = 0 [ 192.530201][ T6874] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 192.545642][ T6875] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 192.568443][ T6876] loop4: detected capacity change from 0 to 128 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6875] chdir("./file0" [pid 6874] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5823] umount2("./207/file0", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6877 attached [pid 6875] <... chdir resumed>) = 0 [pid 6874] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6877] set_robust_list(0x55557eba4660, 24 [pid 6874] openat(AT_FDCWD, ".", O_RDONLY [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 6877 [pid 5823] openat(AT_FDCWD, "./207/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6877] <... set_robust_list resumed>) = 0 [pid 6877] chdir("./207" [pid 6875] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6874] <... openat resumed>) = 4 [pid 5823] <... openat resumed>) = 4 [pid 6877] <... chdir resumed>) = 0 [pid 5823] newfstatat(4, "", [pid 6877] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6874] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6877] <... prctl resumed>) = 0 [pid 6876] <... mount resumed>) = 0 [pid 6875] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6877] setpgid(0, 0 [pid 5823] getdents64(4, [pid 6877] <... setpgid resumed>) = 0 [pid 6877] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6875] openat(AT_FDCWD, ".", O_RDONLY [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 6877] <... openat resumed>) = 3 [pid 6875] <... openat resumed>) = 4 [pid 6877] write(3, "1000", 4 [pid 6875] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6877] <... write resumed>) = 4 [pid 6875] <... renameat2 resumed>) = 0 [pid 5823] getdents64(4, [pid 6876] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6875] sync( [pid 6876] <... openat resumed>) = 3 [pid 6877] close(3 [pid 6876] chdir("./file0" [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 6877] <... close resumed>) = 0 [pid 6874] <... renameat2 resumed>) = 0 [pid 5823] close(4 [pid 6877] symlink("/dev/binderfs", "./binderfs" [pid 6874] sync( [pid 5823] <... close resumed>) = 0 [pid 6876] <... chdir resumed>) = 0 [pid 6877] <... symlink resumed>) = 0 [pid 5823] rmdir("./207/file0" [pid 6876] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6876] openat(AT_FDCWD, ".", O_RDONLY [pid 5823] <... rmdir resumed>) = 0 executing program [pid 6876] <... openat resumed>) = 4 [pid 5823] umount2("./207/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6877] write(1, "executing program\n", 18 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./207/binderfs", [pid 6876] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6877] <... write resumed>) = 18 [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 192.620875][ T6876] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [pid 5823] unlink("./207/binderfs" [pid 6877] memfd_create("syzkaller", 0 [pid 6876] <... renameat2 resumed>) = 0 [pid 6876] sync( [pid 6877] <... memfd_create resumed>) = 3 [pid 6877] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5823] <... unlink resumed>) = 0 [pid 6877] <... mmap resumed>) = 0x7f957a000000 [pid 5823] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 6877] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5823] close(3 [pid 6875] <... sync resumed>) = 0 [pid 6874] <... sync resumed>) = 0 [pid 6877] <... write resumed>) = 65536 [pid 6875] exit_group(0 [pid 6874] exit_group(0 [pid 5823] <... close resumed>) = 0 [pid 6874] <... exit_group resumed>) = ? [pid 5823] rmdir("./207" [pid 6875] <... exit_group resumed>) = ? [pid 6877] munmap(0x7f957a000000, 138412032) = 0 [pid 6874] +++ exited with 0 +++ [pid 6877] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6874, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6877] <... openat resumed>) = 4 [pid 6875] +++ exited with 0 +++ [pid 5826] restart_syscall(<... resuming interrupted clone ...> [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6875, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 6877] ioctl(4, LOOP_SET_FD, 3 [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 5826] <... restart_syscall resumed>) = 0 [pid 5824] <... restart_syscall resumed>) = 0 [pid 6877] <... ioctl resumed>) = 0 [pid 5824] umount2("./203", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6877] close(3 [pid 5826] umount2("./208", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6877] <... close resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./203", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6877] close(4 [pid 5826] openat(AT_FDCWD, "./208", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] <... openat resumed>) = 3 [pid 6877] <... close resumed>) = 0 [pid 5826] <... openat resumed>) = 3 [pid 5824] newfstatat(3, "", [pid 6877] mkdir("./file0", 0777 [pid 5826] newfstatat(3, "", [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(3, [pid 5826] getdents64(3, [pid 6877] <... mkdir resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] <... rmdir resumed>) = 0 [pid 6877] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5826] umount2("./208/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./203/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5824] umount2("./203/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] mkdir("./208", 0777 [pid 5824] newfstatat(AT_FDCWD, "./203/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] umount2("./203/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./203/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5824] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] close(4) = 0 [pid 5824] rmdir("./203/file0") = 0 [pid 5824] umount2("./203/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] <... mkdir resumed>) = 0 [pid 5824] newfstatat(AT_FDCWD, "./203/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./203/binderfs") = 0 [pid 5824] getdents64(3, [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] close(3) = 0 [pid 5823] <... openat resumed>) = 3 [ 192.712134][ T6877] loop2: detected capacity change from 0 to 128 [pid 5824] rmdir("./203" [pid 5826] <... umount2 resumed>) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 5823] ioctl(3, LOOP_CLR_FD [pid 5824] mkdir("./204", 0777) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5824] ioctl(3, LOOP_CLR_FD) = 0 [pid 5824] close(3 [pid 5823] <... ioctl resumed>) = 0 [pid 5823] close(3 [pid 5826] umount2("./208/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... close resumed>) = 0 [pid 5823] <... close resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5826] newfstatat(AT_FDCWD, "./208/file0", [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6878 attached [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 6878 [pid 6878] set_robust_list(0x55557eba4660, 24) = 0 [pid 6878] chdir("./204"./strace-static-x86_64: Process 6879 attached ) = 0 [pid 5826] umount2("./208/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6879] set_robust_list(0x55557eba4660, 24 [pid 6878] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 6879 [pid 6879] <... set_robust_list resumed>) = 0 [pid 5826] openat(AT_FDCWD, "./208/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6879] chdir("./208" [pid 6878] <... prctl resumed>) = 0 [pid 5826] <... openat resumed>) = 4 [pid 6879] <... chdir resumed>) = 0 [pid 6878] setpgid(0, 0 [pid 5826] newfstatat(4, "", [pid 6878] <... setpgid resumed>) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6879] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5826] getdents64(4, [pid 6879] <... prctl resumed>) = 0 [pid 6879] setpgid(0, 0 [pid 6878] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 6879] <... setpgid resumed>) = 0 [pid 6878] <... openat resumed>) = 3 [pid 5826] getdents64(4, [pid 6879] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 6879] write(3, "1000", 4 [pid 5826] close(4 [pid 6879] <... write resumed>) = 4 [pid 5826] <... close resumed>) = 0 [pid 6879] close(3 [pid 5826] rmdir("./208/file0" [pid 6879] <... close resumed>) = 0 [pid 6878] write(3, "1000", 4) = 4 [pid 6879] symlink("/dev/binderfs", "./binderfs" [pid 6878] close(3 [pid 5826] <... rmdir resumed>) = 0 [pid 6879] <... symlink resumed>) = 0 [pid 6878] <... close resumed>) = 0 [pid 6877] <... mount resumed>) = 0 [pid 6876] <... sync resumed>) = 0 [pid 5826] umount2("./208/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6878] symlink("/dev/binderfs", "./binderfs" [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6879] write(1, "executing program\n", 18 [pid 6878] <... symlink resumed>) = 0 [pid 6877] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6876] exit_group(0 [pid 5826] newfstatat(AT_FDCWD, "./208/binderfs", [pid 6876] <... exit_group resumed>) = ? [pid 6877] <... openat resumed>) = 3 executing program [pid 6878] write(1, "executing program\n", 18) = 18 [pid 6878] memfd_create("syzkaller", 0 [pid 6876] +++ exited with 0 +++ executing program [pid 6879] <... write resumed>) = 18 [pid 6878] <... memfd_create resumed>) = 3 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./208/binderfs" [pid 6879] memfd_create("syzkaller", 0 [pid 6878] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6876, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6877] chdir("./file0" [pid 5826] <... unlink resumed>) = 0 [ 192.770867][ T6877] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [pid 6878] <... mmap resumed>) = 0x7f957a000000 [pid 5827] restart_syscall(<... resuming interrupted clone ...> [pid 6879] <... memfd_create resumed>) = 3 [pid 6878] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6877] <... chdir resumed>) = 0 [pid 5827] <... restart_syscall resumed>) = 0 [pid 5826] getdents64(3, [pid 6879] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6877] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 6879] <... mmap resumed>) = 0x7f957a000000 [pid 6878] <... write resumed>) = 65536 [pid 6877] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5826] close(3 [pid 6877] openat(AT_FDCWD, ".", O_RDONLY [pid 5826] <... close resumed>) = 0 [pid 5827] umount2("./203", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6877] <... openat resumed>) = 4 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] rmdir("./208" [pid 6878] munmap(0x7f957a000000, 138412032 [pid 6877] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5827] openat(AT_FDCWD, "./203", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6879] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6878] <... munmap resumed>) = 0 [pid 5827] <... openat resumed>) = 3 [pid 5826] <... rmdir resumed>) = 0 [pid 6878] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5827] newfstatat(3, "", [pid 5826] mkdir("./209", 0777 [pid 6878] <... openat resumed>) = 4 [pid 6877] <... renameat2 resumed>) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6878] ioctl(4, LOOP_SET_FD, 3 [pid 6877] sync( [pid 5827] getdents64(3, [pid 5826] <... mkdir resumed>) = 0 [pid 6879] <... write resumed>) = 65536 [pid 6879] munmap(0x7f957a000000, 138412032 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5827] umount2("./203/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6879] <... munmap resumed>) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 6879] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5826] ioctl(3, LOOP_CLR_FD) = 0 [pid 6879] <... openat resumed>) = 4 [pid 6879] ioctl(4, LOOP_SET_FD, 3 [pid 5826] close(3) = 0 [pid 6878] <... ioctl resumed>) = 0 [pid 6878] close(3) = 0 [pid 6878] close(4) = 0 [pid 6878] mkdir("./file0", 0777 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5827] <... umount2 resumed>) = 0 [pid 5827] umount2("./203/file0", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6880 attached [pid 6879] <... ioctl resumed>) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6879] close(3 [pid 5827] newfstatat(AT_FDCWD, "./203/file0", [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 6880 [pid 6879] <... close resumed>) = 0 [pid 6878] <... mkdir resumed>) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6880] set_robust_list(0x55557eba4660, 24 [pid 6879] close(4 [pid 6878] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6880] <... set_robust_list resumed>) = 0 [pid 6879] <... close resumed>) = 0 [pid 5827] umount2("./203/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6879] mkdir("./file0", 0777 [pid 6880] chdir("./209" [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6880] <... chdir resumed>) = 0 [pid 5827] openat(AT_FDCWD, "./203/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6880] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5827] <... openat resumed>) = 4 [pid 6880] <... prctl resumed>) = 0 [pid 5827] newfstatat(4, "", [pid 6880] setpgid(0, 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6880] <... setpgid resumed>) = 0 [pid 5827] getdents64(4, [pid 6880] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 6880] <... openat resumed>) = 3 [pid 5827] getdents64(4, [pid 6880] write(3, "1000", 4 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 6880] <... write resumed>) = 4 [pid 5827] close(4 [pid 6880] close(3 [pid 5827] <... close resumed>) = 0 [pid 6880] <... close resumed>) = 0 [pid 5827] rmdir("./203/file0" [pid 6880] symlink("/dev/binderfs", "./binderfs" [pid 5827] <... rmdir resumed>) = 0 [pid 6880] <... symlink resumed>) = 0 [pid 6879] <... mkdir resumed>) = 0 [pid 5827] umount2("./203/binderfs", MNT_FORCE|UMOUNT_NOFOLLOWexecuting program [pid 6880] write(1, "executing program\n", 18 [pid 6879] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6880] <... write resumed>) = 18 [pid 6880] memfd_create("syzkaller", 0 [pid 5827] newfstatat(AT_FDCWD, "./203/binderfs", [pid 6880] <... memfd_create resumed>) = 3 [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 192.844004][ T6878] loop1: detected capacity change from 0 to 128 [ 192.859665][ T6879] loop0: detected capacity change from 0 to 128 [ 192.881428][ T6878] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [pid 5827] unlink("./203/binderfs" [pid 6880] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5827] <... unlink resumed>) = 0 [pid 6880] <... mmap resumed>) = 0x7f957a000000 [pid 6880] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5827] getdents64(3, [pid 6880] <... write resumed>) = 65536 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 6880] munmap(0x7f957a000000, 138412032 [pid 5827] close(3 [pid 6880] <... munmap resumed>) = 0 [pid 5827] <... close resumed>) = 0 [pid 6880] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5827] rmdir("./203" [pid 6880] <... openat resumed>) = 4 [pid 5827] <... rmdir resumed>) = 0 [pid 6880] ioctl(4, LOOP_SET_FD, 3 [pid 5827] mkdir("./204", 0777) = 0 [pid 6878] <... mount resumed>) = 0 [pid 6878] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6878] chdir("./file0" [pid 6879] <... mount resumed>) = 0 [pid 6878] <... chdir resumed>) = 0 [pid 6878] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6878] openat(AT_FDCWD, ".", O_RDONLY [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6878] <... openat resumed>) = 4 [pid 6877] <... sync resumed>) = 0 [pid 5827] <... openat resumed>) = 3 [pid 6878] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5827] ioctl(3, LOOP_CLR_FD) = 0 [pid 5827] close(3 [pid 6879] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6877] exit_group(0 [pid 5827] <... close resumed>) = 0 [pid 6879] <... openat resumed>) = 3 [pid 6877] <... exit_group resumed>) = ? [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6880] <... ioctl resumed>) = 0 [pid 6879] chdir("./file0" [pid 6877] +++ exited with 0 +++ [pid 6879] <... chdir resumed>) = 0 [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6877, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 6880] close(3 [pid 6879] openat(AT_FDCWD, "/dev/loop0", O_RDWR./strace-static-x86_64: Process 6881 attached ) = -1 EBUSY (Device or resource busy) [pid 6881] set_robust_list(0x55557eba4660, 24 [pid 6880] <... close resumed>) = 0 [pid 6879] openat(AT_FDCWD, ".", O_RDONLY [pid 6881] <... set_robust_list resumed>) = 0 [pid 6878] <... renameat2 resumed>) = 0 [pid 6879] <... openat resumed>) = 4 [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 6881 [pid 6878] sync( [pid 6881] chdir("./204" [pid 6879] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5825] umount2("./207", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6881] <... chdir resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6881] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5825] openat(AT_FDCWD, "./207", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6881] setpgid(0, 0) = 0 [pid 6880] close(4 [pid 5825] <... openat resumed>) = 3 [pid 6881] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6880] <... close resumed>) = 0 [ 192.907021][ T6879] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 192.919162][ T6880] loop3: detected capacity change from 0 to 128 [pid 5825] newfstatat(3, "", [pid 6881] <... openat resumed>) = 3 [pid 6880] mkdir("./file0", 0777 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(3, [pid 6879] <... renameat2 resumed>) = 0 [pid 6880] <... mkdir resumed>) = 0 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 6880] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6881] write(3, "1000", 4 [pid 6879] sync( [pid 5825] umount2("./207/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6881] <... write resumed>) = 4 [pid 6881] close(3) = 0 [pid 6881] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6881] write(1, "executing program\n", 18executing program ) = 18 [pid 6881] memfd_create("syzkaller", 0) = 3 [pid 5825] <... umount2 resumed>) = 0 [pid 5825] umount2("./207/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6881] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./207/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] umount2("./207/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6881] <... mmap resumed>) = 0x7f957a000000 [pid 5825] openat(AT_FDCWD, "./207/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6880] <... mount resumed>) = 0 [pid 6878] <... sync resumed>) = 0 [pid 5825] <... openat resumed>) = 4 [pid 6878] exit_group(0 [pid 5825] newfstatat(4, "", [pid 6880] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6878] <... exit_group resumed>) = ? [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6878] +++ exited with 0 +++ [pid 5825] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6878, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5825] getdents64(4, [pid 6880] <... openat resumed>) = 3 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 6880] chdir("./file0" [pid 5825] close(4 [pid 5824] umount2("./204", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6880] <... chdir resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6880] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5825] rmdir("./207/file0" [pid 5824] openat(AT_FDCWD, "./204", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6880] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5825] <... rmdir resumed>) = 0 [pid 5824] <... openat resumed>) = 3 [pid 6879] <... sync resumed>) = 0 [pid 5824] newfstatat(3, "", [pid 6880] openat(AT_FDCWD, ".", O_RDONLY [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 192.978275][ T6880] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [pid 5824] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 6879] exit_group(0 [pid 6880] <... openat resumed>) = 4 [pid 5824] umount2("./204/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6881] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6880] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6879] <... exit_group resumed>) = ? [pid 5825] umount2("./207/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./207/binderfs", [pid 6880] <... renameat2 resumed>) = 0 [pid 6879] +++ exited with 0 +++ [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6880] sync( [pid 5825] unlink("./207/binderfs" [pid 5824] <... umount2 resumed>) = 0 [pid 6881] <... write resumed>) = 65536 [pid 5825] <... unlink resumed>) = 0 [pid 5824] umount2("./204/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6879, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5825] getdents64(3, [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] newfstatat(AT_FDCWD, "./204/file0", [pid 5825] close(3 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... close resumed>) = 0 [pid 5824] umount2("./204/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] rmdir("./207" [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... rmdir resumed>) = 0 [pid 5824] openat(AT_FDCWD, "./204/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] mkdir("./208", 0777 [pid 5824] <... openat resumed>) = 4 [pid 5825] <... mkdir resumed>) = 0 [pid 5824] newfstatat(4, "", [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] <... openat resumed>) = 3 [pid 5824] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] close(4) = 0 [pid 5824] rmdir("./204/file0") = 0 [pid 5824] umount2("./204/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6881] munmap(0x7f957a000000, 138412032 [pid 5823] <... restart_syscall resumed>) = 0 [pid 5824] newfstatat(AT_FDCWD, "./204/binderfs", [pid 6881] <... munmap resumed>) = 0 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6881] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6880] <... sync resumed>) = 0 [pid 5825] <... ioctl resumed>) = 0 [pid 5824] unlink("./204/binderfs" [pid 6881] <... openat resumed>) = 4 [pid 6880] exit_group(0 [pid 5825] close(3 [pid 5824] <... unlink resumed>) = 0 [pid 6881] ioctl(4, LOOP_SET_FD, 3 [pid 6880] <... exit_group resumed>) = ? [pid 5825] <... close resumed>) = 0 [pid 5824] getdents64(3, [pid 5823] umount2("./208", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6880] +++ exited with 0 +++ [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] close(3 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6882 attached [pid 5824] <... close resumed>) = 0 [pid 5824] rmdir("./204" [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6880, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5824] <... rmdir resumed>) = 0 [pid 5823] openat(AT_FDCWD, "./208", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6882] set_robust_list(0x55557eba4660, 24 [pid 5826] restart_syscall(<... resuming interrupted clone ...> [pid 5823] <... openat resumed>) = 3 [pid 6882] <... set_robust_list resumed>) = 0 [pid 5826] <... restart_syscall resumed>) = 0 [pid 5823] newfstatat(3, "", [pid 6882] chdir("./208" [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 6882 [pid 5824] mkdir("./205", 0777 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6882] <... chdir resumed>) = 0 [pid 5826] umount2("./209", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... mkdir resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] getdents64(3, [pid 6882] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5826] openat(AT_FDCWD, "./209", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 6882] <... prctl resumed>) = 0 [pid 5826] <... openat resumed>) = 3 [pid 5823] umount2("./208/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6882] setpgid(0, 0) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6882] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5826] newfstatat(3, "", [pid 5824] <... openat resumed>) = 3 [pid 6882] <... openat resumed>) = 3 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] ioctl(3, LOOP_CLR_FD [pid 6882] write(3, "1000", 4 [pid 5826] getdents64(3, [pid 5824] <... ioctl resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 6882] <... write resumed>) = 4 [pid 5826] umount2("./209/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] close(3 [pid 6882] close(3 [pid 5824] <... close resumed>) = 0 [pid 6882] <... close resumed>) = 0 [pid 6882] symlink("/dev/binderfs", "./binderfs" [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6882] <... symlink resumed>) = 0 ./strace-static-x86_64: Process 6883 attached [pid 6882] write(1, "executing program\n", 18executing program [pid 6883] set_robust_list(0x55557eba4660, 24 [pid 6882] <... write resumed>) = 18 [pid 6883] <... set_robust_list resumed>) = 0 [pid 6882] memfd_create("syzkaller", 0 [pid 5823] <... umount2 resumed>) = 0 [pid 6883] chdir("./205" [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 6883 [pid 6882] <... memfd_create resumed>) = 3 [pid 5823] umount2("./208/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6882] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 6883] <... chdir resumed>) = 0 [pid 6883] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6882] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6883] <... prctl resumed>) = 0 [pid 6883] setpgid(0, 0) = 0 [pid 6883] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6882] <... write resumed>) = 65536 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6883] write(3, "1000", 4) = 4 [pid 6883] close(3) = 0 [pid 6883] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5823] newfstatat(AT_FDCWD, "./208/file0", [pid 6882] munmap(0x7f957a000000, 138412032) = 0 executing program [pid 6882] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6883] write(1, "executing program\n", 18) = 18 [ 193.078857][ T6881] loop4: detected capacity change from 0 to 128 [pid 6883] memfd_create("syzkaller", 0) = 3 [pid 6881] <... ioctl resumed>) = 0 [pid 5826] <... umount2 resumed>) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] umount2("./209/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] umount2("./208/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6881] close(3 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6881] <... close resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./209/file0", [pid 6881] close(4 [pid 5823] openat(AT_FDCWD, "./208/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] umount2("./209/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... openat resumed>) = 4 [pid 6882] <... openat resumed>) = 4 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(4, "", [pid 6883] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6882] ioctl(4, LOOP_SET_FD, 3 [pid 5826] openat(AT_FDCWD, "./209/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6883] <... mmap resumed>) = 0x7f957a000000 [pid 6882] <... ioctl resumed>) = 0 [pid 6881] <... close resumed>) = 0 [pid 5826] <... openat resumed>) = 4 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6881] mkdir("./file0", 0777 [pid 5826] newfstatat(4, "", [pid 6882] close(3 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(4, [pid 6883] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6882] <... close resumed>) = 0 [pid 6881] <... mkdir resumed>) = 0 [pid 5826] getdents64(4, [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] getdents64(4, [pid 5826] getdents64(4, [pid 6882] close(4) = 0 [pid 6883] <... write resumed>) = 65536 [pid 6882] mkdir("./file0", 0777 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] close(4 [pid 6883] munmap(0x7f957a000000, 138412032 [pid 6882] <... mkdir resumed>) = 0 [pid 5826] close(4 [pid 5823] <... close resumed>) = 0 [pid 6883] <... munmap resumed>) = 0 [pid 6882] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5826] <... close resumed>) = 0 [pid 5823] rmdir("./208/file0" [pid 5826] rmdir("./209/file0" [pid 6883] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6881] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5826] <... rmdir resumed>) = 0 [pid 5823] <... rmdir resumed>) = 0 [pid 6883] <... openat resumed>) = 4 [pid 5826] umount2("./209/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] umount2("./208/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6883] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 6883] ioctl(4, LOOP_CLR_FD) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./208/binderfs", [pid 5826] newfstatat(AT_FDCWD, "./209/binderfs", [pid 6883] ioctl(4, LOOP_SET_FD, 3 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./209/binderfs" [pid 5823] unlink("./208/binderfs" [pid 6883] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 6883] close(4 [pid 5823] <... unlink resumed>) = 0 [pid 6883] <... close resumed>) = 0 [pid 5826] <... unlink resumed>) = 0 [pid 5823] getdents64(3, [pid 5826] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [ 193.145767][ T6882] loop2: detected capacity change from 0 to 128 [ 193.164988][ T6882] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [pid 6883] close(3 [pid 5826] close(3 [pid 5823] close(3 [pid 6883] <... close resumed>) = 0 [pid 6883] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 5823] <... close resumed>) = 0 [pid 5826] <... close resumed>) = 0 [pid 5823] rmdir("./208" [pid 5826] rmdir("./209" [pid 6883] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = -1 ENOENT (No such file or directory) [pid 6883] sync( [pid 5823] <... rmdir resumed>) = 0 [pid 5826] <... rmdir resumed>) = 0 [pid 5823] mkdir("./209", 0777 [pid 5826] mkdir("./210", 0777 [pid 5823] <... mkdir resumed>) = 0 [pid 6882] <... mount resumed>) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6882] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5826] <... mkdir resumed>) = 0 [pid 5823] <... openat resumed>) = 3 [pid 6882] <... openat resumed>) = 3 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5823] ioctl(3, LOOP_CLR_FD [pid 6882] chdir("./file0") = 0 [pid 6882] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6882] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 6882] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = 0 [pid 5826] <... openat resumed>) = 3 [pid 5823] <... ioctl resumed>) = 0 [pid 5826] ioctl(3, LOOP_CLR_FD [pid 5823] close(3 [pid 6882] sync( [pid 5826] <... ioctl resumed>) = 0 [pid 5823] <... close resumed>) = 0 [pid 5826] close(3 [ 193.191418][ T6881] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5826] <... close resumed>) = 0 [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 6884 ./strace-static-x86_64: Process 6884 attached [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6884] set_robust_list(0x55557eba4660, 24) = 0 ./strace-static-x86_64: Process 6885 attached [pid 6884] chdir("./209" [pid 6885] set_robust_list(0x55557eba4660, 24 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 6885 [pid 6885] <... set_robust_list resumed>) = 0 [pid 6885] chdir("./210" [pid 6884] <... chdir resumed>) = 0 [pid 6881] <... mount resumed>) = 0 [pid 6885] <... chdir resumed>) = 0 [pid 6881] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6885] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6884] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6881] <... openat resumed>) = 3 [pid 6885] setpgid(0, 0 [pid 6881] chdir("./file0" [pid 6885] <... setpgid resumed>) = 0 [pid 6881] <... chdir resumed>) = 0 [pid 6885] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6884] setpgid(0, 0 [pid 6881] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6885] <... openat resumed>) = 3 [pid 6884] <... setpgid resumed>) = 0 [pid 6881] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6884] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6881] openat(AT_FDCWD, ".", O_RDONLY [pid 6885] write(3, "1000", 4 [pid 6884] <... openat resumed>) = 3 [pid 6881] <... openat resumed>) = 4 [pid 6885] <... write resumed>) = 4 [pid 6881] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6885] close(3 [pid 6884] write(3, "1000", 4 [pid 6885] <... close resumed>) = 0 [pid 6884] <... write resumed>) = 4 [pid 6881] <... renameat2 resumed>) = 0 [pid 6885] symlink("/dev/binderfs", "./binderfs" [pid 6884] close(3 [pid 6881] sync( [pid 6884] <... close resumed>) = 0 [pid 6884] symlink("/dev/binderfs", "./binderfs" [pid 6883] <... sync resumed>) = 0 [pid 6882] <... sync resumed>) = 0 [pid 6884] <... symlink resumed>) = 0 [pid 6883] exit_group(0executing program [pid 6884] write(1, "executing program\n", 18 [pid 6883] <... exit_group resumed>) = ? [pid 6882] exit_group(0 [pid 6885] <... symlink resumed>) = 0 [pid 6883] +++ exited with 0 +++ [pid 6884] <... write resumed>) = 18 executing program [pid 6882] <... exit_group resumed>) = ? [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6883, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6885] write(1, "executing program\n", 18 [pid 6884] memfd_create("syzkaller", 0 [pid 6885] <... write resumed>) = 18 [pid 6884] <... memfd_create resumed>) = 3 [pid 6884] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6885] memfd_create("syzkaller", 0 [pid 6884] <... mmap resumed>) = 0x7f957a000000 [pid 6882] +++ exited with 0 +++ [pid 5824] umount2("./205", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6885] <... memfd_create resumed>) = 3 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6885] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6884] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6882, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5824] openat(AT_FDCWD, "./205", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] umount2("./208", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... openat resumed>) = 3 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(3, "", [pid 5825] openat(AT_FDCWD, "./208", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] <... openat resumed>) = 3 [pid 5824] getdents64(3, [pid 5825] newfstatat(3, "", [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 6885] <... mmap resumed>) = 0x7f957a000000 [pid 6881] <... sync resumed>) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6884] <... write resumed>) = 65536 [pid 6885] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6881] exit_group(0 [pid 5825] getdents64(3, [pid 6881] <... exit_group resumed>) = ? [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] umount2("./205/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6884] munmap(0x7f957a000000, 138412032 [pid 5825] umount2("./208/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6885] <... write resumed>) = 65536 [pid 6884] <... munmap resumed>) = 0 [pid 5824] newfstatat(AT_FDCWD, "./205/binderfs", [pid 6884] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6885] munmap(0x7f957a000000, 138412032 [pid 6884] <... openat resumed>) = 4 [pid 5824] unlink("./205/binderfs" [pid 6884] ioctl(4, LOOP_SET_FD, 3 [pid 5824] <... unlink resumed>) = 0 [pid 6885] <... munmap resumed>) = 0 [pid 6881] +++ exited with 0 +++ [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6881, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5824] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] close(3) = 0 [pid 6885] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5824] rmdir("./205" [pid 6885] <... openat resumed>) = 4 [pid 5825] <... umount2 resumed>) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 6885] ioctl(4, LOOP_SET_FD, 3 [pid 5825] umount2("./208/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./208/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] mkdir("./206", 0777 [pid 5825] umount2("./208/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... mkdir resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./208/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5825] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5825] getdents64(4, [pid 5824] <... openat resumed>) = 3 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5825] getdents64(4, [pid 5827] umount2("./204", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] close(3 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] close(4 [pid 5824] <... close resumed>) = 0 [pid 5827] openat(AT_FDCWD, "./204", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5827] newfstatat(3, "", [pid 5825] <... close resumed>) = 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5825] rmdir("./208/file0" [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] <... rmdir resumed>) = 0 [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 6886 ./strace-static-x86_64: Process 6886 attached [pid 5827] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5825] umount2("./208/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6886] set_robust_list(0x55557eba4660, 24 [pid 5827] umount2("./204/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6886] <... set_robust_list resumed>) = 0 [pid 5825] newfstatat(AT_FDCWD, "./208/binderfs", [pid 6886] chdir("./206" [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./208/binderfs" [pid 5827] <... umount2 resumed>) = 0 [pid 5825] <... unlink resumed>) = 0 [pid 5825] getdents64(3, [pid 6886] <... chdir resumed>) = 0 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 6886] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5825] close(3 [pid 6886] <... prctl resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 6886] setpgid(0, 0 [pid 5827] umount2("./204/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] rmdir("./208" [pid 6886] <... setpgid resumed>) = 0 [pid 6885] <... ioctl resumed>) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... rmdir resumed>) = 0 [pid 6886] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6886] write(3, "1000", 4) = 4 [pid 6886] close(3) = 0 [pid 6886] symlink("/dev/binderfs", "./binderfs" [pid 5825] mkdir("./209", 0777 [pid 6886] <... symlink resumed>) = 0 [pid 5825] <... mkdir resumed>) = 0 executing program [pid 5827] newfstatat(AT_FDCWD, "./204/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6886] write(1, "executing program\n", 18 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6886] <... write resumed>) = 18 [pid 6886] memfd_create("syzkaller", 0 [pid 5825] <... openat resumed>) = 3 [pid 5827] umount2("./204/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6885] close(3 [pid 6884] <... ioctl resumed>) = 0 [ 193.354958][ T6885] loop3: detected capacity change from 0 to 128 [ 193.363421][ T6884] loop0: detected capacity change from 0 to 128 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 6886] <... memfd_create resumed>) = 3 [pid 6885] <... close resumed>) = 0 [pid 6884] close(3 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... ioctl resumed>) = 0 [pid 6885] close(4 [pid 6884] <... close resumed>) = 0 [pid 5827] openat(AT_FDCWD, "./204/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6885] <... close resumed>) = 0 [pid 6884] close(4) = 0 [pid 6884] mkdir("./file0", 0777 [pid 5827] <... openat resumed>) = 4 [pid 5825] close(3 [pid 6884] <... mkdir resumed>) = 0 [pid 5827] newfstatat(4, "", [pid 5825] <... close resumed>) = 0 [pid 6886] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6885] mkdir("./file0", 0777 [pid 5827] getdents64(4, [pid 6886] <... mmap resumed>) = 0x7f957a000000 [pid 6886] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 6886] <... write resumed>) = 65536 [pid 6885] <... mkdir resumed>) = 0 [pid 5827] getdents64(4, [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 6887 [pid 6886] munmap(0x7f957a000000, 138412032) = 0 [pid 6886] openat(AT_FDCWD, "/dev/loop1", O_RDWR./strace-static-x86_64: Process 6887 attached [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 6887] set_robust_list(0x55557eba4660, 24 [pid 6886] <... openat resumed>) = 4 [pid 6885] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6884] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5827] close(4 [pid 6886] ioctl(4, LOOP_SET_FD, 3 [pid 5827] <... close resumed>) = 0 [pid 5827] rmdir("./204/file0" [pid 6887] <... set_robust_list resumed>) = 0 [pid 5827] <... rmdir resumed>) = 0 [pid 6887] chdir("./209" [pid 6885] <... mount resumed>) = 0 [pid 6886] <... ioctl resumed>) = 0 [pid 6885] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6886] close(3 [pid 6885] <... openat resumed>) = 3 [pid 6886] <... close resumed>) = 0 [pid 6885] chdir("./file0" [pid 6886] close(4 [pid 6885] <... chdir resumed>) = 0 [pid 6887] <... chdir resumed>) = 0 [pid 5827] umount2("./204/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6886] <... close resumed>) = 0 [pid 6885] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6886] mkdir("./file0", 0777 [pid 6885] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6886] <... mkdir resumed>) = 0 [pid 6885] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 6885] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6886] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6885] <... renameat2 resumed>) = 0 [ 193.427086][ T6886] loop1: detected capacity change from 0 to 128 [ 193.433380][ T6885] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 193.437333][ T6884] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [pid 6887] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] newfstatat(AT_FDCWD, "./204/binderfs", [pid 6887] <... prctl resumed>) = 0 [pid 6885] sync( [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6887] setpgid(0, 0) = 0 [pid 5827] unlink("./204/binderfs" [pid 6887] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6884] <... mount resumed>) = 0 [pid 5827] <... unlink resumed>) = 0 [pid 6887] write(3, "1000", 4 [pid 6884] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6887] <... write resumed>) = 4 [pid 6887] close(3 [pid 6884] <... openat resumed>) = 3 [pid 6887] <... close resumed>) = 0 [pid 5827] getdents64(3, [pid 6887] symlink("/dev/binderfs", "./binderfs" [pid 6884] chdir("./file0" [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 6887] <... symlink resumed>) = 0 [pid 6884] <... chdir resumed>) = 0 [pid 5827] close(3 [pid 6887] write(1, "executing program\n", 18 [pid 6884] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5827] <... close resumed>) = 0 executing program [pid 6887] <... write resumed>) = 18 [pid 6884] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 193.472361][ T6886] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [pid 5827] rmdir("./204" [pid 6887] memfd_create("syzkaller", 0 [pid 6884] openat(AT_FDCWD, ".", O_RDONLY [pid 5827] <... rmdir resumed>) = 0 [pid 6887] <... memfd_create resumed>) = 3 [pid 6887] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6884] <... openat resumed>) = 4 [pid 5827] mkdir("./205", 0777 [pid 6887] <... mmap resumed>) = 0x7f957a000000 [pid 6887] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5827] <... mkdir resumed>) = 0 [pid 6887] <... write resumed>) = 65536 [pid 6884] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6887] munmap(0x7f957a000000, 138412032) = 0 [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6887] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5827] <... openat resumed>) = 3 [pid 6887] <... openat resumed>) = 4 [pid 5827] ioctl(3, LOOP_CLR_FD) = 0 [pid 6887] ioctl(4, LOOP_SET_FD, 3 [pid 6886] <... mount resumed>) = 0 [pid 5827] close(3 [pid 6886] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6886] chdir("./file0" [pid 6887] <... ioctl resumed>) = 0 [pid 6886] <... chdir resumed>) = 0 [pid 6884] <... renameat2 resumed>) = 0 [pid 5827] <... close resumed>) = 0 [pid 6886] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6887] close(3 [pid 6886] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6887] <... close resumed>) = 0 [pid 6886] openat(AT_FDCWD, ".", O_RDONLY./strace-static-x86_64: Process 6888 attached [pid 6887] close(4 [pid 6886] <... openat resumed>) = 4 [pid 6885] <... sync resumed>) = 0 [pid 6884] sync( [pid 6887] <... close resumed>) = 0 [pid 6886] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6885] exit_group(0 [pid 6888] set_robust_list(0x55557eba4660, 24 [pid 6887] mkdir("./file0", 0777 [pid 6884] <... sync resumed>) = 0 [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 6888 [pid 6888] <... set_robust_list resumed>) = 0 [pid 6887] <... mkdir resumed>) = 0 [pid 6885] <... exit_group resumed>) = ? [pid 6884] exit_group(0 [pid 6888] chdir("./205" [pid 6887] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6886] <... renameat2 resumed>) = 0 [pid 6885] +++ exited with 0 +++ [pid 6888] <... chdir resumed>) = 0 [pid 6884] <... exit_group resumed>) = ? [ 193.535830][ T6887] loop2: detected capacity change from 0 to 128 [pid 6888] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6884] +++ exited with 0 +++ [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6885, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6886] sync( [pid 5826] restart_syscall(<... resuming interrupted clone ...> [pid 6888] <... prctl resumed>) = 0 [pid 5826] <... restart_syscall resumed>) = 0 [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6884, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6888] setpgid(0, 0) = 0 [pid 5823] umount2("./209", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] umount2("./210", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6888] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./209", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6888] <... openat resumed>) = 3 [pid 6888] write(3, "1000", 4 [pid 5826] openat(AT_FDCWD, "./210", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] <... openat resumed>) = 3 [pid 6888] <... write resumed>) = 4 [pid 5826] <... openat resumed>) = 3 [pid 5823] newfstatat(3, "", [pid 6888] close(3 [pid 5826] newfstatat(3, "", [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(3, [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 6888] <... close resumed>) = 0 [pid 5823] umount2("./209/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6888] symlink("/dev/binderfs", "./binderfs" [pid 5826] getdents64(3, [pid 6888] <... symlink resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 6888] write(1, "executing program\n", 18 [pid 5826] umount2("./210/file0", MNT_FORCE|UMOUNT_NOFOLLOWexecuting program [pid 6888] <... write resumed>) = 18 [pid 6888] memfd_create("syzkaller", 0) = 3 [pid 6888] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 6888] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 6888] munmap(0x7f957a000000, 138412032) = 0 [pid 6888] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 193.589816][ T6887] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [pid 6888] ioctl(4, LOOP_SET_FD, 3 [pid 5823] <... umount2 resumed>) = 0 [pid 5826] <... umount2 resumed>) = 0 [pid 5823] umount2("./209/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6887] <... mount resumed>) = 0 [pid 5826] umount2("./210/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./209/file0", [pid 5826] newfstatat(AT_FDCWD, "./210/file0", [pid 6887] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6888] <... ioctl resumed>) = 0 [pid 5823] umount2("./209/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6888] close(3 [pid 5826] umount2("./210/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6888] <... close resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6887] <... openat resumed>) = 3 [pid 6888] close(4 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./209/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] openat(AT_FDCWD, "./210/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6888] <... close resumed>) = 0 [pid 6888] mkdir("./file0", 0777 [pid 5826] <... openat resumed>) = 4 [pid 5823] <... openat resumed>) = 4 [pid 5826] newfstatat(4, "", [pid 6887] chdir("./file0" [pid 5823] newfstatat(4, "", [pid 6888] <... mkdir resumed>) = 0 [pid 6887] <... chdir resumed>) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6888] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6887] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5826] getdents64(4, [pid 5823] getdents64(4, [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5826] getdents64(4, [pid 5823] getdents64(4, [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 6887] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5826] close(4 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 6887] openat(AT_FDCWD, ".", O_RDONLY [pid 5826] <... close resumed>) = 0 [pid 5823] close(4 [pid 5826] rmdir("./210/file0" [pid 5823] <... close resumed>) = 0 [pid 5826] <... rmdir resumed>) = 0 [pid 5823] rmdir("./209/file0" [ 193.647080][ T6888] loop4: detected capacity change from 0 to 128 [pid 5826] umount2("./210/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] <... rmdir resumed>) = 0 [pid 5826] newfstatat(AT_FDCWD, "./210/binderfs", [pid 5823] umount2("./209/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6887] <... openat resumed>) = 4 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] newfstatat(AT_FDCWD, "./209/binderfs", [pid 5826] unlink("./210/binderfs" [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6887] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5826] <... unlink resumed>) = 0 [pid 5823] unlink("./209/binderfs" [pid 5826] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] <... unlink resumed>) = 0 [pid 6887] <... renameat2 resumed>) = 0 [pid 5826] close(3 [pid 5823] getdents64(3, [pid 5826] <... close resumed>) = 0 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 6887] sync( [pid 5826] rmdir("./210" [pid 5823] close(3) = 0 [pid 5826] <... rmdir resumed>) = 0 [pid 5823] rmdir("./209" [pid 5826] mkdir("./211", 0777 [pid 5823] <... rmdir resumed>) = 0 [pid 5826] <... mkdir resumed>) = 0 [pid 5823] mkdir("./210", 0777) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5826] <... openat resumed>) = 3 [pid 5823] <... openat resumed>) = 3 [pid 5823] ioctl(3, LOOP_CLR_FD) = 0 [pid 6888] <... mount resumed>) = 0 [pid 6886] <... sync resumed>) = 0 [pid 5826] ioctl(3, LOOP_CLR_FD [pid 5823] close(3 [pid 6888] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6886] exit_group(0 [pid 5826] <... ioctl resumed>) = 0 [pid 5823] <... close resumed>) = 0 [pid 6886] <... exit_group resumed>) = ? [pid 5826] close(3 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6889 attached [pid 5826] <... close resumed>) = 0 [pid 6889] set_robust_list(0x55557eba4660, 24 [pid 6888] <... openat resumed>) = 3 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 6889 [pid 6889] <... set_robust_list resumed>) = 0 [ 193.701737][ T6888] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [pid 6889] chdir("./210"./strace-static-x86_64: Process 6890 attached [pid 6890] set_robust_list(0x55557eba4660, 24 [pid 6889] <... chdir resumed>) = 0 [pid 6888] chdir("./file0" [pid 6887] <... sync resumed>) = 0 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 6890 [pid 6890] <... set_robust_list resumed>) = 0 [pid 6889] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6888] <... chdir resumed>) = 0 [pid 6887] exit_group(0) = ? [pid 6886] +++ exited with 0 +++ [pid 6889] <... prctl resumed>) = 0 [pid 6888] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6890] chdir("./211" [pid 6889] setpgid(0, 0 [pid 6888] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6886, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6889] <... setpgid resumed>) = 0 [pid 6888] openat(AT_FDCWD, ".", O_RDONLY [pid 5824] umount2("./206", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6889] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6888] <... openat resumed>) = 4 [pid 5824] openat(AT_FDCWD, "./206", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6889] <... openat resumed>) = 3 [pid 5824] <... openat resumed>) = 3 [pid 6890] <... chdir resumed>) = 0 [pid 6889] write(3, "1000", 4 [pid 6888] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6887] +++ exited with 0 +++ [pid 5824] newfstatat(3, "", [pid 6890] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6889] <... write resumed>) = 4 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6890] <... prctl resumed>) = 0 [pid 6889] close(3 [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6887, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5824] getdents64(3, [pid 6890] setpgid(0, 0 [pid 6889] <... close resumed>) = 0 [pid 5825] restart_syscall(<... resuming interrupted clone ...> [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 6890] <... setpgid resumed>) = 0 [pid 6889] symlink("/dev/binderfs", "./binderfs" [pid 6888] <... renameat2 resumed>) = 0 [pid 5825] <... restart_syscall resumed>) = 0 [pid 5824] umount2("./206/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6890] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6889] <... symlink resumed>) = 0 [pid 6888] sync( [pid 6890] <... openat resumed>) = 3 [pid 6890] write(3, "1000", 4 [pid 6889] write(1, "executing program\n", 18 [pid 5825] umount2("./209", MNT_FORCE|UMOUNT_NOFOLLOWexecuting program [pid 6890] <... write resumed>) = 4 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... umount2 resumed>) = 0 [pid 6890] close(3 [pid 6889] <... write resumed>) = 18 [pid 5824] umount2("./206/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6890] <... close resumed>) = 0 [pid 6890] symlink("/dev/binderfs", "./binderfs" [pid 6889] memfd_create("syzkaller", 0 [pid 6888] <... sync resumed>) = 0 [pid 5825] openat(AT_FDCWD, "./209", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6890] <... symlink resumed>) = 0 executing program [pid 6889] <... memfd_create resumed>) = 3 [pid 6888] exit_group(0 [pid 5825] <... openat resumed>) = 3 [pid 5824] newfstatat(AT_FDCWD, "./206/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] umount2("./206/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./206/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5824] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6888] <... exit_group resumed>) = ? [pid 5824] getdents64(4, [pid 6890] write(1, "executing program\n", 18 [pid 6888] +++ exited with 0 +++ [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 6890] <... write resumed>) = 18 [pid 5824] getdents64(4, [pid 6890] memfd_create("syzkaller", 0 [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6888, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6890] <... memfd_create resumed>) = 3 [pid 5827] restart_syscall(<... resuming interrupted clone ...> [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 6890] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5824] close(4 [pid 6890] <... mmap resumed>) = 0x7f957a000000 [pid 5824] <... close resumed>) = 0 [pid 6890] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5824] rmdir("./206/file0" [pid 6889] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5824] <... rmdir resumed>) = 0 [pid 6890] <... write resumed>) = 65536 [pid 6889] <... mmap resumed>) = 0x7f957a000000 [pid 6890] munmap(0x7f957a000000, 138412032 [pid 6889] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5824] umount2("./206/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6890] <... munmap resumed>) = 0 [pid 5827] <... restart_syscall resumed>) = 0 [pid 6890] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6890] <... openat resumed>) = 4 [pid 6889] <... write resumed>) = 65536 [pid 5824] newfstatat(AT_FDCWD, "./206/binderfs", [pid 6890] ioctl(4, LOOP_SET_FD, 3 [pid 5827] umount2("./205", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] newfstatat(3, "", [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6889] munmap(0x7f957a000000, 138412032 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6889] <... munmap resumed>) = 0 [pid 5827] openat(AT_FDCWD, "./205", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] unlink("./206/binderfs" [pid 6889] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5827] <... openat resumed>) = 3 [pid 5825] getdents64(3, [pid 5824] <... unlink resumed>) = 0 [pid 6889] <... openat resumed>) = 4 [pid 5827] newfstatat(3, "", [pid 5824] getdents64(3, [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5827] getdents64(3, [pid 5824] close(3 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] <... close resumed>) = 0 [pid 6890] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 6889] ioctl(4, LOOP_SET_FD, 3 [pid 5827] umount2("./205/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./209/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6890] ioctl(4, LOOP_CLR_FD [pid 6889] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5824] rmdir("./206" [pid 6890] <... ioctl resumed>) = 0 [pid 6889] ioctl(4, LOOP_CLR_FD [pid 5824] <... rmdir resumed>) = 0 [pid 6889] <... ioctl resumed>) = 0 [pid 5824] mkdir("./207", 0777 [pid 6890] ioctl(4, LOOP_SET_FD, 3 [pid 6889] ioctl(4, LOOP_SET_FD, 3 [pid 6890] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 6889] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 6890] close(4 [pid 6889] close(4 [pid 5824] <... mkdir resumed>) = 0 [pid 6890] <... close resumed>) = 0 [pid 6889] <... close resumed>) = 0 [pid 6889] close(3 [pid 6890] close(3 [pid 6889] <... close resumed>) = 0 [pid 5827] <... umount2 resumed>) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6889] openat(AT_FDCWD, ".", O_RDONLY [pid 6890] <... close resumed>) = 0 [pid 6889] <... openat resumed>) = 3 [pid 6889] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6890] openat(AT_FDCWD, ".", O_RDONLY [pid 6889] <... renameat2 resumed>) = -1 ENOENT (No such file or directory) [pid 5824] <... openat resumed>) = 3 [pid 6890] <... openat resumed>) = 3 [pid 6889] sync( [pid 5827] umount2("./205/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] ioctl(3, LOOP_CLR_FD [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] newfstatat(AT_FDCWD, "./205/file0", [pid 5824] <... ioctl resumed>) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6890] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5827] umount2("./205/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] close(3 [pid 5825] <... umount2 resumed>) = 0 [pid 6890] <... renameat2 resumed>) = -1 ENOENT (No such file or directory) [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] umount2("./209/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6890] sync( [pid 5827] openat(AT_FDCWD, "./205/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./209/file0", [pid 6889] <... sync resumed>) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6890] <... sync resumed>) = 0 [pid 5825] umount2("./209/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... openat resumed>) = 4 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... close resumed>) = 0 [pid 6890] exit_group(0 [pid 5827] newfstatat(4, "", [pid 5825] openat(AT_FDCWD, "./209/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] <... openat resumed>) = 4 [pid 6890] <... exit_group resumed>) = ? [pid 6889] exit_group(0 [pid 5827] getdents64(4, [pid 5825] newfstatat(4, "", [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5825] close(4) = 0 [pid 5827] getdents64(4, [pid 5825] rmdir("./209/file0" [pid 6889] <... exit_group resumed>) = ? [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5825] <... rmdir resumed>) = 0 [pid 6889] +++ exited with 0 +++ [pid 5827] close(4 [pid 5825] umount2("./209/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... close resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6891 attached [pid 5827] rmdir("./205/file0" [pid 5825] newfstatat(AT_FDCWD, "./209/binderfs", [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6889, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 6890] +++ exited with 0 +++ [pid 5827] <... rmdir resumed>) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] umount2("./210", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6891] set_robust_list(0x55557eba4660, 24 [pid 5827] umount2("./205/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6890, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5825] unlink("./209/binderfs" [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6891] <... set_robust_list resumed>) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] restart_syscall(<... resuming interrupted clone ...> [pid 5825] <... unlink resumed>) = 0 [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 6891 [pid 5823] openat(AT_FDCWD, "./210", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6891] chdir("./207" [pid 5827] newfstatat(AT_FDCWD, "./205/binderfs", [pid 5826] <... restart_syscall resumed>) = 0 [pid 5825] getdents64(3, [pid 5823] <... openat resumed>) = 3 [pid 6891] <... chdir resumed>) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(3, 0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 5825] close(3 [pid 5823] umount2("./210/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6891] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5827] unlink("./205/binderfs" [pid 5826] umount2("./211", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... close resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6891] <... prctl resumed>) = 0 [pid 5827] <... unlink resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] rmdir("./209" [pid 5823] newfstatat(AT_FDCWD, "./210/binderfs", [pid 6891] setpgid(0, 0 [pid 5825] <... rmdir resumed>) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6891] <... setpgid resumed>) = 0 [pid 5827] getdents64(3, [pid 5826] openat(AT_FDCWD, "./211", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] unlink("./210/binderfs" [pid 6891] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5825] mkdir("./210", 0777 [pid 5823] <... unlink resumed>) = 0 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] <... openat resumed>) = 3 [pid 5825] <... mkdir resumed>) = 0 [pid 5823] getdents64(3, [pid 6891] <... openat resumed>) = 3 [pid 5827] close(3 [pid 5826] newfstatat(3, "", [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] close(3 [pid 5827] <... close resumed>) = 0 [pid 5826] getdents64(3, [pid 5823] <... close resumed>) = 0 [pid 5827] rmdir("./205" [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5823] rmdir("./210" [pid 6891] write(3, "1000", 4 [pid 5827] <... rmdir resumed>) = 0 [pid 5826] umount2("./211/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... openat resumed>) = 3 executing program [pid 5823] <... rmdir resumed>) = 0 [pid 6891] <... write resumed>) = 4 [pid 6891] close(3) = 0 [pid 6891] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./211/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./211/binderfs" [pid 5823] mkdir("./211", 0777 [pid 5826] <... unlink resumed>) = 0 [pid 5827] mkdir("./206", 0777 [pid 5823] <... mkdir resumed>) = 0 [pid 5827] <... mkdir resumed>) = 0 [pid 6891] write(1, "executing program\n", 18) = 18 [pid 6891] memfd_create("syzkaller", 0 [pid 5825] ioctl(3, LOOP_CLR_FD) = 0 [pid 5825] close(3) = 0 [pid 5826] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6891] <... memfd_create resumed>) = 3 [pid 5826] close(3 [pid 6891] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5826] <... close resumed>) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR./strace-static-x86_64: Process 6892 attached [pid 5827] <... openat resumed>) = 3 [pid 5826] rmdir("./211" [pid 5823] <... openat resumed>) = 3 [pid 6892] set_robust_list(0x55557eba4660, 24 [pid 5827] ioctl(3, LOOP_CLR_FD [pid 5826] <... rmdir resumed>) = 0 [pid 5823] ioctl(3, LOOP_CLR_FD [pid 6892] <... set_robust_list resumed>) = 0 [pid 6891] <... mmap resumed>) = 0x7f957a000000 [pid 5827] <... ioctl resumed>) = 0 [pid 5826] mkdir("./212", 0777 [pid 5823] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6892] chdir("./210" [pid 6891] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5827] close(3 [pid 5826] <... mkdir resumed>) = 0 [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 6892 [pid 5823] close(3 [pid 5827] <... close resumed>) = 0 [pid 5823] <... close resumed>) = 0 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6892] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 6894 attached ./strace-static-x86_64: Process 6893 attached [pid 6892] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6891] <... write resumed>) = 65536 [pid 5826] <... openat resumed>) = 3 [pid 6892] <... prctl resumed>) = 0 [pid 6892] setpgid(0, 0 [pid 6891] munmap(0x7f957a000000, 138412032 [pid 5826] ioctl(3, LOOP_CLR_FD [pid 6892] <... setpgid resumed>) = 0 [pid 6892] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6891] <... munmap resumed>) = 0 [pid 5826] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6893] set_robust_list(0x55557eba4660, 24 [pid 6891] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5826] close(3 [pid 6893] <... set_robust_list resumed>) = 0 [pid 6892] <... openat resumed>) = 3 [pid 6891] <... openat resumed>) = 4 [pid 5826] <... close resumed>) = 0 [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 6893 [pid 6892] write(3, "1000", 4 [pid 6894] set_robust_list(0x55557eba4660, 24 [pid 6893] chdir("./211" [pid 6892] <... write resumed>) = 4 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6894] <... set_robust_list resumed>) = 0 [pid 6892] close(3 [pid 6891] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 6895 attached [pid 6893] <... chdir resumed>) = 0 [pid 6892] <... close resumed>) = 0 [pid 6893] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6892] symlink("/dev/binderfs", "./binderfs" [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 6894 [pid 6895] set_robust_list(0x55557eba4660, 24 [pid 6894] chdir("./206" [pid 6893] <... prctl resumed>) = 0 [pid 6892] <... symlink resumed>) = 0 executing program [pid 6893] setpgid(0, 0 [pid 6892] write(1, "executing program\n", 18 [pid 6895] <... set_robust_list resumed>) = 0 [pid 6893] <... setpgid resumed>) = 0 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 6895 [pid 6892] <... write resumed>) = 18 [pid 6894] <... chdir resumed>) = 0 [pid 6893] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6895] chdir("./212" [pid 6894] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6892] memfd_create("syzkaller", 0 [pid 6894] <... prctl resumed>) = 0 [pid 6895] <... chdir resumed>) = 0 [pid 6894] setpgid(0, 0 [pid 6893] <... openat resumed>) = 3 [pid 6892] <... memfd_create resumed>) = 3 [pid 6892] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6895] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6893] write(3, "1000", 4 [pid 6892] <... mmap resumed>) = 0x7f957a000000 [pid 6895] <... prctl resumed>) = 0 [pid 6893] <... write resumed>) = 4 [pid 6895] setpgid(0, 0 [pid 6893] close(3 [pid 6892] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6894] <... setpgid resumed>) = 0 [pid 6895] <... setpgid resumed>) = 0 [pid 6894] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6893] <... close resumed>) = 0 [pid 6892] <... write resumed>) = 65536 [pid 6895] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6894] <... openat resumed>) = 3 [pid 6893] symlink("/dev/binderfs", "./binderfs"executing program executing program [pid 6895] <... openat resumed>) = 3 [pid 6894] write(3, "1000", 4 [pid 6893] <... symlink resumed>) = 0 [pid 6895] write(3, "1000", 4 [pid 6893] write(1, "executing program\n", 18 [pid 6895] <... write resumed>) = 4 [pid 6893] <... write resumed>) = 18 [pid 6895] close(3 [pid 6893] memfd_create("syzkaller", 0 [pid 6895] <... close resumed>) = 0 [pid 6893] <... memfd_create resumed>) = 3 [pid 6895] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6895] write(1, "executing program\n", 18 [pid 6893] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6895] <... write resumed>) = 18 [pid 6893] <... mmap resumed>) = 0x7f957a000000 [pid 6895] memfd_create("syzkaller", 0 [pid 6893] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6895] <... memfd_create resumed>) = 3 [pid 6895] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6894] <... write resumed>) = 4 [pid 6894] close(3 [pid 6895] <... mmap resumed>) = 0x7f957a000000 [pid 6894] <... close resumed>) = 0 [pid 6893] <... write resumed>) = 65536 [pid 6892] munmap(0x7f957a000000, 138412032 [pid 6891] <... ioctl resumed>) = 0 [pid 6895] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6894] symlink("/dev/binderfs", "./binderfs" [pid 6891] close(3 [pid 6892] <... munmap resumed>) = 0 [pid 6893] munmap(0x7f957a000000, 138412032 [pid 6891] <... close resumed>) = 0 [pid 6894] <... symlink resumed>) = 0 [pid 6893] <... munmap resumed>) = 0 [pid 6892] openat(AT_FDCWD, "/dev/loop2", O_RDWRexecuting program [pid 6891] close(4 [pid 6895] <... write resumed>) = 65536 [pid 6894] write(1, "executing program\n", 18 [pid 6892] <... openat resumed>) = 4 [ 193.969105][ T6891] loop1: detected capacity change from 0 to 128 [pid 6894] <... write resumed>) = 18 [pid 6892] ioctl(4, LOOP_SET_FD, 3 [pid 6895] munmap(0x7f957a000000, 138412032 [pid 6894] memfd_create("syzkaller", 0 [pid 6893] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6891] <... close resumed>) = 0 [pid 6894] <... memfd_create resumed>) = 3 [pid 6893] <... openat resumed>) = 4 [pid 6891] mkdir("./file0", 0777 [pid 6894] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6895] <... munmap resumed>) = 0 [pid 6894] <... mmap resumed>) = 0x7f957a000000 [pid 6893] ioctl(4, LOOP_SET_FD, 3 [pid 6891] <... mkdir resumed>) = 0 [pid 6895] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6894] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 6894] munmap(0x7f957a000000, 138412032) = 0 [pid 6894] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6894] ioctl(4, LOOP_SET_FD, 3 [pid 6895] <... openat resumed>) = 4 [pid 6894] <... ioctl resumed>) = 0 [pid 6891] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6895] ioctl(4, LOOP_SET_FD, 3 [pid 6892] <... ioctl resumed>) = 0 [pid 6892] close(3) = 0 [pid 6892] close(4) = 0 [pid 6892] mkdir("./file0", 0777) = 0 [ 194.012395][ T6892] loop2: detected capacity change from 0 to 128 [ 194.028435][ T6893] loop0: detected capacity change from 0 to 128 [ 194.035193][ T6894] loop4: detected capacity change from 0 to 128 [ 194.042904][ T6895] loop3: detected capacity change from 0 to 128 [pid 6892] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6895] <... ioctl resumed>) = 0 [pid 6894] close(3 [pid 6893] <... ioctl resumed>) = 0 [pid 6895] close(3 [pid 6894] <... close resumed>) = 0 [pid 6893] close(3 [pid 6891] <... mount resumed>) = 0 [pid 6895] <... close resumed>) = 0 [pid 6894] close(4 [pid 6893] <... close resumed>) = 0 [pid 6892] <... mount resumed>) = 0 [pid 6891] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6895] close(4 [pid 6894] <... close resumed>) = 0 [pid 6893] close(4 [pid 6892] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6891] <... openat resumed>) = 3 [pid 6895] <... close resumed>) = 0 [pid 6893] <... close resumed>) = 0 [pid 6891] chdir("./file0" [pid 6895] mkdir("./file0", 0777 [pid 6893] mkdir("./file0", 0777 [pid 6891] <... chdir resumed>) = 0 [pid 6895] <... mkdir resumed>) = 0 [pid 6893] <... mkdir resumed>) = 0 [pid 6892] <... openat resumed>) = 3 [pid 6891] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6895] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6894] mkdir("./file0", 0777 [pid 6893] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6892] chdir("./file0" [pid 6891] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6894] <... mkdir resumed>) = 0 [pid 6892] <... chdir resumed>) = 0 [pid 6891] openat(AT_FDCWD, ".", O_RDONLY [pid 6892] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6891] <... openat resumed>) = 4 [pid 6892] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 194.056858][ T6891] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 194.068815][ T6892] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [pid 6891] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6894] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6892] openat(AT_FDCWD, ".", O_RDONLY [pid 6891] <... renameat2 resumed>) = 0 [pid 6891] sync( [pid 6892] <... openat resumed>) = 4 [pid 6892] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = 0 [pid 6892] sync( [pid 6895] <... mount resumed>) = 0 [pid 6895] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6895] chdir("./file0") = 0 [pid 6895] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6895] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 6895] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = 0 [pid 6895] sync( [pid 6894] <... mount resumed>) = 0 [pid 6894] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6894] chdir("./file0") = 0 [pid 6894] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6894] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 6894] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = 0 [ 194.115004][ T6895] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 194.139712][ T6894] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 194.150577][ T6893] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [pid 6894] sync( [pid 6893] <... mount resumed>) = 0 [pid 6893] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6895] <... sync resumed>) = 0 [pid 6894] <... sync resumed>) = 0 [pid 6892] <... sync resumed>) = 0 [pid 6891] <... sync resumed>) = 0 [pid 6895] exit_group(0 [pid 6894] exit_group(0 [pid 6895] <... exit_group resumed>) = ? [pid 6894] <... exit_group resumed>) = ? [pid 6895] +++ exited with 0 +++ [pid 6894] +++ exited with 0 +++ [pid 6892] exit_group(0 [pid 6891] exit_group(0 [pid 6893] chdir("./file0" [pid 6891] <... exit_group resumed>) = ? [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6894, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6895, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6893] <... chdir resumed>) = 0 [pid 6892] <... exit_group resumed>) = ? [pid 5827] restart_syscall(<... resuming interrupted clone ...> [pid 5826] restart_syscall(<... resuming interrupted clone ...> [pid 6893] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6892] +++ exited with 0 +++ [pid 5827] <... restart_syscall resumed>) = 0 [pid 5826] <... restart_syscall resumed>) = 0 [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6892, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5827] umount2("./206", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] umount2("./212", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./210", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6893] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6893] openat(AT_FDCWD, ".", O_RDONLY [pid 6891] +++ exited with 0 +++ [pid 5827] openat(AT_FDCWD, "./206", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] openat(AT_FDCWD, "./212", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] openat(AT_FDCWD, "./210", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6893] <... openat resumed>) = 4 [pid 5827] <... openat resumed>) = 3 [pid 5826] <... openat resumed>) = 3 [pid 5825] <... openat resumed>) = 3 [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6891, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6893] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5827] newfstatat(3, "", [pid 5826] newfstatat(3, "", [pid 5825] newfstatat(3, "", [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 6893] <... renameat2 resumed>) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] getdents64(3, [pid 5826] getdents64(3, [pid 5825] getdents64(3, [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] <... restart_syscall resumed>) = 0 [pid 5827] umount2("./206/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] umount2("./212/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./210/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6893] sync( [pid 5824] umount2("./207", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./207", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5824] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(3, [pid 5827] <... umount2 resumed>) = 0 [pid 5827] umount2("./206/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] newfstatat(AT_FDCWD, "./206/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] umount2("./206/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] openat(AT_FDCWD, "./206/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] umount2("./207/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] newfstatat(4, "", [pid 5826] <... umount2 resumed>) = 0 [pid 5825] <... umount2 resumed>) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] umount2("./212/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./210/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] getdents64(4, [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6893] <... sync resumed>) = 0 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5826] newfstatat(AT_FDCWD, "./212/file0", [pid 5825] newfstatat(AT_FDCWD, "./210/file0", [pid 6893] exit_group(0 [pid 5827] getdents64(4, [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6893] <... exit_group resumed>) = ? [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5826] umount2("./212/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./210/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6893] +++ exited with 0 +++ [pid 5827] close(4 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... close resumed>) = 0 [pid 5826] openat(AT_FDCWD, "./212/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] openat(AT_FDCWD, "./210/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6893, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5827] rmdir("./206/file0" [pid 5826] <... openat resumed>) = 4 [pid 5825] <... openat resumed>) = 4 [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 5827] <... rmdir resumed>) = 0 [pid 5826] newfstatat(4, "", [pid 5825] newfstatat(4, "", [pid 5823] <... restart_syscall resumed>) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(4, [pid 5825] getdents64(4, [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] umount2("./211", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] umount2("./206/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] getdents64(4, [pid 5825] getdents64(4, [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] openat(AT_FDCWD, "./211", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] newfstatat(AT_FDCWD, "./206/binderfs", [pid 5826] close(4 [pid 5825] close(4 [pid 5823] <... openat resumed>) = 3 [pid 5826] <... close resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 5823] newfstatat(3, "", [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] rmdir("./212/file0" [pid 5825] rmdir("./210/file0" [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] unlink("./206/binderfs" [pid 5826] <... rmdir resumed>) = 0 [pid 5825] <... rmdir resumed>) = 0 [pid 5824] <... umount2 resumed>) = 0 [pid 5827] <... unlink resumed>) = 0 [pid 5824] umount2("./207/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] getdents64(3, [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] newfstatat(AT_FDCWD, "./207/file0", [pid 5823] umount2("./211/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] getdents64(3, [pid 5824] umount2("./207/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] umount2("./212/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./210/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./207/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] close(3 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... close resumed>) = 0 [pid 5825] newfstatat(AT_FDCWD, "./210/binderfs", [pid 5824] <... openat resumed>) = 4 [pid 5827] rmdir("./206" [pid 5826] newfstatat(AT_FDCWD, "./212/binderfs", [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] <... rmdir resumed>) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./210/binderfs" [pid 5824] newfstatat(4, "", [pid 5826] unlink("./212/binderfs" [pid 5827] mkdir("./207", 0777 [pid 5823] <... umount2 resumed>) = 0 [pid 5827] <... mkdir resumed>) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] umount2("./211/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5826] <... unlink resumed>) = 0 [pid 5825] <... unlink resumed>) = 0 [pid 5827] <... openat resumed>) = 3 [pid 5826] getdents64(3, [pid 5825] getdents64(3, [pid 5824] getdents64(4, [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] ioctl(3, LOOP_CLR_FD [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] newfstatat(AT_FDCWD, "./211/file0", [pid 5827] <... ioctl resumed>) = 0 [pid 5826] close(3 [pid 5825] close(3 [pid 5824] getdents64(4, [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] close(3) = 0 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] umount2("./211/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... close resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] rmdir("./212" [pid 5825] rmdir("./210" [pid 5824] close(4 [pid 5823] openat(AT_FDCWD, "./211/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] <... rmdir resumed>) = 0 [pid 5823] <... openat resumed>) = 4 [pid 5823] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(4, [pid 5825] <... rmdir resumed>) = 0 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] <... close resumed>) = 0 [pid 5824] rmdir("./207/file0" [pid 5823] getdents64(4, [pid 5824] <... rmdir resumed>) = 0 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] close(4 [pid 5826] mkdir("./213", 0777 [pid 5825] mkdir("./211", 0777 [pid 5823] <... close resumed>) = 0 [pid 5826] <... mkdir resumed>) = 0 [pid 5825] <... mkdir resumed>) = 0 [pid 5823] rmdir("./211/file0") = 0 [pid 5824] umount2("./207/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5824] newfstatat(AT_FDCWD, "./207/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] umount2("./211/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... openat resumed>) = 3 [pid 5825] <... openat resumed>) = 3 [pid 5824] unlink("./207/binderfs" [pid 5823] newfstatat(AT_FDCWD, "./211/binderfs", ./strace-static-x86_64: Process 6896 attached [pid 5826] ioctl(3, LOOP_CLR_FD [pid 5825] ioctl(3, LOOP_CLR_FD [pid 5824] <... unlink resumed>) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] <... ioctl resumed>) = 0 [pid 5825] <... ioctl resumed>) = 0 [pid 5824] getdents64(3, [pid 5823] unlink("./211/binderfs" [pid 5826] close(3 [pid 5825] close(3 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] <... unlink resumed>) = 0 [pid 6896] set_robust_list(0x55557eba4660, 24) = 0 [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 6896 [pid 5826] <... close resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 5824] close(3 [pid 5823] getdents64(3, [pid 6896] chdir("./207" [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5824] <... close resumed>) = 0 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] rmdir("./207" [pid 5823] close(3 [pid 5824] <... rmdir resumed>) = 0 [pid 5823] <... close resumed>) = 0 [pid 5823] rmdir("./211" [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5823] <... rmdir resumed>) = 0 [pid 5824] mkdir("./208", 0777) = 0 ./strace-static-x86_64: Process 6897 attached ./strace-static-x86_64: Process 6898 attached [pid 6897] set_robust_list(0x55557eba4660, 24 [pid 6896] <... chdir resumed>) = 0 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 6898 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5823] mkdir("./212", 0777 [pid 6896] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 6897 [pid 5824] <... openat resumed>) = 3 [pid 5823] <... mkdir resumed>) = 0 [pid 6897] <... set_robust_list resumed>) = 0 [pid 6896] <... prctl resumed>) = 0 [pid 5824] ioctl(3, LOOP_CLR_FD [pid 6898] set_robust_list(0x55557eba4660, 24 [pid 6897] chdir("./211" [pid 5824] <... ioctl resumed>) = 0 [pid 6898] <... set_robust_list resumed>) = 0 [pid 6897] <... chdir resumed>) = 0 [pid 6896] setpgid(0, 0 [pid 5824] close(3 [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6898] chdir("./213" [pid 6897] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6896] <... setpgid resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 6897] <... prctl resumed>) = 0 [pid 6896] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5823] <... openat resumed>) = 3 [pid 6897] setpgid(0, 0./strace-static-x86_64: Process 6899 attached [pid 6898] <... chdir resumed>) = 0 [pid 6897] <... setpgid resumed>) = 0 [pid 6896] <... openat resumed>) = 3 [pid 5823] ioctl(3, LOOP_CLR_FD [pid 6896] write(3, "1000", 4) = 4 [pid 6897] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6896] close(3 [pid 5823] <... ioctl resumed>) = 0 [pid 6898] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5823] close(3 [pid 6898] <... prctl resumed>) = 0 [pid 6897] <... openat resumed>) = 3 [pid 5823] <... close resumed>) = 0 [pid 6896] <... close resumed>) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6900 attached [pid 6899] set_robust_list(0x55557eba4660, 24 [pid 6896] symlink("/dev/binderfs", "./binderfs" [pid 6899] <... set_robust_list resumed>) = 0 [pid 6897] write(3, "1000", 4) = 4 [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 6899 [pid 6897] close(3 [pid 6896] <... symlink resumed>) = 0 [pid 6898] setpgid(0, 0 [pid 6897] <... close resumed>) = 0 executing program executing program [pid 6899] chdir("./208" [pid 6898] <... setpgid resumed>) = 0 [pid 6897] symlink("/dev/binderfs", "./binderfs" [pid 6896] write(1, "executing program\n", 18 [pid 6900] set_robust_list(0x55557eba4660, 24 [pid 6899] <... chdir resumed>) = 0 [pid 6898] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6897] <... symlink resumed>) = 0 [pid 6896] <... write resumed>) = 18 [pid 6900] <... set_robust_list resumed>) = 0 [pid 6898] <... openat resumed>) = 3 [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 6900 [pid 6900] chdir("./212" [pid 6898] write(3, "1000", 4 [pid 6897] write(1, "executing program\n", 18 [pid 6896] memfd_create("syzkaller", 0 [pid 6900] <... chdir resumed>) = 0 [pid 6898] <... write resumed>) = 4 [pid 6897] <... write resumed>) = 18 [pid 6900] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6899] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6898] close(3 [pid 6896] <... memfd_create resumed>) = 3 [pid 6900] <... prctl resumed>) = 0 [pid 6898] <... close resumed>) = 0 [pid 6897] memfd_create("syzkaller", 0executing program [pid 6896] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6900] setpgid(0, 0 [pid 6899] <... prctl resumed>) = 0 [pid 6898] symlink("/dev/binderfs", "./binderfs" [pid 6897] <... memfd_create resumed>) = 3 [pid 6900] <... setpgid resumed>) = 0 [pid 6899] setpgid(0, 0 [pid 6898] <... symlink resumed>) = 0 [pid 6896] <... mmap resumed>) = 0x7f957a000000 [pid 6900] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6899] <... setpgid resumed>) = 0 [pid 6898] write(1, "executing program\n", 18 [pid 6897] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6900] <... openat resumed>) = 3 [pid 6899] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6898] <... write resumed>) = 18 [pid 6897] <... mmap resumed>) = 0x7f957a000000 [pid 6896] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6898] memfd_create("syzkaller", 0 [pid 6897] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6900] write(3, "1000", 4) = 4 [pid 6898] <... memfd_create resumed>) = 3 [pid 6900] close(3 [pid 6898] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6900] <... close resumed>) = 0 [pid 6898] <... mmap resumed>) = 0x7f957a000000 [pid 6897] <... write resumed>) = 65536 [pid 6900] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6899] <... openat resumed>) = 3 [pid 6898] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6897] munmap(0x7f957a000000, 138412032 [pid 6900] write(1, "executing program\n", 18 [pid 6896] <... write resumed>) = 65536 [pid 6900] <... write resumed>) = 18 [pid 6897] <... munmap resumed>) = 0 [pid 6900] memfd_create("syzkaller", 0 [pid 6898] <... write resumed>) = 65536 [pid 6897] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6900] <... memfd_create resumed>) = 3 [pid 6899] write(3, "1000", 4 [pid 6898] munmap(0x7f957a000000, 138412032 [pid 6897] <... openat resumed>) = 4 [pid 6896] munmap(0x7f957a000000, 138412032 [pid 6900] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 6897] ioctl(4, LOOP_SET_FD, 3 [pid 6898] <... munmap resumed>) = 0 [pid 6899] <... write resumed>) = 4 [pid 6896] <... munmap resumed>) = 0 [pid 6900] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6899] close(3 [pid 6898] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6896] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6899] <... close resumed>) = 0 [pid 6899] symlink("/dev/binderfs", "./binderfs" [pid 6896] <... openat resumed>) = 4 [pid 6898] <... openat resumed>) = 4 [pid 6896] ioctl(4, LOOP_SET_FD, 3 [pid 6898] ioctl(4, LOOP_SET_FD, 3 [pid 6899] <... symlink resumed>) = 0 [pid 6900] <... write resumed>) = 65536 [pid 6899] write(1, "executing program\n", 18 [pid 6897] <... ioctl resumed>) = 0 executing program [pid 6899] <... write resumed>) = 18 [pid 6897] close(3 [pid 6900] munmap(0x7f957a000000, 138412032 [pid 6899] memfd_create("syzkaller", 0 [pid 6897] <... close resumed>) = 0 [pid 6896] <... ioctl resumed>) = 0 [pid 6897] close(4 [pid 6900] <... munmap resumed>) = 0 [pid 6899] <... memfd_create resumed>) = 3 [pid 6897] <... close resumed>) = 0 [pid 6896] close(3 [pid 6900] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6899] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6897] mkdir("./file0", 0777 [pid 6896] <... close resumed>) = 0 [pid 6900] ioctl(4, LOOP_SET_FD, 3 [pid 6899] <... mmap resumed>) = 0x7f957a000000 [pid 6900] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 6900] ioctl(4, LOOP_CLR_FD) = 0 [pid 6897] <... mkdir resumed>) = 0 [pid 6896] close(4 [pid 6899] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6896] <... close resumed>) = 0 [pid 6897] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6900] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 6900] close(4) = 0 [pid 6899] <... write resumed>) = 65536 [ 194.452281][ T6897] loop2: detected capacity change from 0 to 128 [ 194.462732][ T6896] loop4: detected capacity change from 0 to 128 [ 194.462760][ T6898] loop3: detected capacity change from 0 to 128 [pid 6896] mkdir("./file0", 0777 [pid 6900] close(3 [pid 6896] <... mkdir resumed>) = 0 [pid 6900] <... close resumed>) = 0 [pid 6900] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 6900] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = -1 ENOENT (No such file or directory) [pid 6900] sync( [pid 6896] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6899] munmap(0x7f957a000000, 138412032) = 0 [pid 6899] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6898] <... ioctl resumed>) = 0 [pid 6898] close(3) = 0 [pid 6898] close(4) = 0 [pid 6898] mkdir("./file0", 0777) = 0 [pid 6898] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6899] <... openat resumed>) = 4 [pid 6899] ioctl(4, LOOP_SET_FD, 3) = 0 [ 194.501501][ T6897] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 194.526409][ T6899] loop1: detected capacity change from 0 to 128 [ 194.532214][ T6898] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [pid 6899] close(3) = 0 [pid 6899] close(4) = 0 [pid 6899] mkdir("./file0", 0777) = 0 [pid 6899] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6898] <... mount resumed>) = 0 [pid 6898] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6898] chdir("./file0") = 0 [pid 6898] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6898] openat(AT_FDCWD, ".", O_RDONLY [pid 6897] <... mount resumed>) = 0 [pid 6897] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6898] <... openat resumed>) = 4 [pid 6898] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6897] chdir("./file0") = 0 [pid 6897] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6897] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 6897] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = 0 [pid 6897] sync( [pid 6898] <... renameat2 resumed>) = 0 [pid 6896] <... mount resumed>) = 0 [pid 6898] sync( [pid 6896] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6896] chdir("./file0") = 0 [pid 6896] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6896] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 6896] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = 0 [pid 6896] sync( [pid 6899] <... mount resumed>) = 0 [pid 6899] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 194.548434][ T6896] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 194.573390][ T6899] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [pid 6899] chdir("./file0") = 0 [pid 6899] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6899] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 6899] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = 0 [pid 6899] sync( [pid 6900] <... sync resumed>) = 0 [pid 6898] <... sync resumed>) = 0 [pid 6897] <... sync resumed>) = 0 [pid 6896] <... sync resumed>) = 0 [pid 6898] exit_group(0 [pid 6897] exit_group(0 [pid 6898] <... exit_group resumed>) = ? [pid 6897] <... exit_group resumed>) = ? [pid 6898] +++ exited with 0 +++ [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6898, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6900] exit_group(0 [pid 6899] <... sync resumed>) = 0 [pid 6896] exit_group(0 [pid 6900] <... exit_group resumed>) = ? [pid 6899] exit_group(0 [pid 6897] +++ exited with 0 +++ [pid 6896] <... exit_group resumed>) = ? [pid 6896] +++ exited with 0 +++ [pid 5826] umount2("./213", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6897, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] restart_syscall(<... resuming interrupted clone ...> [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6896, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5826] openat(AT_FDCWD, "./213", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] restart_syscall(<... resuming interrupted clone ...> [pid 5826] <... openat resumed>) = 3 [pid 5826] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(3, [pid 6900] +++ exited with 0 +++ [pid 6899] <... exit_group resumed>) = ? [pid 5827] <... restart_syscall resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5825] <... restart_syscall resumed>) = 0 [pid 5826] umount2("./213/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6900, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5827] umount2("./207", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./211", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... restart_syscall resumed>) = 0 [pid 5827] openat(AT_FDCWD, "./207", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] openat(AT_FDCWD, "./211", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6899] +++ exited with 0 +++ [pid 5827] <... openat resumed>) = 3 [pid 5825] <... openat resumed>) = 3 [pid 5827] newfstatat(3, "", [pid 5825] newfstatat(3, "", [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6899, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5823] umount2("./212", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 5827] getdents64(3, [pid 5825] getdents64(3, [pid 5824] <... restart_syscall resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] openat(AT_FDCWD, "./212", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] umount2("./207/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... openat resumed>) = 3 [pid 5827] <... umount2 resumed>) = 0 [pid 5826] <... umount2 resumed>) = 0 [pid 5825] umount2("./211/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./208", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] umount2("./207/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] umount2("./213/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] newfstatat(3, "", [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] newfstatat(AT_FDCWD, "./207/file0", [pid 5826] newfstatat(AT_FDCWD, "./213/file0", [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] openat(AT_FDCWD, "./208", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] umount2("./207/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] umount2("./213/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... openat resumed>) = 3 [pid 5826] openat(AT_FDCWD, "./213/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] newfstatat(3, "", [pid 5826] <... openat resumed>) = 4 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] newfstatat(4, "", [pid 5824] getdents64(3, [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5827] openat(AT_FDCWD, "./207/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] getdents64(4, [pid 5824] umount2("./208/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... openat resumed>) = 4 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] <... umount2 resumed>) = 0 [pid 5823] getdents64(3, [pid 5827] newfstatat(4, "", [pid 5826] getdents64(4, [pid 5825] umount2("./211/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] getdents64(4, [pid 5826] close(4 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] newfstatat(AT_FDCWD, "./211/file0", [pid 5827] getdents64(4, [pid 5826] <... close resumed>) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5826] rmdir("./213/file0" [pid 5825] umount2("./211/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] close(4 [pid 5826] <... rmdir resumed>) = 0 [pid 5823] umount2("./212/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... close resumed>) = 0 [pid 5826] umount2("./213/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] rmdir("./207/file0" [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./211/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] newfstatat(AT_FDCWD, "./212/binderfs", [pid 5827] <... rmdir resumed>) = 0 [pid 5826] newfstatat(AT_FDCWD, "./213/binderfs", [pid 5825] <... openat resumed>) = 4 [pid 5824] <... umount2 resumed>) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] newfstatat(4, "", [pid 5824] umount2("./208/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] unlink("./212/binderfs" [pid 5826] unlink("./213/binderfs" [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... unlink resumed>) = 0 [pid 5825] getdents64(4, [pid 5824] newfstatat(AT_FDCWD, "./208/file0", [pid 5823] <... unlink resumed>) = 0 [pid 5826] getdents64(3, [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] getdents64(3, [pid 5827] umount2("./207/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./208/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] getdents64(4, [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] newfstatat(AT_FDCWD, "./207/binderfs", [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] close(3 [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] close(3 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] openat(AT_FDCWD, "./208/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] <... close resumed>) = 0 [pid 5827] unlink("./207/binderfs" [pid 5826] <... close resumed>) = 0 [pid 5825] close(4 [pid 5824] <... openat resumed>) = 4 [pid 5823] rmdir("./212" [pid 5827] <... unlink resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 5826] rmdir("./213" [pid 5823] <... rmdir resumed>) = 0 [pid 5825] rmdir("./211/file0" [pid 5827] getdents64(3, [pid 5826] <... rmdir resumed>) = 0 [pid 5825] <... rmdir resumed>) = 0 [pid 5824] newfstatat(4, "", [pid 5823] mkdir("./213", 0777 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... mkdir resumed>) = 0 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] mkdir("./214", 0777 [pid 5824] getdents64(4, [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5826] <... mkdir resumed>) = 0 [pid 5825] umount2("./211/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] <... openat resumed>) = 3 [pid 5827] close(3 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] ioctl(3, LOOP_CLR_FD [pid 5827] <... close resumed>) = 0 [pid 5825] newfstatat(AT_FDCWD, "./211/binderfs", [pid 5824] getdents64(4, [pid 5823] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5827] rmdir("./207" [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] close(3 [pid 5827] <... rmdir resumed>) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5825] unlink("./211/binderfs" [pid 5824] close(4 [pid 5823] <... close resumed>) = 0 [pid 5826] <... openat resumed>) = 3 [pid 5825] <... unlink resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6901 attached [pid 5826] ioctl(3, LOOP_CLR_FD [pid 5825] getdents64(3, [pid 5824] rmdir("./208/file0" [pid 5826] <... ioctl resumed>) = 0 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 6901] set_robust_list(0x55557eba4660, 24 [pid 5827] mkdir("./208", 0777 [pid 5826] close(3 [pid 5825] close(3 [pid 5824] umount2("./208/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... mkdir resumed>) = 0 [pid 5826] <... close resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5825] rmdir("./211" [pid 5824] newfstatat(AT_FDCWD, "./208/binderfs", [pid 6901] <... set_robust_list resumed>) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 6901 [pid 6901] chdir("./213" [pid 5825] <... rmdir resumed>) = 0 [pid 5824] unlink("./208/binderfs"./strace-static-x86_64: Process 6902 attached [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5825] mkdir("./212", 0777 [pid 5824] <... unlink resumed>) = 0 [pid 6901] <... chdir resumed>) = 0 [pid 5827] <... openat resumed>) = 3 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 6902 [pid 5824] getdents64(3, [pid 6901] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5827] ioctl(3, LOOP_CLR_FD [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 6901] <... prctl resumed>) = 0 [pid 5827] <... ioctl resumed>) = 0 [pid 6901] setpgid(0, 0 [pid 5824] close(3 [pid 6901] <... setpgid resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 6901] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5824] rmdir("./208") = 0 [pid 6901] <... openat resumed>) = 3 [pid 5827] close(3 [pid 6901] write(3, "1000", 4 [pid 5827] <... close resumed>) = 0 [pid 5825] <... mkdir resumed>) = 0 [pid 6901] <... write resumed>) = 4 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6902] set_robust_list(0x55557eba4660, 24 [pid 6901] close(3 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR./strace-static-x86_64: Process 6903 attached [pid 6902] <... set_robust_list resumed>) = 0 [pid 6901] <... close resumed>) = 0 [pid 5825] <... openat resumed>) = 3 [pid 6902] chdir("./214" [pid 5825] ioctl(3, LOOP_CLR_FD [pid 6901] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 6903 [pid 6901] write(1, "executing program\n", 18executing program ) = 18 [pid 6901] memfd_create("syzkaller", 0 [pid 6903] set_robust_list(0x55557eba4660, 24 [pid 6901] <... memfd_create resumed>) = 3 [pid 6903] <... set_robust_list resumed>) = 0 [pid 6901] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6903] chdir("./208" [pid 6901] <... mmap resumed>) = 0x7f957a000000 [pid 6902] <... chdir resumed>) = 0 [pid 6901] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5825] <... ioctl resumed>) = 0 [pid 5824] mkdir("./209", 0777 [pid 6902] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6903] <... chdir resumed>) = 0 [pid 6902] <... prctl resumed>) = 0 [pid 5825] close(3 [pid 6903] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6901] <... write resumed>) = 65536 [pid 5824] <... mkdir resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 6903] setpgid(0, 0 [pid 6902] setpgid(0, 0 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6903] <... setpgid resumed>) = 0 [pid 6901] munmap(0x7f957a000000, 138412032 [pid 6903] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6901] <... munmap resumed>) = 0 [pid 6901] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6903] <... openat resumed>) = 3 [pid 6901] <... openat resumed>) = 4 [pid 6901] ioctl(4, LOOP_SET_FD, 3 [pid 6903] write(3, "1000", 4 [pid 5824] <... openat resumed>) = 3 [pid 6902] <... setpgid resumed>) = 0 [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 6904 ./strace-static-x86_64: Process 6904 attached [pid 6903] <... write resumed>) = 4 [pid 6903] close(3 [pid 6902] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6903] <... close resumed>) = 0 [pid 6903] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6902] <... openat resumed>) = 3 [pid 5824] ioctl(3, LOOP_CLR_FD [pid 6903] write(1, "executing program\n", 18 [pid 6904] set_robust_list(0x55557eba4660, 24 [pid 5824] <... ioctl resumed>) = 0 [pid 6904] <... set_robust_list resumed>) = 0 executing program [pid 5824] close(3 [pid 6903] <... write resumed>) = 18 [pid 6904] chdir("./212" [pid 6903] memfd_create("syzkaller", 0) = 3 [pid 6902] write(3, "1000", 4 [pid 6904] <... chdir resumed>) = 0 [pid 6903] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6902] <... write resumed>) = 4 [pid 6903] <... mmap resumed>) = 0x7f957a000000 [pid 6903] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6902] close(3 [pid 6904] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6903] <... write resumed>) = 65536 [pid 6902] <... close resumed>) = 0 [pid 6902] symlink("/dev/binderfs", "./binderfs" [pid 6904] <... prctl resumed>) = 0 [pid 6903] munmap(0x7f957a000000, 138412032 [pid 6904] setpgid(0, 0 [pid 6903] <... munmap resumed>) = 0 [pid 6903] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6904] <... setpgid resumed>) = 0 [pid 6902] <... symlink resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6905 attached [pid 6904] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6903] <... openat resumed>) = 4 [pid 6902] write(1, "executing program\n", 18 [pid 6901] <... ioctl resumed>) = 0 executing program [pid 6905] set_robust_list(0x55557eba4660, 24 [pid 6904] <... openat resumed>) = 3 [pid 6903] ioctl(4, LOOP_SET_FD, 3executing program [pid 6902] <... write resumed>) = 18 [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 6905 [pid 6905] <... set_robust_list resumed>) = 0 [pid 6904] write(3, "1000", 4 [pid 6903] <... ioctl resumed>) = 0 [pid 6905] chdir("./209" [pid 6901] close(3 [pid 6905] <... chdir resumed>) = 0 [pid 6901] <... close resumed>) = 0 [pid 6905] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6901] close(4 [pid 6905] <... prctl resumed>) = 0 [pid 6904] <... write resumed>) = 4 [pid 6901] <... close resumed>) = 0 [pid 6905] setpgid(0, 0 [pid 6901] mkdir("./file0", 0777 [pid 6904] close(3 [pid 6902] memfd_create("syzkaller", 0 [pid 6905] <... setpgid resumed>) = 0 [pid 6901] <... mkdir resumed>) = 0 [pid 6905] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6901] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6905] <... openat resumed>) = 3 [pid 6905] write(3, "1000", 4) = 4 [pid 6905] close(3) = 0 [pid 6905] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6905] write(1, "executing program\n", 18) = 18 [pid 6905] memfd_create("syzkaller", 0) = 3 [pid 6905] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6904] <... close resumed>) = 0 [pid 6902] <... memfd_create resumed>) = 3 [pid 6904] symlink("/dev/binderfs", "./binderfs" [pid 6902] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6904] <... symlink resumed>) = 0 [pid 6902] <... mmap resumed>) = 0x7f957a000000 executing program [pid 6905] <... mmap resumed>) = 0x7f957a000000 [pid 6904] write(1, "executing program\n", 18 [pid 6903] close(3 [pid 6902] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6904] <... write resumed>) = 18 [pid 6903] <... close resumed>) = 0 [pid 6905] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6903] close(4 [pid 6902] <... write resumed>) = 65536 [pid 6904] memfd_create("syzkaller", 0) = 3 [pid 6903] <... close resumed>) = 0 [pid 6902] munmap(0x7f957a000000, 138412032 [pid 6903] mkdir("./file0", 0777) = 0 [pid 6905] <... write resumed>) = 65536 [pid 6904] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6902] <... munmap resumed>) = 0 [pid 6904] <... mmap resumed>) = 0x7f957a000000 [pid 6903] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6902] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6905] munmap(0x7f957a000000, 138412032 [pid 6904] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6902] <... openat resumed>) = 4 [pid 6902] ioctl(4, LOOP_SET_FD, 3 [pid 6905] <... munmap resumed>) = 0 [pid 6904] <... write resumed>) = 65536 [ 194.802485][ T6901] loop0: detected capacity change from 0 to 128 [ 194.815883][ T6903] loop4: detected capacity change from 0 to 128 [ 194.838118][ T6901] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [pid 6905] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6905] ioctl(4, LOOP_SET_FD, 3 [pid 6904] munmap(0x7f957a000000, 138412032) = 0 [pid 6904] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6904] ioctl(4, LOOP_SET_FD, 3 [pid 6902] <... ioctl resumed>) = 0 [pid 6902] close(3) = 0 [pid 6902] close(4) = 0 [pid 6902] mkdir("./file0", 0777 [pid 6905] <... ioctl resumed>) = 0 [pid 6902] <... mkdir resumed>) = 0 [ 194.872707][ T6902] loop3: detected capacity change from 0 to 128 [ 194.879774][ T6905] loop1: detected capacity change from 0 to 128 [ 194.889819][ T6903] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 194.901887][ T6904] loop2: detected capacity change from 0 to 128 [pid 6904] <... ioctl resumed>) = 0 [pid 6902] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6901] <... mount resumed>) = 0 [pid 6901] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6901] chdir("./file0") = 0 [pid 6905] close(3 [pid 6901] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6905] <... close resumed>) = 0 [pid 6901] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6905] close(4 [pid 6901] openat(AT_FDCWD, ".", O_RDONLY [pid 6905] <... close resumed>) = 0 [pid 6901] <... openat resumed>) = 4 [pid 6905] mkdir("./file0", 0777 [pid 6901] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6905] <... mkdir resumed>) = 0 [pid 6905] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6901] <... renameat2 resumed>) = 0 [pid 6904] close(3) = 0 [pid 6904] close(4) = 0 [pid 6904] mkdir("./file0", 0777 [pid 6901] sync( [pid 6904] <... mkdir resumed>) = 0 [ 194.923923][ T6902] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 194.945976][ T6905] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [pid 6904] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6902] <... mount resumed>) = 0 [pid 6902] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6903] <... mount resumed>) = 0 [pid 6903] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6903] chdir("./file0") = 0 [pid 6903] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6903] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 6903] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6902] chdir("./file0") = 0 [pid 6902] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6902] openat(AT_FDCWD, ".", O_RDONLY [pid 6903] <... renameat2 resumed>) = 0 [pid 6902] <... openat resumed>) = 4 [pid 6903] sync( [pid 6902] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6905] <... mount resumed>) = 0 [pid 6902] <... renameat2 resumed>) = 0 [pid 6902] sync( [pid 6905] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6905] chdir("./file0") = 0 [pid 6905] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6905] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 6904] <... mount resumed>) = 0 [ 194.979024][ T6904] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [pid 6905] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6904] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6905] <... renameat2 resumed>) = 0 [pid 6904] chdir("./file0" [pid 6905] sync( [pid 6904] <... chdir resumed>) = 0 [pid 6904] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6904] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 6903] <... sync resumed>) = 0 [pid 6902] <... sync resumed>) = 0 [pid 6901] <... sync resumed>) = 0 [pid 6905] <... sync resumed>) = 0 [pid 6904] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6903] exit_group(0) = ? [pid 6905] exit_group(0 [pid 6904] <... renameat2 resumed>) = 0 [pid 6903] +++ exited with 0 +++ [pid 6902] exit_group(0 [pid 6901] exit_group(0 [pid 6905] <... exit_group resumed>) = ? [pid 6904] sync( [pid 6902] <... exit_group resumed>) = ? [pid 6901] <... exit_group resumed>) = ? [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6903, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6905] +++ exited with 0 +++ [pid 6902] +++ exited with 0 +++ [pid 6901] +++ exited with 0 +++ [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6902, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6905, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6901, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5824] umount2("./209", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] umount2("./213", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] umount2("./214", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./209", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] openat(AT_FDCWD, "./213", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... openat resumed>) = 3 [pid 5823] <... openat resumed>) = 3 [pid 5826] openat(AT_FDCWD, "./214", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] newfstatat(3, "", [pid 5823] newfstatat(3, "", [pid 6904] <... sync resumed>) = 0 [pid 5826] <... openat resumed>) = 3 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] newfstatat(3, "", [pid 5824] getdents64(3, [pid 5823] getdents64(3, [pid 6904] exit_group(0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 6904] <... exit_group resumed>) = ? [pid 5826] getdents64(3, [pid 5824] umount2("./209/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] umount2("./213/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5826] umount2("./214/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] umount2("./208", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] openat(AT_FDCWD, "./208", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5827] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5827] umount2("./208/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6904] +++ exited with 0 +++ [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6904, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5824] <... umount2 resumed>) = 0 [pid 5824] umount2("./209/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./209/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] umount2("./209/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./209/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5824] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] close(4) = 0 [pid 5824] rmdir("./209/file0") = 0 [pid 5824] umount2("./209/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./209/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./209/binderfs") = 0 [pid 5824] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] close(3) = 0 [pid 5824] rmdir("./209") = 0 [pid 5824] mkdir("./210", 0777) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5824] ioctl(3, LOOP_CLR_FD) = 0 [pid 5827] <... umount2 resumed>) = 0 [pid 5826] <... umount2 resumed>) = 0 [pid 5827] umount2("./208/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] umount2("./214/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] newfstatat(AT_FDCWD, "./208/file0", [pid 5826] newfstatat(AT_FDCWD, "./214/file0", [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] umount2("./208/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] umount2("./214/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] openat(AT_FDCWD, "./208/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] openat(AT_FDCWD, "./214/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] <... openat resumed>) = 4 [pid 5826] <... openat resumed>) = 4 [pid 5825] umount2("./212", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] close(3 [pid 5827] newfstatat(4, "", [pid 5826] newfstatat(4, "", [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... close resumed>) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] openat(AT_FDCWD, "./212", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] getdents64(4, [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5826] getdents64(4, [pid 5825] <... openat resumed>) = 3 ./strace-static-x86_64: Process 6906 attached [pid 5827] getdents64(4, [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] newfstatat(3, "", [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5826] getdents64(4, [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 6906 [pid 6906] set_robust_list(0x55557eba4660, 24 [pid 5827] close(4 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] <... close resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5825] getdents64(3, [pid 5827] rmdir("./208/file0" [pid 5826] close(4 [pid 5827] <... rmdir resumed>) = 0 [pid 5826] <... close resumed>) = 0 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5827] umount2("./208/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] rmdir("./214/file0" [pid 5825] umount2("./212/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6906] <... set_robust_list resumed>) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... rmdir resumed>) = 0 [pid 6906] chdir("./210" [pid 5827] newfstatat(AT_FDCWD, "./208/binderfs", [pid 5823] <... umount2 resumed>) = 0 [pid 6906] <... chdir resumed>) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... umount2 resumed>) = 0 [pid 5827] unlink("./208/binderfs" [pid 5826] umount2("./214/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6906] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5827] <... unlink resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] umount2("./212/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] getdents64(3, [pid 5826] newfstatat(AT_FDCWD, "./214/binderfs", [pid 5823] umount2("./213/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6906] <... prctl resumed>) = 0 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6906] setpgid(0, 0 [pid 5827] close(3 [pid 5826] unlink("./214/binderfs" [pid 5825] newfstatat(AT_FDCWD, "./212/file0", [pid 5823] newfstatat(AT_FDCWD, "./213/file0", [pid 6906] <... setpgid resumed>) = 0 [pid 5827] <... close resumed>) = 0 [pid 5826] <... unlink resumed>) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] rmdir("./208" [pid 5826] getdents64(3, [pid 5823] umount2("./213/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6906] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5827] <... rmdir resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5825] umount2("./212/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] mkdir("./209", 0777 [pid 5826] close(3 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./213/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6906] <... openat resumed>) = 3 [pid 5827] <... mkdir resumed>) = 0 [pid 6906] write(3, "1000", 4 [pid 5825] openat(AT_FDCWD, "./212/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6906] <... write resumed>) = 4 [pid 5825] <... openat resumed>) = 4 [pid 5823] <... openat resumed>) = 4 [pid 6906] close(3 [pid 5826] <... close resumed>) = 0 [pid 5825] newfstatat(4, "", [pid 5823] newfstatat(4, "", [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6906] <... close resumed>) = 0 [pid 6906] symlink("/dev/binderfs", "./binderfs" [pid 5825] getdents64(4, [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] rmdir("./214" [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5823] getdents64(4, executing program [pid 6906] <... symlink resumed>) = 0 [pid 5826] <... rmdir resumed>) = 0 [pid 5825] getdents64(4, [pid 6906] write(1, "executing program\n", 18 [pid 5827] <... openat resumed>) = 3 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 6906] <... write resumed>) = 18 [pid 5825] close(4 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5827] ioctl(3, LOOP_CLR_FD [pid 5825] <... close resumed>) = 0 [pid 5827] <... ioctl resumed>) = 0 [pid 5827] close(3 [pid 5823] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5826] mkdir("./215", 0777 [pid 5823] close(4 [pid 6906] memfd_create("syzkaller", 0 [pid 5827] <... close resumed>) = 0 [pid 5826] <... mkdir resumed>) = 0 [pid 5825] rmdir("./212/file0" [pid 5823] <... close resumed>) = 0 [pid 5823] rmdir("./213/file0" [pid 6906] <... memfd_create resumed>) = 3 [pid 5825] <... rmdir resumed>) = 0 [pid 5823] <... rmdir resumed>) = 0 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6906] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5825] umount2("./212/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] umount2("./213/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6906] <... mmap resumed>) = 0x7f957a000000 [pid 5825] newfstatat(AT_FDCWD, "./212/binderfs", ./strace-static-x86_64: Process 6907 attached [pid 6906] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5826] <... openat resumed>) = 3 [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] ioctl(3, LOOP_CLR_FD [pid 5823] newfstatat(AT_FDCWD, "./213/binderfs", [pid 5825] unlink("./212/binderfs" [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 6907 [pid 5826] <... ioctl resumed>) = 0 [pid 5825] <... unlink resumed>) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] getdents64(3, [pid 5826] close(3 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] unlink("./213/binderfs" [pid 5825] close(3 [pid 5823] <... unlink resumed>) = 0 [pid 6907] set_robust_list(0x55557eba4660, 24) = 0 [pid 6906] <... write resumed>) = 65536 [pid 5826] <... close resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 5823] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] close(3) = 0 [pid 5823] rmdir("./213") = 0 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6907] chdir("./209" [pid 6906] munmap(0x7f957a000000, 138412032 [pid 5825] rmdir("./212" [pid 5823] mkdir("./214", 0777) = 0 ./strace-static-x86_64: Process 6908 attached [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 6908 [pid 5823] <... openat resumed>) = 3 [pid 5823] ioctl(3, LOOP_CLR_FD) = 0 [pid 5823] close(3) = 0 [pid 6908] set_robust_list(0x55557eba4660, 24 [pid 5825] <... rmdir resumed>) = 0 [pid 6908] <... set_robust_list resumed>) = 0 [pid 6908] chdir("./215" [pid 6907] <... chdir resumed>) = 0 [pid 6906] <... munmap resumed>) = 0 [pid 5825] mkdir("./213", 0777 [pid 6908] <... chdir resumed>) = 0 [pid 6907] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6906] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5825] <... mkdir resumed>) = 0 [pid 6908] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6908] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 6909 attached [pid 6908] setpgid(0, 0) = 0 [pid 6909] set_robust_list(0x55557eba4660, 24 [pid 6908] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 6909 [pid 6909] <... set_robust_list resumed>) = 0 [pid 6908] <... openat resumed>) = 3 [pid 6907] <... prctl resumed>) = 0 [pid 6906] <... openat resumed>) = 4 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6906] ioctl(4, LOOP_SET_FD, 3 [pid 6907] setpgid(0, 0 [pid 5825] <... openat resumed>) = 3 [pid 6909] chdir("./214" [pid 6908] write(3, "1000", 4) = 4 [pid 6909] <... chdir resumed>) = 0 [pid 6908] close(3 [pid 6909] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6908] <... close resumed>) = 0 [pid 6909] <... prctl resumed>) = 0 [pid 6908] symlink("/dev/binderfs", "./binderfs" [pid 6907] <... setpgid resumed>) = 0 [pid 5825] ioctl(3, LOOP_CLR_FDexecuting program [pid 6908] <... symlink resumed>) = 0 [pid 6908] write(1, "executing program\n", 18) = 18 [pid 6907] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5825] <... ioctl resumed>) = 0 [pid 6909] setpgid(0, 0 [pid 6908] memfd_create("syzkaller", 0 [pid 6907] <... openat resumed>) = 3 [pid 5825] close(3 [pid 6908] <... memfd_create resumed>) = 3 [pid 5825] <... close resumed>) = 0 [pid 6907] write(3, "1000", 4 [pid 6909] <... setpgid resumed>) = 0 [pid 6908] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6909] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6908] <... mmap resumed>) = 0x7f957a000000 [pid 6909] <... openat resumed>) = 3 [pid 6908] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6909] write(3, "1000", 4) = 4 [pid 6909] close(3 [pid 6908] <... write resumed>) = 65536 [pid 6909] <... close resumed>) = 0 [pid 6908] munmap(0x7f957a000000, 138412032 [pid 6909] symlink("/dev/binderfs", "./binderfs" [pid 6908] <... munmap resumed>) = 0 executing program [pid 6909] <... symlink resumed>) = 0 [pid 6908] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6907] <... write resumed>) = 4 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6909] write(1, "executing program\n", 18 [pid 6908] <... openat resumed>) = 4 [pid 6909] <... write resumed>) = 18 [pid 6908] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 6910 attached [pid 6909] memfd_create("syzkaller", 0 [pid 6907] close(3 [pid 6906] <... ioctl resumed>) = 0 [pid 6907] <... close resumed>) = 0 [pid 6906] close(3 [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 6910 [pid 6910] set_robust_list(0x55557eba4660, 24) = 0 [pid 6907] symlink("/dev/binderfs", "./binderfs" [pid 6906] <... close resumed>) = 0 [pid 6910] chdir("./213" [pid 6909] <... memfd_create resumed>) = 3 [pid 6907] <... symlink resumed>) = 0 executing program [pid 6906] close(4 [pid 6907] write(1, "executing program\n", 18 [pid 6906] <... close resumed>) = 0 [pid 6907] <... write resumed>) = 18 [pid 6910] <... chdir resumed>) = 0 [pid 6906] mkdir("./file0", 0777 [pid 6909] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6907] memfd_create("syzkaller", 0 [pid 6910] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6909] <... mmap resumed>) = 0x7f957a000000 [pid 6907] <... memfd_create resumed>) = 3 [pid 6906] <... mkdir resumed>) = 0 [pid 6910] <... prctl resumed>) = 0 [pid 6907] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6910] setpgid(0, 0 [pid 6909] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6907] <... mmap resumed>) = 0x7f957a000000 [pid 6906] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6910] <... setpgid resumed>) = 0 [pid 6907] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6910] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6909] <... write resumed>) = 65536 [pid 6910] <... openat resumed>) = 3 [pid 6910] write(3, "1000", 4 [pid 6909] munmap(0x7f957a000000, 138412032 [pid 6910] <... write resumed>) = 4 [pid 6910] close(3 [pid 6909] <... munmap resumed>) = 0 [pid 6910] <... close resumed>) = 0 [pid 6910] symlink("/dev/binderfs", "./binderfs" [pid 6907] <... write resumed>) = 65536 [pid 6910] <... symlink resumed>) = 0 [pid 6909] openat(AT_FDCWD, "/dev/loop0", O_RDWRexecuting program [pid 6910] write(1, "executing program\n", 18) = 18 [pid 6909] <... openat resumed>) = 4 [pid 6907] munmap(0x7f957a000000, 138412032 [pid 6909] ioctl(4, LOOP_SET_FD, 3 [pid 6908] <... ioctl resumed>) = 0 [ 195.262060][ T6906] loop1: detected capacity change from 0 to 128 [ 195.281632][ T6908] loop3: detected capacity change from 0 to 128 [pid 6910] memfd_create("syzkaller", 0) = 3 [pid 6908] close(3 [pid 6907] <... munmap resumed>) = 0 [pid 6908] <... close resumed>) = 0 [pid 6910] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6908] close(4 [pid 6907] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6910] <... mmap resumed>) = 0x7f957a000000 [pid 6908] <... close resumed>) = 0 [pid 6908] mkdir("./file0", 0777 [pid 6907] <... openat resumed>) = 4 [pid 6910] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6908] <... mkdir resumed>) = 0 [pid 6907] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 6908] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6909] <... ioctl resumed>) = 0 [pid 6909] close(3) = 0 [pid 6909] close(4 [pid 6907] ioctl(4, LOOP_CLR_FD [pid 6909] <... close resumed>) = 0 [pid 6909] mkdir("./file0", 0777) = 0 [pid 6909] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6907] <... ioctl resumed>) = 0 [pid 6910] <... write resumed>) = 65536 [pid 6910] munmap(0x7f957a000000, 138412032) = 0 [pid 6910] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6907] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [ 195.314677][ T6909] loop0: detected capacity change from 0 to 128 [ 195.335254][ T6906] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 195.350263][ T6908] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [pid 6907] close(4 [pid 6910] <... openat resumed>) = 4 [pid 6907] <... close resumed>) = 0 [pid 6907] close(3) = 0 [pid 6907] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 6907] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6910] ioctl(4, LOOP_SET_FD, 3 [pid 6907] <... renameat2 resumed>) = -1 ENOENT (No such file or directory) [pid 6907] sync( [pid 6908] <... mount resumed>) = 0 [pid 6908] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6908] chdir("./file0") = 0 [pid 6908] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6909] <... mount resumed>) = 0 [pid 6909] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6909] chdir("./file0") = 0 [pid 6906] <... mount resumed>) = 0 [pid 6909] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6908] openat(AT_FDCWD, ".", O_RDONLY [pid 6906] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6909] openat(AT_FDCWD, ".", O_RDONLY [pid 6906] <... openat resumed>) = 3 [pid 6909] <... openat resumed>) = 4 [pid 6906] chdir("./file0" [pid 6909] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6908] <... openat resumed>) = 4 [pid 6906] <... chdir resumed>) = 0 [pid 6908] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6906] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6906] openat(AT_FDCWD, ".", O_RDONLY [pid 6908] <... renameat2 resumed>) = 0 [pid 6908] sync( [pid 6909] <... renameat2 resumed>) = 0 [pid 6907] <... sync resumed>) = 0 [pid 6906] <... openat resumed>) = 4 [pid 6910] <... ioctl resumed>) = 0 [pid 6909] sync( [pid 6908] <... sync resumed>) = 0 [pid 6907] exit_group(0 [pid 6906] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6910] close(3 [pid 6908] exit_group(0 [pid 6907] <... exit_group resumed>) = ? [ 195.383583][ T6909] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 195.408461][ T6910] loop2: detected capacity change from 0 to 128 [pid 6908] <... exit_group resumed>) = ? [pid 6910] <... close resumed>) = 0 [pid 6910] close(4 [pid 6908] +++ exited with 0 +++ [pid 6906] <... renameat2 resumed>) = 0 [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6908, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5826] restart_syscall(<... resuming interrupted clone ...> [pid 6910] <... close resumed>) = 0 [pid 6910] mkdir("./file0", 0777 [pid 6906] sync( [pid 6910] <... mkdir resumed>) = 0 [pid 6910] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6907] +++ exited with 0 +++ [pid 5826] <... restart_syscall resumed>) = 0 [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6907, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5827] umount2("./209", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] umount2("./215", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] openat(AT_FDCWD, "./209", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] openat(AT_FDCWD, "./215", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] <... openat resumed>) = 3 [pid 5826] <... openat resumed>) = 3 [pid 5827] newfstatat(3, "", [pid 5826] newfstatat(3, "", [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] getdents64(3, [pid 5826] getdents64(3, [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5827] umount2("./209/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] umount2("./215/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] newfstatat(AT_FDCWD, "./209/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] unlink("./209/binderfs") = 0 [pid 5827] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5827] close(3) = 0 [pid 5827] rmdir("./209") = 0 [pid 5827] mkdir("./210", 0777) = 0 [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5827] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5826] <... umount2 resumed>) = 0 [pid 5826] umount2("./215/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] close(3) = 0 [pid 5826] newfstatat(AT_FDCWD, "./215/file0", [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6911 attached [pid 6910] <... mount resumed>) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6910] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5826] umount2("./215/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6911] set_robust_list(0x55557eba4660, 24 [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 6911 [pid 6910] <... openat resumed>) = 3 [pid 6910] chdir("./file0" [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 195.493242][ T6910] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [pid 6911] <... set_robust_list resumed>) = 0 [pid 6910] <... chdir resumed>) = 0 [pid 5826] openat(AT_FDCWD, "./215/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6910] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6911] chdir("./210" [pid 6909] <... sync resumed>) = 0 [pid 6906] <... sync resumed>) = 0 [pid 5826] <... openat resumed>) = 4 [pid 6911] <... chdir resumed>) = 0 [pid 6910] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6909] exit_group(0 [pid 6906] exit_group(0 [pid 5826] newfstatat(4, "", [pid 6911] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6909] <... exit_group resumed>) = ? [pid 6906] <... exit_group resumed>) = ? [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6910] openat(AT_FDCWD, ".", O_RDONLY [pid 6911] <... prctl resumed>) = 0 [pid 6906] +++ exited with 0 +++ [pid 6911] setpgid(0, 0 [pid 6910] <... openat resumed>) = 4 [pid 5826] getdents64(4, [pid 6910] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6906, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 6911] <... setpgid resumed>) = 0 [pid 6909] +++ exited with 0 +++ [pid 5826] getdents64(4, [pid 6911] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6909, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 6911] write(3, "1000", 4 [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 6911] <... write resumed>) = 4 [pid 6911] close(3) = 0 [pid 6911] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6911] write(1, "executing program\n", 18) = 18 [pid 6911] memfd_create("syzkaller", 0) = 3 [pid 6911] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 5824] <... restart_syscall resumed>) = 0 [pid 5824] umount2("./210", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] <... restart_syscall resumed>) = 0 [pid 5824] openat(AT_FDCWD, "./210", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] close(4 [pid 5824] <... openat resumed>) = 3 [pid 6910] <... renameat2 resumed>) = 0 [pid 5824] newfstatat(3, "", [pid 5823] umount2("./214", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... close resumed>) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6911] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5824] getdents64(3, [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] openat(AT_FDCWD, "./214", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] umount2("./210/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... openat resumed>) = 3 [pid 5826] rmdir("./215/file0" [pid 5823] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] umount2("./214/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6911] <... write resumed>) = 65536 [pid 6911] munmap(0x7f957a000000, 138412032) = 0 [pid 6911] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6911] ioctl(4, LOOP_SET_FD, 3 [pid 6910] sync( [pid 5826] <... rmdir resumed>) = 0 [pid 5824] <... umount2 resumed>) = 0 [pid 5823] <... umount2 resumed>) = 0 [pid 5826] umount2("./215/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./210/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] umount2("./214/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./215/binderfs", [pid 5824] newfstatat(AT_FDCWD, "./210/file0", [pid 5823] newfstatat(AT_FDCWD, "./214/file0", [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] umount2("./210/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] umount2("./214/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] unlink("./215/binderfs" [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./210/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] openat(AT_FDCWD, "./214/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] <... unlink resumed>) = 0 [pid 5824] <... openat resumed>) = 4 [pid 5823] <... openat resumed>) = 4 [pid 5826] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] newfstatat(4, "", [pid 5823] newfstatat(4, "", [pid 5826] close(3) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] rmdir("./215" [pid 5824] getdents64(4, [pid 5823] getdents64(4, [pid 5826] <... rmdir resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5826] mkdir("./216", 0777 [pid 5824] getdents64(4, [pid 5823] getdents64(4, [pid 5826] <... mkdir resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] close(4 [pid 5823] close(4 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5824] <... close resumed>) = 0 [pid 5823] <... close resumed>) = 0 [pid 6911] <... ioctl resumed>) = 0 [pid 6910] <... sync resumed>) = 0 [pid 5824] rmdir("./210/file0" [pid 5823] rmdir("./214/file0" [pid 5826] <... openat resumed>) = 3 [pid 6910] exit_group(0 [pid 5826] ioctl(3, LOOP_CLR_FD [pid 5824] <... rmdir resumed>) = 0 [pid 5823] <... rmdir resumed>) = 0 [pid 6910] <... exit_group resumed>) = ? [pid 5823] umount2("./214/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] <... ioctl resumed>) = 0 [pid 5824] umount2("./210/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] newfstatat(AT_FDCWD, "./214/binderfs", [pid 6911] close(3 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6911] <... close resumed>) = 0 [pid 5824] newfstatat(AT_FDCWD, "./210/binderfs", [pid 5823] unlink("./214/binderfs" [pid 6911] close(4 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... unlink resumed>) = 0 [pid 6911] <... close resumed>) = 0 [pid 6910] +++ exited with 0 +++ [pid 5826] close(3 [pid 5824] unlink("./210/binderfs" [pid 5823] getdents64(3, [pid 6911] mkdir("./file0", 0777 [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6910, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5824] <... unlink resumed>) = 0 [pid 5825] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5826] <... close resumed>) = 0 [pid 5824] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] close(3) = 0 [pid 5824] rmdir("./210") = 0 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] close(3) = 0 [pid 5823] rmdir("./214") = 0 [pid 5824] mkdir("./211", 0777) = 0 [pid 5825] umount2("./213", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./213", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] mkdir("./215", 0777 [pid 5825] <... openat resumed>) = 3 [pid 5823] <... mkdir resumed>) = 0 [pid 5825] newfstatat(3, "", [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 6911] <... mkdir resumed>) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5823] ioctl(3, LOOP_CLR_FD [pid 6911] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5825] getdents64(3, [pid 5824] <... openat resumed>) = 3 [pid 5823] <... ioctl resumed>) = 0 [ 195.589675][ T6911] loop4: detected capacity change from 0 to 128 ./strace-static-x86_64: Process 6912 attached [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] ioctl(3, LOOP_CLR_FD [pid 5823] close(3 [pid 5825] umount2("./213/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... ioctl resumed>) = 0 [pid 6912] set_robust_list(0x55557eba4660, 24 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 6912 [pid 5825] <... umount2 resumed>) = 0 [pid 5824] close(3 [pid 5825] umount2("./213/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6912] <... set_robust_list resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... close resumed>) = 0 [pid 5825] newfstatat(AT_FDCWD, "./213/file0", [pid 6912] chdir("./216" [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6912] <... chdir resumed>) = 0 [pid 5825] umount2("./213/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./213/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5825] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... close resumed>) = 0 [pid 5825] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5825] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5825] close(4) = 0 [pid 5825] rmdir("./213/file0" [pid 6912] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5825] <... rmdir resumed>) = 0 [pid 6912] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 6913 attached [pid 5825] umount2("./213/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 6913 [pid 6912] setpgid(0, 0 [pid 6913] set_robust_list(0x55557eba4660, 24 [pid 6912] <... setpgid resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6914 attached [pid 6913] <... set_robust_list resumed>) = 0 [pid 6912] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5825] newfstatat(AT_FDCWD, "./213/binderfs", [pid 6913] chdir("./215" [pid 6912] <... openat resumed>) = 3 [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./213/binderfs" [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 6914 [pid 6913] <... chdir resumed>) = 0 [pid 5825] <... unlink resumed>) = 0 [pid 6913] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5825] getdents64(3, [pid 6913] <... prctl resumed>) = 0 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 6913] setpgid(0, 0 [pid 5825] close(3 [pid 6913] <... setpgid resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 6913] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5825] rmdir("./213" [pid 6913] <... openat resumed>) = 3 [pid 5825] <... rmdir resumed>) = 0 [pid 6913] write(3, "1000", 4) = 4 [pid 6913] close(3 [pid 6914] set_robust_list(0x55557eba4660, 24 [pid 6913] <... close resumed>) = 0 [pid 6912] write(3, "1000", 4 [pid 5825] mkdir("./214", 0777 [pid 6914] <... set_robust_list resumed>) = 0 [pid 6912] <... write resumed>) = 4 [pid 5825] <... mkdir resumed>) = 0 [pid 6913] symlink("/dev/binderfs", "./binderfs" [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6913] <... symlink resumed>) = 0 [pid 5825] <... openat resumed>) = 3 executing program [pid 6913] write(1, "executing program\n", 18 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 6913] <... write resumed>) = 18 [pid 5825] <... ioctl resumed>) = 0 [pid 6914] chdir("./211" [pid 6913] memfd_create("syzkaller", 0 [pid 6912] close(3 [pid 5825] close(3) = 0 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6915 attached [pid 6913] <... memfd_create resumed>) = 3 [pid 6913] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6915] set_robust_list(0x55557eba4660, 24 [pid 6913] <... mmap resumed>) = 0x7f957a000000 [pid 6915] <... set_robust_list resumed>) = 0 [pid 6914] <... chdir resumed>) = 0 [pid 6913] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6912] <... close resumed>) = 0 [pid 6915] chdir("./214" [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 6915 executing program [pid 6915] <... chdir resumed>) = 0 [pid 6914] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6913] <... write resumed>) = 65536 [pid 6912] symlink("/dev/binderfs", "./binderfs" [pid 6914] <... prctl resumed>) = 0 [pid 6915] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6914] setpgid(0, 0 [pid 6912] <... symlink resumed>) = 0 [pid 6914] <... setpgid resumed>) = 0 [pid 6912] write(1, "executing program\n", 18 [pid 6915] setpgid(0, 0 [pid 6914] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6912] <... write resumed>) = 18 [pid 6915] <... setpgid resumed>) = 0 [pid 6914] <... openat resumed>) = 3 [pid 6913] munmap(0x7f957a000000, 138412032 [pid 6912] memfd_create("syzkaller", 0 [pid 6911] <... mount resumed>) = 0 [pid 6915] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6914] write(3, "1000", 4 [pid 6912] <... memfd_create resumed>) = 3 [ 195.666929][ T6911] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [pid 6911] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6915] <... openat resumed>) = 3 [pid 6914] <... write resumed>) = 4 [pid 6913] <... munmap resumed>) = 0 [pid 6912] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6911] <... openat resumed>) = 3 [pid 6915] write(3, "1000", 4 [pid 6913] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6912] <... mmap resumed>) = 0x7f957a000000 [pid 6914] close(3 [pid 6915] <... write resumed>) = 4 [pid 6913] <... openat resumed>) = 4 [pid 6915] close(3 [pid 6913] ioctl(4, LOOP_SET_FD, 3 [pid 6915] <... close resumed>) = 0 [pid 6914] <... close resumed>) = 0 [pid 6913] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 6912] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6914] symlink("/dev/binderfs", "./binderfs" [pid 6915] symlink("/dev/binderfs", "./binderfs" [pid 6913] ioctl(4, LOOP_CLR_FD [pid 6911] chdir("./file0" [pid 6915] <... symlink resumed>) = 0 [pid 6914] <... symlink resumed>) = 0 [pid 6913] <... ioctl resumed>) = 0 [pid 6911] <... chdir resumed>) = 0 executing program executing program [pid 6915] write(1, "executing program\n", 18 [pid 6911] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6915] <... write resumed>) = 18 [pid 6911] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6915] memfd_create("syzkaller", 0 [pid 6914] write(1, "executing program\n", 18 [pid 6911] openat(AT_FDCWD, ".", O_RDONLY [pid 6914] <... write resumed>) = 18 [pid 6911] <... openat resumed>) = 4 [pid 6914] memfd_create("syzkaller", 0 [pid 6915] <... memfd_create resumed>) = 3 [pid 6914] <... memfd_create resumed>) = 3 [pid 6913] ioctl(4, LOOP_SET_FD, 3 [pid 6911] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6914] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 6913] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 6912] <... write resumed>) = 65536 [pid 6915] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6913] close(4 [pid 6915] <... mmap resumed>) = 0x7f957a000000 [pid 6913] <... close resumed>) = 0 [pid 6915] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6914] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6913] close(3 [pid 6912] munmap(0x7f957a000000, 138412032 [pid 6914] <... write resumed>) = 65536 [pid 6913] <... close resumed>) = 0 [pid 6915] <... write resumed>) = 65536 [pid 6914] munmap(0x7f957a000000, 138412032 [pid 6913] openat(AT_FDCWD, ".", O_RDONLY [pid 6912] <... munmap resumed>) = 0 [pid 6914] <... munmap resumed>) = 0 [pid 6913] <... openat resumed>) = 3 [pid 6911] <... renameat2 resumed>) = 0 [pid 6915] munmap(0x7f957a000000, 138412032 [pid 6914] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6912] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6915] <... munmap resumed>) = 0 [pid 6914] <... openat resumed>) = 4 [pid 6913] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6911] sync( [pid 6915] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6914] ioctl(4, LOOP_SET_FD, 3 [pid 6913] <... renameat2 resumed>) = -1 ENOENT (No such file or directory) [pid 6912] <... openat resumed>) = 4 [pid 6915] <... openat resumed>) = 4 [pid 6913] sync( [pid 6915] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 6915] ioctl(4, LOOP_CLR_FD) = 0 [pid 6915] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 6915] close(4) = 0 [pid 6915] close(3) = 0 [pid 6915] openat(AT_FDCWD, ".", O_RDONLY [pid 6912] ioctl(4, LOOP_SET_FD, 3 [pid 6915] <... openat resumed>) = 3 [pid 6915] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = -1 ENOENT (No such file or directory) [pid 6915] sync( [pid 6914] <... ioctl resumed>) = 0 [pid 6912] <... ioctl resumed>) = 0 [pid 6915] <... sync resumed>) = 0 [pid 6914] close(3 [pid 6913] <... sync resumed>) = 0 [pid 6911] <... sync resumed>) = 0 [pid 6912] close(3 [pid 6914] <... close resumed>) = 0 [pid 6913] exit_group(0 [pid 6912] <... close resumed>) = 0 [pid 6914] close(4 [pid 6911] exit_group(0 [pid 6914] <... close resumed>) = 0 [pid 6913] <... exit_group resumed>) = ? [pid 6912] close(4 [pid 6914] mkdir("./file0", 0777 [pid 6913] +++ exited with 0 +++ [pid 6912] <... close resumed>) = 0 [pid 6911] <... exit_group resumed>) = ? [pid 6915] exit_group(0 [pid 6914] <... mkdir resumed>) = 0 [pid 6912] mkdir("./file0", 0777 [pid 6911] +++ exited with 0 +++ [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6913, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 6915] <... exit_group resumed>) = ? [pid 6912] <... mkdir resumed>) = 0 [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6911, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [ 195.759851][ T6914] loop1: detected capacity change from 0 to 128 [ 195.777136][ T6912] loop3: detected capacity change from 0 to 128 [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 6914] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5827] restart_syscall(<... resuming interrupted clone ...> [pid 5823] <... restart_syscall resumed>) = 0 [pid 6915] +++ exited with 0 +++ [pid 6912] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5827] <... restart_syscall resumed>) = 0 [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6915, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5827] umount2("./210", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] umount2("./215", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] openat(AT_FDCWD, "./210", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] openat(AT_FDCWD, "./215", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] <... openat resumed>) = 3 [pid 5823] <... openat resumed>) = 3 [pid 5827] newfstatat(3, "", [pid 5823] newfstatat(3, "", [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] getdents64(3, [pid 5823] getdents64(3, [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5825] umount2("./214", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./214", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 5827] umount2("./210/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... openat resumed>) = 3 [pid 5823] umount2("./215/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] newfstatat(3, "", [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] newfstatat(AT_FDCWD, "./215/binderfs", [pid 5825] getdents64(3, [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 5823] unlink("./215/binderfs" [pid 5825] umount2("./214/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... unlink resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] getdents64(3, [pid 5825] newfstatat(AT_FDCWD, "./214/binderfs", [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] close(3 [pid 5825] unlink("./214/binderfs" [pid 5823] <... close resumed>) = 0 [pid 5825] <... unlink resumed>) = 0 [pid 5823] rmdir("./215") = 0 [pid 5825] getdents64(3, [pid 5823] mkdir("./216", 0777 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] <... mkdir resumed>) = 0 [pid 5825] close(3) = 0 [pid 5825] rmdir("./214") = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5823] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5823] close(3) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5825] mkdir("./215", 0777./strace-static-x86_64: Process 6916 attached ) = 0 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5825] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5825] close(3) = 0 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 6916 ./strace-static-x86_64: Process 6917 attached [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 6917 [pid 6912] <... mount resumed>) = 0 [pid 6912] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6912] chdir("./file0") = 0 [pid 6912] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6916] set_robust_list(0x55557eba4660, 24 [pid 6912] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 6912] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = 0 [ 195.834898][ T6912] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 195.862103][ T6914] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [pid 6912] sync( [pid 6914] <... mount resumed>) = 0 [pid 6917] set_robust_list(0x55557eba4660, 24 [pid 6916] <... set_robust_list resumed>) = 0 [pid 5827] <... umount2 resumed>) = 0 [pid 6916] chdir("./216" [pid 5827] umount2("./210/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6914] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6914] chdir("./file0") = 0 [pid 6917] <... set_robust_list resumed>) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6916] <... chdir resumed>) = 0 [pid 6914] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5827] newfstatat(AT_FDCWD, "./210/file0", [pid 6917] chdir("./215" [pid 6916] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6914] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6917] <... chdir resumed>) = 0 [pid 6916] <... prctl resumed>) = 0 [pid 6914] openat(AT_FDCWD, ".", O_RDONLY [pid 6912] <... sync resumed>) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6917] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6916] setpgid(0, 0 [pid 6912] exit_group(0 [pid 5827] umount2("./210/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6917] <... prctl resumed>) = 0 [pid 6916] <... setpgid resumed>) = 0 [pid 6914] <... openat resumed>) = 4 [pid 6912] <... exit_group resumed>) = ? [pid 6917] setpgid(0, 0 [pid 6916] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6917] <... setpgid resumed>) = 0 [pid 6917] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6916] <... openat resumed>) = 3 [pid 6914] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5827] openat(AT_FDCWD, "./210/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6917] <... openat resumed>) = 3 [pid 6916] write(3, "1000", 4 [pid 6914] <... renameat2 resumed>) = 0 [pid 5827] <... openat resumed>) = 4 [pid 6914] sync( [pid 6917] write(3, "1000", 4 [pid 6916] <... write resumed>) = 4 [pid 6914] <... sync resumed>) = 0 [pid 5827] newfstatat(4, "", [pid 6917] <... write resumed>) = 4 [pid 6912] +++ exited with 0 +++ [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6917] close(3 [pid 5827] getdents64(4, [pid 6917] <... close resumed>) = 0 [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6912, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6917] symlink("/dev/binderfs", "./binderfs" [pid 6914] exit_group(0 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5826] restart_syscall(<... resuming interrupted clone ...> [pid 6914] <... exit_group resumed>) = ? [pid 6917] <... symlink resumed>) = 0 [pid 6916] close(3 [pid 5827] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 6916] <... close resumed>) = 0 [pid 6916] symlink("/dev/binderfs", "./binderfs" [pid 5827] close(4 [pid 6916] <... symlink resumed>) = 0 [pid 6914] +++ exited with 0 +++ [pid 5827] <... close resumed>) = 0 [pid 5827] rmdir("./210/file0"executing program [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6914, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5824] umount2("./211", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6917] write(1, "executing program\n", 18 [pid 5827] <... rmdir resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6916] write(1, "executing program\n", 18 executing program [pid 6917] <... write resumed>) = 18 [pid 5827] umount2("./210/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] openat(AT_FDCWD, "./211", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6917] memfd_create("syzkaller", 0 [pid 6916] <... write resumed>) = 18 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... restart_syscall resumed>) = 0 [pid 5824] <... openat resumed>) = 3 [pid 5827] newfstatat(AT_FDCWD, "./210/binderfs", [pid 5824] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] umount2("./216", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] getdents64(3, [pid 6916] memfd_create("syzkaller", 0 [pid 5827] unlink("./210/binderfs" [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5826] openat(AT_FDCWD, "./216", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] umount2("./211/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6917] <... memfd_create resumed>) = 3 [pid 5827] <... unlink resumed>) = 0 [pid 5826] <... openat resumed>) = 3 [pid 6916] <... memfd_create resumed>) = 3 [pid 5824] <... umount2 resumed>) = 0 [pid 6917] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6916] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5827] getdents64(3, [pid 5826] newfstatat(3, "", [pid 5824] umount2("./211/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6916] <... mmap resumed>) = 0x7f957a000000 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] close(3 [pid 5826] getdents64(3, [pid 5824] newfstatat(AT_FDCWD, "./211/file0", [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] <... close resumed>) = 0 [pid 5826] umount2("./216/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./211/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] rmdir("./210" [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6917] <... mmap resumed>) = 0x7f957a000000 [pid 6916] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5826] <... umount2 resumed>) = 0 [pid 5824] openat(AT_FDCWD, "./211/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] umount2("./216/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] <... openat resumed>) = 4 [pid 5827] <... rmdir resumed>) = 0 [pid 5826] newfstatat(AT_FDCWD, "./216/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] umount2("./216/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] newfstatat(4, "", [pid 6917] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] openat(AT_FDCWD, "./216/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6916] <... write resumed>) = 65536 [pid 5824] getdents64(4, [pid 5826] newfstatat(4, "", [pid 6917] <... write resumed>) = 65536 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5826] getdents64(4, [pid 5827] mkdir("./211", 0777 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5826] getdents64(4, [pid 5824] getdents64(4, [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5826] close(4 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5826] <... close resumed>) = 0 [pid 5824] close(4 [pid 5826] rmdir("./216/file0" [pid 5827] <... mkdir resumed>) = 0 [pid 5826] <... rmdir resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 5824] rmdir("./211/file0" [pid 6916] munmap(0x7f957a000000, 138412032 [pid 5824] <... rmdir resumed>) = 0 [pid 5826] umount2("./216/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./216/binderfs", [pid 6917] munmap(0x7f957a000000, 138412032 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6917] <... munmap resumed>) = 0 [pid 6916] <... munmap resumed>) = 0 [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5824] umount2("./211/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6917] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6916] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5827] <... openat resumed>) = 3 [pid 6917] <... openat resumed>) = 4 [pid 6916] <... openat resumed>) = 4 [pid 5827] ioctl(3, LOOP_CLR_FD [pid 5826] unlink("./216/binderfs" [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6917] ioctl(4, LOOP_SET_FD, 3 [pid 6916] ioctl(4, LOOP_SET_FD, 3 [pid 5827] <... ioctl resumed>) = 0 [pid 5826] <... unlink resumed>) = 0 [pid 5824] newfstatat(AT_FDCWD, "./211/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] getdents64(3, [pid 5824] unlink("./211/binderfs" [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] <... unlink resumed>) = 0 [pid 5827] close(3 [pid 5826] close(3) = 0 [pid 5826] rmdir("./216" [pid 5824] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] close(3) = 0 [pid 5826] <... rmdir resumed>) = 0 [pid 5824] rmdir("./211") = 0 [pid 5826] mkdir("./217", 0777 [pid 5824] mkdir("./212", 0777 [pid 5826] <... mkdir resumed>) = 0 [pid 5824] <... mkdir resumed>) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5827] <... close resumed>) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5826] ioctl(3, LOOP_CLR_FD) = 0 [pid 5824] <... openat resumed>) = 3 [pid 5826] close(3) = 0 [pid 5824] ioctl(3, LOOP_CLR_FD [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5824] <... ioctl resumed>) = 0 [pid 5824] close(3) = 0 ./strace-static-x86_64: Process 6918 attached [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6919 attached [pid 6917] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 6920 attached [pid 6919] set_robust_list(0x55557eba4660, 24 [pid 6918] set_robust_list(0x55557eba4660, 24 [pid 6917] close(3 [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 6919 [pid 6917] <... close resumed>) = 0 [pid 6920] set_robust_list(0x55557eba4660, 24 [pid 6919] <... set_robust_list resumed>) = 0 [pid 6920] <... set_robust_list resumed>) = 0 [pid 6919] chdir("./212" [pid 6918] <... set_robust_list resumed>) = 0 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 6918 [pid 6920] chdir("./211" [pid 6918] chdir("./217" [pid 6917] close(4 [pid 6920] <... chdir resumed>) = 0 [pid 6919] <... chdir resumed>) = 0 [pid 6918] <... chdir resumed>) = 0 [pid 6920] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6919] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6918] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6920] <... prctl resumed>) = 0 [pid 6919] <... prctl resumed>) = 0 [pid 6918] <... prctl resumed>) = 0 [pid 6920] setpgid(0, 0 [pid 6919] setpgid(0, 0 [pid 6918] setpgid(0, 0 [pid 6920] <... setpgid resumed>) = 0 [pid 6919] <... setpgid resumed>) = 0 [pid 6918] <... setpgid resumed>) = 0 [pid 6919] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6920] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6918] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6917] <... close resumed>) = 0 [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 6920 [pid 6917] mkdir("./file0", 0777 [pid 6916] <... ioctl resumed>) = 0 [pid 6920] <... openat resumed>) = 3 [pid 6917] <... mkdir resumed>) = 0 [pid 6916] close(3 [pid 6919] <... openat resumed>) = 3 [pid 6918] <... openat resumed>) = 3 [pid 6916] <... close resumed>) = 0 [pid 6917] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6920] write(3, "1000", 4 [pid 6918] write(3, "1000", 4 [pid 6916] close(4 [pid 6920] <... write resumed>) = 4 [pid 6919] write(3, "1000", 4 [pid 6918] <... write resumed>) = 4 [pid 6916] <... close resumed>) = 0 [pid 6920] close(3 [pid 6919] <... write resumed>) = 4 [pid 6918] close(3 [pid 6920] <... close resumed>) = 0 [pid 6919] close(3 [pid 6918] <... close resumed>) = 0 [pid 6916] mkdir("./file0", 0777 [pid 6919] <... close resumed>) = 0 [pid 6918] symlink("/dev/binderfs", "./binderfs" [ 196.005672][ T6916] loop0: detected capacity change from 0 to 128 [ 196.014580][ T6917] loop2: detected capacity change from 0 to 128 [pid 6920] symlink("/dev/binderfs", "./binderfs"executing program executing program [pid 6919] symlink("/dev/binderfs", "./binderfs" [pid 6918] <... symlink resumed>) = 0 [pid 6916] <... mkdir resumed>) = 0 [pid 6920] <... symlink resumed>) = 0 [pid 6920] write(1, "executing program\n", 18 [pid 6919] <... symlink resumed>) = 0 [pid 6918] write(1, "executing program\n", 18 [pid 6920] <... write resumed>) = 18 [pid 6918] <... write resumed>) = 18 executing program [pid 6920] memfd_create("syzkaller", 0 [pid 6919] write(1, "executing program\n", 18 [pid 6918] memfd_create("syzkaller", 0 [pid 6920] <... memfd_create resumed>) = 3 [pid 6919] <... write resumed>) = 18 [pid 6918] <... memfd_create resumed>) = 3 [pid 6920] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6919] memfd_create("syzkaller", 0 [pid 6918] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6920] <... mmap resumed>) = 0x7f957a000000 [pid 6918] <... mmap resumed>) = 0x7f957a000000 [pid 6920] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6919] <... memfd_create resumed>) = 3 [pid 6918] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6919] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 6919] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6920] <... write resumed>) = 65536 [pid 6918] <... write resumed>) = 65536 [pid 6920] munmap(0x7f957a000000, 138412032 [pid 6919] <... write resumed>) = 65536 [pid 6916] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6920] <... munmap resumed>) = 0 [pid 6918] munmap(0x7f957a000000, 138412032) = 0 [pid 6919] munmap(0x7f957a000000, 138412032 [pid 6920] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6919] <... munmap resumed>) = 0 [pid 6918] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6920] <... openat resumed>) = 4 [pid 6918] <... openat resumed>) = 4 [pid 6918] ioctl(4, LOOP_SET_FD, 3 [pid 6920] ioctl(4, LOOP_SET_FD, 3 [pid 6918] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 6919] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6918] ioctl(4, LOOP_CLR_FD [pid 6919] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 6919] ioctl(4, LOOP_CLR_FD) = 0 [pid 6918] <... ioctl resumed>) = 0 [pid 6920] <... ioctl resumed>) = 0 [pid 6917] <... mount resumed>) = 0 [pid 6919] ioctl(4, LOOP_SET_FD, 3 [pid 6918] ioctl(4, LOOP_SET_FD, 3 [pid 6919] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 6918] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 6920] close(3 [pid 6919] close(4 [pid 6918] close(4 [pid 6917] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6920] <... close resumed>) = 0 [pid 6919] <... close resumed>) = 0 [pid 6918] <... close resumed>) = 0 [pid 6917] <... openat resumed>) = 3 [pid 6920] close(4 [pid 6919] close(3 [pid 6918] close(3 [pid 6917] chdir("./file0" [pid 6920] <... close resumed>) = 0 [pid 6919] <... close resumed>) = 0 [pid 6918] <... close resumed>) = 0 [pid 6917] <... chdir resumed>) = 0 [pid 6920] mkdir("./file0", 0777 [pid 6919] openat(AT_FDCWD, ".", O_RDONLY [pid 6918] openat(AT_FDCWD, ".", O_RDONLY [pid 6917] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6920] <... mkdir resumed>) = 0 [pid 6919] <... openat resumed>) = 3 [pid 6918] <... openat resumed>) = 3 [pid 6917] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6919] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6918] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6919] <... renameat2 resumed>) = -1 ENOENT (No such file or directory) [pid 6918] <... renameat2 resumed>) = -1 ENOENT (No such file or directory) [pid 6917] openat(AT_FDCWD, ".", O_RDONLY [pid 6920] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6919] sync( [pid 6918] sync( [pid 6917] <... openat resumed>) = 4 [pid 6916] <... mount resumed>) = 0 [pid 6917] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [ 196.058745][ T6917] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 196.078338][ T6920] loop4: detected capacity change from 0 to 128 [ 196.085548][ T6916] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [pid 6916] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6916] chdir("./file0" [pid 6917] <... renameat2 resumed>) = 0 [pid 6916] <... chdir resumed>) = 0 [pid 6917] sync( [pid 6916] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6916] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 6916] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = 0 [pid 6916] sync( [pid 6920] <... mount resumed>) = 0 [pid 6920] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6916] <... sync resumed>) = 0 [pid 6920] <... openat resumed>) = 3 [pid 6919] <... sync resumed>) = 0 [pid 6918] <... sync resumed>) = 0 [pid 6917] <... sync resumed>) = 0 [pid 6916] exit_group(0 [pid 6920] chdir("./file0" [pid 6919] exit_group(0 [pid 6918] exit_group(0 [pid 6917] exit_group(0 [pid 6916] <... exit_group resumed>) = ? [pid 6919] <... exit_group resumed>) = ? [pid 6917] <... exit_group resumed>) = ? [pid 6920] <... chdir resumed>) = 0 [pid 6920] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [ 196.128997][ T6920] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [pid 6920] openat(AT_FDCWD, ".", O_RDONLY [pid 6919] +++ exited with 0 +++ [pid 6918] <... exit_group resumed>) = ? [pid 6917] +++ exited with 0 +++ [pid 6916] +++ exited with 0 +++ [pid 6920] <... openat resumed>) = 4 [pid 6920] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6917, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6919, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6916, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5825] restart_syscall(<... resuming interrupted clone ...> [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 5824] <... restart_syscall resumed>) = 0 [pid 5823] <... restart_syscall resumed>) = 0 [pid 5824] umount2("./212", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] umount2("./216", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6920] <... renameat2 resumed>) = 0 [pid 5824] openat(AT_FDCWD, "./212", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] openat(AT_FDCWD, "./216", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6920] sync( [pid 5825] <... restart_syscall resumed>) = 0 [pid 5824] <... openat resumed>) = 3 [pid 5823] <... openat resumed>) = 3 [pid 5824] newfstatat(3, "", [pid 5823] newfstatat(3, "", [pid 6918] +++ exited with 0 +++ [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6918, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5825] umount2("./215", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] getdents64(3, [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 5823] getdents64(3, [pid 5825] openat(AT_FDCWD, "./215", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] umount2("./212/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5825] <... openat resumed>) = 3 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(3, "", [pid 5824] newfstatat(AT_FDCWD, "./212/binderfs", [pid 5823] umount2("./216/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] getdents64(3, [pid 5824] unlink("./212/binderfs") = 0 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5825] umount2("./215/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 6920] <... sync resumed>) = 0 [pid 5825] <... umount2 resumed>) = 0 [pid 5823] <... umount2 resumed>) = 0 [pid 6920] exit_group(0 [pid 5824] close(3 [pid 6920] <... exit_group resumed>) = ? [pid 5825] umount2("./215/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... close resumed>) = 0 [pid 6920] +++ exited with 0 +++ [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] rmdir("./212" [pid 5823] umount2("./216/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] umount2("./217", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] newfstatat(AT_FDCWD, "./215/file0", [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6920, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] restart_syscall(<... resuming interrupted clone ...> [pid 5826] openat(AT_FDCWD, "./217", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] umount2("./215/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... restart_syscall resumed>) = 0 [pid 5826] <... openat resumed>) = 3 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./216/file0", [pid 5824] mkdir("./213", 0777 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] openat(AT_FDCWD, "./215/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] <... mkdir resumed>) = 0 [pid 5823] umount2("./216/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... openat resumed>) = 4 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(3, "", [pid 5825] newfstatat(4, "", [pid 5823] openat(AT_FDCWD, "./216/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... openat resumed>) = 4 [pid 5826] getdents64(3, [pid 5825] getdents64(4, [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5823] newfstatat(4, "", [pid 5827] umount2("./211", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] <... openat resumed>) = 3 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] umount2("./217/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] getdents64(4, [pid 5824] ioctl(3, LOOP_CLR_FD [pid 5823] getdents64(4, [pid 5827] openat(AT_FDCWD, "./211", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5827] newfstatat(3, "", [pid 5826] newfstatat(AT_FDCWD, "./217/binderfs", [pid 5825] close(4 [pid 5824] close(3 [pid 5823] getdents64(4, [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... close resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 5827] getdents64(3, [pid 5826] unlink("./217/binderfs" [pid 5825] rmdir("./215/file0" [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5826] <... unlink resumed>) = 0 [pid 5825] <... rmdir resumed>) = 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 6921 attached [pid 5827] umount2("./211/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] getdents64(3, [pid 5825] umount2("./215/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 6921 [pid 5823] close(4 [pid 6921] set_robust_list(0x55557eba4660, 24 [pid 5827] <... umount2 resumed>) = 0 [pid 5826] close(3 [pid 5825] newfstatat(AT_FDCWD, "./215/binderfs", [pid 5823] <... close resumed>) = 0 [pid 6921] <... set_robust_list resumed>) = 0 [pid 5827] umount2("./211/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... close resumed>) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] rmdir("./216/file0" [pid 6921] chdir("./213" [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] rmdir("./217" [pid 5825] unlink("./215/binderfs" [pid 5823] <... rmdir resumed>) = 0 [pid 5827] newfstatat(AT_FDCWD, "./211/file0", [pid 5826] <... rmdir resumed>) = 0 [pid 5825] <... unlink resumed>) = 0 [pid 6921] <... chdir resumed>) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] umount2("./216/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] umount2("./211/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] getdents64(3, [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6921] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5827] openat(AT_FDCWD, "./211/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] mkdir("./218", 0777 [pid 6921] <... prctl resumed>) = 0 [pid 5827] <... openat resumed>) = 4 [pid 5826] <... mkdir resumed>) = 0 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6921] setpgid(0, 0 [pid 5827] newfstatat(4, "", [pid 5825] close(3 [pid 5823] newfstatat(AT_FDCWD, "./216/binderfs", [pid 6921] <... setpgid resumed>) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] <... close resumed>) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6921] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5827] getdents64(4, [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5825] rmdir("./215" [pid 6921] <... openat resumed>) = 3 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5826] <... openat resumed>) = 3 [pid 5825] <... rmdir resumed>) = 0 [pid 5823] unlink("./216/binderfs" [pid 5827] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] <... unlink resumed>) = 0 [pid 5826] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 6921] write(3, "1000", 4 [pid 5826] close(3 [pid 6921] <... write resumed>) = 4 [pid 6921] close(3 [pid 5826] <... close resumed>) = 0 [pid 5823] getdents64(3, [pid 6921] <... close resumed>) = 0 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5825] mkdir("./216", 0777 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 6922 attached [pid 6921] symlink("/dev/binderfs", "./binderfs" [pid 5827] close(4 [pid 5825] <... mkdir resumed>) = 0 [pid 5823] close(3 [pid 6922] set_robust_list(0x55557eba4660, 24 [pid 6921] <... symlink resumed>) = 0 [pid 5823] <... close resumed>) = 0 [pid 6922] <... set_robust_list resumed>) = 0 [pid 5823] rmdir("./216" [pid 6922] chdir("./218" [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5823] <... rmdir resumed>) = 0 executing program [pid 6921] write(1, "executing program\n", 18) = 18 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 6922 [pid 5825] <... openat resumed>) = 3 [pid 6922] <... chdir resumed>) = 0 [pid 6921] memfd_create("syzkaller", 0 [pid 6922] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5825] ioctl(3, LOOP_CLR_FD [pid 6922] <... prctl resumed>) = 0 [pid 6921] <... memfd_create resumed>) = 3 [pid 5827] <... close resumed>) = 0 [pid 5825] <... ioctl resumed>) = 0 [pid 5823] mkdir("./217", 0777 [pid 6922] setpgid(0, 0 [pid 5827] rmdir("./211/file0" [pid 5825] close(3 [pid 6922] <... setpgid resumed>) = 0 [pid 6921] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6922] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5827] <... rmdir resumed>) = 0 [pid 5823] <... mkdir resumed>) = 0 [pid 6921] <... mmap resumed>) = 0x7f957a000000 [pid 5827] umount2("./211/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6922] <... openat resumed>) = 3 [pid 5823] <... openat resumed>) = 3 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] ioctl(3, LOOP_CLR_FD [pid 5827] newfstatat(AT_FDCWD, "./211/binderfs", [pid 6922] write(3, "1000", 4 [pid 6921] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... ioctl resumed>) = 0 [pid 5827] unlink("./211/binderfs" [pid 6922] <... write resumed>) = 4 [pid 5823] close(3 [pid 6922] close(3 [pid 5827] <... unlink resumed>) = 0 [pid 5823] <... close resumed>) = 0 [pid 6922] <... close resumed>) = 0 [pid 5827] getdents64(3, [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6923 attached [pid 6922] symlink("/dev/binderfs", "./binderfs" [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 6922] <... symlink resumed>) = 0 [pid 5827] close(3) = 0 [pid 6921] <... write resumed>) = 65536 [pid 5827] rmdir("./211"executing program [pid 6922] write(1, "executing program\n", 18 [pid 6923] set_robust_list(0x55557eba4660, 24 [pid 6922] <... write resumed>) = 18 [pid 5827] <... rmdir resumed>) = 0 [pid 6923] <... set_robust_list resumed>) = 0 [pid 6922] memfd_create("syzkaller", 0 [pid 6921] munmap(0x7f957a000000, 138412032 [pid 5827] mkdir("./212", 0777 [pid 6923] chdir("./217" [pid 6922] <... memfd_create resumed>) = 3 [pid 6921] <... munmap resumed>) = 0 [pid 6923] <... chdir resumed>) = 0 [pid 6922] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6921] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5827] <... mkdir resumed>) = 0 [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 6923 [pid 6922] <... mmap resumed>) = 0x7f957a000000 [pid 6921] <... openat resumed>) = 4 [pid 6923] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6922] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6921] ioctl(4, LOOP_SET_FD, 3 [pid 6923] <... prctl resumed>) = 0 [pid 6923] setpgid(0, 0 [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6923] <... setpgid resumed>) = 0 [pid 6923] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6922] <... write resumed>) = 65536 [pid 5827] <... openat resumed>) = 3 [pid 5825] <... close resumed>) = 0 [pid 6923] <... openat resumed>) = 3 [pid 6923] write(3, "1000", 4 [pid 6922] munmap(0x7f957a000000, 138412032 [pid 6923] <... write resumed>) = 4 [pid 6922] <... munmap resumed>) = 0 [pid 5827] ioctl(3, LOOP_CLR_FD [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6923] close(3 [pid 6922] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5827] <... ioctl resumed>) = 0 [pid 6922] <... openat resumed>) = 4 [pid 6923] <... close resumed>) = 0 [pid 6922] ioctl(4, LOOP_SET_FD, 3 [pid 6923] symlink("/dev/binderfs", "./binderfs" [pid 5827] close(3./strace-static-x86_64: Process 6924 attached [pid 6923] <... symlink resumed>) = 0 [pid 5827] <... close resumed>) = 0 [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 6924 executing program [pid 6923] write(1, "executing program\n", 18) = 18 [pid 6923] memfd_create("syzkaller", 0) = 3 [pid 6923] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 6921] <... ioctl resumed>) = 0 [pid 6923] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6921] close(3) = 0 [pid 6921] close(4) = 0 [pid 6921] mkdir("./file0", 0777) = 0 [pid 6923] <... write resumed>) = 65536 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6921] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [ 196.315773][ T6921] loop1: detected capacity change from 0 to 128 [ 196.338529][ T6922] loop3: detected capacity change from 0 to 128 [pid 6923] munmap(0x7f957a000000, 138412032./strace-static-x86_64: Process 6925 attached [pid 6924] set_robust_list(0x55557eba4660, 24 [pid 6923] <... munmap resumed>) = 0 [pid 6924] <... set_robust_list resumed>) = 0 [pid 6925] set_robust_list(0x55557eba4660, 24 [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 6925 [pid 6924] chdir("./216" [pid 6925] <... set_robust_list resumed>) = 0 [pid 6924] <... chdir resumed>) = 0 [pid 6924] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6925] chdir("./212" [pid 6924] <... prctl resumed>) = 0 [pid 6924] setpgid(0, 0 [pid 6923] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6922] <... ioctl resumed>) = 0 [pid 6923] <... openat resumed>) = 4 [pid 6922] close(3 [pid 6923] ioctl(4, LOOP_SET_FD, 3 [pid 6922] <... close resumed>) = 0 [pid 6922] close(4) = 0 [pid 6922] mkdir("./file0", 0777) = 0 [pid 6923] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 6923] ioctl(4, LOOP_CLR_FD) = 0 [pid 6924] <... setpgid resumed>) = 0 [pid 6924] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6922] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6925] <... chdir resumed>) = 0 [pid 6924] <... openat resumed>) = 3 [pid 6924] write(3, "1000", 4) = 4 [pid 6923] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 6923] close(4) = 0 [pid 6923] close(3 [pid 6925] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6924] close(3 [pid 6923] <... close resumed>) = 0 [pid 6923] openat(AT_FDCWD, ".", O_RDONLY [pid 6925] <... prctl resumed>) = 0 [pid 6924] <... close resumed>) = 0 [pid 6923] <... openat resumed>) = 3 [pid 6925] setpgid(0, 0 [pid 6924] symlink("/dev/binderfs", "./binderfs" [pid 6923] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6921] <... mount resumed>) = 0 [pid 6925] <... setpgid resumed>) = 0 [pid 6925] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6923] <... renameat2 resumed>) = -1 ENOENT (No such file or directory) [pid 6921] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6924] <... symlink resumed>) = 0 [pid 6921] <... openat resumed>) = 3 [pid 6925] <... openat resumed>) = 3 [pid 6924] write(1, "executing program\n", 18 [pid 6923] sync( [pid 6921] chdir("./file0" [pid 6925] write(3, "1000", 4 [pid 6921] <... chdir resumed>) = 0 executing program [pid 6925] <... write resumed>) = 4 [pid 6921] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6925] close(3 [pid 6924] <... write resumed>) = 18 [pid 6921] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6921] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 6924] memfd_create("syzkaller", 0 [pid 6921] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6925] <... close resumed>) = 0 [pid 6925] symlink("/dev/binderfs", "./binderfs" [pid 6924] <... memfd_create resumed>) = 3 [pid 6921] <... renameat2 resumed>) = 0 [ 196.357387][ T6921] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 196.378261][ T6922] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 executing program [pid 6925] <... symlink resumed>) = 0 [pid 6924] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6925] write(1, "executing program\n", 18 [pid 6924] <... mmap resumed>) = 0x7f957a000000 [pid 6925] <... write resumed>) = 18 [pid 6921] sync( [pid 6925] memfd_create("syzkaller", 0 [pid 6924] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6925] <... memfd_create resumed>) = 3 [pid 6922] <... mount resumed>) = 0 [pid 6925] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6922] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6925] <... mmap resumed>) = 0x7f957a000000 [pid 6924] <... write resumed>) = 65536 [pid 6922] <... openat resumed>) = 3 [pid 6922] chdir("./file0" [pid 6925] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6922] <... chdir resumed>) = 0 [pid 6925] <... write resumed>) = 65536 [pid 6924] munmap(0x7f957a000000, 138412032 [pid 6922] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6925] munmap(0x7f957a000000, 138412032 [pid 6924] <... munmap resumed>) = 0 [pid 6925] <... munmap resumed>) = 0 [pid 6924] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6925] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6924] <... openat resumed>) = 4 [pid 6922] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6925] <... openat resumed>) = 4 [pid 6924] ioctl(4, LOOP_SET_FD, 3 [pid 6923] <... sync resumed>) = 0 [pid 6922] openat(AT_FDCWD, ".", O_RDONLY [pid 6921] <... sync resumed>) = 0 [pid 6922] <... openat resumed>) = 4 [pid 6921] exit_group(0 [pid 6923] exit_group(0 [pid 6922] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6921] <... exit_group resumed>) = ? [pid 6921] +++ exited with 0 +++ [pid 6925] ioctl(4, LOOP_SET_FD, 3 [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6921, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5824] umount2("./213", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6923] <... exit_group resumed>) = ? [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6923] +++ exited with 0 +++ [pid 5824] openat(AT_FDCWD, "./213", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5824] newfstatat(3, "", [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6923, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 6922] <... renameat2 resumed>) = 0 [pid 5824] getdents64(3, [pid 6922] sync( [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] umount2("./213/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... restart_syscall resumed>) = 0 [pid 5824] <... umount2 resumed>) = 0 [pid 5824] umount2("./213/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./213/file0", [pid 5823] umount2("./217", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6924] <... ioctl resumed>) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] umount2("./213/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] openat(AT_FDCWD, "./217", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6925] <... ioctl resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... openat resumed>) = 3 [pid 6924] close(3 [pid 5824] openat(AT_FDCWD, "./213/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] newfstatat(3, "", [pid 6924] <... close resumed>) = 0 [pid 5824] <... openat resumed>) = 4 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6924] close(4 [pid 5824] newfstatat(4, "", [pid 5823] getdents64(3, [pid 6925] close(3 [pid 6924] <... close resumed>) = 0 [pid 6925] <... close resumed>) = 0 [pid 6924] mkdir("./file0", 0777 [pid 6925] close(4) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 6925] mkdir("./file0", 0777 [pid 5824] getdents64(4, [pid 5823] umount2("./217/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6922] <... sync resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6925] <... mkdir resumed>) = 0 [pid 6922] exit_group(0 [pid 5824] getdents64(4, [pid 5823] newfstatat(AT_FDCWD, "./217/binderfs", [pid 6925] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6922] <... exit_group resumed>) = ? [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6924] <... mkdir resumed>) = 0 [pid 5824] close(4 [pid 5823] unlink("./217/binderfs" [pid 5824] <... close resumed>) = 0 [pid 5823] <... unlink resumed>) = 0 [pid 5824] rmdir("./213/file0" [ 196.451992][ T6924] loop2: detected capacity change from 0 to 128 [ 196.462526][ T6925] loop4: detected capacity change from 0 to 128 [pid 5823] getdents64(3, [pid 6924] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5824] <... rmdir resumed>) = 0 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] umount2("./213/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] close(3 [pid 6922] +++ exited with 0 +++ [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... close resumed>) = 0 [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6922, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5824] newfstatat(AT_FDCWD, "./213/binderfs", [pid 5823] rmdir("./217" [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... rmdir resumed>) = 0 [pid 5824] unlink("./213/binderfs" [pid 5823] mkdir("./218", 0777 [pid 5826] umount2("./218", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... unlink resumed>) = 0 [pid 5823] <... mkdir resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] getdents64(3, [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5826] openat(AT_FDCWD, "./218", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] <... openat resumed>) = 3 [pid 5826] <... openat resumed>) = 3 [pid 5826] newfstatat(3, "", [pid 5824] close(3 [pid 5823] ioctl(3, LOOP_CLR_FD [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] <... close resumed>) = 0 [pid 5823] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5824] rmdir("./213") = 0 [pid 5826] umount2("./218/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] close(3) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6926 attached [pid 6925] <... mount resumed>) = 0 [pid 6924] <... mount resumed>) = 0 [pid 6925] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6924] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5824] mkdir("./214", 0777 [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 6926 [pid 6926] set_robust_list(0x55557eba4660, 24 [pid 6925] <... openat resumed>) = 3 [pid 6924] <... openat resumed>) = 3 [pid 5824] <... mkdir resumed>) = 0 [pid 6925] chdir("./file0" [pid 6924] chdir("./file0" [pid 6925] <... chdir resumed>) = 0 [pid 6924] <... chdir resumed>) = 0 [pid 6925] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6924] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6926] <... set_robust_list resumed>) = 0 [pid 6924] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6926] chdir("./218" [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 6926] <... chdir resumed>) = 0 [pid 5824] ioctl(3, LOOP_CLR_FD [pid 6926] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5824] <... ioctl resumed>) = 0 [pid 6926] <... prctl resumed>) = 0 [pid 6925] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6924] openat(AT_FDCWD, ".", O_RDONLY [pid 5824] close(3 [pid 6925] openat(AT_FDCWD, ".", O_RDONLY [pid 6926] setpgid(0, 0 [pid 6925] <... openat resumed>) = 4 [pid 6924] <... openat resumed>) = 4 [pid 5824] <... close resumed>) = 0 [pid 6926] <... setpgid resumed>) = 0 [pid 6925] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6924] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [ 196.508491][ T6925] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 196.524765][ T6924] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [pid 6926] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 6927 attached ) = 3 [pid 6925] <... renameat2 resumed>) = 0 [pid 6924] <... renameat2 resumed>) = 0 [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 6927 [pid 6927] set_robust_list(0x55557eba4660, 24 [pid 6925] sync( [pid 6924] sync( [pid 6927] <... set_robust_list resumed>) = 0 executing program [pid 6926] write(3, "1000", 4) = 4 [pid 6926] close(3) = 0 [pid 6927] chdir("./214" [pid 6926] symlink("/dev/binderfs", "./binderfs" [pid 6927] <... chdir resumed>) = 0 [pid 6926] <... symlink resumed>) = 0 [pid 6926] write(1, "executing program\n", 18 [pid 6927] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6926] <... write resumed>) = 18 [pid 6927] <... prctl resumed>) = 0 [pid 6927] setpgid(0, 0 [pid 6926] memfd_create("syzkaller", 0 [pid 6927] <... setpgid resumed>) = 0 [pid 6926] <... memfd_create resumed>) = 3 [pid 6926] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6927] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6926] <... mmap resumed>) = 0x7f957a000000 [pid 6926] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6927] <... openat resumed>) = 3 [pid 6926] <... write resumed>) = 65536 [pid 6927] write(3, "1000", 4 [pid 6926] munmap(0x7f957a000000, 138412032 [pid 6925] <... sync resumed>) = 0 [pid 6924] <... sync resumed>) = 0 [pid 6926] <... munmap resumed>) = 0 [pid 6926] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6926] ioctl(4, LOOP_SET_FD, 3 [pid 6927] <... write resumed>) = 4 [pid 6925] exit_group(0 [pid 6924] exit_group(0 [pid 5826] <... umount2 resumed>) = 0 [pid 6927] close(3 [pid 6925] <... exit_group resumed>) = ? [pid 5826] umount2("./218/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6927] <... close resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./218/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] umount2("./218/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6924] <... exit_group resumed>) = ? [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6927] symlink("/dev/binderfs", "./binderfs" [pid 5826] openat(AT_FDCWD, "./218/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6924] +++ exited with 0 +++ [pid 5826] <... openat resumed>) = 4 [pid 5826] newfstatat(4, "", [pid 6927] <... symlink resumed>) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6924, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6925] +++ exited with 0 +++ [pid 6927] write(1, "executing program\n", 18 [pid 5826] getdents64(4, executing program [pid 5825] restart_syscall(<... resuming interrupted clone ...> [pid 6927] <... write resumed>) = 18 [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6925, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5826] getdents64(4, [pid 5827] restart_syscall(<... resuming interrupted clone ...> [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 6927] memfd_create("syzkaller", 0 [pid 5826] close(4 [pid 6927] <... memfd_create resumed>) = 3 [pid 5826] <... close resumed>) = 0 [pid 5825] <... restart_syscall resumed>) = 0 [pid 6927] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5826] rmdir("./218/file0" [pid 6927] <... mmap resumed>) = 0x7f957a000000 [pid 5826] <... rmdir resumed>) = 0 [pid 5826] umount2("./218/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./216", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./218/binderfs", [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6927] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5827] <... restart_syscall resumed>) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] openat(AT_FDCWD, "./216", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] unlink("./218/binderfs" [pid 5825] <... openat resumed>) = 3 [pid 5826] <... unlink resumed>) = 0 [pid 5825] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5826] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5825] umount2("./216/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6926] <... ioctl resumed>) = 0 [pid 5826] close(3 [pid 5827] umount2("./212", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... close resumed>) = 0 [pid 6926] close(3 [pid 5826] rmdir("./218" [pid 6926] <... close resumed>) = 0 [pid 5826] <... rmdir resumed>) = 0 [pid 6926] close(4 [ 196.615878][ T6926] loop0: detected capacity change from 0 to 128 [pid 5826] mkdir("./219", 0777 [pid 6926] <... close resumed>) = 0 [pid 5826] <... mkdir resumed>) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6927] <... write resumed>) = 65536 [pid 6926] mkdir("./file0", 0777 [pid 5827] openat(AT_FDCWD, "./212", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5825] <... umount2 resumed>) = 0 [pid 5825] umount2("./216/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6926] <... mkdir resumed>) = 0 [pid 5826] ioctl(3, LOOP_CLR_FD [pid 5825] newfstatat(AT_FDCWD, "./216/file0", [pid 5827] <... openat resumed>) = 3 [pid 5826] <... ioctl resumed>) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6927] munmap(0x7f957a000000, 138412032 [pid 5827] newfstatat(3, "", [pid 6926] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] close(3 [pid 5825] umount2("./216/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6927] <... munmap resumed>) = 0 [pid 5827] getdents64(3, [pid 5826] <... close resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5825] openat(AT_FDCWD, "./216/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6928 attached [pid 6927] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5827] umount2("./212/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... openat resumed>) = 4 [pid 5825] newfstatat(4, "", [pid 6927] <... openat resumed>) = 4 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6928] set_robust_list(0x55557eba4660, 24 [pid 6927] ioctl(4, LOOP_SET_FD, 3 [pid 5825] getdents64(4, [pid 6928] <... set_robust_list resumed>) = 0 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 6928 [pid 6928] chdir("./219" [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5825] close(4) = 0 [pid 5825] rmdir("./216/file0") = 0 [pid 5825] umount2("./216/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./216/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./216/binderfs" [pid 6928] <... chdir resumed>) = 0 [pid 5827] <... umount2 resumed>) = 0 [pid 5825] <... unlink resumed>) = 0 [pid 6928] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5827] umount2("./212/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6928] <... prctl resumed>) = 0 [pid 6927] <... ioctl resumed>) = 0 [pid 5827] newfstatat(AT_FDCWD, "./212/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6928] setpgid(0, 0 [pid 6927] close(3 [pid 5827] umount2("./212/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6928] <... setpgid resumed>) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6928] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6927] <... close resumed>) = 0 [pid 5827] openat(AT_FDCWD, "./212/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] getdents64(3, [pid 5827] <... openat resumed>) = 4 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5827] newfstatat(4, "", [pid 6928] <... openat resumed>) = 3 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] close(3 [pid 6928] write(3, "1000", 4 [pid 6927] close(4 [pid 5827] getdents64(4, [pid 5825] <... close resumed>) = 0 [pid 6928] <... write resumed>) = 4 [pid 6927] <... close resumed>) = 0 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [ 196.696521][ T6926] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 196.710316][ T6927] loop1: detected capacity change from 0 to 128 [pid 5825] rmdir("./216" [pid 6928] close(3 [pid 6927] mkdir("./file0", 0777 [pid 5827] getdents64(4, [pid 5825] <... rmdir resumed>) = 0 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 6928] <... close resumed>) = 0 [pid 5827] close(4 [pid 6928] symlink("/dev/binderfs", "./binderfs" [pid 5827] <... close resumed>) = 0 [pid 5825] mkdir("./217", 0777) = 0 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5825] ioctl(3, LOOP_CLR_FD) = 0 [pid 5825] close(3) = 0 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5827] rmdir("./212/file0"./strace-static-x86_64: Process 6929 attached [pid 6928] <... symlink resumed>) = 0 [pid 6927] <... mkdir resumed>) = 0 [pid 5827] <... rmdir resumed>) = 0 [pid 6929] set_robust_list(0x55557eba4660, 24 [pid 6928] write(1, "executing program\n", 18 [pid 5827] umount2("./212/binderfs", MNT_FORCE|UMOUNT_NOFOLLOWexecuting program [pid 6928] <... write resumed>) = 18 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6928] memfd_create("syzkaller", 0 [pid 5827] newfstatat(AT_FDCWD, "./212/binderfs", [pid 6928] <... memfd_create resumed>) = 3 [pid 6929] <... set_robust_list resumed>) = 0 [pid 6928] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6929] chdir("./217") = 0 [pid 6929] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6929] setpgid(0, 0) = 0 [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 6929 [pid 6929] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6929] write(3, "1000", 4 [pid 6928] <... mmap resumed>) = 0x7f957a000000 [pid 6926] <... mount resumed>) = 0 [pid 5827] unlink("./212/binderfs" [pid 6929] <... write resumed>) = 4 [pid 6926] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6929] close(3 [pid 6926] <... openat resumed>) = 3 [pid 6929] <... close resumed>) = 0 [pid 6928] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6927] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6926] chdir("./file0" [pid 5827] <... unlink resumed>) = 0 [pid 6926] <... chdir resumed>) = 0 [pid 6926] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6926] openat(AT_FDCWD, ".", O_RDONLY [pid 5827] getdents64(3, executing program [pid 6926] <... openat resumed>) = 4 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 6926] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6929] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6929] write(1, "executing program\n", 18 [pid 6926] <... renameat2 resumed>) = 0 [pid 6929] <... write resumed>) = 18 [pid 6926] sync( [pid 6929] memfd_create("syzkaller", 0) = 3 [pid 6929] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 6929] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 6929] munmap(0x7f957a000000, 138412032 [pid 5827] close(3 [pid 6929] <... munmap resumed>) = 0 [pid 6928] <... write resumed>) = 65536 [pid 5827] <... close resumed>) = 0 [pid 6929] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6929] ioctl(4, LOOP_SET_FD, 3 [pid 6928] munmap(0x7f957a000000, 138412032 [pid 5827] rmdir("./212" [pid 6928] <... munmap resumed>) = 0 [pid 5827] <... rmdir resumed>) = 0 [pid 6928] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5827] mkdir("./213", 0777 [pid 6928] ioctl(4, LOOP_SET_FD, 3 [pid 5827] <... mkdir resumed>) = 0 [pid 6929] <... ioctl resumed>) = 0 [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5827] ioctl(3, LOOP_CLR_FD [pid 6929] close(3 [pid 5827] <... ioctl resumed>) = 0 [pid 5827] close(3 [pid 6929] <... close resumed>) = 0 [pid 6929] close(4) = 0 [pid 6929] mkdir("./file0", 0777) = 0 [pid 6929] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6927] <... mount resumed>) = 0 [pid 5827] <... close resumed>) = 0 [pid 6927] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6928] <... ioctl resumed>) = 0 [ 196.805809][ T6927] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 196.816105][ T6929] loop2: detected capacity change from 0 to 128 [ 196.830456][ T6928] loop3: detected capacity change from 0 to 128 ./strace-static-x86_64: Process 6930 attached [pid 6928] close(3 [pid 6927] <... openat resumed>) = 3 [pid 6927] chdir("./file0" [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 6930 [pid 6930] set_robust_list(0x55557eba4660, 24 [pid 6927] <... chdir resumed>) = 0 [pid 6930] <... set_robust_list resumed>) = 0 [pid 6927] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6930] chdir("./213" [pid 6927] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6927] openat(AT_FDCWD, ".", O_RDONLY [pid 6930] <... chdir resumed>) = 0 [pid 6930] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6928] <... close resumed>) = 0 [pid 6927] <... openat resumed>) = 4 [pid 6930] <... prctl resumed>) = 0 [pid 6930] setpgid(0, 0 [pid 6928] close(4 [pid 6927] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6930] <... setpgid resumed>) = 0 [pid 6930] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6928] <... close resumed>) = 0 [pid 6930] <... openat resumed>) = 3 [pid 6928] mkdir("./file0", 0777 [pid 6930] write(3, "1000", 4 [pid 6928] <... mkdir resumed>) = 0 [pid 6928] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6930] <... write resumed>) = 4 [pid 6927] <... renameat2 resumed>) = 0 [pid 6930] close(3) = 0 [pid 6930] symlink("/dev/binderfs", "./binderfs" [pid 6927] sync( [pid 6930] <... symlink resumed>) = 0 [pid 6930] write(1, "executing program\n", 18) = 18 [pid 6929] <... mount resumed>) = 0 [pid 6929] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6929] chdir("./file0" [pid 6930] memfd_create("syzkaller", 0 [pid 6929] <... chdir resumed>) = 0 [pid 6929] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6929] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 6929] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = 0 [pid 6929] sync(executing program [pid 6930] <... memfd_create resumed>) = 3 [pid 6930] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 6930] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 6930] munmap(0x7f957a000000, 138412032 [pid 6928] <... mount resumed>) = 0 [pid 6930] <... munmap resumed>) = 0 [pid 6929] <... sync resumed>) = 0 [pid 6928] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6927] <... sync resumed>) = 0 [pid 6926] <... sync resumed>) = 0 [pid 6928] <... openat resumed>) = 3 [pid 6927] exit_group(0 [pid 6926] exit_group(0 [pid 6928] chdir("./file0" [pid 6927] <... exit_group resumed>) = ? [ 196.853281][ T6929] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 196.884533][ T6928] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [pid 6926] <... exit_group resumed>) = ? [pid 6929] exit_group(0 [pid 6928] <... chdir resumed>) = 0 [pid 6927] +++ exited with 0 +++ [pid 6926] +++ exited with 0 +++ [pid 6929] <... exit_group resumed>) = ? [pid 6928] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6926, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6927, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 6928] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 6928] openat(AT_FDCWD, ".", O_RDONLY [pid 5823] <... restart_syscall resumed>) = 0 [pid 6928] <... openat resumed>) = 4 [pid 5824] <... restart_syscall resumed>) = 0 [pid 6928] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5823] umount2("./218", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6930] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5824] umount2("./214", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6930] <... openat resumed>) = 4 [pid 6929] +++ exited with 0 +++ [pid 6928] <... renameat2 resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./218", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6930] ioctl(4, LOOP_SET_FD, 3 [pid 6928] sync( [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6929, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5824] openat(AT_FDCWD, "./214", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] <... openat resumed>) = 3 [pid 5825] restart_syscall(<... resuming interrupted clone ...> [pid 5823] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] umount2("./218/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... restart_syscall resumed>) = 0 [pid 5825] umount2("./217", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./217", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5825] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5825] umount2("./217/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5824] <... openat resumed>) = 3 [pid 5823] <... umount2 resumed>) = 0 [pid 5825] umount2("./217/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./217/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] umount2("./217/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(3, "", [pid 5825] openat(AT_FDCWD, "./217/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5825] newfstatat(4, "", [pid 5823] umount2("./218/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] getdents64(3, [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6928] <... sync resumed>) = 0 [pid 5825] getdents64(4, [pid 5823] newfstatat(AT_FDCWD, "./218/file0", [pid 6928] exit_group(0 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 6928] <... exit_group resumed>) = ? [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6928] +++ exited with 0 +++ [pid 5825] close(4 [pid 5824] umount2("./214/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] umount2("./218/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6928, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5825] <... close resumed>) = 0 [pid 5824] <... umount2 resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] restart_syscall(<... resuming interrupted clone ...> [pid 5824] umount2("./214/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... restart_syscall resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./218/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] newfstatat(AT_FDCWD, "./214/file0", [pid 5823] <... openat resumed>) = 4 [pid 5825] rmdir("./217/file0" [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6930] <... ioctl resumed>) = 0 [pid 5826] umount2("./219", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... rmdir resumed>) = 0 [pid 5824] umount2("./214/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] newfstatat(4, "", [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6930] close(3 [pid 5826] openat(AT_FDCWD, "./219", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] openat(AT_FDCWD, "./214/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] <... openat resumed>) = 3 [pid 5824] <... openat resumed>) = 4 [pid 5826] newfstatat(3, "", [pid 5824] newfstatat(4, "", [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6930] <... close resumed>) = 0 [pid 6930] close(4 [pid 5826] getdents64(3, [pid 5824] getdents64(4, [pid 6930] <... close resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 6930] mkdir("./file0", 0777 [pid 5826] umount2("./219/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] getdents64(4, [pid 6930] <... mkdir resumed>) = 0 [pid 5825] umount2("./217/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6930] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] close(4 [pid 5823] getdents64(4, [pid 5824] <... close resumed>) = 0 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] newfstatat(AT_FDCWD, "./217/binderfs", [pid 5824] rmdir("./214/file0" [pid 5823] getdents64(4, [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5825] unlink("./217/binderfs" [pid 5824] umount2("./214/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] close(4 [pid 5825] <... unlink resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... close resumed>) = 0 [ 196.955579][ T6930] loop4: detected capacity change from 0 to 128 [pid 5824] newfstatat(AT_FDCWD, "./214/binderfs", [pid 5823] rmdir("./218/file0" [pid 5825] getdents64(3, [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... rmdir resumed>) = 0 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] unlink("./214/binderfs" [pid 5823] umount2("./218/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... umount2 resumed>) = 0 [pid 5825] close(3 [pid 5824] <... unlink resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] umount2("./219/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... close resumed>) = 0 [pid 5824] getdents64(3, [pid 5823] newfstatat(AT_FDCWD, "./218/binderfs", [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] rmdir("./217" [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] newfstatat(AT_FDCWD, "./219/file0", [pid 5825] <... rmdir resumed>) = 0 [pid 5824] close(3 [pid 5823] unlink("./218/binderfs" [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... close resumed>) = 0 [pid 5823] <... unlink resumed>) = 0 [pid 5826] umount2("./219/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] mkdir("./218", 0777 [pid 5824] rmdir("./214" [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./219/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] <... rmdir resumed>) = 0 [pid 5823] getdents64(3, [pid 5826] <... openat resumed>) = 4 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] newfstatat(4, "", [pid 5825] <... mkdir resumed>) = 0 [pid 5824] mkdir("./215", 0777 [pid 5823] close(3 [pid 5824] <... mkdir resumed>) = 0 [pid 5823] <... close resumed>) = 0 [pid 5823] rmdir("./218" [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... rmdir resumed>) = 0 [pid 5826] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5826] getdents64(4, [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] <... openat resumed>) = 3 [pid 5823] mkdir("./219", 0777 [pid 5826] close(4 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5824] ioctl(3, LOOP_CLR_FD [pid 5823] <... mkdir resumed>) = 0 [pid 5825] <... openat resumed>) = 3 [pid 5824] <... ioctl resumed>) = 0 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 5824] close(3 [pid 5825] <... ioctl resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5825] close(3 [pid 5823] <... openat resumed>) = 3 [pid 5826] <... close resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 5823] ioctl(3, LOOP_CLR_FD) = 0 [pid 5823] close(3 [pid 5826] rmdir("./219/file0" [pid 5823] <... close resumed>) = 0 [pid 5826] <... rmdir resumed>) = 0 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5826] umount2("./219/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6931 attached ) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6932 attached [pid 6930] <... mount resumed>) = 0 [pid 5826] newfstatat(AT_FDCWD, "./219/binderfs", [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6931] set_robust_list(0x55557eba4660, 24 [pid 6930] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6932] set_robust_list(0x55557eba4660, 24 [pid 6930] <... openat resumed>) = 3 [pid 5826] unlink("./219/binderfs" [pid 6932] <... set_robust_list resumed>) = 0 [pid 6932] chdir("./215" [pid 6930] chdir("./file0" [pid 5826] <... unlink resumed>) = 0 [pid 6932] <... chdir resumed>) = 0 [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 6931 [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 6932 [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 6933 ./strace-static-x86_64: Process 6933 attached [pid 6932] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6931] <... set_robust_list resumed>) = 0 [pid 6930] <... chdir resumed>) = 0 [ 197.031983][ T6930] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [pid 5826] getdents64(3, [pid 6933] set_robust_list(0x55557eba4660, 24 [pid 6932] <... prctl resumed>) = 0 [pid 6931] chdir("./218" [pid 6930] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 6931] <... chdir resumed>) = 0 [pid 5826] close(3 [pid 6932] setpgid(0, 0 [pid 5826] <... close resumed>) = 0 [pid 6932] <... setpgid resumed>) = 0 [pid 6930] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5826] rmdir("./219" [pid 6931] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6933] <... set_robust_list resumed>) = 0 [pid 6930] openat(AT_FDCWD, ".", O_RDONLY [pid 6932] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6931] <... prctl resumed>) = 0 [pid 6930] <... openat resumed>) = 4 [pid 5826] <... rmdir resumed>) = 0 [pid 5826] mkdir("./220", 0777 [pid 6933] chdir("./219" [pid 6931] setpgid(0, 0 [pid 6930] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5826] <... mkdir resumed>) = 0 [pid 6933] <... chdir resumed>) = 0 [pid 6932] write(3, "1000", 4 [pid 6931] <... setpgid resumed>) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6931] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6933] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6931] <... openat resumed>) = 3 [pid 5826] <... openat resumed>) = 3 [pid 6933] <... prctl resumed>) = 0 [pid 5826] ioctl(3, LOOP_CLR_FD [pid 6932] <... write resumed>) = 4 [pid 6932] close(3) = 0 executing program [pid 6933] setpgid(0, 0 [pid 6932] symlink("/dev/binderfs", "./binderfs" [pid 6931] write(3, "1000", 4 [pid 5826] <... ioctl resumed>) = 0 [pid 6933] <... setpgid resumed>) = 0 [pid 6932] <... symlink resumed>) = 0 [pid 6931] <... write resumed>) = 4 [pid 6930] <... renameat2 resumed>) = 0 [pid 5826] close(3 [pid 6931] close(3 [pid 6933] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6932] write(1, "executing program\n", 18 [pid 6931] <... close resumed>) = 0 [pid 6932] <... write resumed>) = 18 [pid 6932] memfd_create("syzkaller", 0) = 3 [pid 6932] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 6931] symlink("/dev/binderfs", "./binderfs" [pid 5826] <... close resumed>) = 0 [pid 6930] sync( [pid 6932] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 6931] <... symlink resumed>) = 0 [pid 6933] <... openat resumed>) = 3 [pid 6931] write(1, "executing program\n", 18 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDexecuting program ./strace-static-x86_64: Process 6934 attached [pid 6932] munmap(0x7f957a000000, 138412032 [pid 6931] <... write resumed>) = 18 [pid 6934] set_robust_list(0x55557eba4660, 24 [pid 6933] write(3, "1000", 4 [pid 6932] <... munmap resumed>) = 0 [pid 6931] memfd_create("syzkaller", 0 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 6934 [pid 6934] <... set_robust_list resumed>) = 0 [pid 6933] <... write resumed>) = 4 [pid 6932] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6931] <... memfd_create resumed>) = 3 [pid 6933] close(3) = 0 [pid 6934] chdir("./220") = 0 [pid 6933] symlink("/dev/binderfs", "./binderfs" [pid 6932] <... openat resumed>) = 4 [pid 6931] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6934] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6932] ioctl(4, LOOP_SET_FD, 3 [pid 6931] <... mmap resumed>) = 0x7f957a000000 [pid 6934] setpgid(0, 0 [pid 6931] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6934] <... setpgid resumed>) = 0 [pid 6934] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6931] <... write resumed>) = 65536 [pid 6934] <... openat resumed>) = 3 [pid 6931] munmap(0x7f957a000000, 138412032 [pid 6932] <... ioctl resumed>) = 0 [pid 6931] <... munmap resumed>) = 0 [pid 6934] write(3, "1000", 4 [pid 6931] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6934] <... write resumed>) = 4 [pid 6934] close(3 [pid 6932] close(3 [pid 6931] <... openat resumed>) = 4 [pid 6932] <... close resumed>) = 0 [pid 6932] close(4 [pid 6934] <... close resumed>) = 0 [pid 6932] <... close resumed>) = 0 [pid 6931] ioctl(4, LOOP_SET_FD, 3 [pid 6932] mkdir("./file0", 0777 [pid 6933] <... symlink resumed>) = 0 [pid 6932] <... mkdir resumed>) = 0 [pid 6932] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6934] symlink("/dev/binderfs", "./binderfs" [pid 6933] write(1, "executing program\n", 18executing program [pid 6934] <... symlink resumed>) = 0 [pid 6933] <... write resumed>) = 18 [ 197.147553][ T6932] loop1: detected capacity change from 0 to 128 [ 197.181930][ T6931] loop2: detected capacity change from 0 to 128 executing program [pid 6934] write(1, "executing program\n", 18 [pid 6933] memfd_create("syzkaller", 0 [pid 6931] <... ioctl resumed>) = 0 [pid 6934] <... write resumed>) = 18 [pid 6931] close(3 [pid 6934] memfd_create("syzkaller", 0 [pid 6933] <... memfd_create resumed>) = 3 [pid 6931] <... close resumed>) = 0 [pid 6933] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6931] close(4 [pid 6934] <... memfd_create resumed>) = 3 [pid 6934] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6933] <... mmap resumed>) = 0x7f957a000000 [pid 6931] <... close resumed>) = 0 [pid 6934] <... mmap resumed>) = 0x7f957a000000 [pid 6931] mkdir("./file0", 0777 [pid 6934] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6933] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6931] <... mkdir resumed>) = 0 [pid 6934] <... write resumed>) = 65536 [pid 6933] <... write resumed>) = 65536 [pid 6931] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6934] munmap(0x7f957a000000, 138412032 [pid 6933] munmap(0x7f957a000000, 138412032) = 0 [pid 6934] <... munmap resumed>) = 0 [pid 6933] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6934] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6933] <... openat resumed>) = 4 [ 197.192515][ T6932] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [pid 6933] ioctl(4, LOOP_SET_FD, 3 [pid 6934] <... openat resumed>) = 4 [pid 6934] ioctl(4, LOOP_SET_FD, 3 [pid 6932] <... mount resumed>) = 0 [pid 6932] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6933] <... ioctl resumed>) = 0 [pid 6933] close(3 [pid 6932] chdir("./file0" [pid 6933] <... close resumed>) = 0 [pid 6933] close(4 [pid 6932] <... chdir resumed>) = 0 [pid 6933] <... close resumed>) = 0 [pid 6932] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6933] mkdir("./file0", 0777 [pid 6932] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6933] <... mkdir resumed>) = 0 [pid 6932] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 6934] <... ioctl resumed>) = 0 [pid 6933] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6932] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6934] close(3) = 0 [pid 6934] close(4) = 0 [pid 6934] mkdir("./file0", 0777) = 0 [ 197.228937][ T6933] loop0: detected capacity change from 0 to 128 [ 197.250938][ T6934] loop3: detected capacity change from 0 to 128 [ 197.258045][ T6931] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [pid 6934] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6932] <... renameat2 resumed>) = 0 [pid 6932] sync( [pid 6931] <... mount resumed>) = 0 [pid 6931] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6931] chdir("./file0") = 0 [pid 6931] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6931] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 6931] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6933] <... mount resumed>) = 0 [pid 6931] <... renameat2 resumed>) = 0 [pid 6933] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6931] sync( [pid 6933] <... openat resumed>) = 3 [pid 6933] chdir("./file0") = 0 [pid 6933] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 197.302575][ T6933] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 197.323390][ T6934] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [pid 6933] openat(AT_FDCWD, ".", O_RDONLY [pid 6934] <... mount resumed>) = 0 [pid 6933] <... openat resumed>) = 4 [pid 6930] <... sync resumed>) = 0 [pid 6933] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6930] exit_group(0 [pid 6934] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6930] <... exit_group resumed>) = ? [pid 6934] chdir("./file0") = 0 [pid 6930] +++ exited with 0 +++ [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6930, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5827] restart_syscall(<... resuming interrupted clone ...> [pid 6934] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5827] <... restart_syscall resumed>) = 0 [pid 6934] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6934] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 6933] <... renameat2 resumed>) = 0 [pid 6934] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6933] sync( [pid 5827] umount2("./213", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] openat(AT_FDCWD, "./213", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5827] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5827] umount2("./213/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6934] <... renameat2 resumed>) = 0 [pid 6934] sync( [pid 5827] <... umount2 resumed>) = 0 [pid 5827] umount2("./213/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] newfstatat(AT_FDCWD, "./213/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6932] <... sync resumed>) = 0 [pid 6931] <... sync resumed>) = 0 [pid 5827] umount2("./213/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6934] <... sync resumed>) = 0 [pid 6933] <... sync resumed>) = 0 [pid 6932] exit_group(0 [pid 6934] exit_group(0 [pid 6933] exit_group(0 [pid 6932] <... exit_group resumed>) = ? [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6934] <... exit_group resumed>) = ? [pid 6934] +++ exited with 0 +++ [pid 6933] <... exit_group resumed>) = ? [pid 6932] +++ exited with 0 +++ [pid 6931] exit_group(0 [pid 5827] openat(AT_FDCWD, "./213/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6934, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6932, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5827] newfstatat(4, "", [pid 6933] +++ exited with 0 +++ [pid 6931] <... exit_group resumed>) = ? [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] umount2("./220", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./215", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] getdents64(4, [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6933, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5826] openat(AT_FDCWD, "./220", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] openat(AT_FDCWD, "./215", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 6931] +++ exited with 0 +++ [pid 5827] getdents64(4, [pid 5826] <... openat resumed>) = 3 [pid 5824] <... openat resumed>) = 3 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5826] newfstatat(3, "", [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6931, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5824] newfstatat(3, "", [pid 5823] <... restart_syscall resumed>) = 0 [pid 5827] close(4 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] restart_syscall(<... resuming interrupted clone ...> [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] <... close resumed>) = 0 [pid 5826] getdents64(3, [pid 5825] <... restart_syscall resumed>) = 0 [pid 5827] rmdir("./213/file0" [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] getdents64(3, [pid 5827] <... rmdir resumed>) = 0 [pid 5826] umount2("./220/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] umount2("./213/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./218", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] umount2("./219", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... umount2 resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] umount2("./215/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] newfstatat(AT_FDCWD, "./213/binderfs", [pid 5825] openat(AT_FDCWD, "./218", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... openat resumed>) = 3 [pid 5823] openat(AT_FDCWD, "./219", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] newfstatat(3, "", [pid 5823] <... openat resumed>) = 3 [pid 5827] unlink("./213/binderfs" [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] newfstatat(3, "", [pid 5827] <... unlink resumed>) = 0 [pid 5825] getdents64(3, [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] getdents64(3, [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] <... umount2 resumed>) = 0 [pid 5823] getdents64(3, [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5827] close(3 [pid 5825] umount2("./218/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] umount2("./219/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... close resumed>) = 0 [pid 5827] rmdir("./213" [pid 5826] umount2("./220/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... rmdir resumed>) = 0 [pid 5824] umount2("./215/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... umount2 resumed>) = 0 [pid 5826] newfstatat(AT_FDCWD, "./220/file0", [pid 5825] <... umount2 resumed>) = 0 [pid 5824] newfstatat(AT_FDCWD, "./215/file0", [pid 5823] umount2("./219/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] mkdir("./214", 0777 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] umount2("./218/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... mkdir resumed>) = 0 [pid 5826] umount2("./220/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] umount2("./215/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] newfstatat(AT_FDCWD, "./219/file0", [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./218/file0", [pid 5826] openat(AT_FDCWD, "./220/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] newfstatat(4, "", [pid 5824] openat(AT_FDCWD, "./215/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] umount2("./219/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] umount2("./218/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... openat resumed>) = 4 [pid 5826] getdents64(4, [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] openat(AT_FDCWD, "./218/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5825] <... openat resumed>) = 4 [pid 5823] openat(AT_FDCWD, "./219/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5826] close(4 [pid 5825] newfstatat(4, "", [pid 5824] newfstatat(4, "", [pid 5827] <... openat resumed>) = 3 [pid 5826] <... close resumed>) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... openat resumed>) = 4 [pid 5827] ioctl(3, LOOP_CLR_FD [pid 5826] rmdir("./220/file0" [pid 5825] getdents64(4, [pid 5824] getdents64(4, [pid 5823] newfstatat(4, "", [pid 5827] <... ioctl resumed>) = 0 [pid 5826] <... rmdir resumed>) = 0 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5827] close(3 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] getdents64(4, [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] <... close resumed>) = 0 [pid 5826] umount2("./220/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] getdents64(4, [pid 5823] getdents64(4, [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] getdents64(4, [pid 5824] close(4 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] <... close resumed>) = 0 [pid 5823] close(4 [pid 5824] rmdir("./215/file0" [pid 5823] <... close resumed>) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 5823] rmdir("./219/file0" [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] <... rmdir resumed>) = 0 [pid 5826] newfstatat(AT_FDCWD, "./220/binderfs", [pid 5825] close(4 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... close resumed>) = 0 [pid 5823] umount2("./219/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6935 attached [pid 5826] unlink("./220/binderfs" [pid 5825] rmdir("./218/file0" [pid 5824] umount2("./215/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6935] set_robust_list(0x55557eba4660, 24 [pid 5826] <... unlink resumed>) = 0 [pid 5825] <... rmdir resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./219/binderfs", [pid 6935] <... set_robust_list resumed>) = 0 [pid 5826] getdents64(3, [pid 5825] umount2("./218/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./215/binderfs", [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6935] chdir("./214" [pid 5826] close(3 [pid 5825] newfstatat(AT_FDCWD, "./218/binderfs", [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6935] <... chdir resumed>) = 0 [pid 5826] <... close resumed>) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./215/binderfs" [pid 5823] unlink("./219/binderfs" [pid 6935] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 6935 [pid 5826] rmdir("./220" [pid 5825] unlink("./218/binderfs" [pid 5824] <... unlink resumed>) = 0 [pid 5823] <... unlink resumed>) = 0 [pid 6935] <... prctl resumed>) = 0 [pid 5824] getdents64(3, [pid 5823] getdents64(3, [pid 6935] setpgid(0, 0 [pid 5826] <... rmdir resumed>) = 0 [pid 5825] <... unlink resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 6935] <... setpgid resumed>) = 0 [pid 5826] mkdir("./221", 0777 [pid 5825] getdents64(3, [pid 6935] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] close(3 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 6935] <... openat resumed>) = 3 [pid 5825] close(3 [pid 5824] <... close resumed>) = 0 [pid 5826] <... mkdir resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 5824] rmdir("./215" [pid 5823] close(3 [pid 6935] write(3, "1000", 4 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5825] rmdir("./218" [pid 5824] <... rmdir resumed>) = 0 [pid 5823] <... close resumed>) = 0 [pid 6935] <... write resumed>) = 4 [pid 5826] <... openat resumed>) = 3 [pid 5823] rmdir("./219" [pid 6935] close(3 [pid 5826] ioctl(3, LOOP_CLR_FD [pid 5825] <... rmdir resumed>) = 0 [pid 5823] <... rmdir resumed>) = 0 [pid 6935] <... close resumed>) = 0 [pid 6935] symlink("/dev/binderfs", "./binderfs" [pid 5826] <... ioctl resumed>) = 0 [pid 5825] mkdir("./219", 0777 [pid 5824] mkdir("./216", 0777 [pid 5823] mkdir("./220", 0777 [pid 6935] <... symlink resumed>) = 0 [pid 5825] <... mkdir resumed>) = 0 [pid 5823] <... mkdir resumed>) = 0 [pid 6935] write(1, "executing program\n", 18 [pid 5826] close(3 [pid 5824] <... mkdir resumed>) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWRexecuting program [pid 6935] <... write resumed>) = 18 [pid 5826] <... close resumed>) = 0 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5824] <... openat resumed>) = 3 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5825] <... openat resumed>) = 3 [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5823] ioctl(3, LOOP_CLR_FD) = 0 [pid 5823] close(3 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 5823] <... close resumed>) = 0 [pid 6935] memfd_create("syzkaller", 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5825] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 6936 attached [pid 6936] set_robust_list(0x55557eba4660, 24 [pid 6935] <... memfd_create resumed>) = 3 [pid 5825] close(3 [pid 6936] <... set_robust_list resumed>) = 0 [pid 6935] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 6936 [pid 5825] <... close resumed>) = 0 ./strace-static-x86_64: Process 6937 attached [pid 6936] chdir("./221" [pid 6935] <... mmap resumed>) = 0x7f957a000000 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5824] ioctl(3, LOOP_CLR_FD) = 0 [pid 6937] set_robust_list(0x55557eba4660, 24 [pid 5824] close(3./strace-static-x86_64: Process 6938 attached [pid 6937] <... set_robust_list resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 6937 [pid 6937] chdir("./220") = 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6937] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6937] setpgid(0, 0) = 0 [pid 6937] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 6939 attached ) = 3 [pid 6937] write(3, "1000", 4) = 4 [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 6939 [pid 6937] close(3) = 0 [pid 6939] set_robust_list(0x55557eba4660, 24 [pid 6937] symlink("/dev/binderfs", "./binderfs" [pid 6935] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6939] <... set_robust_list resumed>) = 0 [pid 6937] <... symlink resumed>) = 0 executing program [pid 6939] chdir("./216" [pid 6937] write(1, "executing program\n", 18 [pid 6939] <... chdir resumed>) = 0 [pid 6937] <... write resumed>) = 18 [pid 6939] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6937] memfd_create("syzkaller", 0 [pid 6939] <... prctl resumed>) = 0 [pid 6938] set_robust_list(0x55557eba4660, 24 [pid 6937] <... memfd_create resumed>) = 3 [pid 6936] <... chdir resumed>) = 0 [pid 6939] setpgid(0, 0 [pid 6937] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6939] <... setpgid resumed>) = 0 [pid 6938] <... set_robust_list resumed>) = 0 [pid 6937] <... mmap resumed>) = 0x7f957a000000 [pid 6936] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6935] <... write resumed>) = 65536 [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 6938 [pid 6939] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6938] chdir("./219" [pid 6937] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6936] <... prctl resumed>) = 0 [pid 6935] munmap(0x7f957a000000, 138412032 [pid 6939] <... openat resumed>) = 3 [pid 6936] setpgid(0, 0 [pid 6935] <... munmap resumed>) = 0 [pid 6939] write(3, "1000", 4 [pid 6938] <... chdir resumed>) = 0 [pid 6937] <... write resumed>) = 65536 [pid 6936] <... setpgid resumed>) = 0 [pid 6935] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6939] <... write resumed>) = 4 [pid 6937] munmap(0x7f957a000000, 138412032 [pid 6939] close(3 [pid 6937] <... munmap resumed>) = 0 [pid 6939] <... close resumed>) = 0 [pid 6937] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6935] <... openat resumed>) = 4 [pid 6939] symlink("/dev/binderfs", "./binderfs" [pid 6938] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6937] <... openat resumed>) = 4 [pid 6936] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6935] ioctl(4, LOOP_SET_FD, 3 [pid 6939] <... symlink resumed>) = 0 [pid 6937] ioctl(4, LOOP_SET_FD, 3 [pid 6936] <... openat resumed>) = 3 [pid 6937] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 6939] write(1, "executing program\n", 18executing program [pid 6937] ioctl(4, LOOP_CLR_FD [pid 6939] <... write resumed>) = 18 [pid 6937] <... ioctl resumed>) = 0 [pid 6939] memfd_create("syzkaller", 0) = 3 [pid 6937] ioctl(4, LOOP_SET_FD, 3 [pid 6939] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6937] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 6937] close(4 [pid 6939] <... mmap resumed>) = 0x7f957a000000 [pid 6937] <... close resumed>) = 0 [pid 6939] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6938] <... prctl resumed>) = 0 [pid 6937] close(3 [pid 6936] write(3, "1000", 4 [pid 6938] setpgid(0, 0 [pid 6936] <... write resumed>) = 4 [pid 6938] <... setpgid resumed>) = 0 [pid 6937] <... close resumed>) = 0 [pid 6936] close(3 [pid 6939] <... write resumed>) = 65536 [pid 6938] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6937] openat(AT_FDCWD, ".", O_RDONLY [pid 6936] <... close resumed>) = 0 [pid 6936] symlink("/dev/binderfs", "./binderfs" [pid 6938] <... openat resumed>) = 3 [pid 6937] <... openat resumed>) = 3 [pid 6937] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6936] <... symlink resumed>) = 0 [pid 6939] munmap(0x7f957a000000, 138412032 [pid 6937] <... renameat2 resumed>) = -1 ENOENT (No such file or directory) executing program [pid 6939] <... munmap resumed>) = 0 [pid 6938] write(3, "1000", 4 [pid 6937] sync( [pid 6936] write(1, "executing program\n", 18 [pid 6935] <... ioctl resumed>) = 0 [pid 6939] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6938] <... write resumed>) = 4 [pid 6936] <... write resumed>) = 18 [pid 6938] close(3 [pid 6936] memfd_create("syzkaller", 0 [pid 6939] <... openat resumed>) = 4 [pid 6938] <... close resumed>) = 0 [pid 6936] <... memfd_create resumed>) = 3 [pid 6935] close(3 [pid 6939] ioctl(4, LOOP_SET_FD, 3 [pid 6938] symlink("/dev/binderfs", "./binderfs" [pid 6936] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6935] <... close resumed>) = 0 executing program [pid 6938] <... symlink resumed>) = 0 [pid 6936] <... mmap resumed>) = 0x7f957a000000 [pid 6935] close(4) = 0 [pid 6938] write(1, "executing program\n", 18 [pid 6936] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6935] mkdir("./file0", 0777 [pid 6938] <... write resumed>) = 18 [pid 6938] memfd_create("syzkaller", 0 [pid 6937] <... sync resumed>) = 0 [pid 6936] <... write resumed>) = 65536 [pid 6935] <... mkdir resumed>) = 0 [pid 6936] munmap(0x7f957a000000, 138412032 [pid 6937] exit_group(0 [pid 6936] <... munmap resumed>) = 0 [pid 6935] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6937] <... exit_group resumed>) = ? [pid 6938] <... memfd_create resumed>) = 3 [pid 6936] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6938] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6936] <... openat resumed>) = 4 [pid 6938] <... mmap resumed>) = 0x7f957a000000 [ 197.600452][ T6935] loop4: detected capacity change from 0 to 128 [ 197.635591][ T6939] loop1: detected capacity change from 0 to 128 [pid 6936] ioctl(4, LOOP_SET_FD, 3 [pid 6938] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6937] +++ exited with 0 +++ [pid 6939] <... ioctl resumed>) = 0 [pid 6939] close(3 [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6937, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 6939] <... close resumed>) = 0 [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 6939] close(4) = 0 [pid 6938] <... write resumed>) = 65536 [pid 6936] <... ioctl resumed>) = 0 [pid 5823] <... restart_syscall resumed>) = 0 [pid 6938] munmap(0x7f957a000000, 138412032) = 0 [pid 5823] umount2("./220", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6938] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6939] mkdir("./file0", 0777 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6939] <... mkdir resumed>) = 0 [pid 6938] <... openat resumed>) = 4 [pid 6936] close(3 [pid 5823] openat(AT_FDCWD, "./220", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6938] ioctl(4, LOOP_SET_FD, 3 [pid 6936] <... close resumed>) = 0 [pid 5823] <... openat resumed>) = 3 [pid 6936] close(4 [ 197.667073][ T6936] loop3: detected capacity change from 0 to 128 [ 197.675961][ T6935] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 197.701491][ T6938] loop2: detected capacity change from 0 to 128 [pid 6939] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6936] <... close resumed>) = 0 [pid 5823] newfstatat(3, "", [pid 6936] mkdir("./file0", 0777) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6938] <... ioctl resumed>) = 0 [pid 6936] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5823] getdents64(3, [pid 6938] close(3 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 5823] umount2("./220/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6938] <... close resumed>) = 0 [pid 6936] <... mount resumed>) = 0 [pid 6935] <... mount resumed>) = 0 [pid 5823] newfstatat(AT_FDCWD, "./220/binderfs", [pid 6938] close(4 [pid 6936] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6935] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6938] <... close resumed>) = 0 [pid 6936] <... openat resumed>) = 3 [pid 6939] <... mount resumed>) = 0 [pid 6935] <... openat resumed>) = 3 [ 197.710343][ T6939] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 197.732614][ T6936] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6939] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6938] mkdir("./file0", 0777 [pid 6936] chdir("./file0" [pid 6935] chdir("./file0" [pid 6938] <... mkdir resumed>) = 0 [pid 6936] <... chdir resumed>) = 0 [pid 5823] unlink("./220/binderfs" [pid 6938] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6936] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6939] <... openat resumed>) = 3 [pid 6936] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6935] <... chdir resumed>) = 0 [pid 5823] <... unlink resumed>) = 0 [pid 6939] chdir("./file0" [pid 6935] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6939] <... chdir resumed>) = 0 [pid 6935] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6939] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6935] openat(AT_FDCWD, ".", O_RDONLY [pid 6939] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6935] <... openat resumed>) = 4 [pid 6939] openat(AT_FDCWD, ".", O_RDONLY [pid 6935] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6939] <... openat resumed>) = 4 [pid 6939] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6936] openat(AT_FDCWD, ".", O_RDONLY [pid 5823] getdents64(3, [pid 6936] <... openat resumed>) = 4 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 6939] <... renameat2 resumed>) = 0 [pid 6936] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6935] <... renameat2 resumed>) = 0 [pid 5823] close(3 [pid 6939] sync( [pid 6936] <... renameat2 resumed>) = 0 [pid 6935] sync( [pid 5823] <... close resumed>) = 0 [pid 6936] sync( [pid 5823] rmdir("./220") = 0 [pid 5823] mkdir("./221", 0777) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5823] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5823] close(3) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6940 attached [pid 6940] set_robust_list(0x55557eba4660, 24 [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 6940 [pid 6940] <... set_robust_list resumed>) = 0 [pid 6940] chdir("./221") = 0 [pid 6940] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6938] <... mount resumed>) = 0 [pid 6940] <... prctl resumed>) = 0 [pid 6938] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6940] setpgid(0, 0 [pid 6938] <... openat resumed>) = 3 [pid 6940] <... setpgid resumed>) = 0 [pid 6938] chdir("./file0" [pid 6940] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6938] <... chdir resumed>) = 0 [pid 6938] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6939] <... sync resumed>) = 0 [pid 6938] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6936] <... sync resumed>) = 0 [pid 6935] <... sync resumed>) = 0 [pid 6938] openat(AT_FDCWD, ".", O_RDONLY [pid 6936] exit_group(0 [pid 6935] exit_group(0 [pid 6940] <... openat resumed>) = 3 [pid 6939] exit_group(0 [pid 6938] <... openat resumed>) = 4 [pid 6936] <... exit_group resumed>) = ? [pid 6935] <... exit_group resumed>) = ? [pid 6939] <... exit_group resumed>) = ? [ 197.790857][ T6938] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [pid 6936] +++ exited with 0 +++ [pid 6935] +++ exited with 0 +++ [pid 6938] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6939] +++ exited with 0 +++ [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6935, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6936, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5827] restart_syscall(<... resuming interrupted clone ...> [pid 6940] write(3, "1000", 4 [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6939, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 6940] <... write resumed>) = 4 [pid 5827] <... restart_syscall resumed>) = 0 [pid 6940] close(3 [pid 6938] <... renameat2 resumed>) = 0 [pid 5826] umount2("./221", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./216", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./216", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] umount2("./214", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... openat resumed>) = 3 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(3, "", [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6940] <... close resumed>) = 0 [pid 5826] openat(AT_FDCWD, "./221", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6938] sync( [pid 5827] openat(AT_FDCWD, "./214", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] <... openat resumed>) = 3 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] <... openat resumed>) = 3 [pid 5824] getdents64(3, [pid 5827] newfstatat(3, "", [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 6940] symlink("/dev/binderfs", "./binderfs" [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] newfstatat(3, "", [pid 5824] umount2("./216/file0", MNT_FORCE|UMOUNT_NOFOLLOWexecuting program [pid 6940] <... symlink resumed>) = 0 [pid 5827] getdents64(3, [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6940] write(1, "executing program\n", 18 [pid 5826] getdents64(3, [pid 6940] <... write resumed>) = 18 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 6940] memfd_create("syzkaller", 0 [pid 5826] umount2("./221/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6940] <... memfd_create resumed>) = 3 [pid 5827] umount2("./214/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6940] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 6940] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5827] <... umount2 resumed>) = 0 [pid 5826] <... umount2 resumed>) = 0 [pid 5824] <... umount2 resumed>) = 0 [pid 5826] umount2("./221/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./216/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./221/file0", [pid 5824] newfstatat(AT_FDCWD, "./216/file0", [pid 5827] umount2("./214/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] umount2("./221/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./216/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] newfstatat(AT_FDCWD, "./214/file0", [pid 5826] openat(AT_FDCWD, "./221/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] openat(AT_FDCWD, "./216/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] <... openat resumed>) = 4 [pid 5824] <... openat resumed>) = 4 [pid 5827] umount2("./214/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] newfstatat(4, "", [pid 5824] newfstatat(4, "", [pid 6940] <... write resumed>) = 65536 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(4, [pid 6940] munmap(0x7f957a000000, 138412032 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(4, [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5826] getdents64(4, [pid 5824] getdents64(4, [pid 6940] <... munmap resumed>) = 0 [pid 6938] <... sync resumed>) = 0 [pid 6940] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6938] exit_group(0 [pid 5827] openat(AT_FDCWD, "./214/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 6940] <... openat resumed>) = 4 [pid 6938] <... exit_group resumed>) = ? [pid 5827] <... openat resumed>) = 4 [pid 5826] close(4 [pid 5824] close(4 [pid 6940] ioctl(4, LOOP_SET_FD, 3 [pid 6938] +++ exited with 0 +++ [pid 5827] newfstatat(4, "", [pid 5826] <... close resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6938, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] rmdir("./221/file0" [pid 5824] rmdir("./216/file0" [pid 5827] getdents64(4, [pid 5826] <... rmdir resumed>) = 0 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] <... rmdir resumed>) = 0 [pid 5827] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] umount2("./216/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] close(4 [pid 5826] umount2("./221/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./219", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... close resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./216/binderfs", [pid 5827] rmdir("./214/file0" [pid 5826] newfstatat(AT_FDCWD, "./221/binderfs", [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6940] <... ioctl resumed>) = 0 [pid 5827] <... rmdir resumed>) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] openat(AT_FDCWD, "./219", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] unlink("./216/binderfs" [pid 5826] unlink("./221/binderfs" [pid 5825] <... openat resumed>) = 3 [pid 5824] <... unlink resumed>) = 0 [pid 5825] newfstatat(3, "", [pid 5827] umount2("./214/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... unlink resumed>) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(3, [pid 6940] close(3 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] getdents64(3, [pid 5825] getdents64(3, [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 6940] <... close resumed>) = 0 [pid 6940] close(4 [pid 5827] newfstatat(AT_FDCWD, "./214/binderfs", [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] close(3 [pid 6940] <... close resumed>) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] close(3 [pid 5825] umount2("./219/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... close resumed>) = 0 [pid 6940] mkdir("./file0", 0777 [pid 5827] unlink("./214/binderfs" [pid 5826] <... close resumed>) = 0 [pid 5824] rmdir("./216" [pid 6940] <... mkdir resumed>) = 0 [pid 5827] <... unlink resumed>) = 0 [pid 5826] rmdir("./221" [pid 5824] <... rmdir resumed>) = 0 [pid 6940] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5826] <... rmdir resumed>) = 0 [pid 5827] getdents64(3, [pid 5826] mkdir("./222", 0777 [pid 5824] mkdir("./217", 0777 [pid 5826] <... mkdir resumed>) = 0 [pid 5824] <... mkdir resumed>) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5826] <... openat resumed>) = 3 [pid 5824] <... openat resumed>) = 3 [pid 5826] ioctl(3, LOOP_CLR_FD [pid 5824] ioctl(3, LOOP_CLR_FD [pid 5826] <... ioctl resumed>) = 0 [pid 5824] <... ioctl resumed>) = 0 [pid 5826] close(3 [pid 5824] close(3 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] <... close resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 6940] <... mount resumed>) = 0 [pid 5827] close(3 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5825] <... umount2 resumed>) = 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6941 attached [pid 6940] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5827] <... close resumed>) = 0 [pid 5825] umount2("./219/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6941] set_robust_list(0x55557eba4660, 24 [pid 5827] rmdir("./214" [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 6941 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 6942 ./strace-static-x86_64: Process 6942 attached [pid 6941] <... set_robust_list resumed>) = 0 [pid 6940] <... openat resumed>) = 3 [pid 5827] <... rmdir resumed>) = 0 [pid 5825] newfstatat(AT_FDCWD, "./219/file0", [pid 6941] chdir("./222" [pid 5827] mkdir("./215", 0777 [pid 6941] <... chdir resumed>) = 0 [pid 5827] <... mkdir resumed>) = 0 [pid 6941] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6941] setpgid(0, 0) = 0 [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6941] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6940] chdir("./file0" [pid 5827] <... openat resumed>) = 3 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6942] set_robust_list(0x55557eba4660, 24 [pid 6940] <... chdir resumed>) = 0 [pid 6942] <... set_robust_list resumed>) = 0 [pid 5825] umount2("./219/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6940] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6942] chdir("./217" [pid 6941] <... openat resumed>) = 3 [pid 6940] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5827] ioctl(3, LOOP_CLR_FD [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6940] openat(AT_FDCWD, ".", O_RDONLY [pid 6941] write(3, "1000", 4 [pid 6940] <... openat resumed>) = 4 [pid 5827] <... ioctl resumed>) = 0 [pid 5825] openat(AT_FDCWD, "./219/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6941] <... write resumed>) = 4 [pid 6940] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5827] close(3 [pid 6941] close(3 [pid 5825] <... openat resumed>) = 4 [pid 6941] <... close resumed>) = 0 [ 197.910133][ T6940] loop0: detected capacity change from 0 to 128 [ 197.940586][ T6940] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [pid 5825] newfstatat(4, "", [pid 6942] <... chdir resumed>) = 0 [pid 6940] <... renameat2 resumed>) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6941] symlink("/dev/binderfs", "./binderfs" [pid 5825] getdents64(4, [pid 6942] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6940] sync( [pid 6942] <... prctl resumed>) = 0 [pid 6941] <... symlink resumed>) = 0 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 6942] setpgid(0, 0 [pid 5825] getdents64(4, executing program [pid 6942] <... setpgid resumed>) = 0 [pid 6941] write(1, "executing program\n", 18) = 18 [pid 6941] memfd_create("syzkaller", 0) = 3 [pid 6942] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 6941] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 6942] <... openat resumed>) = 3 [pid 6941] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5825] close(4 [pid 6942] write(3, "1000", 4 [pid 6941] <... write resumed>) = 65536 [pid 5825] <... close resumed>) = 0 [pid 6941] munmap(0x7f957a000000, 138412032 [pid 6942] <... write resumed>) = 4 [pid 6941] <... munmap resumed>) = 0 [pid 5825] rmdir("./219/file0" [pid 6942] close(3) = 0 [pid 6941] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6941] ioctl(4, LOOP_SET_FD, 3 [pid 6942] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6942] write(1, "executing program\n", 18 [pid 5827] <... close resumed>) = 0 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDexecuting program [pid 6942] <... write resumed>) = 18 [pid 6942] memfd_create("syzkaller", 0) = 3 [pid 6940] <... sync resumed>) = 0 [pid 5825] <... rmdir resumed>) = 0 [pid 6940] exit_group(0 [pid 6942] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6940] <... exit_group resumed>) = ? [pid 5825] umount2("./219/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6942] <... mmap resumed>) = 0x7f957a000000 [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 6943 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6943 attached [pid 6942] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5825] newfstatat(AT_FDCWD, "./219/binderfs", [pid 6943] set_robust_list(0x55557eba4660, 24) = 0 [pid 6943] chdir("./215") = 0 [pid 6943] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6940] +++ exited with 0 +++ [pid 6943] setpgid(0, 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6943] <... setpgid resumed>) = 0 [pid 6942] <... write resumed>) = 65536 [pid 5825] unlink("./219/binderfs" [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6940, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6943] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6942] munmap(0x7f957a000000, 138412032 [pid 5825] <... unlink resumed>) = 0 [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 6943] <... openat resumed>) = 3 [pid 6942] <... munmap resumed>) = 0 [pid 5825] getdents64(3, [pid 6943] write(3, "1000", 4 [pid 6942] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 6943] <... write resumed>) = 4 [pid 6942] <... openat resumed>) = 4 [pid 5825] close(3 [pid 6943] close(3) = 0 [pid 5823] <... restart_syscall resumed>) = 0 [pid 6943] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6942] ioctl(4, LOOP_SET_FD, 3 [pid 5825] <... close resumed>) = 0 executing program [pid 6943] write(1, "executing program\n", 18 [pid 5825] rmdir("./219" [pid 6943] <... write resumed>) = 18 [pid 5823] umount2("./221", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6943] memfd_create("syzkaller", 0 [pid 5825] <... rmdir resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6943] <... memfd_create resumed>) = 3 [pid 6943] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 6943] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6941] <... ioctl resumed>) = 0 [pid 5823] openat(AT_FDCWD, "./221", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] mkdir("./220", 0777 [pid 6943] <... write resumed>) = 65536 [pid 6941] close(3 [pid 5823] <... openat resumed>) = 3 [pid 6941] <... close resumed>) = 0 [pid 5825] <... mkdir resumed>) = 0 [pid 5823] newfstatat(3, "", [pid 6941] close(4) = 0 [pid 6943] munmap(0x7f957a000000, 138412032 [pid 6941] mkdir("./file0", 0777 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6943] <... munmap resumed>) = 0 [pid 6941] <... mkdir resumed>) = 0 [pid 6943] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5825] <... openat resumed>) = 3 [pid 5823] getdents64(3, [pid 6943] <... openat resumed>) = 4 [pid 6943] ioctl(4, LOOP_SET_FD, 3 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 6942] <... ioctl resumed>) = 0 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 5823] umount2("./221/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6942] close(3 [pid 5825] <... ioctl resumed>) = 0 [pid 6942] <... close resumed>) = 0 [pid 6941] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5825] close(3 [pid 5823] <... umount2 resumed>) = 0 [pid 5823] umount2("./221/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6942] close(4 [pid 5825] <... close resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 198.016689][ T6941] loop3: detected capacity change from 0 to 128 [ 198.037066][ T6942] loop1: detected capacity change from 0 to 128 [ 198.050499][ T6943] loop4: detected capacity change from 0 to 128 [pid 6942] <... close resumed>) = 0 [pid 5823] newfstatat(AT_FDCWD, "./221/file0", [pid 6942] mkdir("./file0", 0777 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6942] <... mkdir resumed>) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6942] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5823] umount2("./221/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6943] <... ioctl resumed>) = 0 [pid 6943] close(3) = 0 [pid 6943] close(4) = 0 [pid 6943] mkdir("./file0", 0777) = 0 [pid 6943] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./221/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5823] newfstatat(4, "", ./strace-static-x86_64: Process 6944 attached [pid 6944] set_robust_list(0x55557eba4660, 24) = 0 [pid 6944] chdir("./220" [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 6944 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 6944] <... chdir resumed>) = 0 [pid 6942] <... mount resumed>) = 0 [pid 5823] getdents64(4, [pid 6942] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 6944] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6942] <... openat resumed>) = 3 [pid 5823] close(4 [pid 6944] <... prctl resumed>) = 0 [pid 6944] setpgid(0, 0 [pid 6942] chdir("./file0" [pid 5823] <... close resumed>) = 0 [pid 6942] <... chdir resumed>) = 0 [pid 5823] rmdir("./221/file0" [pid 6944] <... setpgid resumed>) = 0 [pid 5823] <... rmdir resumed>) = 0 [pid 6944] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5823] umount2("./221/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6944] <... openat resumed>) = 3 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6944] write(3, "1000", 4 [pid 6941] <... mount resumed>) = 0 [pid 5823] newfstatat(AT_FDCWD, "./221/binderfs", [pid 6944] <... write resumed>) = 4 [pid 6942] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6941] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6944] close(3 [pid 6942] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6941] <... openat resumed>) = 3 [pid 5823] unlink("./221/binderfs" [pid 6942] openat(AT_FDCWD, ".", O_RDONLYexecuting program [pid 6944] <... close resumed>) = 0 [pid 6941] chdir("./file0" [pid 5823] <... unlink resumed>) = 0 [pid 6944] symlink("/dev/binderfs", "./binderfs" [pid 6942] <... openat resumed>) = 4 [pid 6941] <... chdir resumed>) = 0 [pid 6944] <... symlink resumed>) = 0 [pid 6942] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6941] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5823] getdents64(3, [pid 6944] write(1, "executing program\n", 18 [pid 6941] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6944] <... write resumed>) = 18 [pid 6941] openat(AT_FDCWD, ".", O_RDONLY [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 6944] memfd_create("syzkaller", 0 [pid 6942] <... renameat2 resumed>) = 0 [pid 6941] <... openat resumed>) = 4 [pid 5823] close(3 [pid 6944] <... memfd_create resumed>) = 3 [pid 6942] sync( [pid 6941] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6944] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5823] <... close resumed>) = 0 [pid 6944] <... mmap resumed>) = 0x7f957a000000 [pid 6941] <... renameat2 resumed>) = 0 [pid 6944] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [ 198.066579][ T6941] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 198.078631][ T6942] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 198.102019][ T6943] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [pid 6941] sync( [pid 5823] rmdir("./221" [pid 6944] <... write resumed>) = 65536 [pid 5823] <... rmdir resumed>) = 0 [pid 6944] munmap(0x7f957a000000, 138412032) = 0 [pid 6944] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6944] ioctl(4, LOOP_SET_FD, 3 [pid 6943] <... mount resumed>) = 0 [pid 5823] mkdir("./222", 0777 [pid 6943] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6944] <... ioctl resumed>) = 0 [pid 6943] <... openat resumed>) = 3 [pid 6942] <... sync resumed>) = 0 [pid 6941] <... sync resumed>) = 0 [pid 5823] <... mkdir resumed>) = 0 [pid 6943] chdir("./file0" [pid 6942] exit_group(0 [pid 6941] exit_group(0 [pid 6944] close(3 [pid 6943] <... chdir resumed>) = 0 [pid 6942] <... exit_group resumed>) = ? [pid 6941] <... exit_group resumed>) = ? [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6944] <... close resumed>) = 0 [pid 6943] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6942] +++ exited with 0 +++ [pid 6941] +++ exited with 0 +++ [pid 6944] close(4) = 0 [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6941, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6942, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6944] mkdir("./file0", 0777 [pid 6943] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5826] restart_syscall(<... resuming interrupted clone ...> [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 6944] <... mkdir resumed>) = 0 [pid 6943] openat(AT_FDCWD, ".", O_RDONLY [pid 5823] <... openat resumed>) = 3 [pid 6943] <... openat resumed>) = 4 [pid 5823] ioctl(3, LOOP_CLR_FD [pid 6943] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5823] <... ioctl resumed>) = 0 [pid 6944] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5823] close(3) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6943] <... renameat2 resumed>) = 0 [pid 5824] <... restart_syscall resumed>) = 0 [pid 5826] <... restart_syscall resumed>) = 0 [pid 5824] umount2("./217", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] umount2("./222", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./217", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... openat resumed>) = 3 [pid 5826] openat(AT_FDCWD, "./222", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] newfstatat(3, "", [pid 5826] <... openat resumed>) = 3 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] newfstatat(3, "", [pid 5824] getdents64(3, [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5826] getdents64(3, [pid 5824] umount2("./217/file0", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6945 attached [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5826] umount2("./222/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6945] set_robust_list(0x55557eba4660, 24 [pid 5824] <... umount2 resumed>) = 0 [pid 6945] <... set_robust_list resumed>) = 0 [pid 5824] umount2("./217/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 6945 [pid 6943] sync( [pid 6945] chdir("./222" [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6945] <... chdir resumed>) = 0 [pid 5824] newfstatat(AT_FDCWD, "./217/file0", [pid 6945] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6945] <... prctl resumed>) = 0 [pid 5824] umount2("./217/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6945] setpgid(0, 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6945] <... setpgid resumed>) = 0 [pid 5824] openat(AT_FDCWD, "./217/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6945] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5824] <... openat resumed>) = 4 [pid 6945] <... openat resumed>) = 3 [pid 5824] newfstatat(4, "", [pid 6945] write(3, "1000", 4 [pid 5826] <... umount2 resumed>) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6945] <... write resumed>) = 4 [pid 5826] umount2("./222/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] getdents64(4, [pid 6945] close(3 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 6945] <... close resumed>) = 0 [pid 5826] newfstatat(AT_FDCWD, "./222/file0", [pid 5824] getdents64(4, [pid 6945] symlink("/dev/binderfs", "./binderfs" [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 6945] <... symlink resumed>) = 0 [pid 5826] umount2("./222/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] close(4executing program [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... close resumed>) = 0 [pid 6945] write(1, "executing program\n", 18 [pid 5826] openat(AT_FDCWD, "./222/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] rmdir("./217/file0" [pid 6945] <... write resumed>) = 18 [pid 5826] <... openat resumed>) = 4 [pid 5824] <... rmdir resumed>) = 0 [pid 6945] memfd_create("syzkaller", 0 [pid 5826] newfstatat(4, "", [pid 5824] umount2("./217/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6945] <... memfd_create resumed>) = 3 [pid 5826] getdents64(4, [pid 5824] newfstatat(AT_FDCWD, "./217/binderfs", [pid 6945] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 198.155033][ T6944] loop2: detected capacity change from 0 to 128 [ 198.192442][ T6944] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [pid 6945] <... mmap resumed>) = 0x7f957a000000 [pid 5826] getdents64(4, [pid 5824] unlink("./217/binderfs" [pid 6945] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] <... unlink resumed>) = 0 [pid 5826] close(4 [pid 5824] getdents64(3, [pid 5826] <... close resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 6945] <... write resumed>) = 65536 [pid 5826] rmdir("./222/file0" [pid 5824] close(3 [pid 5826] <... rmdir resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 6945] munmap(0x7f957a000000, 138412032 [pid 5826] umount2("./222/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] rmdir("./217" [pid 6945] <... munmap resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... rmdir resumed>) = 0 [pid 5826] newfstatat(AT_FDCWD, "./222/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6945] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5824] mkdir("./218", 0777) = 0 [pid 6945] <... openat resumed>) = 4 [pid 6944] <... mount resumed>) = 0 [pid 5826] unlink("./222/binderfs" [pid 6945] ioctl(4, LOOP_SET_FD, 3 [pid 6944] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6944] <... openat resumed>) = 3 [pid 5824] <... openat resumed>) = 3 [pid 6944] chdir("./file0" [pid 5824] ioctl(3, LOOP_CLR_FD [pid 6944] <... chdir resumed>) = 0 [pid 5824] <... ioctl resumed>) = 0 [pid 6944] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5824] close(3 [pid 6944] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6944] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 6944] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = 0 [pid 5826] <... unlink resumed>) = 0 [pid 6944] sync( [pid 5826] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] close(3) = 0 [pid 5826] rmdir("./222") = 0 [pid 5826] mkdir("./223", 0777) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6945] <... ioctl resumed>) = 0 [pid 6943] <... sync resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 6943] exit_group(0 [pid 5826] <... openat resumed>) = 3 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6946 attached [pid 6945] close(3 [pid 6943] <... exit_group resumed>) = ? [pid 5826] ioctl(3, LOOP_CLR_FD [pid 6945] <... close resumed>) = 0 [pid 6946] set_robust_list(0x55557eba4660, 24 [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 6946 [pid 6946] <... set_robust_list resumed>) = 0 [pid 6946] chdir("./218" [pid 6945] close(4 [pid 6943] +++ exited with 0 +++ [pid 5826] <... ioctl resumed>) = 0 [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6943, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6945] <... close resumed>) = 0 [pid 5826] close(3 [pid 6945] mkdir("./file0", 0777 [pid 5826] <... close resumed>) = 0 [pid 6946] <... chdir resumed>) = 0 [pid 6945] <... mkdir resumed>) = 0 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6946] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6946] setpgid(0, 0) = 0 [pid 6946] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6946] write(3, "1000", 4) = 4 [pid 6946] close(3) = 0 [pid 6944] <... sync resumed>) = 0 [pid 6946] symlink("/dev/binderfs", "./binderfs" [pid 6945] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6944] exit_group(0 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 6947 ./strace-static-x86_64: Process 6947 attached [pid 6946] <... symlink resumed>) = 0 [pid 6944] <... exit_group resumed>) = ? [pid 6947] set_robust_list(0x55557eba4660, 24 [pid 6944] +++ exited with 0 +++ [pid 6947] <... set_robust_list resumed>) = 0 executing program [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6944, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6946] write(1, "executing program\n", 18) = 18 [ 198.276739][ T6945] loop0: detected capacity change from 0 to 128 [pid 5827] umount2("./215", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] restart_syscall(<... resuming interrupted clone ...> [pid 6947] chdir("./223" [pid 6946] memfd_create("syzkaller", 0 [pid 6947] <... chdir resumed>) = 0 [pid 6946] <... memfd_create resumed>) = 3 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... restart_syscall resumed>) = 0 [pid 6946] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 6947] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6946] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5827] openat(AT_FDCWD, "./215", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6947] <... prctl resumed>) = 0 [pid 6947] setpgid(0, 0 [pid 5827] <... openat resumed>) = 3 [pid 6947] <... setpgid resumed>) = 0 [pid 5825] umount2("./220", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] newfstatat(3, "", [pid 6946] <... write resumed>) = 65536 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6947] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6946] munmap(0x7f957a000000, 138412032 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] openat(AT_FDCWD, "./220", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6947] <... openat resumed>) = 3 [pid 6946] <... munmap resumed>) = 0 [pid 5827] getdents64(3, [pid 5825] <... openat resumed>) = 3 [pid 6946] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5825] newfstatat(3, "", [pid 6946] <... openat resumed>) = 4 [pid 6946] ioctl(4, LOOP_SET_FD, 3 [pid 6947] write(3, "1000", 4 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6947] <... write resumed>) = 4 [pid 6947] close(3 [pid 5825] getdents64(3, [pid 5827] umount2("./215/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6947] <... close resumed>) = 0 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 6947] symlink("/dev/binderfs", "./binderfs" [pid 5825] umount2("./220/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... umount2 resumed>) = 0 [pid 5827] umount2("./215/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] newfstatat(AT_FDCWD, "./215/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] umount2("./215/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] openat(AT_FDCWD, "./215/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5827] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] getdents64(4, [pid 6947] <... symlink resumed>) = 0 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 6946] <... ioctl resumed>) = 0 [pid 5827] getdents64(4, [pid 6946] close(3 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 6946] <... close resumed>) = 0 [pid 5827] close(4 [pid 6946] close(4 [pid 5827] <... close resumed>) = 0 [pid 6946] <... close resumed>) = 0 [pid 5827] rmdir("./215/file0" [pid 6945] <... mount resumed>) = 0 [pid 6945] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6945] chdir("./file0" [pid 6946] mkdir("./file0", 0777 [pid 6945] <... chdir resumed>) = 0 [pid 5827] <... rmdir resumed>) = 0 [pid 6946] <... mkdir resumed>) = 0 [pid 6945] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5827] umount2("./215/binderfs", MNT_FORCE|UMOUNT_NOFOLLOWexecuting program [pid 6947] write(1, "executing program\n", 18 [pid 6945] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6947] <... write resumed>) = 18 [ 198.338065][ T6945] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 198.365305][ T6946] loop1: detected capacity change from 0 to 128 [pid 6946] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6945] openat(AT_FDCWD, ".", O_RDONLY [pid 5827] newfstatat(AT_FDCWD, "./215/binderfs", [pid 6947] memfd_create("syzkaller", 0 [pid 6945] <... openat resumed>) = 4 [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6947] <... memfd_create resumed>) = 3 [pid 6947] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6945] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5827] unlink("./215/binderfs" [pid 6947] <... mmap resumed>) = 0x7f957a000000 [pid 6947] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 5827] <... unlink resumed>) = 0 [pid 6947] munmap(0x7f957a000000, 138412032 [pid 5827] getdents64(3, [pid 5825] <... umount2 resumed>) = 0 [pid 6945] <... renameat2 resumed>) = 0 [pid 6947] <... munmap resumed>) = 0 [pid 5825] umount2("./220/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6947] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5827] close(3) = 0 [pid 6945] sync( [pid 5827] rmdir("./215") = 0 [pid 5827] mkdir("./216", 0777) = 0 [pid 6947] <... openat resumed>) = 4 [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... openat resumed>) = 3 [pid 5827] ioctl(3, LOOP_CLR_FD) = 0 [pid 5825] newfstatat(AT_FDCWD, "./220/file0", [pid 5827] close(3 [pid 6947] ioctl(4, LOOP_SET_FD, 3 [pid 5827] <... close resumed>) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 198.406815][ T6946] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 198.445576][ T6947] loop3: detected capacity change from 0 to 128 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6947] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 6948 attached [pid 6946] <... mount resumed>) = 0 [pid 6945] <... sync resumed>) = 0 [pid 5825] umount2("./220/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6947] close(3 [pid 6946] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6945] exit_group(0 [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 6948 [pid 6947] <... close resumed>) = 0 [pid 6946] <... openat resumed>) = 3 [pid 6945] <... exit_group resumed>) = ? [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6948] set_robust_list(0x55557eba4660, 24 [pid 6947] close(4 [pid 6946] chdir("./file0" [pid 5825] openat(AT_FDCWD, "./220/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6948] <... set_robust_list resumed>) = 0 [pid 6947] <... close resumed>) = 0 [pid 6946] <... chdir resumed>) = 0 [pid 6948] chdir("./216" [pid 6947] mkdir("./file0", 0777 [pid 6946] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5825] <... openat resumed>) = 4 [pid 6948] <... chdir resumed>) = 0 [pid 6947] <... mkdir resumed>) = 0 [pid 6946] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6945] +++ exited with 0 +++ [pid 5825] newfstatat(4, "", [pid 6947] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6945, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6946] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 6946] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6948] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6948] setpgid(0, 0 [pid 5825] getdents64(4, [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 6948] <... setpgid resumed>) = 0 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 6948] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5825] getdents64(4, [pid 5823] <... restart_syscall resumed>) = 0 [pid 6948] <... openat resumed>) = 3 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 6946] <... renameat2 resumed>) = 0 [pid 6946] sync( [pid 5825] close(4) = 0 [pid 5823] umount2("./222", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6948] write(3, "1000", 4) = 4 [pid 6948] close(3) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] rmdir("./220/file0" [pid 5823] openat(AT_FDCWD, "./222", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6948] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5825] <... rmdir resumed>) = 0 [pid 5823] <... openat resumed>) = 3 [pid 5825] umount2("./220/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] newfstatat(3, "", [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) executing program [pid 6948] write(1, "executing program\n", 18 [pid 5825] newfstatat(AT_FDCWD, "./220/binderfs", [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6948] <... write resumed>) = 18 [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] getdents64(3, [pid 6948] memfd_create("syzkaller", 0 [pid 5825] unlink("./220/binderfs" [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 6948] <... memfd_create resumed>) = 3 [pid 5823] umount2("./222/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6948] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5825] <... unlink resumed>) = 0 [pid 5823] <... umount2 resumed>) = 0 [pid 6948] <... mmap resumed>) = 0x7f957a000000 [pid 5825] getdents64(3, [pid 5823] umount2("./222/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6948] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] close(3 [pid 5823] newfstatat(AT_FDCWD, "./222/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... close resumed>) = 0 [pid 5823] umount2("./222/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6948] <... write resumed>) = 65536 [pid 5825] rmdir("./220" [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./222/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6948] munmap(0x7f957a000000, 138412032) = 0 [pid 5825] <... rmdir resumed>) = 0 [pid 5823] <... openat resumed>) = 4 [pid 6948] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5823] newfstatat(4, "", [pid 6948] ioctl(4, LOOP_SET_FD, 3 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 6947] <... mount resumed>) = 0 [pid 5825] mkdir("./221", 0777 [pid 5823] close(4 [pid 6947] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5823] <... close resumed>) = 0 [pid 6947] <... openat resumed>) = 3 [pid 5823] rmdir("./222/file0" [pid 6947] chdir("./file0") = 0 [pid 6947] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5825] <... mkdir resumed>) = 0 [pid 5823] <... rmdir resumed>) = 0 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5823] umount2("./222/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... openat resumed>) = 3 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6947] openat(AT_FDCWD, ".", O_RDONLY [pid 5825] <... ioctl resumed>) = 0 [pid 5823] newfstatat(AT_FDCWD, "./222/binderfs", [pid 6947] <... openat resumed>) = 4 [pid 6947] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6946] <... sync resumed>) = 0 [pid 6946] exit_group(0 [pid 5823] unlink("./222/binderfs" [pid 6946] <... exit_group resumed>) = ? [pid 6946] +++ exited with 0 +++ [pid 6947] <... renameat2 resumed>) = 0 [pid 5825] close(3 [pid 5823] <... unlink resumed>) = 0 [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6946, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5823] getdents64(3, [pid 5825] <... close resumed>) = 0 [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 6947] sync( [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5824] <... restart_syscall resumed>) = 0 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 6948] <... ioctl resumed>) = 0 [pid 6948] close(3) = 0 [pid 6948] close(4 [pid 5824] umount2("./218", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6948] <... close resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 198.509478][ T6947] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 198.549464][ T6948] loop4: detected capacity change from 0 to 128 ./strace-static-x86_64: Process 6949 attached [pid 6948] mkdir("./file0", 0777 [pid 5824] openat(AT_FDCWD, "./218", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] close(3 [pid 6948] <... mkdir resumed>) = 0 [pid 5824] <... openat resumed>) = 3 [pid 5824] newfstatat(3, "", [pid 5823] <... close resumed>) = 0 [pid 6949] set_robust_list(0x55557eba4660, 24 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] rmdir("./222" [pid 6949] <... set_robust_list resumed>) = 0 [pid 6948] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5824] getdents64(3, [pid 6949] chdir("./221") = 0 [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 6949 [pid 6949] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6949] setpgid(0, 0) = 0 [pid 6949] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 executing program [pid 6949] write(3, "1000", 4) = 4 [pid 6949] close(3) = 0 [pid 6949] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6949] write(1, "executing program\n", 18) = 18 [pid 5823] <... rmdir resumed>) = 0 [pid 6949] memfd_create("syzkaller", 0) = 3 [pid 5823] mkdir("./223", 0777 [pid 6949] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 6949] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] umount2("./218/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6949] munmap(0x7f957a000000, 138412032 [pid 5823] <... mkdir resumed>) = 0 [pid 6949] <... munmap resumed>) = 0 [pid 6949] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6949] ioctl(4, LOOP_SET_FD, 3 [ 198.603787][ T6948] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5823] ioctl(3, LOOP_CLR_FD [pid 6948] <... mount resumed>) = 0 [pid 5824] <... umount2 resumed>) = 0 [pid 6948] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5824] umount2("./218/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6948] <... openat resumed>) = 3 [pid 6947] <... sync resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6948] chdir("./file0" [pid 6947] exit_group(0 [pid 5824] newfstatat(AT_FDCWD, "./218/file0", [pid 6948] <... chdir resumed>) = 0 [pid 6947] <... exit_group resumed>) = ? [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6948] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5824] umount2("./218/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... ioctl resumed>) = 0 [pid 6948] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6948] openat(AT_FDCWD, ".", O_RDONLY [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6948] <... openat resumed>) = 4 [pid 5824] openat(AT_FDCWD, "./218/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] close(3 [pid 6949] <... ioctl resumed>) = 0 [pid 6948] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6947] +++ exited with 0 +++ [pid 5824] <... openat resumed>) = 4 [pid 5823] <... close resumed>) = 0 [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6947, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5824] newfstatat(4, "", [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5826] restart_syscall(<... resuming interrupted clone ...> [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 6950 attached [pid 5824] getdents64(4, [pid 6950] set_robust_list(0x55557eba4660, 24 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 6950] <... set_robust_list resumed>) = 0 [pid 6949] close(3 [pid 6948] <... renameat2 resumed>) = 0 [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 6950 [pid 6949] <... close resumed>) = 0 [pid 6948] sync( [pid 5824] close(4 [pid 6949] close(4 [pid 5826] <... restart_syscall resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 6949] <... close resumed>) = 0 [pid 6949] mkdir("./file0", 0777 [pid 5824] rmdir("./218/file0" [pid 6949] <... mkdir resumed>) = 0 [pid 5826] umount2("./223", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6950] chdir("./223" [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... rmdir resumed>) = 0 [ 198.644440][ T6949] loop2: detected capacity change from 0 to 128 [pid 5826] openat(AT_FDCWD, "./223", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6950] <... chdir resumed>) = 0 [pid 6949] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5826] <... openat resumed>) = 3 [pid 5824] umount2("./218/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6950] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5826] newfstatat(3, "", [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6950] setpgid(0, 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] newfstatat(AT_FDCWD, "./218/binderfs", [pid 6950] <... setpgid resumed>) = 0 [pid 6950] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5826] getdents64(3, [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6950] <... openat resumed>) = 3 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] unlink("./218/binderfs" [pid 6950] write(3, "1000", 4) = 4 [pid 5826] umount2("./223/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... unlink resumed>) = 0 [pid 6950] close(3 [pid 5824] getdents64(3, [pid 6950] <... close resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 6950] symlink("/dev/binderfs", "./binderfs" [pid 5824] close(3 [pid 5826] <... umount2 resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 6950] <... symlink resumed>) = 0 [pid 5826] umount2("./223/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] rmdir("./218" [pid 5826] newfstatat(AT_FDCWD, "./223/file0", [pid 5824] <... rmdir resumed>) = 0 executing program [pid 6950] write(1, "executing program\n", 18 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] mkdir("./219", 0777 [pid 6950] <... write resumed>) = 18 [pid 5826] umount2("./223/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... mkdir resumed>) = 0 [pid 6950] memfd_create("syzkaller", 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6950] <... memfd_create resumed>) = 3 [pid 6950] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5826] openat(AT_FDCWD, "./223/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6950] <... mmap resumed>) = 0x7f957a000000 [pid 5826] newfstatat(4, "", [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] <... openat resumed>) = 3 [pid 6950] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5826] getdents64(4, [pid 5824] ioctl(3, LOOP_CLR_FD [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] <... ioctl resumed>) = 0 [pid 5826] getdents64(4, [pid 5824] close(3 [pid 6950] <... write resumed>) = 65536 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] <... close resumed>) = 0 [pid 5826] close(4 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5826] <... close resumed>) = 0 ./strace-static-x86_64: Process 6951 attached [pid 5826] rmdir("./223/file0" [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 6951 [pid 5826] <... rmdir resumed>) = 0 [pid 5826] umount2("./223/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6950] munmap(0x7f957a000000, 138412032 [pid 6951] set_robust_list(0x55557eba4660, 24 [pid 5826] newfstatat(AT_FDCWD, "./223/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./223/binderfs" [pid 6951] <... set_robust_list resumed>) = 0 [pid 6950] <... munmap resumed>) = 0 [pid 5826] <... unlink resumed>) = 0 [pid 6951] chdir("./219" [pid 6950] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5826] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] close(3) = 0 [pid 5826] rmdir("./223" [pid 6951] <... chdir resumed>) = 0 [pid 6950] <... openat resumed>) = 4 [pid 5826] <... rmdir resumed>) = 0 [pid 6951] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6950] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 6950] ioctl(4, LOOP_CLR_FD [pid 5826] mkdir("./224", 0777) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6951] <... prctl resumed>) = 0 [pid 5826] <... openat resumed>) = 3 [pid 5826] ioctl(3, LOOP_CLR_FD) = 0 [pid 5826] close(3) = 0 [pid 6951] setpgid(0, 0 [pid 6950] <... ioctl resumed>) = 0 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6952 attached [pid 6951] <... setpgid resumed>) = 0 [ 198.722422][ T6949] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 6952 [pid 6952] set_robust_list(0x55557eba4660, 24 [pid 6951] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6952] <... set_robust_list resumed>) = 0 [pid 6952] chdir("./224") = 0 [pid 6952] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6952] setpgid(0, 0) = 0 [pid 6952] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6952] write(3, "1000", 4 [pid 6950] ioctl(4, LOOP_SET_FD, 3 [pid 6952] <... write resumed>) = 4 [pid 6951] <... openat resumed>) = 3 [pid 6950] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) executing program [pid 6952] close(3 [pid 6950] close(4 [pid 6952] <... close resumed>) = 0 [pid 6952] symlink("/dev/binderfs", "./binderfs" [pid 6950] <... close resumed>) = 0 [pid 6952] <... symlink resumed>) = 0 [pid 6951] write(3, "1000", 4 [pid 6950] close(3 [pid 6949] <... mount resumed>) = 0 [pid 6952] write(1, "executing program\n", 18 [pid 6949] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6951] <... write resumed>) = 4 [pid 6950] <... close resumed>) = 0 [pid 6949] <... openat resumed>) = 3 [pid 6952] <... write resumed>) = 18 [pid 6949] chdir("./file0" [pid 6948] <... sync resumed>) = 0 [pid 6952] memfd_create("syzkaller", 0 [pid 6949] <... chdir resumed>) = 0 [pid 6948] exit_group(0 [pid 6949] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6948] <... exit_group resumed>) = ? [pid 6949] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6952] <... memfd_create resumed>) = 3 [pid 6949] openat(AT_FDCWD, ".", O_RDONLY [pid 6952] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6951] close(3 [pid 6950] openat(AT_FDCWD, ".", O_RDONLY [pid 6949] <... openat resumed>) = 4 [pid 6952] <... mmap resumed>) = 0x7f957a000000 [pid 6949] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6951] <... close resumed>) = 0 [pid 6952] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6951] symlink("/dev/binderfs", "./binderfs" [pid 6950] <... openat resumed>) = 3 [pid 6948] +++ exited with 0 +++ [pid 6951] <... symlink resumed>) = 0 executing program [pid 6951] write(1, "executing program\n", 18 [pid 6950] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6948, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6951] <... write resumed>) = 18 [pid 6950] <... renameat2 resumed>) = -1 ENOENT (No such file or directory) [pid 6949] <... renameat2 resumed>) = 0 [pid 6952] <... write resumed>) = 65536 [pid 6951] memfd_create("syzkaller", 0 [pid 6950] sync( [pid 6949] sync( [pid 6951] <... memfd_create resumed>) = 3 [pid 6951] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 6952] munmap(0x7f957a000000, 138412032 [pid 6951] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6952] <... munmap resumed>) = 0 [pid 6952] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6952] ioctl(4, LOOP_SET_FD, 3 [pid 6951] <... write resumed>) = 65536 [pid 6951] munmap(0x7f957a000000, 138412032) = 0 [pid 6951] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5827] umount2("./216", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] openat(AT_FDCWD, "./216", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5827] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] getdents64(3, [pid 6951] <... openat resumed>) = 4 [pid 6950] <... sync resumed>) = 0 [pid 6949] <... sync resumed>) = 0 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 6951] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 6950] exit_group(0 [pid 6949] exit_group(0 [pid 6951] ioctl(4, LOOP_CLR_FD [pid 6950] <... exit_group resumed>) = ? [pid 6949] <... exit_group resumed>) = ? [pid 5827] umount2("./216/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6951] <... ioctl resumed>) = 0 [pid 6950] +++ exited with 0 +++ [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6950, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 5827] <... umount2 resumed>) = 0 [pid 6951] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 5827] umount2("./216/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6951] close(4 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] newfstatat(AT_FDCWD, "./216/file0", [pid 6951] <... close resumed>) = 0 [pid 6949] +++ exited with 0 +++ [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6951] close(3 [pid 5823] <... restart_syscall resumed>) = 0 [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6949, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5827] umount2("./216/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6951] <... close resumed>) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] openat(AT_FDCWD, "./216/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6951] openat(AT_FDCWD, ".", O_RDONLY [pid 5827] <... openat resumed>) = 4 [pid 5825] restart_syscall(<... resuming interrupted clone ...> [pid 5827] newfstatat(4, "", [pid 5825] <... restart_syscall resumed>) = 0 [pid 5823] umount2("./223", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6951] <... openat resumed>) = 3 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6951] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6952] <... ioctl resumed>) = 0 [pid 6951] <... renameat2 resumed>) = -1 ENOENT (No such file or directory) [pid 5827] getdents64(4, [pid 5823] openat(AT_FDCWD, "./223", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6951] sync( [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] umount2("./221", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... openat resumed>) = 3 [pid 6952] close(3 [pid 5827] getdents64(4, [pid 5823] newfstatat(3, "", [pid 6952] <... close resumed>) = 0 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6952] close(4 [pid 5827] close(4 [pid 5825] openat(AT_FDCWD, "./221", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] getdents64(3, [pid 5827] <... close resumed>) = 0 [pid 5825] <... openat resumed>) = 3 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 5827] rmdir("./216/file0" [pid 5823] umount2("./223/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6952] <... close resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./223/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./223/binderfs" [pid 5827] <... rmdir resumed>) = 0 [pid 6952] mkdir("./file0", 0777 [pid 5825] newfstatat(3, "", [pid 5823] <... unlink resumed>) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(3, [pid 5825] getdents64(3, [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] close(3 [pid 6952] <... mkdir resumed>) = 0 [pid 5825] umount2("./221/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... close resumed>) = 0 [ 198.835274][ T6952] loop3: detected capacity change from 0 to 128 [pid 5823] rmdir("./223" [pid 6952] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5827] umount2("./216/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... rmdir resumed>) = 0 [pid 6951] <... sync resumed>) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] mkdir("./224", 0777 [pid 6951] exit_group(0 [pid 5827] newfstatat(AT_FDCWD, "./216/binderfs", [pid 5823] <... mkdir resumed>) = 0 [pid 6951] <... exit_group resumed>) = ? [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 6951] +++ exited with 0 +++ [pid 5823] ioctl(3, LOOP_CLR_FD [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6951, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5823] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] close(3) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDexecuting program [pid 5827] unlink("./216/binderfs"./strace-static-x86_64: Process 6953 attached [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 6953 [pid 6953] set_robust_list(0x55557eba4660, 24) = 0 [pid 6953] chdir("./224") = 0 [pid 6953] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6953] setpgid(0, 0) = 0 [pid 6953] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6953] write(3, "1000", 4) = 4 [pid 6953] close(3) = 0 [pid 6953] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6953] write(1, "executing program\n", 18) = 18 [pid 6953] memfd_create("syzkaller", 0 [pid 5827] <... unlink resumed>) = 0 [pid 5827] getdents64(3, [pid 6953] <... memfd_create resumed>) = 3 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] umount2("./219", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] close(3 [pid 5825] <... umount2 resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... close resumed>) = 0 [pid 5824] openat(AT_FDCWD, "./219", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] rmdir("./216" [pid 6953] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 6953] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5827] <... rmdir resumed>) = 0 [pid 5825] umount2("./221/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... openat resumed>) = 3 [pid 5827] mkdir("./217", 0777 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(3, "", [pid 6953] <... write resumed>) = 65536 [pid 5827] <... mkdir resumed>) = 0 [pid 5825] newfstatat(AT_FDCWD, "./221/file0", [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6953] munmap(0x7f957a000000, 138412032 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] umount2("./221/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] getdents64(3, [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6953] <... munmap resumed>) = 0 [pid 5827] <... openat resumed>) = 3 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 5827] ioctl(3, LOOP_CLR_FD [pid 5825] openat(AT_FDCWD, "./221/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6953] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5827] <... ioctl resumed>) = 0 [pid 5825] <... openat resumed>) = 4 [pid 5824] umount2("./219/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6953] ioctl(4, LOOP_SET_FD, 3 [pid 5827] close(3 [pid 5825] newfstatat(4, "", [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] newfstatat(AT_FDCWD, "./219/binderfs", [pid 5827] <... close resumed>) = 0 [pid 5825] getdents64(4, [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] unlink("./219/binderfs") = 0 [pid 5824] getdents64(3, [pid 5825] getdents64(4, [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] close(3./strace-static-x86_64: Process 6954 attached ) = 0 [pid 6954] set_robust_list(0x55557eba4660, 24 [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 6954 [pid 5825] close(4 [pid 5824] rmdir("./219") = 0 [pid 5825] <... close resumed>) = 0 [pid 5824] mkdir("./220", 0777 [pid 6954] <... set_robust_list resumed>) = 0 [pid 5825] rmdir("./221/file0" [pid 5824] <... mkdir resumed>) = 0 [pid 6954] chdir("./217" [pid 6953] <... ioctl resumed>) = 0 [pid 6954] <... chdir resumed>) = 0 [pid 5825] <... rmdir resumed>) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6954] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5825] umount2("./221/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... openat resumed>) = 3 [pid 6954] <... prctl resumed>) = 0 [pid 5824] ioctl(3, LOOP_CLR_FD [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6954] setpgid(0, 0 [pid 5825] newfstatat(AT_FDCWD, "./221/binderfs", [pid 5824] close(3 [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... close resumed>) = 0 [pid 5825] unlink("./221/binderfs" [pid 6954] <... setpgid resumed>) = 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6952] <... mount resumed>) = 0 [pid 6952] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6952] chdir("./file0") = 0 [pid 6952] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) ./strace-static-x86_64: Process 6955 attached [pid 6954] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6953] close(3 [pid 6952] openat(AT_FDCWD, ".", O_RDONLY [pid 5825] <... unlink resumed>) = 0 [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 6955 [pid 6953] <... close resumed>) = 0 [pid 6953] close(4) = 0 [pid 6952] <... openat resumed>) = 4 [pid 6953] mkdir("./file0", 0777 [pid 6952] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5825] getdents64(3, [pid 6954] <... openat resumed>) = 3 [ 198.916160][ T6952] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 198.955448][ T6953] loop0: detected capacity change from 0 to 128 [pid 6955] set_robust_list(0x55557eba4660, 24 [pid 6954] write(3, "1000", 4 [pid 6953] <... mkdir resumed>) = 0 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 6954] <... write resumed>) = 4 [pid 5825] close(3 [pid 6953] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5825] <... close resumed>) = 0 [pid 6955] <... set_robust_list resumed>) = 0 [pid 6954] close(3 [pid 6952] <... renameat2 resumed>) = 0 [pid 5825] rmdir("./221" [pid 6954] <... close resumed>) = 0 [pid 6952] sync( [pid 6955] chdir("./220" [pid 6954] symlink("/dev/binderfs", "./binderfs" [pid 5825] <... rmdir resumed>) = 0 [pid 6954] <... symlink resumed>) = 0 executing program [pid 5825] mkdir("./222", 0777 [pid 6955] <... chdir resumed>) = 0 [pid 6954] write(1, "executing program\n", 18 [pid 6955] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6954] <... write resumed>) = 18 [pid 5825] <... mkdir resumed>) = 0 [pid 6955] <... prctl resumed>) = 0 [pid 6955] setpgid(0, 0 [pid 6954] memfd_create("syzkaller", 0 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6955] <... setpgid resumed>) = 0 [pid 6955] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6954] <... memfd_create resumed>) = 3 [pid 5825] <... openat resumed>) = 3 [pid 5825] ioctl(3, LOOP_CLR_FD) = 0 [pid 6955] <... openat resumed>) = 3 [pid 6954] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5825] close(3 [pid 6955] write(3, "1000", 4 [pid 6954] <... mmap resumed>) = 0x7f957a000000 [pid 5825] <... close resumed>) = 0 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6955] <... write resumed>) = 4 [pid 6955] close(3) = 0 [pid 6955] symlink("/dev/binderfs", "./binderfs" [pid 6954] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6955] <... symlink resumed>) = 0 [pid 6954] <... write resumed>) = 65536 ./strace-static-x86_64: Process 6956 attached executing program [pid 6955] write(1, "executing program\n", 18 [pid 6956] set_robust_list(0x55557eba4660, 24 [pid 6955] <... write resumed>) = 18 [pid 6954] munmap(0x7f957a000000, 138412032 [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 6956 [pid 6954] <... munmap resumed>) = 0 [pid 6956] <... set_robust_list resumed>) = 0 [pid 6955] memfd_create("syzkaller", 0 [pid 6956] chdir("./222") = 0 [pid 6954] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6956] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6954] <... openat resumed>) = 4 [pid 6956] <... prctl resumed>) = 0 [pid 6956] setpgid(0, 0 [ 199.015205][ T6953] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [pid 6954] ioctl(4, LOOP_SET_FD, 3 [pid 6956] <... setpgid resumed>) = 0 [pid 6955] <... memfd_create resumed>) = 3 [pid 6955] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 6955] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6956] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6953] <... mount resumed>) = 0 [pid 6956] write(3, "1000", 4) = 4 [pid 6956] close(3 [pid 6955] <... write resumed>) = 65536 [pid 6956] <... close resumed>) = 0 [pid 6953] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6956] symlink("/dev/binderfs", "./binderfs" [pid 6955] munmap(0x7f957a000000, 138412032executing program [pid 6956] <... symlink resumed>) = 0 [pid 6955] <... munmap resumed>) = 0 [pid 6954] <... ioctl resumed>) = 0 [pid 6953] <... openat resumed>) = 3 [pid 6956] write(1, "executing program\n", 18) = 18 [ 199.060707][ T6954] loop4: detected capacity change from 0 to 128 [pid 6956] memfd_create("syzkaller", 0 [pid 6954] close(3) = 0 [pid 6953] chdir("./file0" [pid 6955] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6955] ioctl(4, LOOP_SET_FD, 3 [pid 6956] <... memfd_create resumed>) = 3 [pid 6954] close(4) = 0 [pid 6956] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6954] mkdir("./file0", 0777 [pid 6953] <... chdir resumed>) = 0 [pid 6953] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6952] <... sync resumed>) = 0 [pid 6953] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6952] exit_group(0 [pid 6956] <... mmap resumed>) = 0x7f957a000000 [pid 6954] <... mkdir resumed>) = 0 [pid 6953] openat(AT_FDCWD, ".", O_RDONLY [pid 6952] <... exit_group resumed>) = ? [pid 6956] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6954] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6953] <... openat resumed>) = 4 [pid 6952] +++ exited with 0 +++ [pid 6953] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6952, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 6956] <... write resumed>) = 65536 [pid 5826] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5826] umount2("./224", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./224", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5826] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6956] munmap(0x7f957a000000, 138412032 [pid 6955] <... ioctl resumed>) = 0 [pid 5826] getdents64(3, [pid 6956] <... munmap resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5826] umount2("./224/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6956] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6955] close(3 [pid 6953] <... renameat2 resumed>) = 0 [pid 6955] <... close resumed>) = 0 [pid 6956] <... openat resumed>) = 4 [pid 6953] sync( [pid 5826] <... umount2 resumed>) = 0 [pid 6956] ioctl(4, LOOP_SET_FD, 3 [pid 5826] umount2("./224/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6955] close(4 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 199.114699][ T6955] loop1: detected capacity change from 0 to 128 [ 199.150072][ T6954] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [pid 5826] newfstatat(AT_FDCWD, "./224/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] umount2("./224/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6955] <... close resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6955] mkdir("./file0", 0777 [pid 5826] openat(AT_FDCWD, "./224/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5826] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6955] <... mkdir resumed>) = 0 [pid 6954] <... mount resumed>) = 0 [pid 5826] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5826] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5826] close(4) = 0 [pid 6954] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5826] rmdir("./224/file0") = 0 [pid 5826] umount2("./224/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6954] <... openat resumed>) = 3 [pid 6954] chdir("./file0") = 0 [pid 6955] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6954] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6954] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5826] newfstatat(AT_FDCWD, "./224/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./224/binderfs") = 0 [pid 6956] <... ioctl resumed>) = 0 [pid 6954] openat(AT_FDCWD, ".", O_RDONLY [pid 6956] close(3 [pid 6954] <... openat resumed>) = 4 [pid 5826] getdents64(3, [pid 6956] <... close resumed>) = 0 [pid 6956] close(4 [pid 6954] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] close(3) = 0 [pid 6956] <... close resumed>) = 0 [pid 5826] rmdir("./224" [pid 6956] mkdir("./file0", 0777 [pid 5826] <... rmdir resumed>) = 0 [pid 5826] mkdir("./225", 0777 [pid 6956] <... mkdir resumed>) = 0 [pid 5826] <... mkdir resumed>) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5826] ioctl(3, LOOP_CLR_FD) = 0 [pid 5826] close(3) = 0 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6956] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6954] <... renameat2 resumed>) = 0 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 6958 [ 199.187330][ T6956] loop2: detected capacity change from 0 to 128 [ 199.222701][ T6955] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 ./strace-static-x86_64: Process 6958 attached [pid 6958] set_robust_list(0x55557eba4660, 24) = 0 [pid 6958] chdir("./225") = 0 [pid 6958] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6954] sync( [pid 6958] setpgid(0, 0) = 0 [pid 6958] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6958] write(3, "1000", 4) = 4 [pid 6958] close(3) = 0 [pid 6958] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6958] write(1, "executing program\n", 18executing program ) = 18 [pid 6956] <... mount resumed>) = 0 [pid 6958] memfd_create("syzkaller", 0 [pid 6956] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6955] <... mount resumed>) = 0 [pid 6958] <... memfd_create resumed>) = 3 [pid 6955] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6956] <... openat resumed>) = 3 [pid 6958] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6955] <... openat resumed>) = 3 [ 199.257814][ T6956] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [pid 6956] chdir("./file0" [pid 6958] <... mmap resumed>) = 0x7f957a000000 [pid 6956] <... chdir resumed>) = 0 [pid 6955] chdir("./file0" [pid 6953] <... sync resumed>) = 0 [pid 6958] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6956] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6955] <... chdir resumed>) = 0 [pid 6954] <... sync resumed>) = 0 [pid 6953] exit_group(0) = ? [pid 6958] <... write resumed>) = 65536 [pid 6956] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6955] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6954] exit_group(0 [pid 6953] +++ exited with 0 +++ [pid 6955] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6955] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 6956] openat(AT_FDCWD, ".", O_RDONLY [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6953, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6955] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6956] <... openat resumed>) = 4 [pid 6958] munmap(0x7f957a000000, 138412032 [pid 6956] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6954] <... exit_group resumed>) = ? [pid 5823] umount2("./224", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6958] <... munmap resumed>) = 0 [pid 6958] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6958] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 6958] ioctl(4, LOOP_CLR_FD) = 0 [pid 6955] <... renameat2 resumed>) = 0 [pid 6954] +++ exited with 0 +++ [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6958] ioctl(4, LOOP_SET_FD, 3 [pid 6955] sync( [pid 5823] openat(AT_FDCWD, "./224", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6954, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6958] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5827] restart_syscall(<... resuming interrupted clone ...> [pid 5823] <... openat resumed>) = 3 [pid 6958] close(4 [pid 5823] newfstatat(3, "", [pid 6958] <... close resumed>) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6958] close(3) = 0 [pid 5823] getdents64(3, [pid 6958] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 6956] <... renameat2 resumed>) = 0 [pid 5827] <... restart_syscall resumed>) = 0 [pid 5823] umount2("./224/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6958] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = -1 ENOENT (No such file or directory) [pid 6958] sync( [pid 6956] sync( [pid 6955] <... sync resumed>) = 0 [pid 5827] umount2("./217", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6955] exit_group(0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6958] <... sync resumed>) = 0 [pid 6956] <... sync resumed>) = 0 [pid 6955] <... exit_group resumed>) = ? [pid 5827] openat(AT_FDCWD, "./217", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] <... umount2 resumed>) = 0 [pid 6958] exit_group(0) = ? [pid 6956] exit_group(0 [pid 6955] +++ exited with 0 +++ [pid 5827] <... openat resumed>) = 3 [pid 5823] umount2("./224/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] getdents64(3, [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6955, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5823] newfstatat(AT_FDCWD, "./224/file0", [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6956] <... exit_group resumed>) = ? [pid 5827] umount2("./217/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./220", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6956] +++ exited with 0 +++ [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] umount2("./224/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] openat(AT_FDCWD, "./220", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6956, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5824] <... openat resumed>) = 3 [pid 5824] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] umount2("./222", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] getdents64(3, [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./222", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] umount2("./220/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6958] +++ exited with 0 +++ [pid 5825] <... openat resumed>) = 3 [pid 5823] openat(AT_FDCWD, "./224/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6958, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5825] newfstatat(3, "", [pid 5823] <... openat resumed>) = 4 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(3, [pid 5826] umount2("./225", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] umount2("./222/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] openat(AT_FDCWD, "./225", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5826] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(3, 0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 5826] umount2("./225/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./225/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./225/binderfs") = 0 [pid 5826] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] close(3) = 0 [pid 5826] rmdir("./225") = 0 [pid 5823] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] mkdir("./226", 0777 [pid 5823] getdents64(4, [pid 5824] <... umount2 resumed>) = 0 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] <... umount2 resumed>) = 0 [pid 5823] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5825] umount2("./222/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./220/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... umount2 resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] close(4 [pid 5827] umount2("./217/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... mkdir resumed>) = 0 [pid 5825] newfstatat(AT_FDCWD, "./222/file0", [pid 5824] newfstatat(AT_FDCWD, "./220/file0", [pid 5823] <... close resumed>) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] rmdir("./224/file0" [pid 5825] umount2("./222/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... openat resumed>) = 3 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] umount2("./220/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... rmdir resumed>) = 0 [pid 5827] newfstatat(AT_FDCWD, "./217/file0", [pid 5825] openat(AT_FDCWD, "./222/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] umount2("./224/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] ioctl(3, LOOP_CLR_FD [pid 5825] <... openat resumed>) = 4 [pid 5824] openat(AT_FDCWD, "./220/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] umount2("./217/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] newfstatat(4, "", [pid 5824] <... openat resumed>) = 4 [pid 5823] newfstatat(AT_FDCWD, "./224/binderfs", [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5825] getdents64(4, [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] newfstatat(4, "", [pid 5823] unlink("./224/binderfs" [pid 5825] getdents64(4, [pid 5826] close(3 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5826] <... close resumed>) = 0 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5827] openat(AT_FDCWD, "./217/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] close(4 [pid 5824] getdents64(4, [pid 5823] <... unlink resumed>) = 0 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 6959 [pid 5825] <... close resumed>) = 0 [pid 5823] getdents64(3, [pid 5825] rmdir("./222/file0" [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5827] <... openat resumed>) = 4 [pid 5825] <... rmdir resumed>) = 0 [pid 5827] newfstatat(4, "", [pid 5823] close(3 [pid 5824] getdents64(4, [pid 5825] umount2("./222/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... close resumed>) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] rmdir("./224" [pid 5827] getdents64(4, [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] close(4 [pid 5823] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 6959 attached [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] newfstatat(AT_FDCWD, "./222/binderfs", [pid 5824] <... close resumed>) = 0 [pid 5823] mkdir("./225", 0777 [pid 5824] rmdir("./220/file0" [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 5825] unlink("./222/binderfs" [pid 5823] <... mkdir resumed>) = 0 [pid 5825] <... unlink resumed>) = 0 [pid 5824] umount2("./220/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] getdents64(3, [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] newfstatat(AT_FDCWD, "./220/binderfs", [pid 5825] close(3 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... close resumed>) = 0 [pid 5827] getdents64(4, [pid 5824] unlink("./220/binderfs" [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5825] rmdir("./222" [pid 5827] close(4 [pid 6959] set_robust_list(0x55557eba4660, 24 [pid 5827] <... close resumed>) = 0 [pid 5825] <... rmdir resumed>) = 0 [pid 5824] <... unlink resumed>) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6959] <... set_robust_list resumed>) = 0 [pid 6959] chdir("./226" [pid 5827] rmdir("./217/file0" [pid 5823] <... openat resumed>) = 3 [pid 6959] <... chdir resumed>) = 0 [pid 5825] mkdir("./223", 0777 [pid 5824] getdents64(3, [pid 5823] ioctl(3, LOOP_CLR_FD [pid 6959] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5827] <... rmdir resumed>) = 0 [pid 5825] <... mkdir resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] <... ioctl resumed>) = 0 [pid 6959] setpgid(0, 0 [pid 5824] close(3 [pid 5823] close(3 [pid 6959] <... setpgid resumed>) = 0 [pid 6959] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5827] umount2("./217/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6959] <... openat resumed>) = 3 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5824] <... close resumed>) = 0 [pid 5823] <... close resumed>) = 0 [pid 6959] write(3, "1000", 4 [pid 5824] rmdir("./220" [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6959] <... write resumed>) = 4 [pid 5825] <... openat resumed>) = 3 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] ioctl(3, LOOP_CLR_FD [pid 6959] close(3 [pid 5827] newfstatat(AT_FDCWD, "./217/binderfs", [pid 5825] <... ioctl resumed>) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 6959] <... close resumed>) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] close(3./strace-static-x86_64: Process 6960 attached [pid 6959] symlink("/dev/binderfs", "./binderfs" [pid 5824] mkdir("./221", 0777 [pid 6959] <... symlink resumed>) = 0 [pid 5827] unlink("./217/binderfs" [pid 5825] <... close resumed>) = 0 [pid 5824] <... mkdir resumed>) = 0 [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 6960 [pid 6960] set_robust_list(0x55557eba4660, 24 [pid 6959] write(1, "executing program\n", 18 [pid 5827] <... unlink resumed>) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWRexecuting program [pid 6960] <... set_robust_list resumed>) = 0 [pid 6959] <... write resumed>) = 18 [pid 5827] getdents64(3, [pid 5824] <... openat resumed>) = 3 [pid 6960] chdir("./225" [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5827] close(3 [pid 6960] <... chdir resumed>) = 0 [pid 6959] memfd_create("syzkaller", 0 [pid 5827] <... close resumed>) = 0 [pid 5824] ioctl(3, LOOP_CLR_FD [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6959] <... memfd_create resumed>) = 3 [pid 5824] <... ioctl resumed>) = 0 [pid 6959] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 6961 attached [pid 6960] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5827] rmdir("./217" [pid 6960] <... prctl resumed>) = 0 [pid 5827] <... rmdir resumed>) = 0 [pid 6960] setpgid(0, 0) = 0 [pid 6960] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6961] set_robust_list(0x55557eba4660, 24 [pid 6960] <... openat resumed>) = 3 [pid 5827] mkdir("./218", 0777 [pid 6959] <... mmap resumed>) = 0x7f957a000000 [pid 5824] close(3 [pid 6961] <... set_robust_list resumed>) = 0 [pid 5827] <... mkdir resumed>) = 0 [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 6961 [pid 6961] chdir("./223") = 0 [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6961] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6960] write(3, "1000", 4 [pid 5827] <... openat resumed>) = 3 [pid 6961] <... prctl resumed>) = 0 [pid 6960] <... write resumed>) = 4 [pid 5827] ioctl(3, LOOP_CLR_FD [pid 6961] setpgid(0, 0 [pid 6960] close(3 [pid 5827] <... ioctl resumed>) = 0 [pid 6961] <... setpgid resumed>) = 0 [pid 6960] <... close resumed>) = 0 [pid 5827] close(3 [pid 6961] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6960] symlink("/dev/binderfs", "./binderfs" [pid 5827] <... close resumed>) = 0 [pid 6961] <... openat resumed>) = 3 [pid 6960] <... symlink resumed>) = 0 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDexecuting program [pid 6961] write(3, "1000", 4 [pid 6960] write(1, "executing program\n", 18 [pid 6959] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536./strace-static-x86_64: Process 6962 attached [pid 6960] <... write resumed>) = 18 [pid 6962] set_robust_list(0x55557eba4660, 24 [pid 6960] memfd_create("syzkaller", 0 [pid 6962] <... set_robust_list resumed>) = 0 [pid 6961] <... write resumed>) = 4 [pid 6959] <... write resumed>) = 65536 [pid 6961] close(3 [pid 6960] <... memfd_create resumed>) = 3 [pid 6962] chdir("./218" [pid 6961] <... close resumed>) = 0 [pid 6959] munmap(0x7f957a000000, 138412032 [pid 5824] <... close resumed>) = 0 [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 6962 [pid 6962] <... chdir resumed>) = 0 [pid 6959] <... munmap resumed>) = 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6961] symlink("/dev/binderfs", "./binderfs" [pid 6960] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6961] <... symlink resumed>) = 0 [pid 6960] <... mmap resumed>) = 0x7f957a000000 ./strace-static-x86_64: Process 6963 attached [pid 6962] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6960] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6959] openat(AT_FDCWD, "/dev/loop3", O_RDWRexecuting program [pid 6963] set_robust_list(0x55557eba4660, 24 [pid 6962] <... prctl resumed>) = 0 [pid 6961] write(1, "executing program\n", 18 [pid 6960] <... write resumed>) = 65536 [pid 6959] <... openat resumed>) = 4 [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 6963 [pid 6961] <... write resumed>) = 18 [pid 6959] ioctl(4, LOOP_SET_FD, 3 [pid 6962] setpgid(0, 0 [pid 6961] memfd_create("syzkaller", 0) = 3 [pid 6960] munmap(0x7f957a000000, 138412032 [pid 6961] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6960] <... munmap resumed>) = 0 [pid 6961] <... mmap resumed>) = 0x7f957a000000 [pid 6961] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6960] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6961] <... write resumed>) = 65536 [pid 6960] <... openat resumed>) = 4 [pid 6960] ioctl(4, LOOP_SET_FD, 3 [pid 6963] <... set_robust_list resumed>) = 0 [pid 6962] <... setpgid resumed>) = 0 [pid 6960] <... ioctl resumed>) = 0 [pid 6963] chdir("./221" [pid 6961] munmap(0x7f957a000000, 138412032 [pid 6963] <... chdir resumed>) = 0 [pid 6962] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6961] <... munmap resumed>) = 0 [pid 6960] close(3 [pid 6962] <... openat resumed>) = 3 [pid 6963] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6961] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6960] <... close resumed>) = 0 [pid 6963] <... prctl resumed>) = 0 [pid 6962] write(3, "1000", 4 [pid 6961] <... openat resumed>) = 4 [pid 6960] close(4 [pid 6959] <... ioctl resumed>) = 0 [pid 6963] setpgid(0, 0 [pid 6962] <... write resumed>) = 4 [pid 6960] <... close resumed>) = 0 [pid 6959] close(3 [pid 6963] <... setpgid resumed>) = 0 [pid 6962] close(3 [pid 6960] mkdir("./file0", 0777 [pid 6959] <... close resumed>) = 0 [pid 6963] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6962] <... close resumed>) = 0 [pid 6961] ioctl(4, LOOP_SET_FD, 3 [pid 6960] <... mkdir resumed>) = 0 [pid 6959] close(4 [pid 6963] <... openat resumed>) = 3 [pid 6962] symlink("/dev/binderfs", "./binderfs" [pid 6960] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, ""executing program [pid 6963] write(3, "1000", 4 [pid 6962] <... symlink resumed>) = 0 [pid 6959] <... close resumed>) = 0 [pid 6963] <... write resumed>) = 4 [pid 6962] write(1, "executing program\n", 18 [pid 6959] mkdir("./file0", 0777 [pid 6963] close(3 [pid 6962] <... write resumed>) = 18 [pid 6959] <... mkdir resumed>) = 0 [pid 6963] <... close resumed>) = 0 [pid 6962] memfd_create("syzkaller", 0 [pid 6961] <... ioctl resumed>) = 0 [pid 6963] symlink("/dev/binderfs", "./binderfs" [pid 6962] <... memfd_create resumed>) = 3 [pid 6961] close(3) = 0 [pid 6961] close(4) = 0 [pid 6961] mkdir("./file0", 0777 [pid 6963] <... symlink resumed>) = 0 [pid 6962] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6961] <... mkdir resumed>) = 0 [pid 6959] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6961] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6963] write(1, "executing program\n", 18 [pid 6962] <... mmap resumed>) = 0x7f957a000000 executing program [pid 6963] <... write resumed>) = 18 [ 199.519917][ T6959] loop3: detected capacity change from 0 to 128 [ 199.525877][ T6960] loop0: detected capacity change from 0 to 128 [ 199.545725][ T6961] loop2: detected capacity change from 0 to 128 [ 199.556142][ T6960] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [pid 6962] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6963] memfd_create("syzkaller", 0 [pid 6962] <... write resumed>) = 65536 [pid 6963] <... memfd_create resumed>) = 3 [pid 6962] munmap(0x7f957a000000, 138412032) = 0 [pid 6963] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6962] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6960] <... mount resumed>) = 0 [pid 6960] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6960] chdir("./file0") = 0 [pid 6963] <... mmap resumed>) = 0x7f957a000000 [pid 6962] <... openat resumed>) = 4 [pid 6960] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6960] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 6960] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6962] ioctl(4, LOOP_SET_FD, 3 [pid 6960] <... renameat2 resumed>) = 0 [pid 6960] sync( [pid 6963] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 6961] <... mount resumed>) = 0 [pid 6963] munmap(0x7f957a000000, 138412032 [pid 6962] <... ioctl resumed>) = 0 [pid 6961] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6963] <... munmap resumed>) = 0 [pid 6962] close(3 [pid 6961] <... openat resumed>) = 3 [pid 6961] chdir("./file0" [pid 6963] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6962] <... close resumed>) = 0 [pid 6961] <... chdir resumed>) = 0 [pid 6963] <... openat resumed>) = 4 [pid 6962] close(4 [pid 6961] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6961] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 6961] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6963] ioctl(4, LOOP_SET_FD, 3 [pid 6962] <... close resumed>) = 0 [pid 6962] mkdir("./file0", 0777 [pid 6961] <... renameat2 resumed>) = 0 [pid 6961] sync( [pid 6962] <... mkdir resumed>) = 0 [ 199.578254][ T6961] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 199.579719][ T6959] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 199.608049][ T6962] loop4: detected capacity change from 0 to 128 [pid 6962] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6963] <... ioctl resumed>) = 0 [pid 6963] close(3) = 0 [pid 6963] close(4 [pid 6959] <... mount resumed>) = 0 [pid 6963] <... close resumed>) = 0 [pid 6959] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6963] mkdir("./file0", 0777) = 0 [pid 6959] <... openat resumed>) = 3 [pid 6959] chdir("./file0" [ 199.650156][ T6962] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 199.660727][ T6963] loop1: detected capacity change from 0 to 128 [pid 6963] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6959] <... chdir resumed>) = 0 [pid 6962] <... mount resumed>) = 0 [pid 6962] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6962] chdir("./file0") = 0 [pid 6962] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6959] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6962] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6962] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 6962] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6959] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6959] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 6959] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6962] <... renameat2 resumed>) = 0 [pid 6962] sync( [pid 6959] <... renameat2 resumed>) = 0 [pid 6959] sync( [pid 6963] <... mount resumed>) = 0 [pid 6963] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 199.703740][ T6963] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [pid 6963] chdir("./file0") = 0 [pid 6962] <... sync resumed>) = 0 [pid 6962] exit_group(0 [pid 6963] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6962] <... exit_group resumed>) = ? [pid 6961] <... sync resumed>) = 0 [pid 6960] <... sync resumed>) = 0 [pid 6959] <... sync resumed>) = 0 [pid 6963] openat(AT_FDCWD, ".", O_RDONLY [pid 6961] exit_group(0 [pid 6960] exit_group(0 [pid 6959] exit_group(0 [pid 6961] <... exit_group resumed>) = ? [pid 6960] <... exit_group resumed>) = ? [pid 6959] <... exit_group resumed>) = ? [pid 6963] <... openat resumed>) = 4 [pid 6961] +++ exited with 0 +++ [pid 6960] +++ exited with 0 +++ [pid 6959] +++ exited with 0 +++ [pid 6963] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6959, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6961, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6960, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5826] umount2("./226", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] umount2("./223", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6963] <... renameat2 resumed>) = 0 [pid 5826] openat(AT_FDCWD, "./226", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6963] sync( [pid 6962] +++ exited with 0 +++ [pid 5826] <... openat resumed>) = 3 [pid 5825] openat(AT_FDCWD, "./223", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] newfstatat(3, "", [pid 5823] umount2("./225", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6962, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] <... openat resumed>) = 3 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] restart_syscall(<... resuming interrupted clone ...> [pid 5826] getdents64(3, [pid 5825] newfstatat(3, "", [pid 5823] openat(AT_FDCWD, "./225", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] <... restart_syscall resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... openat resumed>) = 3 [pid 5826] umount2("./226/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] getdents64(3, [pid 5823] newfstatat(3, "", [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] umount2("./218", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./223/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6963] <... sync resumed>) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] getdents64(3, [pid 5827] openat(AT_FDCWD, "./218", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5827] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] umount2("./225/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6963] exit_group(0 [pid 5827] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5827] umount2("./218/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... umount2 resumed>) = 0 [pid 6963] <... exit_group resumed>) = ? [pid 5826] umount2("./226/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./226/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] umount2("./226/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./226/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5826] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5826] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5826] close(4) = 0 [pid 5826] rmdir("./226/file0") = 0 [pid 5826] umount2("./226/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./226/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./226/binderfs") = 0 [pid 5826] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] close(3 [pid 6963] +++ exited with 0 +++ [pid 5826] <... close resumed>) = 0 [pid 5826] rmdir("./226") = 0 [pid 5827] <... umount2 resumed>) = 0 [pid 5825] <... umount2 resumed>) = 0 [pid 5823] <... umount2 resumed>) = 0 [pid 5827] umount2("./218/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./223/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6963, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5823] umount2("./225/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] newfstatat(AT_FDCWD, "./218/file0", [pid 5823] newfstatat(AT_FDCWD, "./225/file0", [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] umount2("./218/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] newfstatat(AT_FDCWD, "./223/file0", [pid 5824] <... restart_syscall resumed>) = 0 [pid 5823] umount2("./225/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] mkdir("./227", 0777 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] openat(AT_FDCWD, "./218/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] <... mkdir resumed>) = 0 [pid 5823] openat(AT_FDCWD, "./225/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] <... openat resumed>) = 4 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5823] <... openat resumed>) = 4 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] newfstatat(4, "", [pid 5826] <... openat resumed>) = 3 [pid 5825] umount2("./223/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] newfstatat(4, "", [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] umount2("./221", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] ioctl(3, LOOP_CLR_FD [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] getdents64(4, [pid 5825] openat(AT_FDCWD, "./223/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] getdents64(4, [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] <... openat resumed>) = 4 [pid 5824] openat(AT_FDCWD, "./221", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] newfstatat(4, "", [pid 5827] getdents64(4, [pid 5824] <... openat resumed>) = 3 [pid 5823] getdents64(4, [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] newfstatat(3, "", [pid 5825] getdents64(4, [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] getdents64(3, [pid 5825] getdents64(4, [pid 5827] close(4 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] close(4 [pid 5825] close(4 [pid 5827] <... close resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 5824] umount2("./221/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... close resumed>) = 0 [pid 5825] rmdir("./223/file0" [pid 5823] rmdir("./225/file0" [pid 5825] <... rmdir resumed>) = 0 [pid 5823] <... rmdir resumed>) = 0 [pid 5825] umount2("./223/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] rmdir("./218/file0" [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./223/binderfs", [pid 5827] <... rmdir resumed>) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./223/binderfs" [pid 5823] umount2("./225/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] <... unlink resumed>) = 0 [pid 5823] newfstatat(AT_FDCWD, "./225/binderfs", [pid 5825] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] umount2("./218/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] close(3 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... close resumed>) = 0 [pid 5827] newfstatat(AT_FDCWD, "./218/binderfs", [pid 5824] <... umount2 resumed>) = 0 [pid 5823] unlink("./225/binderfs" [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] <... ioctl resumed>) = 0 [pid 5823] <... unlink resumed>) = 0 [pid 5825] rmdir("./223" [pid 5826] close(3 [pid 5824] umount2("./221/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... close resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] getdents64(3, [pid 5827] unlink("./218/binderfs" [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5825] <... rmdir resumed>) = 0 [pid 5824] newfstatat(AT_FDCWD, "./221/file0", [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5827] <... unlink resumed>) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] close(3 [pid 5827] getdents64(3, [pid 5824] umount2("./221/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... close resumed>) = 0 ./strace-static-x86_64: Process 6965 attached [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] rmdir("./225" [pid 5827] close(3 [pid 5824] openat(AT_FDCWD, "./221/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] <... rmdir resumed>) = 0 [pid 5827] <... close resumed>) = 0 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 6965 [pid 5824] <... openat resumed>) = 4 [pid 5823] mkdir("./226", 0777 [pid 6965] set_robust_list(0x55557eba4660, 24 [pid 5827] rmdir("./218" [pid 5824] newfstatat(4, "", [pid 5823] <... mkdir resumed>) = 0 [pid 6965] <... set_robust_list resumed>) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6965] chdir("./227" [pid 5824] getdents64(4, [pid 5823] <... openat resumed>) = 3 [pid 6965] <... chdir resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] ioctl(3, LOOP_CLR_FD [pid 6965] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5824] getdents64(4, [pid 5823] <... ioctl resumed>) = 0 [pid 6965] <... prctl resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] close(3 [pid 6965] setpgid(0, 0 [pid 5824] close(4 [pid 5823] <... close resumed>) = 0 [pid 6965] <... setpgid resumed>) = 0 [pid 5825] mkdir("./224", 0777 [pid 5824] <... close resumed>) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6966 attached [pid 6965] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5824] rmdir("./221/file0" [pid 5827] <... rmdir resumed>) = 0 [pid 5825] <... mkdir resumed>) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 6965] <... openat resumed>) = 3 [pid 5827] mkdir("./219", 0777 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6965] write(3, "1000", 4 [pid 5825] <... openat resumed>) = 3 [pid 6965] <... write resumed>) = 4 [pid 5824] umount2("./221/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6966] set_robust_list(0x55557eba4660, 24 [pid 6965] close(3 [pid 5827] <... mkdir resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6966] <... set_robust_list resumed>) = 0 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 6966 [pid 6966] chdir("./226" [pid 6965] <... close resumed>) = 0 [pid 5824] newfstatat(AT_FDCWD, "./221/binderfs", [pid 6965] symlink("/dev/binderfs", "./binderfs" [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6965] <... symlink resumed>) = 0 [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5825] <... ioctl resumed>) = 0 [pid 6966] <... chdir resumed>) = 0 [pid 6966] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5827] <... openat resumed>) = 3 [pid 5825] close(3 [pid 6966] setpgid(0, 0executing program ) = 0 [pid 6965] write(1, "executing program\n", 18 [pid 5827] ioctl(3, LOOP_CLR_FD [pid 5825] <... close resumed>) = 0 [pid 5824] unlink("./221/binderfs" [pid 6965] <... write resumed>) = 18 [pid 5824] <... unlink resumed>) = 0 [pid 6965] memfd_create("syzkaller", 0 [pid 5824] getdents64(3, [pid 6966] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6965] <... memfd_create resumed>) = 3 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 6965] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5824] close(3 [pid 6966] <... openat resumed>) = 3 [pid 6965] <... mmap resumed>) = 0x7f957a000000 [pid 5824] <... close resumed>) = 0 [pid 6965] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5824] rmdir("./221" [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6966] write(3, "1000", 4 [pid 5824] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 6967 attached [pid 6966] <... write resumed>) = 4 [pid 5827] <... ioctl resumed>) = 0 [pid 5824] mkdir("./222", 0777 [pid 6967] set_robust_list(0x55557eba4660, 24 [pid 6966] close(3 [pid 6965] <... write resumed>) = 65536 [pid 5827] close(3 [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 6967 [pid 5824] <... mkdir resumed>) = 0 [pid 6967] <... set_robust_list resumed>) = 0 [pid 5827] <... close resumed>) = 0 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6967] chdir("./224" [pid 6966] <... close resumed>) = 0 [pid 6965] munmap(0x7f957a000000, 138412032 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6966] symlink("/dev/binderfs", "./binderfs" [pid 6965] <... munmap resumed>) = 0 [pid 5824] <... openat resumed>) = 3 ./strace-static-x86_64: Process 6968 attached [pid 6967] <... chdir resumed>) = 0 [pid 6966] <... symlink resumed>) = 0 [pid 6965] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5824] ioctl(3, LOOP_CLR_FD [pid 6967] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6965] <... openat resumed>) = 4 [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 6968 [pid 5824] <... ioctl resumed>) = 0 [pid 6967] <... prctl resumed>) = 0 [pid 6965] ioctl(4, LOOP_SET_FD, 3 [pid 5824] close(3executing program [pid 6967] setpgid(0, 0 [pid 6966] write(1, "executing program\n", 18 [pid 6965] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5824] <... close resumed>) = 0 [pid 6967] <... setpgid resumed>) = 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6968] set_robust_list(0x55557eba4660, 24 [pid 6966] <... write resumed>) = 18 [pid 6965] ioctl(4, LOOP_CLR_FD [pid 6968] <... set_robust_list resumed>) = 0 [pid 6966] memfd_create("syzkaller", 0 [pid 6965] <... ioctl resumed>) = 0 [pid 6968] chdir("./219" [pid 6967] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6966] <... memfd_create resumed>) = 3 ./strace-static-x86_64: Process 6969 attached [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 6969 [pid 6968] <... chdir resumed>) = 0 [pid 6966] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6969] set_robust_list(0x55557eba4660, 24 [pid 6968] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6966] <... mmap resumed>) = 0x7f957a000000 [pid 6969] <... set_robust_list resumed>) = 0 [pid 6968] <... prctl resumed>) = 0 [pid 6967] <... openat resumed>) = 3 [pid 6966] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6967] write(3, "1000", 4 [pid 6969] chdir("./222" [pid 6968] setpgid(0, 0 [pid 6965] ioctl(4, LOOP_SET_FD, 3executing program [pid 6969] <... chdir resumed>) = 0 [pid 6968] <... setpgid resumed>) = 0 [pid 6967] <... write resumed>) = 4 [pid 6966] <... write resumed>) = 65536 [pid 6965] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 6967] close(3 [pid 6968] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6967] <... close resumed>) = 0 [pid 6966] munmap(0x7f957a000000, 138412032 [pid 6965] close(4 [pid 6967] symlink("/dev/binderfs", "./binderfs" [pid 6969] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6968] <... openat resumed>) = 3 [pid 6967] <... symlink resumed>) = 0 [pid 6966] <... munmap resumed>) = 0 [pid 6965] <... close resumed>) = 0 [pid 6967] write(1, "executing program\n", 18 [pid 6969] <... prctl resumed>) = 0 [pid 6968] write(3, "1000", 4 [pid 6966] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6965] close(3 [pid 6967] <... write resumed>) = 18 [pid 6969] setpgid(0, 0 [pid 6968] <... write resumed>) = 4 [pid 6966] <... openat resumed>) = 4 [pid 6965] <... close resumed>) = 0 [pid 6969] <... setpgid resumed>) = 0 [pid 6968] close(3 [pid 6966] ioctl(4, LOOP_SET_FD, 3 [pid 6965] openat(AT_FDCWD, ".", O_RDONLY [pid 6967] memfd_create("syzkaller", 0 [pid 6969] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6968] <... close resumed>) = 0 [pid 6967] <... memfd_create resumed>) = 3 [pid 6966] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 6965] <... openat resumed>) = 3 [pid 6967] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6969] <... openat resumed>) = 3 [pid 6968] symlink("/dev/binderfs", "./binderfs" [pid 6967] <... mmap resumed>) = 0x7f957a000000 [pid 6966] ioctl(4, LOOP_CLR_FD [pid 6965] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6968] <... symlink resumed>) = 0 [pid 6967] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6966] <... ioctl resumed>) = 0 [pid 6965] <... renameat2 resumed>) = -1 ENOENT (No such file or directory) [pid 6967] <... write resumed>) = 65536 [pid 6969] write(3, "1000", 4 [pid 6968] write(1, "executing program\n", 18 [pid 6965] sync(executing program [pid 6969] <... write resumed>) = 4 [pid 6968] <... write resumed>) = 18 [pid 6969] close(3 [pid 6968] memfd_create("syzkaller", 0 [pid 6966] ioctl(4, LOOP_SET_FD, 3 [pid 6969] <... close resumed>) = 0 [pid 6968] <... memfd_create resumed>) = 3 [pid 6966] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 6969] symlink("/dev/binderfs", "./binderfs" [pid 6968] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6966] close(4executing program [pid 6968] <... mmap resumed>) = 0x7f957a000000 [pid 6966] <... close resumed>) = 0 [pid 6969] <... symlink resumed>) = 0 [pid 6968] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6967] munmap(0x7f957a000000, 138412032 [pid 6966] close(3 [pid 6969] write(1, "executing program\n", 18 [pid 6966] <... close resumed>) = 0 [pid 6969] <... write resumed>) = 18 [pid 6968] <... write resumed>) = 65536 [pid 6967] <... munmap resumed>) = 0 [pid 6966] openat(AT_FDCWD, ".", O_RDONLY [pid 6969] memfd_create("syzkaller", 0 [pid 6967] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6966] <... openat resumed>) = 3 [pid 6968] munmap(0x7f957a000000, 138412032 [pid 6967] <... openat resumed>) = 4 [pid 6968] <... munmap resumed>) = 0 [pid 6965] <... sync resumed>) = 0 [pid 6968] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6967] ioctl(4, LOOP_SET_FD, 3 [pid 6968] ioctl(4, LOOP_SET_FD, 3 [pid 6966] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6969] <... memfd_create resumed>) = 3 [pid 6968] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 6966] <... renameat2 resumed>) = -1 ENOENT (No such file or directory) [pid 6969] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6968] ioctl(4, LOOP_CLR_FD [pid 6966] sync( [pid 6969] <... mmap resumed>) = 0x7f957a000000 [pid 6968] <... ioctl resumed>) = 0 [pid 6969] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 6967] <... ioctl resumed>) = 0 [pid 6965] exit_group(0 [pid 6968] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 6965] <... exit_group resumed>) = ? [pid 6968] close(4) = 0 [pid 6969] munmap(0x7f957a000000, 138412032 [pid 6968] close(3 [pid 6969] <... munmap resumed>) = 0 [pid 6968] <... close resumed>) = 0 [pid 6968] openat(AT_FDCWD, ".", O_RDONLY [pid 6969] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6968] <... openat resumed>) = 3 [pid 6965] +++ exited with 0 +++ [pid 6969] <... openat resumed>) = 4 [pid 6968] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6969] ioctl(4, LOOP_SET_FD, 3 [pid 6968] <... renameat2 resumed>) = -1 ENOENT (No such file or directory) [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6965, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 6968] sync( [pid 5826] restart_syscall(<... resuming interrupted clone ...> [pid 6967] close(3 [pid 6966] <... sync resumed>) = 0 [pid 5826] <... restart_syscall resumed>) = 0 [pid 6968] <... sync resumed>) = 0 [pid 6966] exit_group(0 [pid 6967] <... close resumed>) = 0 [pid 6967] close(4 [pid 6968] exit_group(0 [pid 6967] <... close resumed>) = 0 [pid 6966] <... exit_group resumed>) = ? [pid 6967] mkdir("./file0", 0777 [pid 6966] +++ exited with 0 +++ [pid 5826] umount2("./227", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./227", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6966, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 6968] <... exit_group resumed>) = ? [pid 5826] <... openat resumed>) = 3 [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 6968] +++ exited with 0 +++ [pid 5826] newfstatat(3, "", [pid 6967] <... mkdir resumed>) = 0 [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6968, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(3, 0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 5826] umount2("./227/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./227/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./227/binderfs") = 0 [pid 5823] <... restart_syscall resumed>) = 0 [pid 5826] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] close(3) = 0 [pid 5823] umount2("./226", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] rmdir("./227" [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... rmdir resumed>) = 0 [pid 5823] openat(AT_FDCWD, "./226", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5823] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] mkdir("./228", 0777 [pid 5823] getdents64(3, [pid 5826] <... mkdir resumed>) = 0 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5823] umount2("./226/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6967] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5826] <... openat resumed>) = 3 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6969] <... ioctl resumed>) = 0 [pid 6969] close(3) = 0 [pid 6969] close(4) = 0 [pid 5827] umount2("./219", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] ioctl(3, LOOP_CLR_FD [pid 5823] newfstatat(AT_FDCWD, "./226/binderfs", [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./226/binderfs") = 0 [pid 6969] mkdir("./file0", 0777 [pid 5826] close(3 [ 200.003309][ T6967] loop2: detected capacity change from 0 to 128 [ 200.019446][ T6969] loop1: detected capacity change from 0 to 128 [pid 5823] getdents64(3, [pid 6969] <... mkdir resumed>) = 0 [pid 5827] openat(AT_FDCWD, "./219", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] <... close resumed>) = 0 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5823] close(3./strace-static-x86_64: Process 6970 attached ) = 0 [pid 5823] rmdir("./226" [pid 6969] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5823] <... rmdir resumed>) = 0 [pid 6970] set_robust_list(0x55557eba4660, 24 [pid 5827] <... openat resumed>) = 3 [pid 6970] <... set_robust_list resumed>) = 0 [pid 5827] newfstatat(3, "", [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 6970 [pid 6970] chdir("./228" [pid 5823] mkdir("./227", 0777 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... mkdir resumed>) = 0 [pid 6970] <... chdir resumed>) = 0 [pid 5827] getdents64(3, [pid 6970] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 6970] <... prctl resumed>) = 0 [pid 6970] setpgid(0, 0 [pid 5827] umount2("./219/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6970] <... setpgid resumed>) = 0 [pid 6970] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5827] newfstatat(AT_FDCWD, "./219/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... openat resumed>) = 3 [pid 6970] <... openat resumed>) = 3 [pid 5827] unlink("./219/binderfs") = 0 [pid 6970] write(3, "1000", 4 [pid 5827] getdents64(3, [pid 5823] ioctl(3, LOOP_CLR_FD [pid 6970] <... write resumed>) = 4 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6970] close(3 [pid 5823] close(3 [pid 6970] <... close resumed>) = 0 [pid 5827] close(3 [pid 5823] <... close resumed>) = 0 [pid 6970] symlink("/dev/binderfs", "./binderfs" [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6970] <... symlink resumed>) = 0 [pid 5827] <... close resumed>) = 0 [ 200.063425][ T6967] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [pid 5827] rmdir("./219") = 0 executing program ./strace-static-x86_64: Process 6971 attached [pid 6970] write(1, "executing program\n", 18 [pid 5827] mkdir("./220", 0777 [pid 6970] <... write resumed>) = 18 [pid 6970] memfd_create("syzkaller", 0 [pid 5827] <... mkdir resumed>) = 0 [pid 6970] <... memfd_create resumed>) = 3 [pid 6970] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 6970] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 6971 [pid 6971] set_robust_list(0x55557eba4660, 24 [pid 6970] <... write resumed>) = 65536 [pid 6971] <... set_robust_list resumed>) = 0 [pid 6970] munmap(0x7f957a000000, 138412032 [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6971] chdir("./227" [pid 6970] <... munmap resumed>) = 0 [pid 5827] <... openat resumed>) = 3 [pid 5827] ioctl(3, LOOP_CLR_FD [pid 6971] <... chdir resumed>) = 0 [pid 6970] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5827] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6971] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5827] close(3 [pid 6971] <... prctl resumed>) = 0 [pid 6971] setpgid(0, 0 [pid 6970] <... openat resumed>) = 4 [pid 5827] <... close resumed>) = 0 [pid 6967] <... mount resumed>) = 0 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6971] <... setpgid resumed>) = 0 ./strace-static-x86_64: Process 6972 attached [pid 6971] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6970] ioctl(4, LOOP_SET_FD, 3 [ 200.105246][ T6969] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [pid 6967] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6971] <... openat resumed>) = 3 [pid 6970] <... ioctl resumed>) = 0 [pid 6967] <... openat resumed>) = 3 [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 6972 [pid 6972] set_robust_list(0x55557eba4660, 24) = 0 [pid 6972] chdir("./220" [pid 6967] chdir("./file0" [pid 6971] write(3, "1000", 4 [pid 6972] <... chdir resumed>) = 0 [pid 6967] <... chdir resumed>) = 0 [pid 6971] <... write resumed>) = 4 [pid 6972] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6971] close(3 [pid 6967] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6972] <... prctl resumed>) = 0 [pid 6971] <... close resumed>) = 0 [pid 6967] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6972] setpgid(0, 0 [pid 6971] symlink("/dev/binderfs", "./binderfs" [pid 6967] openat(AT_FDCWD, ".", O_RDONLY [pid 6969] <... mount resumed>) = 0 [pid 6969] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6967] <... openat resumed>) = 4 [pid 6969] <... openat resumed>) = 3 [pid 6969] chdir("./file0" [pid 6972] <... setpgid resumed>) = 0 [pid 6971] <... symlink resumed>) = 0 [pid 6969] <... chdir resumed>) = 0 [pid 6969] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6967] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 executing program [pid 6972] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6969] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6971] write(1, "executing program\n", 18 [pid 6970] close(3 [pid 6972] <... openat resumed>) = 3 [pid 6971] <... write resumed>) = 18 [pid 6970] <... close resumed>) = 0 [pid 6969] openat(AT_FDCWD, ".", O_RDONLY [pid 6970] close(4 [pid 6969] <... openat resumed>) = 4 [pid 6967] <... renameat2 resumed>) = 0 [pid 6972] write(3, "1000", 4 [pid 6971] memfd_create("syzkaller", 0 [pid 6970] <... close resumed>) = 0 [pid 6969] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6970] mkdir("./file0", 0777) = 0 [pid 6972] <... write resumed>) = 4 [pid 6971] <... memfd_create resumed>) = 3 [pid 6969] <... renameat2 resumed>) = 0 [pid 6972] close(3 [pid 6971] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6967] sync( [pid 6972] <... close resumed>) = 0 [pid 6971] <... mmap resumed>) = 0x7f957a000000 [pid 6970] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6969] sync( [pid 6972] symlink("/dev/binderfs", "./binderfs") = 0 [ 200.155946][ T6970] loop3: detected capacity change from 0 to 128 [pid 6972] write(1, "executing program\n", 18executing program ) = 18 [pid 6971] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6972] memfd_create("syzkaller", 0) = 3 [pid 6971] <... write resumed>) = 65536 [pid 6972] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 6971] munmap(0x7f957a000000, 138412032) = 0 [pid 6972] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6971] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6971] ioctl(4, LOOP_SET_FD, 3 [pid 6972] <... write resumed>) = 65536 [pid 6972] munmap(0x7f957a000000, 138412032) = 0 [pid 6972] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6972] ioctl(4, LOOP_SET_FD, 3 [pid 6970] <... mount resumed>) = 0 [ 200.212965][ T6970] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 200.242418][ T6971] loop0: detected capacity change from 0 to 128 [pid 6970] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6969] <... sync resumed>) = 0 [pid 6969] exit_group(0 [pid 6967] <... sync resumed>) = 0 [pid 6967] exit_group(0 [pid 6969] <... exit_group resumed>) = ? [pid 6967] <... exit_group resumed>) = ? [pid 6970] <... openat resumed>) = 3 [pid 6969] +++ exited with 0 +++ [pid 6967] +++ exited with 0 +++ [pid 6970] chdir("./file0" [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6967, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6970] <... chdir resumed>) = 0 [pid 5825] restart_syscall(<... resuming interrupted clone ...> [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6969, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6970] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 6970] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6970] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 6970] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5824] <... restart_syscall resumed>) = 0 [pid 5825] <... restart_syscall resumed>) = 0 [pid 6971] <... ioctl resumed>) = 0 [pid 6971] close(3 [pid 5824] umount2("./222", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6971] <... close resumed>) = 0 [pid 6970] <... renameat2 resumed>) = 0 [pid 5825] umount2("./224", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6972] <... ioctl resumed>) = 0 [pid 6971] close(4 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./222", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6971] <... close resumed>) = 0 [pid 6970] sync( [pid 6971] mkdir("./file0", 0777 [pid 5825] openat(AT_FDCWD, "./224", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] <... openat resumed>) = 3 [pid 6972] close(3 [pid 6971] <... mkdir resumed>) = 0 [pid 5825] <... openat resumed>) = 3 [pid 5824] newfstatat(3, "", [pid 6972] <... close resumed>) = 0 [pid 6971] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5825] newfstatat(3, "", [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6972] close(4 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 200.257254][ T6972] loop4: detected capacity change from 0 to 128 [pid 5824] getdents64(3, [pid 6972] <... close resumed>) = 0 [pid 5825] getdents64(3, [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 6972] mkdir("./file0", 0777 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] umount2("./222/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6972] <... mkdir resumed>) = 0 [pid 5825] umount2("./224/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6972] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5824] <... umount2 resumed>) = 0 [pid 5824] umount2("./222/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] <... umount2 resumed>) = 0 [pid 5824] newfstatat(AT_FDCWD, "./222/file0", [pid 5825] umount2("./224/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] umount2("./222/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] newfstatat(AT_FDCWD, "./224/file0", [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] openat(AT_FDCWD, "./222/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] umount2("./224/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... openat resumed>) = 4 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(4, "", [pid 5825] openat(AT_FDCWD, "./224/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] <... openat resumed>) = 4 [pid 5824] getdents64(4, [pid 5825] newfstatat(4, "", [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(4, [pid 5825] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5825] close(4) = 0 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5825] rmdir("./224/file0" [pid 5824] close(4 [pid 5825] <... rmdir resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 5825] umount2("./224/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] rmdir("./222/file0" [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... rmdir resumed>) = 0 [pid 5825] newfstatat(AT_FDCWD, "./224/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./224/binderfs" [pid 5824] umount2("./222/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... unlink resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./222/binderfs", [pid 5825] getdents64(3, [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] unlink("./222/binderfs" [pid 5825] close(3 [pid 5824] <... unlink resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 5824] getdents64(3, [pid 5825] rmdir("./224" [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5825] <... rmdir resumed>) = 0 [pid 5824] close(3) = 0 [pid 5824] rmdir("./222" [pid 5825] mkdir("./225", 0777 [pid 5824] <... rmdir resumed>) = 0 [pid 5824] mkdir("./223", 0777 [pid 5825] <... mkdir resumed>) = 0 [pid 5824] <... mkdir resumed>) = 0 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5825] ioctl(3, LOOP_CLR_FD) = 0 [pid 5824] ioctl(3, LOOP_CLR_FD) = 0 [pid 5825] close(3 [pid 5824] close(3 [pid 5825] <... close resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6974 attached [pid 6974] set_robust_list(0x55557eba4660, 24./strace-static-x86_64: Process 6975 attached [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 6974 [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 6975 [pid 6974] <... set_robust_list resumed>) = 0 [ 200.308995][ T6971] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 200.337958][ T6972] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [pid 6974] chdir("./225" [pid 6975] set_robust_list(0x55557eba4660, 24 [pid 6971] <... mount resumed>) = 0 [pid 6971] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6975] <... set_robust_list resumed>) = 0 [pid 6975] chdir("./223" [pid 6974] <... chdir resumed>) = 0 [pid 6974] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6975] <... chdir resumed>) = 0 [pid 6975] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6975] setpgid(0, 0) = 0 [pid 6975] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6974] <... prctl resumed>) = 0 [pid 6971] <... openat resumed>) = 3 [pid 6974] setpgid(0, 0) = 0 [pid 6972] <... mount resumed>) = 0 [pid 6974] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6972] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6975] write(3, "1000", 4 [pid 6972] <... openat resumed>) = 3 [pid 6970] <... sync resumed>) = 0 [pid 6974] <... openat resumed>) = 3 [pid 6975] <... write resumed>) = 4 [pid 6970] exit_group(0 [pid 6975] close(3 [pid 6972] chdir("./file0" [pid 6971] chdir("./file0"executing program executing program [pid 6975] <... close resumed>) = 0 [pid 6974] write(3, "1000", 4 [pid 6971] <... chdir resumed>) = 0 [pid 6970] <... exit_group resumed>) = ? [pid 6972] <... chdir resumed>) = 0 [pid 6971] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6972] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6975] symlink("/dev/binderfs", "./binderfs" [pid 6974] <... write resumed>) = 4 [pid 6972] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6970] +++ exited with 0 +++ [pid 6975] <... symlink resumed>) = 0 [pid 6974] close(3 [pid 6972] openat(AT_FDCWD, ".", O_RDONLY [pid 6971] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6975] write(1, "executing program\n", 18 [pid 6974] <... close resumed>) = 0 [pid 6972] <... openat resumed>) = 4 [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6970, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6974] symlink("/dev/binderfs", "./binderfs" [pid 6972] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6974] <... symlink resumed>) = 0 [pid 6971] openat(AT_FDCWD, ".", O_RDONLY [pid 5826] restart_syscall(<... resuming interrupted clone ...> [pid 6975] <... write resumed>) = 18 [pid 6974] write(1, "executing program\n", 18 [pid 6975] memfd_create("syzkaller", 0 [pid 6974] <... write resumed>) = 18 [pid 6972] <... renameat2 resumed>) = 0 [pid 6971] <... openat resumed>) = 4 [pid 6975] <... memfd_create resumed>) = 3 [pid 6974] memfd_create("syzkaller", 0 [pid 6972] sync( [pid 6971] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6975] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6974] <... memfd_create resumed>) = 3 [pid 6971] <... renameat2 resumed>) = 0 [pid 5826] <... restart_syscall resumed>) = 0 [pid 6971] sync( [pid 5826] umount2("./228", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6975] <... mmap resumed>) = 0x7f957a000000 [pid 6974] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6975] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6974] <... mmap resumed>) = 0x7f957a000000 [pid 5826] openat(AT_FDCWD, "./228", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6975] <... write resumed>) = 65536 [pid 6974] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5826] <... openat resumed>) = 3 [pid 5826] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(3, [pid 6975] munmap(0x7f957a000000, 138412032 [pid 6974] <... write resumed>) = 65536 [pid 6975] <... munmap resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5826] umount2("./228/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6974] munmap(0x7f957a000000, 138412032 [pid 6975] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6974] <... munmap resumed>) = 0 [pid 6975] <... openat resumed>) = 4 [pid 6975] ioctl(4, LOOP_SET_FD, 3 [pid 6974] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6974] ioctl(4, LOOP_SET_FD, 3 [pid 6971] <... sync resumed>) = 0 [pid 6972] <... sync resumed>) = 0 [pid 6972] exit_group(0 [pid 6971] exit_group(0 [pid 5826] <... umount2 resumed>) = 0 [pid 6972] <... exit_group resumed>) = ? [pid 5826] umount2("./228/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6971] <... exit_group resumed>) = ? [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./228/file0", [pid 6971] +++ exited with 0 +++ [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] umount2("./228/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6971, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./228/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6972] +++ exited with 0 +++ [pid 5826] <... openat resumed>) = 4 [pid 5823] umount2("./227", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] newfstatat(4, "", [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6972, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] openat(AT_FDCWD, "./227", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] restart_syscall(<... resuming interrupted clone ...> [pid 5826] getdents64(4, [pid 5823] <... openat resumed>) = 3 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] newfstatat(3, "", [pid 5826] getdents64(4, [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] getdents64(3, [pid 5826] close(4 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5826] <... close resumed>) = 0 [pid 5823] umount2("./227/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] rmdir("./228/file0" [pid 6975] <... ioctl resumed>) = 0 [pid 5826] <... rmdir resumed>) = 0 [pid 6975] close(3 [pid 5827] <... restart_syscall resumed>) = 0 [pid 5826] umount2("./228/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... umount2 resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./228/binderfs", [pid 5827] umount2("./220", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6974] <... ioctl resumed>) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] unlink("./228/binderfs" [pid 6975] <... close resumed>) = 0 [pid 6974] close(3 [pid 5827] openat(AT_FDCWD, "./220", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] <... unlink resumed>) = 0 [pid 6975] close(4 [pid 6974] <... close resumed>) = 0 [pid 5827] <... openat resumed>) = 3 [pid 6975] <... close resumed>) = 0 [pid 6974] close(4 [pid 5827] newfstatat(3, "", [pid 5826] getdents64(3, [pid 6975] mkdir("./file0", 0777 [pid 6974] <... close resumed>) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] umount2("./227/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6975] <... mkdir resumed>) = 0 [pid 6974] mkdir("./file0", 0777 [ 200.439610][ T6975] loop1: detected capacity change from 0 to 128 [ 200.449470][ T6974] loop2: detected capacity change from 0 to 128 [pid 5827] getdents64(3, [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 6975] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6974] <... mkdir resumed>) = 0 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] umount2("./220/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] close(3 [pid 5823] newfstatat(AT_FDCWD, "./227/file0", [pid 6974] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5826] <... close resumed>) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] rmdir("./228" [pid 5823] umount2("./227/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... rmdir resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./227/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5823] newfstatat(4, "", [pid 5827] <... umount2 resumed>) = 0 [pid 5826] mkdir("./229", 0777 [pid 5827] umount2("./220/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... mkdir resumed>) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5827] newfstatat(AT_FDCWD, "./220/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] umount2("./220/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... openat resumed>) = 3 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] getdents64(4, [pid 5827] openat(AT_FDCWD, "./220/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5826] ioctl(3, LOOP_CLR_FD [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5827] newfstatat(4, "", [pid 5826] <... ioctl resumed>) = 0 [pid 5823] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] close(4 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... close resumed>) = 0 [pid 5827] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5826] close(3 [pid 5823] rmdir("./227/file0" [pid 5827] getdents64(4, [pid 5826] <... close resumed>) = 0 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] <... rmdir resumed>) = 0 [pid 5827] close(4) = 0 [pid 5827] rmdir("./220/file0" [pid 5823] umount2("./227/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6976 attached [pid 5827] <... rmdir resumed>) = 0 [pid 5823] newfstatat(AT_FDCWD, "./227/binderfs", [pid 5827] umount2("./220/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6976] set_robust_list(0x55557eba4660, 24 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 6976 [pid 5823] unlink("./227/binderfs" [pid 6976] <... set_robust_list resumed>) = 0 [pid 5827] newfstatat(AT_FDCWD, "./220/binderfs", [pid 5823] <... unlink resumed>) = 0 [pid 6976] chdir("./229" [pid 5823] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 6976] <... chdir resumed>) = 0 [pid 5823] close(3) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] rmdir("./227") = 0 [pid 6975] <... mount resumed>) = 0 [pid 6975] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6974] <... mount resumed>) = 0 [pid 6975] <... openat resumed>) = 3 [pid 6974] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6975] chdir("./file0" [pid 6974] <... openat resumed>) = 3 [pid 6975] <... chdir resumed>) = 0 [pid 6974] chdir("./file0" [pid 6976] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6975] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6974] <... chdir resumed>) = 0 [pid 5827] unlink("./220/binderfs" [pid 5823] mkdir("./228", 0777 [pid 6975] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6974] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5827] <... unlink resumed>) = 0 [pid 6975] openat(AT_FDCWD, ".", O_RDONLY [pid 6974] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5827] getdents64(3, [pid 6976] <... prctl resumed>) = 0 [pid 6975] <... openat resumed>) = 4 [pid 6974] openat(AT_FDCWD, ".", O_RDONLY [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] <... mkdir resumed>) = 0 [pid 6976] setpgid(0, 0 [pid 6975] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6974] <... openat resumed>) = 4 [pid 5827] close(3 [pid 6976] <... setpgid resumed>) = 0 [pid 6975] <... renameat2 resumed>) = 0 [pid 6974] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5827] <... close resumed>) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6976] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6975] sync( [pid 5827] rmdir("./220" [pid 6976] <... openat resumed>) = 3 [pid 6974] <... renameat2 resumed>) = 0 [pid 5827] <... rmdir resumed>) = 0 [pid 5823] <... openat resumed>) = 3 [pid 6974] sync( [pid 5827] mkdir("./221", 0777 [pid 6976] write(3, "1000", 4 [pid 5823] ioctl(3, LOOP_CLR_FD [pid 6976] <... write resumed>) = 4 [pid 6976] close(3 [pid 5823] <... ioctl resumed>) = 0 [pid 6976] <... close resumed>) = 0 [pid 6976] symlink("/dev/binderfs", "./binderfs" [ 200.511042][ T6975] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 200.537708][ T6974] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [pid 5823] close(3 [pid 5827] <... mkdir resumed>) = 0 [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6976] <... symlink resumed>) = 0 [pid 5827] <... openat resumed>) = 3 [pid 5827] ioctl(3, LOOP_CLR_FD) = 0 [pid 5827] close(3 [pid 6976] write(1, "executing program\n", 18executing program ) = 18 [pid 6976] memfd_create("syzkaller", 0) = 3 [pid 6976] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5823] <... close resumed>) = 0 [pid 6976] <... mmap resumed>) = 0x7f957a000000 [pid 6976] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6975] <... sync resumed>) = 0 [pid 6974] <... sync resumed>) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6977 attached [pid 6974] exit_group(0 [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 6977 [pid 6977] set_robust_list(0x55557eba4660, 24 [pid 6976] <... write resumed>) = 65536 [pid 6975] exit_group(0 [pid 6974] <... exit_group resumed>) = ? [pid 5827] <... close resumed>) = 0 [pid 6977] <... set_robust_list resumed>) = 0 [pid 6975] <... exit_group resumed>) = ? [pid 6976] munmap(0x7f957a000000, 138412032) = 0 [pid 6976] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6976] ioctl(4, LOOP_SET_FD, 3 [pid 6977] chdir("./228" [pid 6974] +++ exited with 0 +++ [pid 6977] <... chdir resumed>) = 0 [pid 6975] +++ exited with 0 +++ [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6974, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- ./strace-static-x86_64: Process 6978 attached [pid 6977] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6975, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5825] umount2("./225", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6977] <... prctl resumed>) = 0 [pid 5824] umount2("./223", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6978] set_robust_list(0x55557eba4660, 24 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6977] setpgid(0, 0 [pid 6976] <... ioctl resumed>) = 0 [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 6978 [pid 5825] openat(AT_FDCWD, "./225", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6978] <... set_robust_list resumed>) = 0 [pid 5824] openat(AT_FDCWD, "./223", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6976] close(3 [pid 5825] <... openat resumed>) = 3 [pid 5824] <... openat resumed>) = 3 [pid 6976] <... close resumed>) = 0 [pid 6976] close(4) = 0 [pid 6978] chdir("./221" [pid 6976] mkdir("./file0", 0777 [pid 6977] <... setpgid resumed>) = 0 [pid 5825] newfstatat(3, "", [pid 5824] newfstatat(3, "", [pid 6978] <... chdir resumed>) = 0 [pid 6977] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6976] <... mkdir resumed>) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6978] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5824] getdents64(3, [pid 6978] <... prctl resumed>) = 0 [pid 5825] getdents64(3, [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 6978] setpgid(0, 0 [pid 5824] umount2("./223/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6976] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6978] <... setpgid resumed>) = 0 [pid 6977] <... openat resumed>) = 3 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 6978] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6977] write(3, "1000", 4 [pid 5825] umount2("./225/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6977] <... write resumed>) = 4 [pid 6978] <... openat resumed>) = 3 [pid 6977] close(3 [pid 5824] <... umount2 resumed>) = 0 [pid 6978] write(3, "1000", 4) = 4 [pid 6977] <... close resumed>) = 0 [pid 6978] close(3 [ 200.628412][ T6976] loop3: detected capacity change from 0 to 128 [pid 6977] symlink("/dev/binderfs", "./binderfs" [pid 5825] <... umount2 resumed>) = 0 [pid 5824] umount2("./223/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6978] <... close resumed>) = 0 [pid 6977] <... symlink resumed>) = 0 [pid 5825] umount2("./225/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) executing program [pid 6978] symlink("/dev/binderfs", "./binderfs" [pid 6977] write(1, "executing program\n", 18 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6978] <... symlink resumed>) = 0 [pid 6977] <... write resumed>) = 18 [pid 5825] newfstatat(AT_FDCWD, "./225/file0", executing program [pid 6978] write(1, "executing program\n", 18 [pid 6977] memfd_create("syzkaller", 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] newfstatat(AT_FDCWD, "./223/file0", [pid 6978] <... write resumed>) = 18 [pid 5825] umount2("./225/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6978] memfd_create("syzkaller", 0 [pid 5825] openat(AT_FDCWD, "./225/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] umount2("./223/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6978] <... memfd_create resumed>) = 3 [pid 6977] <... memfd_create resumed>) = 3 [pid 5825] <... openat resumed>) = 4 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6978] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6977] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5825] newfstatat(4, "", [pid 5824] openat(AT_FDCWD, "./223/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6977] <... mmap resumed>) = 0x7f957a000000 [pid 6978] <... mmap resumed>) = 0x7f957a000000 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] <... openat resumed>) = 4 [pid 5825] getdents64(4, [pid 5824] newfstatat(4, "", [pid 6978] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6977] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(4, [pid 6978] <... write resumed>) = 65536 [pid 5825] getdents64(4, [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] close(4 [pid 5825] close(4 [pid 5824] <... close resumed>) = 0 [pid 6978] munmap(0x7f957a000000, 138412032 [pid 6977] <... write resumed>) = 65536 [pid 5825] <... close resumed>) = 0 [ 200.682638][ T6976] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [pid 5824] rmdir("./223/file0" [pid 6978] <... munmap resumed>) = 0 [pid 6977] munmap(0x7f957a000000, 138412032 [pid 5825] rmdir("./225/file0" [pid 5824] <... rmdir resumed>) = 0 [pid 6978] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6977] <... munmap resumed>) = 0 [pid 5824] umount2("./223/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... rmdir resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./223/binderfs", [pid 6978] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./223/binderfs" [pid 6977] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5825] umount2("./225/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... unlink resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] getdents64(3, [pid 6977] <... openat resumed>) = 4 [pid 5825] newfstatat(AT_FDCWD, "./225/binderfs", [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 6978] close(3 [pid 6977] ioctl(4, LOOP_SET_FD, 3 [pid 6976] <... mount resumed>) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] close(3 [pid 6976] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6976] chdir("./file0") = 0 [pid 6976] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6976] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 6976] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6978] <... close resumed>) = 0 [pid 6976] <... renameat2 resumed>) = 0 [pid 5825] unlink("./225/binderfs" [pid 5824] <... close resumed>) = 0 [pid 6978] close(4 [pid 6976] sync( [pid 6978] <... close resumed>) = 0 [pid 5825] <... unlink resumed>) = 0 [pid 5824] rmdir("./223" [pid 6978] mkdir("./file0", 0777 [pid 5825] getdents64(3, [pid 5824] <... rmdir resumed>) = 0 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5825] close(3 [pid 5824] mkdir("./224", 0777 [pid 6978] <... mkdir resumed>) = 0 [pid 6977] <... ioctl resumed>) = 0 [pid 5825] <... close resumed>) = 0 [ 200.746328][ T6978] loop4: detected capacity change from 0 to 128 [ 200.778748][ T6977] loop0: detected capacity change from 0 to 128 [pid 6978] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5824] <... mkdir resumed>) = 0 [pid 5825] rmdir("./225") = 0 [pid 5825] mkdir("./226", 0777 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5825] <... mkdir resumed>) = 0 [pid 6977] close(3 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5824] <... openat resumed>) = 3 [pid 6977] <... close resumed>) = 0 [pid 6977] close(4 [pid 5825] <... openat resumed>) = 3 [pid 5824] ioctl(3, LOOP_CLR_FD [pid 6977] <... close resumed>) = 0 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 5824] <... ioctl resumed>) = 0 [pid 6977] mkdir("./file0", 0777 [pid 5825] <... ioctl resumed>) = 0 [pid 5824] close(3 [pid 5825] close(3 [pid 5824] <... close resumed>) = 0 [pid 6977] <... mkdir resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6980 attached , child_tidptr=0x55557eba4650) = 6980 ./strace-static-x86_64: Process 6979 attached [pid 6980] set_robust_list(0x55557eba4660, 24 [pid 6979] set_robust_list(0x55557eba4660, 24 [pid 6977] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 6979 [pid 6980] <... set_robust_list resumed>) = 0 [pid 6979] <... set_robust_list resumed>) = 0 [pid 6980] chdir("./226" [pid 6979] chdir("./224") = 0 [ 200.803054][ T6978] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [pid 6980] <... chdir resumed>) = 0 [pid 6979] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6980] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6979] <... prctl resumed>) = 0 [pid 6980] <... prctl resumed>) = 0 [pid 6979] setpgid(0, 0 [pid 6980] setpgid(0, 0) = 0 [pid 6980] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6979] <... setpgid resumed>) = 0 [pid 6980] <... openat resumed>) = 3 [pid 6979] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6980] write(3, "1000", 4 [pid 6979] <... openat resumed>) = 3 [pid 6980] <... write resumed>) = 4 [pid 6980] close(3 [pid 6979] write(3, "1000", 4 [pid 6980] <... close resumed>) = 0 [pid 6979] <... write resumed>) = 4 [pid 6980] symlink("/dev/binderfs", "./binderfs" [pid 6979] close(3) = 0 [pid 6979] symlink("/dev/binderfs", "./binderfs" [pid 6980] <... symlink resumed>) = 0 [pid 6979] <... symlink resumed>) = 0 [pid 6978] <... mount resumed>) = 0 [pid 6977] <... mount resumed>) = 0 [pid 6980] write(1, "executing program\n", 18 executing program executing program [pid 6979] write(1, "executing program\n", 18 [pid 6978] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6977] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6976] <... sync resumed>) = 0 [pid 6980] <... write resumed>) = 18 [pid 6979] <... write resumed>) = 18 [pid 6978] <... openat resumed>) = 3 [pid 6977] <... openat resumed>) = 3 [pid 6976] exit_group(0 [pid 6978] chdir("./file0" [pid 6979] memfd_create("syzkaller", 0 [pid 6978] <... chdir resumed>) = 0 [pid 6976] <... exit_group resumed>) = ? [pid 6980] memfd_create("syzkaller", 0 [pid 6978] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6976] +++ exited with 0 +++ [pid 6980] <... memfd_create resumed>) = 3 [pid 6979] <... memfd_create resumed>) = 3 [pid 6978] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6977] chdir("./file0" [pid 6978] openat(AT_FDCWD, ".", O_RDONLY [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6976, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 6977] <... chdir resumed>) = 0 [pid 6980] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6979] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6978] <... openat resumed>) = 4 [pid 6977] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5826] restart_syscall(<... resuming interrupted clone ...>) = 0 [ 200.858437][ T6977] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [pid 6980] <... mmap resumed>) = 0x7f957a000000 [pid 6979] <... mmap resumed>) = 0x7f957a000000 [pid 6978] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6977] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6980] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6977] openat(AT_FDCWD, ".", O_RDONLY [pid 5826] umount2("./229", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6979] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6977] <... openat resumed>) = 4 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6980] <... write resumed>) = 65536 [pid 6977] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5826] openat(AT_FDCWD, "./229", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5826] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6979] <... write resumed>) = 65536 [pid 5826] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5826] umount2("./229/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6979] munmap(0x7f957a000000, 138412032 [pid 6978] <... renameat2 resumed>) = 0 [pid 6979] <... munmap resumed>) = 0 [pid 6980] munmap(0x7f957a000000, 138412032 [pid 6979] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6978] sync( [pid 6977] <... renameat2 resumed>) = 0 [pid 6980] <... munmap resumed>) = 0 [pid 6979] <... openat resumed>) = 4 [pid 6977] sync( [pid 6980] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6979] ioctl(4, LOOP_SET_FD, 3 [pid 5826] <... umount2 resumed>) = 0 [pid 6980] <... openat resumed>) = 4 [pid 6980] ioctl(4, LOOP_SET_FD, 3 [pid 5826] umount2("./229/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./229/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] umount2("./229/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6978] <... sync resumed>) = 0 [pid 6977] <... sync resumed>) = 0 [pid 6978] exit_group(0 [pid 5826] openat(AT_FDCWD, "./229/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6978] <... exit_group resumed>) = ? [pid 6977] exit_group(0 [pid 5826] <... openat resumed>) = 4 [pid 6977] <... exit_group resumed>) = ? [pid 6977] +++ exited with 0 +++ [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6977, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 6978] +++ exited with 0 +++ [pid 5826] newfstatat(4, "", [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6978, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [ 200.949941][ T6979] loop1: detected capacity change from 0 to 128 [ 200.959615][ T6980] loop2: detected capacity change from 0 to 128 [pid 5827] restart_syscall(<... resuming interrupted clone ...> [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] <... restart_syscall resumed>) = 0 [pid 5826] getdents64(4, [pid 5823] <... restart_syscall resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5827] umount2("./221", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6979] <... ioctl resumed>) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] getdents64(4, [pid 5823] umount2("./228", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6979] close(3 [pid 5827] openat(AT_FDCWD, "./221", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6980] <... ioctl resumed>) = 0 [pid 6979] <... close resumed>) = 0 [pid 5827] <... openat resumed>) = 3 [pid 5823] openat(AT_FDCWD, "./228", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6979] close(4 [pid 5827] newfstatat(3, "", [pid 5823] <... openat resumed>) = 3 [pid 6979] <... close resumed>) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] newfstatat(3, "", [pid 6979] mkdir("./file0", 0777 [pid 5827] getdents64(3, [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 6979] <... mkdir resumed>) = 0 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6979] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5827] umount2("./221/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] close(4 [pid 5823] getdents64(3, [pid 6980] close(3 [pid 5826] <... close resumed>) = 0 [pid 5827] <... umount2 resumed>) = 0 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 6980] <... close resumed>) = 0 [pid 5826] rmdir("./229/file0" [pid 6980] close(4 [pid 5823] umount2("./228/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6980] <... close resumed>) = 0 [pid 6980] mkdir("./file0", 0777 [pid 5827] umount2("./221/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... rmdir resumed>) = 0 [pid 6980] <... mkdir resumed>) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] umount2("./229/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6980] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5827] newfstatat(AT_FDCWD, "./221/file0", [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] newfstatat(AT_FDCWD, "./229/binderfs", [pid 5823] <... umount2 resumed>) = 0 [pid 5823] umount2("./228/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./228/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] umount2("./228/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./228/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] unlink("./229/binderfs" [pid 5823] <... openat resumed>) = 4 [pid 5827] umount2("./221/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(4, "", [pid 5827] openat(AT_FDCWD, "./221/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] <... unlink resumed>) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] <... openat resumed>) = 4 [pid 5826] getdents64(3, [pid 5827] newfstatat(4, "", [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] close(3 [pid 5823] getdents64(4, [pid 5827] getdents64(4, [pid 5826] <... close resumed>) = 0 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5826] rmdir("./229" [pid 5827] getdents64(4, [pid 5823] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] close(4 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5826] <... rmdir resumed>) = 0 [pid 5823] <... close resumed>) = 0 [pid 5827] close(4 [pid 5826] mkdir("./230", 0777 [pid 5827] <... close resumed>) = 0 [pid 5826] <... mkdir resumed>) = 0 [pid 5823] rmdir("./228/file0" [pid 5827] rmdir("./221/file0") = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5823] <... rmdir resumed>) = 0 [pid 5827] umount2("./221/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] <... openat resumed>) = 3 [pid 5823] umount2("./228/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] ioctl(3, LOOP_CLR_FD [pid 5827] newfstatat(AT_FDCWD, "./221/binderfs", [pid 5826] <... ioctl resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] close(3 [pid 5823] newfstatat(AT_FDCWD, "./228/binderfs", [pid 5827] unlink("./221/binderfs" [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./228/binderfs" [pid 5827] <... unlink resumed>) = 0 [pid 5826] <... close resumed>) = 0 [pid 5823] <... unlink resumed>) = 0 [pid 5823] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] close(3) = 0 [pid 5823] rmdir("./228" [pid 5827] getdents64(3, [pid 5823] <... rmdir resumed>) = 0 [pid 5823] mkdir("./229", 0777) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 201.023520][ T6980] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 201.033654][ T6979] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [pid 5823] ioctl(3, LOOP_CLR_FD) = 0 [pid 5823] close(3) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6982 attached [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5827] close(3 [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 6982 ./strace-static-x86_64: Process 6983 attached [pid 6982] set_robust_list(0x55557eba4660, 24 [pid 6980] <... mount resumed>) = 0 [pid 5827] <... close resumed>) = 0 [pid 6983] set_robust_list(0x55557eba4660, 24 [pid 6980] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5827] rmdir("./221" [pid 6983] <... set_robust_list resumed>) = 0 [pid 6980] <... openat resumed>) = 3 [pid 6979] <... mount resumed>) = 0 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 6983 [pid 6982] <... set_robust_list resumed>) = 0 [pid 6983] chdir("./230" [pid 6980] chdir("./file0" [pid 6979] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5827] <... rmdir resumed>) = 0 [pid 6983] <... chdir resumed>) = 0 [pid 5827] mkdir("./222", 0777 [pid 6983] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6982] chdir("./229" [pid 6980] <... chdir resumed>) = 0 [pid 6979] <... openat resumed>) = 3 [pid 5827] <... mkdir resumed>) = 0 [pid 6982] <... chdir resumed>) = 0 [pid 6980] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6979] chdir("./file0" [pid 6982] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6980] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6979] <... chdir resumed>) = 0 [pid 6982] <... prctl resumed>) = 0 [pid 6980] openat(AT_FDCWD, ".", O_RDONLY [pid 6979] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6982] setpgid(0, 0 [pid 6980] <... openat resumed>) = 4 [pid 6979] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6983] setpgid(0, 0 [pid 6982] <... setpgid resumed>) = 0 [pid 6980] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6979] openat(AT_FDCWD, ".", O_RDONLY [pid 6983] <... setpgid resumed>) = 0 [pid 6982] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6980] <... renameat2 resumed>) = 0 [pid 6979] <... openat resumed>) = 4 [pid 6983] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6982] <... openat resumed>) = 3 [pid 6980] sync( [pid 6979] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6983] <... openat resumed>) = 3 [pid 6982] write(3, "1000", 4 [pid 6979] <... renameat2 resumed>) = 0 [pid 5827] <... openat resumed>) = 3 executing program executing program [pid 6983] write(3, "1000", 4 [pid 6982] <... write resumed>) = 4 [pid 5827] ioctl(3, LOOP_CLR_FD [pid 6982] close(3 [pid 6983] <... write resumed>) = 4 [pid 6983] close(3 [pid 6982] <... close resumed>) = 0 [pid 5827] <... ioctl resumed>) = 0 [pid 6983] <... close resumed>) = 0 [pid 6982] symlink("/dev/binderfs", "./binderfs" [pid 5827] close(3 [pid 6983] symlink("/dev/binderfs", "./binderfs" [pid 6982] <... symlink resumed>) = 0 [pid 6982] write(1, "executing program\n", 18) = 18 [pid 6983] <... symlink resumed>) = 0 [pid 6982] memfd_create("syzkaller", 0 [pid 5827] <... close resumed>) = 0 [pid 6983] write(1, "executing program\n", 18 [pid 6982] <... memfd_create resumed>) = 3 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6983] <... write resumed>) = 18 [pid 6982] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 ./strace-static-x86_64: Process 6984 attached [pid 6983] memfd_create("syzkaller", 0 [pid 6982] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6979] sync( [pid 6983] <... memfd_create resumed>) = 3 [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 6984 [pid 6983] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6982] <... write resumed>) = 65536 [pid 6984] set_robust_list(0x55557eba4660, 24 [pid 6983] <... mmap resumed>) = 0x7f957a000000 [pid 6982] munmap(0x7f957a000000, 138412032) = 0 [pid 6983] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6984] <... set_robust_list resumed>) = 0 [pid 6982] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6983] <... write resumed>) = 65536 [pid 6982] ioctl(4, LOOP_SET_FD, 3 [pid 6984] chdir("./222" [pid 6983] munmap(0x7f957a000000, 138412032 [pid 6984] <... chdir resumed>) = 0 [pid 6983] <... munmap resumed>) = 0 [pid 6980] <... sync resumed>) = 0 [pid 6979] <... sync resumed>) = 0 [pid 6979] exit_group(0) = ? [pid 6979] +++ exited with 0 +++ [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6979, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 6982] <... ioctl resumed>) = 0 [pid 6982] close(3) = 0 [pid 6982] close(4) = 0 [pid 6982] mkdir("./file0", 0777 [pid 6984] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6983] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6982] <... mkdir resumed>) = 0 [pid 6980] exit_group(0 [pid 6982] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6984] <... prctl resumed>) = 0 [pid 6983] <... openat resumed>) = 4 [pid 6980] <... exit_group resumed>) = ? [pid 5824] <... restart_syscall resumed>) = 0 [ 201.150718][ T6982] loop0: detected capacity change from 0 to 128 [ 201.188297][ T6982] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [pid 5824] umount2("./224", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6984] setpgid(0, 0 [pid 6983] ioctl(4, LOOP_SET_FD, 3 [pid 6980] +++ exited with 0 +++ [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./224", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5824] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] umount2("./224/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6980, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5825] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 6984] <... setpgid resumed>) = 0 [pid 5825] umount2("./226", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6984] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./226", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5825] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5825] umount2("./226/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6984] <... openat resumed>) = 3 [pid 6984] write(3, "1000", 4) = 4 [pid 5824] <... umount2 resumed>) = 0 [pid 5824] umount2("./224/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./224/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] umount2("./224/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./224/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5824] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] close(4) = 0 [pid 5824] rmdir("./224/file0") = 0 [pid 5824] umount2("./224/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6984] close(3 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./224/binderfs", [pid 6984] <... close resumed>) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6984] symlink("/dev/binderfs", "./binderfs" [pid 6983] <... ioctl resumed>) = 0 [pid 6982] <... mount resumed>) = 0 [pid 5824] unlink("./224/binderfs" [pid 6982] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6982] chdir("./file0"executing program [pid 6984] <... symlink resumed>) = 0 [pid 6983] close(3 [pid 6982] <... chdir resumed>) = 0 [pid 5825] <... umount2 resumed>) = 0 [pid 5824] <... unlink resumed>) = 0 [pid 6984] write(1, "executing program\n", 18 [pid 6983] <... close resumed>) = 0 [pid 6984] <... write resumed>) = 18 [pid 6983] close(4 [pid 6982] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5825] umount2("./226/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] getdents64(3, [pid 6984] memfd_create("syzkaller", 0 [pid 6983] <... close resumed>) = 0 [pid 6982] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 6983] mkdir("./file0", 0777 [pid 6982] openat(AT_FDCWD, ".", O_RDONLY [pid 5825] newfstatat(AT_FDCWD, "./226/file0", [pid 5824] close(3 [pid 6982] <... openat resumed>) = 4 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... close resumed>) = 0 [pid 6983] <... mkdir resumed>) = 0 [ 201.215059][ T6983] loop3: detected capacity change from 0 to 128 [pid 6982] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5825] umount2("./226/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] rmdir("./224" [pid 6984] <... memfd_create resumed>) = 3 [pid 6983] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6982] <... renameat2 resumed>) = 0 [pid 6984] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6982] sync( [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... rmdir resumed>) = 0 [pid 6984] <... mmap resumed>) = 0x7f957a000000 [pid 6984] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5825] openat(AT_FDCWD, "./226/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] mkdir("./225", 0777 [pid 5825] <... openat resumed>) = 4 [pid 5824] <... mkdir resumed>) = 0 [pid 5825] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5824] ioctl(3, LOOP_CLR_FD) = 0 [pid 5824] close(3) = 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5825] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5825] close(4) = 0 [pid 5825] rmdir("./226/file0") = 0 [pid 5825] umount2("./226/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./226/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 6986 attached [pid 5825] unlink("./226/binderfs") = 0 [pid 6986] set_robust_list(0x55557eba4660, 24) = 0 [pid 6986] chdir("./225" [pid 5825] getdents64(3, [pid 6984] <... write resumed>) = 65536 [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 6986 [pid 6986] <... chdir resumed>) = 0 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 6986] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5825] close(3 [pid 6986] <... prctl resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 6986] setpgid(0, 0 [pid 5825] rmdir("./226") = 0 [pid 6986] <... setpgid resumed>) = 0 [pid 6984] munmap(0x7f957a000000, 138412032 [pid 5825] mkdir("./227", 0777 [pid 6986] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6984] <... munmap resumed>) = 0 [pid 5825] <... mkdir resumed>) = 0 [pid 6986] <... openat resumed>) = 3 [pid 6984] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6986] write(3, "1000", 4) = 4 [pid 6986] close(3 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6986] <... close resumed>) = 0 [pid 6984] <... openat resumed>) = 4 [pid 6984] ioctl(4, LOOP_SET_FD, 3 [pid 6986] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6986] write(1, "executing program\n", 18 [pid 5825] <... openat resumed>) = 3 [pid 6986] <... write resumed>) = 18 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 6986] memfd_create("syzkaller", 0 [pid 5825] <... ioctl resumed>) = 0 [ 201.288349][ T6983] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [pid 5825] close(3 [pid 6986] <... memfd_create resumed>) = 3 [pid 5825] <... close resumed>) = 0 [pid 6986] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 6986] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6986] <... write resumed>) = 65536 ./strace-static-x86_64: Process 6987 attached [pid 6986] munmap(0x7f957a000000, 138412032) = 0 [pid 6984] <... ioctl resumed>) = 0 [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 6987 [pid 6987] set_robust_list(0x55557eba4660, 24) = 0 [pid 6987] chdir("./227" [pid 6984] close(3) = 0 [pid 6987] <... chdir resumed>) = 0 [pid 6986] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6984] close(4 [pid 6987] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6986] <... openat resumed>) = 4 [pid 6987] <... prctl resumed>) = 0 [pid 6986] ioctl(4, LOOP_SET_FD, 3 [pid 6984] <... close resumed>) = 0 [pid 6987] setpgid(0, 0 [pid 6986] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 6987] <... setpgid resumed>) = 0 [pid 6986] ioctl(4, LOOP_CLR_FD [pid 6984] mkdir("./file0", 0777 [pid 6987] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6986] <... ioctl resumed>) = 0 [pid 6984] <... mkdir resumed>) = 0 [pid 6983] <... mount resumed>) = 0 [pid 6987] <... openat resumed>) = 3 [pid 6984] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6983] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6987] write(3, "1000", 4) = 4 [pid 6987] close(3 [pid 6986] ioctl(4, LOOP_SET_FD, 3 [pid 6983] <... openat resumed>) = 3 [pid 6986] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 6987] <... close resumed>) = 0 [pid 6987] symlink("/dev/binderfs", "./binderfs" [pid 6986] close(4) = 0 [pid 6986] close(3) = 0 [pid 6986] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 6986] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = -1 ENOENT (No such file or directory) [pid 6986] sync(executing program [pid 6987] <... symlink resumed>) = 0 [pid 6987] write(1, "executing program\n", 18) = 18 [pid 6987] memfd_create("syzkaller", 0) = 3 [pid 6987] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6983] chdir("./file0" [pid 6987] <... mmap resumed>) = 0x7f957a000000 [pid 6987] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 6983] <... chdir resumed>) = 0 [pid 6987] munmap(0x7f957a000000, 138412032) = 0 [pid 6983] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6987] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 201.333890][ T6984] loop4: detected capacity change from 0 to 128 [ 201.369726][ T6984] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [pid 6987] ioctl(4, LOOP_SET_FD, 3 [pid 6983] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 6983] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6987] <... ioctl resumed>) = 0 [pid 6984] <... mount resumed>) = 0 [pid 6983] <... renameat2 resumed>) = 0 [pid 6982] <... sync resumed>) = 0 [pid 6987] close(3 [pid 6984] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6983] sync( [pid 6982] exit_group(0 [pid 6987] <... close resumed>) = 0 [pid 6986] <... sync resumed>) = 0 [pid 6984] <... openat resumed>) = 3 [pid 6982] <... exit_group resumed>) = ? [pid 6987] close(4 [pid 6986] exit_group(0 [pid 6984] chdir("./file0" [pid 6983] <... sync resumed>) = 0 [pid 6982] +++ exited with 0 +++ [pid 6987] <... close resumed>) = 0 [pid 6983] exit_group(0 [pid 6984] <... chdir resumed>) = 0 [pid 6983] <... exit_group resumed>) = ? [pid 6987] mkdir("./file0", 0777) = 0 [pid 6984] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6983] +++ exited with 0 +++ [pid 6986] <... exit_group resumed>) = ? [pid 6984] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6983, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [ 201.398889][ T6987] loop2: detected capacity change from 0 to 128 [pid 6987] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6986] +++ exited with 0 +++ [pid 6984] openat(AT_FDCWD, ".", O_RDONLY [pid 5826] restart_syscall(<... resuming interrupted clone ...> [pid 6984] <... openat resumed>) = 4 [pid 5826] <... restart_syscall resumed>) = 0 [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6986, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 6984] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5826] umount2("./230", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] umount2("./225", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6982, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6984] <... renameat2 resumed>) = 0 [pid 5826] openat(AT_FDCWD, "./230", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] umount2("./229", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... openat resumed>) = 3 [pid 5824] openat(AT_FDCWD, "./225", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] <... openat resumed>) = 3 [pid 5826] getdents64(3, [pid 5824] newfstatat(3, "", [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] umount2("./230/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] openat(AT_FDCWD, "./229", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5824] getdents64(3, [pid 5823] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 5824] umount2("./225/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... umount2 resumed>) = 0 [pid 5824] newfstatat(AT_FDCWD, "./225/binderfs", [pid 5823] umount2("./229/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6984] sync( [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] umount2("./230/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] unlink("./225/binderfs" [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... unlink resumed>) = 0 [pid 5823] <... umount2 resumed>) = 0 [pid 5826] newfstatat(AT_FDCWD, "./230/file0", [pid 5824] getdents64(3, [pid 5823] umount2("./229/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./229/file0", [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] close(3 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] umount2("./230/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... close resumed>) = 0 [pid 5823] umount2("./229/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] rmdir("./225" [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./229/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] <... rmdir resumed>) = 0 [pid 5826] openat(AT_FDCWD, "./230/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] mkdir("./226", 0777 [pid 5823] <... openat resumed>) = 4 [pid 5823] newfstatat(4, "", [pid 5826] <... openat resumed>) = 4 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 201.466192][ T6987] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [pid 5826] newfstatat(4, "", [pid 5824] <... mkdir resumed>) = 0 [pid 5823] getdents64(4, [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6987] <... mount resumed>) = 0 [pid 5823] getdents64(4, [pid 5824] <... openat resumed>) = 3 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] ioctl(3, LOOP_CLR_FD [pid 5826] getdents64(4, [pid 5823] close(4 [pid 5824] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] close(3 [pid 5823] <... close resumed>) = 0 [pid 6987] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6987] chdir("./file0") = 0 [pid 6987] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5824] <... close resumed>) = 0 [pid 5823] rmdir("./229/file0" [pid 6987] openat(AT_FDCWD, ".", O_RDONLY [pid 5826] getdents64(4, [pid 6987] <... openat resumed>) = 4 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6987] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0./strace-static-x86_64: Process 6988 attached ) = 0 [pid 5826] close(4) = 0 [pid 6988] set_robust_list(0x55557eba4660, 24 [pid 6987] sync( [pid 5826] rmdir("./230/file0" [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 6988 [pid 6988] <... set_robust_list resumed>) = 0 [pid 6988] chdir("./226") = 0 [pid 6988] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6988] setpgid(0, 0) = 0 [pid 6988] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6988] write(3, "1000", 4) = 4 [pid 6988] close(3) = 0 [pid 6988] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6988] write(1, "executing program\n", 18 [pid 5826] <... rmdir resumed>) = 0 [pid 5823] <... rmdir resumed>) = 0 [pid 5826] umount2("./230/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] umount2("./229/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./229/binderfs", executing program {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6988] <... write resumed>) = 18 [pid 6988] memfd_create("syzkaller", 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] unlink("./229/binderfs" [pid 6984] <... sync resumed>) = 0 [pid 6984] exit_group(0 [pid 5826] newfstatat(AT_FDCWD, "./230/binderfs", [pid 5823] <... unlink resumed>) = 0 [pid 6988] <... memfd_create resumed>) = 3 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] getdents64(3, [pid 6988] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5826] unlink("./230/binderfs" [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 6988] <... mmap resumed>) = 0x7f957a000000 [pid 6987] <... sync resumed>) = 0 [pid 5826] <... unlink resumed>) = 0 [pid 5823] close(3 [pid 5826] getdents64(3, [pid 6988] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6987] exit_group(0 [pid 6984] <... exit_group resumed>) = ? [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] <... close resumed>) = 0 [pid 6988] <... write resumed>) = 65536 [pid 6987] <... exit_group resumed>) = ? [pid 6984] +++ exited with 0 +++ [pid 5826] close(3 [pid 5823] rmdir("./229" [pid 6988] munmap(0x7f957a000000, 138412032 [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6984, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5826] <... close resumed>) = 0 [pid 5823] <... rmdir resumed>) = 0 [pid 5827] restart_syscall(<... resuming interrupted clone ...> [pid 5826] rmdir("./230" [pid 5823] mkdir("./230", 0777 [pid 6988] <... munmap resumed>) = 0 [pid 6987] +++ exited with 0 +++ [pid 5823] <... mkdir resumed>) = 0 [pid 6988] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5827] <... restart_syscall resumed>) = 0 [pid 5826] <... rmdir resumed>) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6988] <... openat resumed>) = 4 [pid 5826] mkdir("./231", 0777 [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6987, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6988] ioctl(4, LOOP_SET_FD, 3 [pid 5825] restart_syscall(<... resuming interrupted clone ...> [pid 5823] <... openat resumed>) = 3 [pid 5826] <... mkdir resumed>) = 0 [pid 5825] <... restart_syscall resumed>) = 0 [pid 5823] ioctl(3, LOOP_CLR_FD [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5827] umount2("./222", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... ioctl resumed>) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... openat resumed>) = 3 [pid 5823] close(3 [pid 5827] openat(AT_FDCWD, "./222", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] ioctl(3, LOOP_CLR_FD [pid 5823] <... close resumed>) = 0 [pid 5825] umount2("./227", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5827] <... openat resumed>) = 3 [pid 5826] <... ioctl resumed>) = 0 [pid 5825] openat(AT_FDCWD, "./227", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] newfstatat(3, "", [pid 5826] close(3 [pid 5825] <... openat resumed>) = 3 [pid 5825] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5825] umount2("./227/file0", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6989 attached [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] <... close resumed>) = 0 [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 6989 [pid 5827] getdents64(3, [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6989] set_robust_list(0x55557eba4660, 24 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 6989] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 6990 attached [pid 6989] chdir("./230" [pid 5827] umount2("./222/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6990] set_robust_list(0x55557eba4660, 24 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 6990 [pid 6989] <... chdir resumed>) = 0 [pid 6989] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6989] setpgid(0, 0) = 0 [pid 6989] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5825] <... umount2 resumed>) = 0 [pid 6989] write(3, "1000", 4 [pid 5825] umount2("./227/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6989] <... write resumed>) = 4 [pid 5827] <... umount2 resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6989] close(3 [pid 5825] newfstatat(AT_FDCWD, "./227/file0", [pid 6988] <... ioctl resumed>) = 0 [pid 5827] umount2("./222/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6989] <... close resumed>) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] umount2("./227/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6989] symlink("/dev/binderfs", "./binderfs" [pid 5827] newfstatat(AT_FDCWD, "./222/file0", [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./227/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6990] <... set_robust_list resumed>) = 0 [pid 6989] <... symlink resumed>) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] umount2("./222/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... openat resumed>) = 4 [pid 6989] write(1, "executing program\n", 18 [pid 6988] close(3 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(4, "", executing program [pid 6989] <... write resumed>) = 18 [pid 6988] <... close resumed>) = 0 [pid 5827] openat(AT_FDCWD, "./222/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6989] memfd_create("syzkaller", 0 [pid 6988] close(4 [pid 5827] <... openat resumed>) = 4 [pid 5825] getdents64(4, [pid 6988] <... close resumed>) = 0 [pid 5827] newfstatat(4, "", [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 6989] <... memfd_create resumed>) = 3 [pid 6988] mkdir("./file0", 0777 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(4, [pid 6989] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6988] <... mkdir resumed>) = 0 [pid 5827] getdents64(4, [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 6989] <... mmap resumed>) = 0x7f957a000000 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] close(4 [pid 6990] chdir("./231" [pid 6989] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5827] getdents64(4, [pid 5825] <... close resumed>) = 0 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5825] rmdir("./227/file0" [pid 5827] close(4 [pid 5825] <... rmdir resumed>) = 0 [pid 6988] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5827] <... close resumed>) = 0 [ 201.619247][ T6988] loop1: detected capacity change from 0 to 128 [pid 5827] rmdir("./222/file0") = 0 [pid 6990] <... chdir resumed>) = 0 [pid 6989] <... write resumed>) = 65536 [pid 6990] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6990] setpgid(0, 0 [pid 5827] umount2("./222/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./227/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6990] <... setpgid resumed>) = 0 [pid 6990] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./227/binderfs", [pid 6989] munmap(0x7f957a000000, 138412032 [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6989] <... munmap resumed>) = 0 [pid 5827] newfstatat(AT_FDCWD, "./222/binderfs", [pid 5825] unlink("./227/binderfs" [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... unlink resumed>) = 0 [pid 5827] unlink("./222/binderfs" [pid 5825] getdents64(3, [pid 6989] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5827] <... unlink resumed>) = 0 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 6990] <... openat resumed>) = 3 [pid 6989] <... openat resumed>) = 4 [pid 5827] getdents64(3, [pid 5825] close(3 [pid 6990] write(3, "1000", 4 [pid 6989] ioctl(4, LOOP_SET_FD, 3 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5825] <... close resumed>) = 0 [pid 6990] <... write resumed>) = 4 [pid 6989] <... ioctl resumed>) = 0 [pid 5827] close(3 [pid 5825] rmdir("./227" [pid 6990] close(3 [pid 5827] <... close resumed>) = 0 [pid 5825] <... rmdir resumed>) = 0 [pid 6990] <... close resumed>) = 0 [pid 6990] symlink("/dev/binderfs", "./binderfs" [pid 5827] rmdir("./222" [pid 5825] mkdir("./228", 0777 [pid 6990] <... symlink resumed>) = 0 [pid 6990] write(1, "executing program\n", 18 [pid 5827] <... rmdir resumed>) = 0 [pid 5825] <... mkdir resumed>) = 0 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWRexecuting program [pid 6990] <... write resumed>) = 18 [pid 5827] mkdir("./223", 0777 [pid 6990] memfd_create("syzkaller", 0 [pid 5827] <... mkdir resumed>) = 0 [pid 6990] <... memfd_create resumed>) = 3 [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 6990] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5827] ioctl(3, LOOP_CLR_FD) = 0 [pid 5827] close(3 [pid 5825] <... openat resumed>) = 3 [pid 5827] <... close resumed>) = 0 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5825] <... ioctl resumed>) = 0 [pid 5825] close(3) = 0 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6992 attached ./strace-static-x86_64: Process 6991 attached [pid 6990] <... mmap resumed>) = 0x7f957a000000 [pid 6989] close(3 [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 6991 [pid 6988] <... mount resumed>) = 0 [pid 6988] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6990] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6989] <... close resumed>) = 0 [pid 6988] <... openat resumed>) = 3 [pid 6991] set_robust_list(0x55557eba4660, 24 [pid 6989] close(4 [ 201.678908][ T6988] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 201.706484][ T6989] loop0: detected capacity change from 0 to 128 [pid 6988] chdir("./file0" [pid 6989] <... close resumed>) = 0 [pid 6988] <... chdir resumed>) = 0 [pid 6989] mkdir("./file0", 0777 [pid 6988] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 6992 [pid 6992] set_robust_list(0x55557eba4660, 24 [pid 6988] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6992] <... set_robust_list resumed>) = 0 [pid 6988] openat(AT_FDCWD, ".", O_RDONLY [pid 6992] chdir("./228" [pid 6988] <... openat resumed>) = 4 [pid 6992] <... chdir resumed>) = 0 [pid 6991] <... set_robust_list resumed>) = 0 [pid 6989] <... mkdir resumed>) = 0 [pid 6988] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6992] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6991] chdir("./223" [pid 6992] <... prctl resumed>) = 0 [pid 6989] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6991] <... chdir resumed>) = 0 [pid 6991] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6992] setpgid(0, 0 [pid 6991] setpgid(0, 0 [pid 6990] <... write resumed>) = 65536 [pid 6992] <... setpgid resumed>) = 0 [pid 6991] <... setpgid resumed>) = 0 [pid 6988] <... renameat2 resumed>) = 0 [pid 6992] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6988] sync( [pid 6992] <... openat resumed>) = 3 [pid 6991] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6990] munmap(0x7f957a000000, 138412032 [pid 6992] write(3, "1000", 4) = 4 [pid 6991] <... openat resumed>) = 3 [pid 6992] close(3 [pid 6991] write(3, "1000", 4 [pid 6990] <... munmap resumed>) = 0 [pid 6992] <... close resumed>) = 0 [pid 6991] <... write resumed>) = 4 [pid 6990] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6992] symlink("/dev/binderfs", "./binderfs" [pid 6991] close(3 [pid 6990] <... openat resumed>) = 4 [pid 6992] <... symlink resumed>) = 0 [pid 6991] <... close resumed>) = 0 [pid 6990] ioctl(4, LOOP_SET_FD, 3executing program [pid 6992] write(1, "executing program\n", 18 [pid 6991] symlink("/dev/binderfs", "./binderfs" [pid 6992] <... write resumed>) = 18 [pid 6992] memfd_create("syzkaller", 0 [pid 6991] <... symlink resumed>) = 0 [pid 6992] <... memfd_create resumed>) = 3 [pid 6992] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 6992] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536executing program ) = 65536 [pid 6991] write(1, "executing program\n", 18) = 18 [pid 6992] munmap(0x7f957a000000, 138412032) = 0 [pid 6991] memfd_create("syzkaller", 0 [pid 6992] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6992] ioctl(4, LOOP_SET_FD, 3 [pid 6991] <... memfd_create resumed>) = 3 [pid 6991] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 6991] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6990] <... ioctl resumed>) = 0 [pid 6989] <... mount resumed>) = 0 [pid 6989] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6989] chdir("./file0" [pid 6991] <... write resumed>) = 65536 [pid 6990] close(3 [pid 6989] <... chdir resumed>) = 0 [pid 6991] munmap(0x7f957a000000, 138412032 [pid 6990] <... close resumed>) = 0 [pid 6989] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6990] close(4 [pid 6989] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6989] openat(AT_FDCWD, ".", O_RDONLY [pid 6992] <... ioctl resumed>) = 0 [pid 6991] <... munmap resumed>) = 0 [pid 6990] <... close resumed>) = 0 [pid 6989] <... openat resumed>) = 4 [pid 6992] close(3 [pid 6991] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6990] mkdir("./file0", 0777 [pid 6989] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6992] <... close resumed>) = 0 [pid 6992] close(4) = 0 [pid 6989] <... renameat2 resumed>) = 0 [pid 6992] mkdir("./file0", 0777) = 0 [pid 6991] <... openat resumed>) = 4 [pid 6990] <... mkdir resumed>) = 0 [ 201.786182][ T6989] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 201.787076][ T6990] loop3: detected capacity change from 0 to 128 [ 201.808530][ T6992] loop2: detected capacity change from 0 to 128 [pid 6992] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6991] ioctl(4, LOOP_SET_FD, 3 [pid 6990] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6989] sync( [pid 6988] <... sync resumed>) = 0 [pid 6988] exit_group(0) = ? [pid 6988] +++ exited with 0 +++ [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6988, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5824] umount2("./226", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6992] <... mount resumed>) = 0 [pid 6990] <... mount resumed>) = 0 [pid 5824] openat(AT_FDCWD, "./226", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6990] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5824] <... openat resumed>) = 3 [pid 6992] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6990] <... openat resumed>) = 3 [pid 5824] newfstatat(3, "", [pid 6992] <... openat resumed>) = 3 [pid 6991] <... ioctl resumed>) = 0 [pid 6990] chdir("./file0" [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 201.856563][ T6990] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 201.871455][ T6992] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 201.873816][ T6991] loop4: detected capacity change from 0 to 128 [pid 6992] chdir("./file0" [pid 6991] close(3 [pid 6990] <... chdir resumed>) = 0 [pid 5824] getdents64(3, [pid 6990] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6989] <... sync resumed>) = 0 [pid 6991] <... close resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 6991] close(4 [pid 6990] openat(AT_FDCWD, ".", O_RDONLY [pid 5824] umount2("./226/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6991] <... close resumed>) = 0 [pid 6990] <... openat resumed>) = 4 [pid 6989] exit_group(0) = ? [pid 6991] mkdir("./file0", 0777 [pid 6990] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6989] +++ exited with 0 +++ [pid 6992] <... chdir resumed>) = 0 [pid 6991] <... mkdir resumed>) = 0 [pid 6992] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6991] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6990] <... renameat2 resumed>) = 0 [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6989, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6992] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 6992] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 5823] <... restart_syscall resumed>) = 0 [pid 6990] sync( [pid 5823] umount2("./230", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./230", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5823] newfstatat(3, "", [pid 6992] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6992] sync( [pid 5824] <... umount2 resumed>) = 0 [pid 5823] getdents64(3, [pid 5824] umount2("./226/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] umount2("./230/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] newfstatat(AT_FDCWD, "./226/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] umount2("./226/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./226/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5824] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] close(4) = 0 [pid 5823] <... umount2 resumed>) = 0 [pid 5824] rmdir("./226/file0") = 0 [pid 5823] umount2("./230/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./226/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./230/file0", [ 201.961092][ T6991] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [pid 5824] newfstatat(AT_FDCWD, "./226/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./226/binderfs" [pid 6991] <... mount resumed>) = 0 [pid 5823] umount2("./230/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6991] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5824] <... unlink resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6991] chdir("./file0" [pid 5824] getdents64(3, [pid 5823] openat(AT_FDCWD, "./230/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 6991] <... chdir resumed>) = 0 [pid 5824] close(3 [pid 5823] <... openat resumed>) = 4 [pid 6991] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5824] <... close resumed>) = 0 [pid 5823] newfstatat(4, "", [pid 6991] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5824] rmdir("./226" [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6991] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 5824] <... rmdir resumed>) = 0 [pid 5823] getdents64(4, [pid 6991] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5824] mkdir("./227", 0777 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] getdents64(4, [pid 5824] <... mkdir resumed>) = 0 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5823] close(4) = 0 [pid 6991] <... renameat2 resumed>) = 0 [pid 5824] <... openat resumed>) = 3 [pid 5823] rmdir("./230/file0" [pid 6991] sync( [pid 5824] ioctl(3, LOOP_CLR_FD [pid 5823] <... rmdir resumed>) = 0 [pid 5824] <... ioctl resumed>) = 0 [pid 5823] umount2("./230/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./230/binderfs", [pid 5824] close(3 [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... close resumed>) = 0 [pid 5823] unlink("./230/binderfs" [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5823] <... unlink resumed>) = 0 [pid 5823] getdents64(3, [pid 6990] <... sync resumed>) = 0 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 6992] <... sync resumed>) = 0 [pid 6990] exit_group(0 [pid 6992] exit_group(0 [pid 6990] <... exit_group resumed>) = ? [pid 6990] +++ exited with 0 +++ [pid 5823] close(3 [pid 6992] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 6994 attached [pid 6992] +++ exited with 0 +++ [pid 5823] <... close resumed>) = 0 [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6992, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5825] restart_syscall(<... resuming interrupted clone ...> [pid 6991] <... sync resumed>) = 0 [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6990, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5823] rmdir("./230" [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 6994 [pid 6994] set_robust_list(0x55557eba4660, 24 [pid 6991] exit_group(0 [pid 5826] restart_syscall(<... resuming interrupted clone ...> [pid 5823] <... rmdir resumed>) = 0 [pid 6994] <... set_robust_list resumed>) = 0 [pid 6991] <... exit_group resumed>) = ? [pid 5826] <... restart_syscall resumed>) = 0 [pid 5823] mkdir("./231", 0777 [pid 6994] chdir("./227" [pid 6991] +++ exited with 0 +++ [pid 5825] <... restart_syscall resumed>) = 0 [pid 5823] <... mkdir resumed>) = 0 [pid 6994] <... chdir resumed>) = 0 [pid 5826] umount2("./231", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6994] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6994] <... prctl resumed>) = 0 [pid 5826] openat(AT_FDCWD, "./231", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] <... openat resumed>) = 3 [pid 6994] setpgid(0, 0 [pid 5825] umount2("./228", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... openat resumed>) = 3 [pid 6994] <... setpgid resumed>) = 0 [pid 5823] ioctl(3, LOOP_CLR_FD [pid 5826] newfstatat(3, "", [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6991, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... ioctl resumed>) = 0 [pid 5827] restart_syscall(<... resuming interrupted clone ...> [pid 6994] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5826] getdents64(3, [pid 5825] openat(AT_FDCWD, "./228", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] close(3 [pid 6994] <... openat resumed>) = 3 [pid 5827] <... restart_syscall resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5825] <... openat resumed>) = 3 [pid 5823] <... close resumed>) = 0 [pid 6994] write(3, "1000", 4) = 4 [pid 5826] umount2("./231/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] newfstatat(3, "", [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6994] close(3 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] umount2("./223", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] getdents64(3, [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5827] openat(AT_FDCWD, "./223", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] umount2("./228/file0", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6995 attached [pid 6994] <... close resumed>) = 0 [pid 5827] <... openat resumed>) = 3 [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 6995 [pid 6995] set_robust_list(0x55557eba4660, 24 [pid 6994] symlink("/dev/binderfs", "./binderfs" [pid 5827] newfstatat(3, "", [pid 6995] <... set_robust_list resumed>) = 0 [pid 6994] <... symlink resumed>) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6994] write(1, "executing program\n", 18executing program [pid 6995] chdir("./231" [pid 6994] <... write resumed>) = 18 [pid 5827] getdents64(3, [pid 6995] <... chdir resumed>) = 0 [pid 6994] memfd_create("syzkaller", 0 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 6995] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6994] <... memfd_create resumed>) = 3 [pid 6995] <... prctl resumed>) = 0 [pid 6994] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6995] setpgid(0, 0 [pid 6994] <... mmap resumed>) = 0x7f957a000000 [pid 5827] umount2("./223/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6994] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6995] <... setpgid resumed>) = 0 [pid 6995] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6994] <... write resumed>) = 65536 [pid 5826] <... umount2 resumed>) = 0 [pid 6995] <... openat resumed>) = 3 [pid 6995] write(3, "1000", 4 [pid 5826] umount2("./231/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./231/file0", [pid 6995] <... write resumed>) = 4 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6995] close(3 [pid 6994] munmap(0x7f957a000000, 138412032 [pid 5827] <... umount2 resumed>) = 0 [pid 5825] <... umount2 resumed>) = 0 [pid 5827] umount2("./223/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./228/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] newfstatat(AT_FDCWD, "./223/file0", [pid 5825] newfstatat(AT_FDCWD, "./228/file0", [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6995] <... close resumed>) = 0 [pid 6994] <... munmap resumed>) = 0 [pid 5827] umount2("./223/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] umount2("./231/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 executing program [pid 6995] symlink("/dev/binderfs", "./binderfs" [pid 6994] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] umount2("./228/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] openat(AT_FDCWD, "./231/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6995] <... symlink resumed>) = 0 [pid 5826] <... openat resumed>) = 4 [pid 5825] openat(AT_FDCWD, "./228/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6995] write(1, "executing program\n", 18 [pid 6994] <... openat resumed>) = 4 [pid 5827] openat(AT_FDCWD, "./223/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] newfstatat(4, "", [pid 5825] <... openat resumed>) = 4 [pid 6995] <... write resumed>) = 18 [pid 6994] ioctl(4, LOOP_SET_FD, 3 [pid 5827] <... openat resumed>) = 4 [pid 5827] newfstatat(4, "", [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] newfstatat(4, "", [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(4, [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] getdents64(4, [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] getdents64(4, [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5826] getdents64(4, [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5827] getdents64(4, [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5825] getdents64(4, [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5826] close(4 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5825] close(4 [pid 6995] memfd_create("syzkaller", 0 [pid 5826] <... close resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 5827] close(4 [pid 5825] rmdir("./228/file0" [pid 6995] <... memfd_create resumed>) = 3 [pid 6995] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 5827] <... close resumed>) = 0 [pid 5825] <... rmdir resumed>) = 0 [pid 6995] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5827] rmdir("./223/file0" [pid 5826] rmdir("./231/file0" [pid 5825] umount2("./228/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... rmdir resumed>) = 0 [pid 5826] <... rmdir resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./228/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./228/binderfs" [pid 5827] umount2("./223/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] umount2("./231/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... unlink resumed>) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] getdents64(3, [pid 6995] <... write resumed>) = 65536 [pid 6994] <... ioctl resumed>) = 0 [pid 5827] newfstatat(AT_FDCWD, "./223/binderfs", [pid 5826] newfstatat(AT_FDCWD, "./231/binderfs", [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 6994] close(3 [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6995] munmap(0x7f957a000000, 138412032 [pid 6994] <... close resumed>) = 0 [pid 6994] close(4 [pid 6995] <... munmap resumed>) = 0 [pid 6994] <... close resumed>) = 0 [pid 5827] unlink("./223/binderfs" [pid 5826] unlink("./231/binderfs" [pid 5825] close(3 [pid 6995] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6994] mkdir("./file0", 0777 [pid 6995] <... openat resumed>) = 4 [pid 6994] <... mkdir resumed>) = 0 [pid 5827] <... unlink resumed>) = 0 [pid 5826] <... unlink resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 6995] ioctl(4, LOOP_SET_FD, 3 [pid 6994] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5827] getdents64(3, [pid 5826] getdents64(3, [pid 5825] rmdir("./228" [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5825] <... rmdir resumed>) = 0 [pid 5827] close(3 [pid 5826] close(3 [pid 5827] <... close resumed>) = 0 [pid 5826] <... close resumed>) = 0 [pid 5826] rmdir("./231" [pid 5825] mkdir("./229", 0777 [pid 5827] rmdir("./223" [pid 5826] <... rmdir resumed>) = 0 [pid 5825] <... mkdir resumed>) = 0 [pid 5827] <... rmdir resumed>) = 0 [pid 5826] mkdir("./232", 0777 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5826] <... mkdir resumed>) = 0 [ 202.154408][ T6994] loop1: detected capacity change from 0 to 128 [ 202.192622][ T6995] loop0: detected capacity change from 0 to 128 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5827] mkdir("./224", 0777 [pid 5826] <... openat resumed>) = 3 [pid 5825] <... openat resumed>) = 3 [pid 5826] ioctl(3, LOOP_CLR_FD) = 0 [pid 5826] close(3 [pid 5827] <... mkdir resumed>) = 0 [pid 5826] <... close resumed>) = 0 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 6995] <... ioctl resumed>) = 0 [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5825] <... ioctl resumed>) = 0 [pid 6995] close(3 [pid 5825] close(3 [pid 5827] <... openat resumed>) = 3 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6995] <... close resumed>) = 0 [pid 5827] ioctl(3, LOOP_CLR_FD [pid 6995] close(4 [pid 5827] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 6996 attached [pid 6995] <... close resumed>) = 0 [pid 5827] close(3 [pid 6995] mkdir("./file0", 0777 [pid 5827] <... close resumed>) = 0 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 6996 [pid 5825] <... close resumed>) = 0 [pid 6996] set_robust_list(0x55557eba4660, 24 [pid 6995] <... mkdir resumed>) = 0 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6996] <... set_robust_list resumed>) = 0 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6996] chdir("./232") = 0 [pid 6995] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, ""./strace-static-x86_64: Process 6997 attached ./strace-static-x86_64: Process 6998 attached [pid 6996] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6996] setpgid(0, 0) = 0 [pid 6996] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6997] set_robust_list(0x55557eba4660, 24 [pid 6996] <... openat resumed>) = 3 [pid 6996] write(3, "1000", 4) = 4 [pid 6996] close(3) = 0 [pid 6996] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6998] set_robust_list(0x55557eba4660, 24 [pid 6997] <... set_robust_list resumed>) = 0 [pid 6996] write(1, "executing program\n", 18 [pid 6994] <... mount resumed>) = 0 [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 6997 [pid 6998] <... set_robust_list resumed>) = 0 [pid 6996] <... write resumed>) = 18 [pid 6994] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6998] chdir("./229" [pid 6997] chdir("./224" [pid 6996] memfd_create("syzkaller", 0 [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 6998 [pid 6998] <... chdir resumed>) = 0 [pid 6996] <... memfd_create resumed>) = 3 [pid 6994] <... openat resumed>) = 3 [pid 6998] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6997] <... chdir resumed>) = 0 [pid 6996] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6994] chdir("./file0" [pid 6998] <... prctl resumed>) = 0 [pid 6997] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6994] <... chdir resumed>) = 0 [pid 6998] setpgid(0, 0 [pid 6997] <... prctl resumed>) = 0 [pid 6996] <... mmap resumed>) = 0x7f957a000000 [pid 6995] <... mount resumed>) = 0 [pid 6994] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6998] <... setpgid resumed>) = 0 [pid 6997] setpgid(0, 0 [pid 6995] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6998] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6997] <... setpgid resumed>) = 0 [pid 6996] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6995] <... openat resumed>) = 3 [pid 6994] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6995] chdir("./file0" [pid 6998] <... openat resumed>) = 3 [pid 6997] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6996] <... write resumed>) = 65536 [pid 6995] <... chdir resumed>) = 0 [pid 6994] openat(AT_FDCWD, ".", O_RDONLY [pid 6998] write(3, "1000", 4) = 4 [pid 6994] <... openat resumed>) = 4 [pid 6995] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6998] close(3 [pid 6994] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6998] <... close resumed>) = 0 [pid 6997] <... openat resumed>) = 3 [pid 6995] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6998] symlink("/dev/binderfs", "./binderfs" [pid 6997] write(3, "1000", 4 [pid 6996] munmap(0x7f957a000000, 138412032 [pid 6995] openat(AT_FDCWD, ".", O_RDONLY [pid 6998] <... symlink resumed>) = 0 executing program [pid 6997] <... write resumed>) = 4 [pid 6996] <... munmap resumed>) = 0 [pid 6995] <... openat resumed>) = 4 [pid 6994] <... renameat2 resumed>) = 0 [pid 6998] write(1, "executing program\n", 18 [pid 6997] close(3 [pid 6996] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6995] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6998] <... write resumed>) = 18 [pid 6997] <... close resumed>) = 0 [pid 6994] sync( [pid 6998] memfd_create("syzkaller", 0 [pid 6997] symlink("/dev/binderfs", "./binderfs" [pid 6996] <... openat resumed>) = 4 [ 202.202366][ T6994] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 202.236581][ T6995] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [pid 6996] ioctl(4, LOOP_SET_FD, 3 [pid 6997] <... symlink resumed>) = 0 [pid 6998] <... memfd_create resumed>) = 3 [pid 6997] write(1, "executing program\n", 18executing program [pid 6995] <... renameat2 resumed>) = 0 [pid 6998] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6997] <... write resumed>) = 18 [pid 6997] memfd_create("syzkaller", 0 [pid 6998] <... mmap resumed>) = 0x7f957a000000 [pid 6994] <... sync resumed>) = 0 [pid 6997] <... memfd_create resumed>) = 3 [pid 6998] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6997] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6995] sync( [pid 6994] exit_group(0 [pid 6998] <... write resumed>) = 65536 [pid 6997] <... mmap resumed>) = 0x7f957a000000 [pid 6995] <... sync resumed>) = 0 [pid 6994] <... exit_group resumed>) = ? [pid 6996] <... ioctl resumed>) = 0 [pid 6996] close(3) = 0 [pid 6996] close(4 [pid 6997] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6996] <... close resumed>) = 0 [pid 6995] exit_group(0 [pid 6994] +++ exited with 0 +++ [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6994, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5824] umount2("./227", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./227", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5824] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] umount2("./227/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6996] mkdir("./file0", 0777 [pid 6998] munmap(0x7f957a000000, 138412032) = 0 [pid 6996] <... mkdir resumed>) = 0 [pid 6998] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6997] <... write resumed>) = 65536 [pid 6995] <... exit_group resumed>) = ? [pid 6998] <... openat resumed>) = 4 [pid 5824] <... umount2 resumed>) = 0 [pid 5824] umount2("./227/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./227/file0", [pid 6996] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] umount2("./227/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6995] +++ exited with 0 +++ [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 202.291761][ T6996] loop3: detected capacity change from 0 to 128 [pid 5824] openat(AT_FDCWD, "./227/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6998] ioctl(4, LOOP_SET_FD, 3 [pid 5824] <... openat resumed>) = 4 [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6995, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5824] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] close(4) = 0 [pid 5824] rmdir("./227/file0") = 0 [pid 5824] umount2("./227/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./227/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./227/binderfs" [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 5824] <... unlink resumed>) = 0 [pid 5824] getdents64(3, [pid 5823] <... restart_syscall resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] close(3) = 0 [pid 5824] rmdir("./227") = 0 [pid 5824] mkdir("./228", 0777) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5824] ioctl(3, LOOP_CLR_FD) = 0 [pid 5824] close(3) = 0 [pid 6997] munmap(0x7f957a000000, 138412032 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5823] umount2("./231", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6999 attached [pid 6997] <... munmap resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6998] <... ioctl resumed>) = 0 [pid 6997] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 6999 [pid 5823] openat(AT_FDCWD, "./231", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6998] close(3 [pid 5823] <... openat resumed>) = 3 [pid 5823] newfstatat(3, "", [pid 6999] set_robust_list(0x55557eba4660, 24 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6999] <... set_robust_list resumed>) = 0 [pid 6998] <... close resumed>) = 0 [pid 6997] <... openat resumed>) = 4 [pid 5823] getdents64(3, [pid 6998] close(4 [pid 6997] ioctl(4, LOOP_SET_FD, 3 [pid 6999] chdir("./228" [pid 6998] <... close resumed>) = 0 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 6999] <... chdir resumed>) = 0 [pid 6998] mkdir("./file0", 0777 [pid 5823] umount2("./231/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6999] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6999] setpgid(0, 0) = 0 [pid 6998] <... mkdir resumed>) = 0 [ 202.346704][ T6998] loop2: detected capacity change from 0 to 128 [ 202.370384][ T6996] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 executing program [pid 6999] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6999] write(3, "1000", 4) = 4 [pid 6999] close(3) = 0 [pid 6999] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6999] write(1, "executing program\n", 18) = 18 [pid 6999] memfd_create("syzkaller", 0) = 3 [pid 6999] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 6999] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 6998] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 6999] munmap(0x7f957a000000, 138412032) = 0 [pid 6999] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6999] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 6999] ioctl(4, LOOP_CLR_FD) = 0 [pid 6997] <... ioctl resumed>) = 0 [pid 6996] <... mount resumed>) = 0 [pid 5823] <... umount2 resumed>) = 0 [pid 6996] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5823] umount2("./231/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6996] <... openat resumed>) = 3 [pid 6996] chdir("./file0") = 0 [pid 6996] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6999] ioctl(4, LOOP_SET_FD, 3 [pid 6996] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6999] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 6996] openat(AT_FDCWD, ".", O_RDONLY [pid 6999] close(4 [pid 6996] <... openat resumed>) = 4 [pid 6999] <... close resumed>) = 0 [pid 6996] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 6999] close(3 [pid 6997] close(3 [pid 5823] newfstatat(AT_FDCWD, "./231/file0", [pid 6999] <... close resumed>) = 0 [pid 6997] <... close resumed>) = 0 [pid 6999] openat(AT_FDCWD, ".", O_RDONLY [ 202.400972][ T6997] loop4: detected capacity change from 0 to 128 [pid 6997] close(4 [pid 6996] <... renameat2 resumed>) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6997] <... close resumed>) = 0 [pid 5823] umount2("./231/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6997] mkdir("./file0", 0777 [pid 6999] <... openat resumed>) = 3 [pid 6996] sync( [pid 6999] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = -1 ENOENT (No such file or directory) [pid 6999] sync( [pid 6997] <... mkdir resumed>) = 0 [pid 6997] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./231/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5823] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] close(4) = 0 [pid 5823] rmdir("./231/file0") = 0 [pid 5823] umount2("./231/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./231/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./231/binderfs") = 0 [pid 5823] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] close(3) = 0 [pid 5823] rmdir("./231" [pid 6998] <... mount resumed>) = 0 [pid 5823] <... rmdir resumed>) = 0 [pid 6998] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5823] mkdir("./232", 0777 [pid 6998] <... openat resumed>) = 3 [pid 6998] chdir("./file0") = 0 [ 202.445846][ T6998] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 202.472318][ T6997] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [pid 6998] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5823] <... mkdir resumed>) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 6998] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 6998] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5823] ioctl(3, LOOP_CLR_FD [pid 6998] <... renameat2 resumed>) = 0 [pid 5823] <... ioctl resumed>) = 0 [pid 5823] close(3 [pid 6998] sync( [pid 6997] <... mount resumed>) = 0 [pid 5823] <... close resumed>) = 0 [pid 6997] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7000 attached , child_tidptr=0x55557eba4650) = 7000 [pid 7000] set_robust_list(0x55557eba4660, 24) = 0 [pid 6997] <... openat resumed>) = 3 [pid 7000] chdir("./232" [pid 6997] chdir("./file0" [pid 7000] <... chdir resumed>) = 0 [pid 6997] <... chdir resumed>) = 0 [pid 7000] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6997] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7000] <... prctl resumed>) = 0 [pid 7000] setpgid(0, 0) = 0 [pid 7000] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6999] <... sync resumed>) = 0 [pid 6998] <... sync resumed>) = 0 [pid 6997] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6996] <... sync resumed>) = 0 [pid 6998] exit_group(0 [pid 6996] exit_group(0 [pid 6998] <... exit_group resumed>) = ? [pid 6996] <... exit_group resumed>) = ? [pid 7000] <... openat resumed>) = 3 [pid 6998] +++ exited with 0 +++ [pid 6997] openat(AT_FDCWD, ".", O_RDONLY [pid 6996] +++ exited with 0 +++ [pid 7000] write(3, "1000", 4 [pid 6997] <... openat resumed>) = 4 [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6996, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6998, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 7000] <... write resumed>) = 4 [pid 6999] exit_group(0 [pid 6997] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7000] close(3 [pid 6999] <... exit_group resumed>) = ? [pid 7000] <... close resumed>) = 0 [pid 6999] +++ exited with 0 +++ executing program [pid 7000] symlink("/dev/binderfs", "./binderfs" [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6999, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 7000] <... symlink resumed>) = 0 [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 7000] write(1, "executing program\n", 18) = 18 [pid 7000] memfd_create("syzkaller", 0) = 3 [pid 5824] <... restart_syscall resumed>) = 0 [pid 5826] umount2("./232", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./228", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./232", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7000] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5824] openat(AT_FDCWD, "./228", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7000] <... mmap resumed>) = 0x7f957a000000 [pid 5826] <... openat resumed>) = 3 [pid 5824] <... openat resumed>) = 3 [pid 5826] newfstatat(3, "", [pid 5824] newfstatat(3, "", [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5826] umount2("./232/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7000] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 6997] <... renameat2 resumed>) = 0 [pid 5826] <... umount2 resumed>) = 0 [pid 5824] getdents64(3, 0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 5824] umount2("./228/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7000] <... write resumed>) = 65536 [pid 6997] sync( [pid 5824] newfstatat(AT_FDCWD, "./228/binderfs", [pid 5825] umount2("./229", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7000] munmap(0x7f957a000000, 138412032 [pid 5826] umount2("./232/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7000] <... munmap resumed>) = 0 [pid 5825] openat(AT_FDCWD, "./229", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] unlink("./228/binderfs" [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... openat resumed>) = 3 [pid 7000] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5826] newfstatat(AT_FDCWD, "./232/file0", [pid 5825] newfstatat(3, "", [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7000] <... openat resumed>) = 4 [pid 5826] umount2("./232/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] getdents64(3, [pid 5824] <... unlink resumed>) = 0 [pid 7000] ioctl(4, LOOP_SET_FD, 3 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] close(3 [pid 6997] <... sync resumed>) = 0 [pid 5826] openat(AT_FDCWD, "./232/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] <... close resumed>) = 0 [pid 5825] umount2("./229/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... openat resumed>) = 4 [pid 5824] rmdir("./228" [pid 5826] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5826] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5826] close(4) = 0 [pid 5826] rmdir("./232/file0") = 0 [pid 5826] umount2("./232/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./232/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./232/binderfs") = 0 [pid 5826] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] close(3 [pid 5824] <... rmdir resumed>) = 0 [pid 5826] <... close resumed>) = 0 [pid 6997] exit_group(0 [pid 5826] rmdir("./232" [pid 5824] mkdir("./229", 0777 [pid 5826] <... rmdir resumed>) = 0 [pid 5826] mkdir("./233", 0777 [pid 6997] <... exit_group resumed>) = ? [pid 5824] <... mkdir resumed>) = 0 [pid 5826] <... mkdir resumed>) = 0 [pid 7000] <... ioctl resumed>) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7000] close(3 [pid 5826] <... openat resumed>) = 3 [pid 7000] <... close resumed>) = 0 [pid 5826] ioctl(3, LOOP_CLR_FD [pid 7000] close(4 [pid 5826] <... ioctl resumed>) = 0 [pid 7000] <... close resumed>) = 0 [pid 5826] close(3 [pid 6997] +++ exited with 0 +++ [pid 5826] <... close resumed>) = 0 [pid 5825] <... umount2 resumed>) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6997, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5825] umount2("./229/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7000] mkdir("./file0", 0777 [pid 5827] restart_syscall(<... resuming interrupted clone ...> [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7000] <... mkdir resumed>) = 0 [pid 7000] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5827] <... restart_syscall resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... openat resumed>) = 3 [pid 5825] newfstatat(AT_FDCWD, "./229/file0", [pid 5824] ioctl(3, LOOP_CLR_FD [pid 5827] umount2("./224", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] umount2("./229/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 202.600873][ T7000] loop0: detected capacity change from 0 to 128 [pid 5827] openat(AT_FDCWD, "./224", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] close(3 [pid 5825] openat(AT_FDCWD, "./229/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] <... close resumed>) = 0 ./strace-static-x86_64: Process 7001 attached [pid 5825] <... openat resumed>) = 4 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7001 [pid 7001] set_robust_list(0x55557eba4660, 24) = 0 [pid 5827] newfstatat(3, "", [pid 7001] chdir("./233" [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 7001] <... chdir resumed>) = 0 [pid 5827] umount2("./224/file0", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7002 attached [pid 7001] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7002 [pid 7002] set_robust_list(0x55557eba4660, 24 [pid 7001] <... prctl resumed>) = 0 [pid 5827] <... umount2 resumed>) = 0 [pid 5825] newfstatat(4, "", [pid 7002] <... set_robust_list resumed>) = 0 [pid 7001] setpgid(0, 0 [pid 5827] umount2("./224/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7001] <... setpgid resumed>) = 0 [pid 7002] chdir("./229" [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] getdents64(4, [pid 5827] newfstatat(AT_FDCWD, "./224/file0", [pid 7001] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5827] umount2("./224/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7002] <... chdir resumed>) = 0 [pid 5825] getdents64(4, [pid 7002] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7002] <... prctl resumed>) = 0 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5827] openat(AT_FDCWD, "./224/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7002] setpgid(0, 0 [pid 5825] close(4 [pid 7002] <... setpgid resumed>) = 0 [pid 7001] <... openat resumed>) = 3 [pid 5827] <... openat resumed>) = 4 [pid 5825] <... close resumed>) = 0 [pid 7002] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7001] write(3, "1000", 4 [pid 5827] newfstatat(4, "", [pid 5825] rmdir("./229/file0" [pid 7001] <... write resumed>) = 4 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7002] <... openat resumed>) = 3 [pid 7001] close(3 [pid 5827] getdents64(4, [pid 5825] <... rmdir resumed>) = 0 [pid 7001] <... close resumed>) = 0 [pid 7001] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 executing program [pid 7001] write(1, "executing program\n", 18 [pid 5827] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 7002] write(3, "1000", 4) = 4 [pid 7001] <... write resumed>) = 18 [pid 5825] umount2("./229/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7002] close(3 [pid 5827] close(4 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7002] <... close resumed>) = 0 [pid 7001] memfd_create("syzkaller", 0 [pid 5827] <... close resumed>) = 0 [pid 5825] newfstatat(AT_FDCWD, "./229/binderfs", [pid 7002] symlink("/dev/binderfs", "./binderfs" [pid 7001] <... memfd_create resumed>) = 3 [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7002] <... symlink resumed>) = 0 [pid 7001] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5827] rmdir("./224/file0" [pid 5825] unlink("./229/binderfs" [pid 7001] <... mmap resumed>) = 0x7f957a000000 executing program [pid 7002] write(1, "executing program\n", 18 [pid 7001] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5827] <... rmdir resumed>) = 0 [pid 5825] <... unlink resumed>) = 0 [pid 7002] <... write resumed>) = 18 [pid 7001] <... write resumed>) = 65536 [pid 7002] memfd_create("syzkaller", 0 [pid 7001] munmap(0x7f957a000000, 138412032 [pid 5827] umount2("./224/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] getdents64(3, [pid 7002] <... memfd_create resumed>) = 3 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7002] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5827] newfstatat(AT_FDCWD, "./224/binderfs", [pid 7002] <... mmap resumed>) = 0x7f957a000000 [pid 7001] <... munmap resumed>) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] close(3 [pid 7002] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5827] unlink("./224/binderfs" [pid 5825] <... close resumed>) = 0 [pid 7002] <... write resumed>) = 65536 [pid 7001] <... openat resumed>) = 4 [pid 7000] <... mount resumed>) = 0 [ 202.662058][ T7000] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [pid 5827] <... unlink resumed>) = 0 [pid 5825] rmdir("./229" [pid 7002] munmap(0x7f957a000000, 138412032 [pid 7001] ioctl(4, LOOP_SET_FD, 3 [pid 7000] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5827] getdents64(3, [pid 7002] <... munmap resumed>) = 0 [pid 7000] <... openat resumed>) = 3 [pid 5825] <... rmdir resumed>) = 0 [pid 7002] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5825] mkdir("./230", 0777 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7000] chdir("./file0" [pid 5825] <... mkdir resumed>) = 0 [pid 5827] close(3 [pid 7002] <... openat resumed>) = 4 [pid 7002] ioctl(4, LOOP_SET_FD, 3 [pid 7000] <... chdir resumed>) = 0 [pid 5827] <... close resumed>) = 0 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7000] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5827] rmdir("./224" [pid 7000] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7000] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7000] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7001] <... ioctl resumed>) = 0 [pid 7002] <... ioctl resumed>) = 0 [pid 7000] <... renameat2 resumed>) = 0 [pid 5827] <... rmdir resumed>) = 0 [pid 5825] <... openat resumed>) = 3 [pid 7000] sync( [pid 7002] close(3 [pid 7001] close(3 [pid 7002] <... close resumed>) = 0 [pid 7001] <... close resumed>) = 0 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 7002] close(4 [pid 7001] close(4 [pid 7002] <... close resumed>) = 0 [pid 7001] <... close resumed>) = 0 [pid 7002] mkdir("./file0", 0777 [pid 7001] mkdir("./file0", 0777 [pid 7002] <... mkdir resumed>) = 0 [pid 7001] <... mkdir resumed>) = 0 [pid 5825] <... ioctl resumed>) = 0 [ 202.721647][ T7001] loop3: detected capacity change from 0 to 128 [ 202.733056][ T7002] loop1: detected capacity change from 0 to 128 [pid 7002] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7001] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5825] close(3 [pid 5827] mkdir("./225", 0777 [pid 5825] <... close resumed>) = 0 [pid 5827] <... mkdir resumed>) = 0 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7003 attached [pid 7003] set_robust_list(0x55557eba4660, 24 [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7003 [pid 7003] <... set_robust_list resumed>) = 0 [pid 5827] <... openat resumed>) = 3 [pid 7003] chdir("./230" [pid 5827] ioctl(3, LOOP_CLR_FD) = 0 [pid 5827] close(3 [pid 7001] <... mount resumed>) = 0 [pid 7001] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7001] chdir("./file0" [pid 5827] <... close resumed>) = 0 [pid 7001] <... chdir resumed>) = 0 [pid 7001] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7001] openat(AT_FDCWD, ".", O_RDONLY [pid 7003] <... chdir resumed>) = 0 [pid 7001] <... openat resumed>) = 4 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7003] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7001] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7003] <... prctl resumed>) = 0 [pid 7003] setpgid(0, 0) = 0 ./strace-static-x86_64: Process 7004 attached [pid 7003] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 202.765623][ T7001] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 202.781068][ T7002] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [pid 7003] write(3, "1000", 4 [pid 7004] set_robust_list(0x55557eba4660, 24 [pid 7002] <... mount resumed>) = 0 [pid 7001] <... renameat2 resumed>) = 0 [pid 7003] <... write resumed>) = 4 [pid 7000] <... sync resumed>) = 0 [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7004 [pid 7002] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7001] sync( [pid 7000] exit_group(0 [pid 7002] <... openat resumed>) = 3 [pid 7000] <... exit_group resumed>) = ? [pid 7002] chdir("./file0" [pid 7000] +++ exited with 0 +++ [pid 7004] <... set_robust_list resumed>) = 0 [pid 7003] close(3 [pid 7002] <... chdir resumed>) = 0 [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7000, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 7003] <... close resumed>) = 0 [pid 7004] chdir("./225" [pid 7002] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 7002] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7002] openat(AT_FDCWD, ".", O_RDONLY [pid 7004] <... chdir resumed>) = 0 [pid 7002] <... openat resumed>) = 4 [pid 7002] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5823] <... restart_syscall resumed>) = 0 [pid 7004] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7003] symlink("/dev/binderfs", "./binderfs" [pid 7002] <... renameat2 resumed>) = 0 [pid 7002] sync( [pid 7004] <... prctl resumed>) = 0 [pid 7004] setpgid(0, 0 [pid 5823] umount2("./232", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7004] <... setpgid resumed>) = 0 [pid 5823] openat(AT_FDCWD, "./232", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7004] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5823] <... openat resumed>) = 3 [pid 5823] newfstatat(3, "", [pid 7004] <... openat resumed>) = 3 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7004] write(3, "1000", 4 [pid 5823] getdents64(3, executing program [pid 7004] <... write resumed>) = 4 [pid 7003] <... symlink resumed>) = 0 [pid 7002] <... sync resumed>) = 0 [pid 7004] close(3 [pid 7001] <... sync resumed>) = 0 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 7004] <... close resumed>) = 0 [pid 7003] write(1, "executing program\n", 18 [pid 5823] umount2("./232/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7004] symlink("/dev/binderfs", "./binderfs" [pid 7003] <... write resumed>) = 18 [pid 7004] <... symlink resumed>) = 0 [pid 7001] exit_group(0 [pid 7003] memfd_create("syzkaller", 0executing program [pid 7004] write(1, "executing program\n", 18 [pid 7003] <... memfd_create resumed>) = 3 [pid 7002] exit_group(0 [pid 7001] <... exit_group resumed>) = ? [pid 7004] <... write resumed>) = 18 [pid 5823] <... umount2 resumed>) = 0 [pid 7003] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7002] <... exit_group resumed>) = ? [pid 7001] +++ exited with 0 +++ [pid 7004] memfd_create("syzkaller", 0 [pid 7002] +++ exited with 0 +++ [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7001, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5823] umount2("./232/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7004] <... memfd_create resumed>) = 3 [pid 7003] <... mmap resumed>) = 0x7f957a000000 [pid 5826] restart_syscall(<... resuming interrupted clone ...> [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7002, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7004] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7003] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5826] <... restart_syscall resumed>) = 0 [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 5823] newfstatat(AT_FDCWD, "./232/file0", [pid 7004] <... mmap resumed>) = 0x7f957a000000 [pid 7003] <... write resumed>) = 65536 [pid 5824] <... restart_syscall resumed>) = 0 [pid 5826] umount2("./233", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./233", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5826] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5826] umount2("./233/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7004] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5824] umount2("./229", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7003] munmap(0x7f957a000000, 138412032 [pid 7004] <... write resumed>) = 65536 [pid 7003] <... munmap resumed>) = 0 [pid 5826] <... umount2 resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] umount2("./232/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7004] munmap(0x7f957a000000, 138412032 [pid 7003] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5826] umount2("./233/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] openat(AT_FDCWD, "./229", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7004] <... munmap resumed>) = 0 [pid 7003] <... openat resumed>) = 4 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./232/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] <... openat resumed>) = 3 [pid 5826] newfstatat(AT_FDCWD, "./233/file0", [pid 5824] newfstatat(3, "", [pid 5823] <... openat resumed>) = 4 [pid 7004] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7003] ioctl(4, LOOP_SET_FD, 3 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] newfstatat(4, "", [pid 5826] umount2("./233/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./233/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5826] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5826] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5826] close(4) = 0 [pid 5826] rmdir("./233/file0") = 0 [pid 5824] getdents64(3, [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] getdents64(4, [pid 7004] <... openat resumed>) = 4 [pid 5824] umount2("./229/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 7004] ioctl(4, LOOP_SET_FD, 3 [pid 5824] <... umount2 resumed>) = 0 [pid 5823] getdents64(4, [pid 5824] umount2("./229/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./229/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] umount2("./229/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] umount2("./233/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./229/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] newfstatat(AT_FDCWD, "./233/binderfs", [pid 5824] <... openat resumed>) = 4 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] close(4 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... close resumed>) = 0 [pid 5826] unlink("./233/binderfs" [pid 5824] newfstatat(4, "", [pid 5826] <... unlink resumed>) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5826] getdents64(3, [pid 5824] getdents64(4, [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] rmdir("./232/file0" [pid 5826] close(3 [pid 5824] close(4 [pid 5826] <... close resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 5826] rmdir("./233" [pid 5824] rmdir("./229/file0" [pid 5826] <... rmdir resumed>) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 5826] mkdir("./234", 0777) = 0 [pid 5823] <... rmdir resumed>) = 0 [pid 5824] umount2("./229/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7004] <... ioctl resumed>) = 0 [pid 7003] <... ioctl resumed>) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5823] umount2("./232/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7003] close(3 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7003] <... close resumed>) = 0 [pid 5823] newfstatat(AT_FDCWD, "./232/binderfs", [pid 7004] close(3 [pid 7003] close(4 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./232/binderfs" [pid 7004] <... close resumed>) = 0 [pid 7003] <... close resumed>) = 0 [pid 7004] close(4) = 0 [pid 5824] newfstatat(AT_FDCWD, "./229/binderfs", [pid 5823] <... unlink resumed>) = 0 [pid 7004] mkdir("./file0", 0777 [pid 7003] mkdir("./file0", 0777 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] getdents64(3, [pid 7004] <... mkdir resumed>) = 0 [pid 7003] <... mkdir resumed>) = 0 [pid 5824] unlink("./229/binderfs" [pid 7004] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7003] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5824] <... unlink resumed>) = 0 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] <... openat resumed>) = 3 [pid 5823] close(3 [pid 5826] ioctl(3, LOOP_CLR_FD) = 0 [pid 5824] getdents64(3, [pid 5823] <... close resumed>) = 0 [pid 5826] close(3 [ 202.927385][ T7003] loop2: detected capacity change from 0 to 128 [ 202.940302][ T7004] loop4: detected capacity change from 0 to 128 [pid 5823] rmdir("./232" [pid 5826] <... close resumed>) = 0 [pid 5823] <... rmdir resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] close(3) = 0 [pid 5824] rmdir("./229") = 0 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7005 attached [pid 5824] mkdir("./230", 0777 [pid 5823] mkdir("./233", 0777 [pid 5824] <... mkdir resumed>) = 0 [pid 7005] set_robust_list(0x55557eba4660, 24 [pid 5823] <... mkdir resumed>) = 0 [pid 7005] <... set_robust_list resumed>) = 0 [pid 7005] chdir("./234" [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7005 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7005] <... chdir resumed>) = 0 [pid 5824] <... openat resumed>) = 3 [pid 7005] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5824] ioctl(3, LOOP_CLR_FD [pid 7005] <... prctl resumed>) = 0 [pid 5824] <... ioctl resumed>) = 0 [pid 7005] setpgid(0, 0 [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5823] ioctl(3, LOOP_CLR_FD) = 0 [pid 5823] close(3 [pid 7005] <... setpgid resumed>) = 0 [pid 5824] close(3 [pid 7005] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5824] <... close resumed>) = 0 [pid 5823] <... close resumed>) = 0 [pid 7005] <... openat resumed>) = 3 [pid 7005] write(3, "1000", 4) = 4 [pid 7005] close(3 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7005] <... close resumed>) = 0 [pid 7005] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 7006 attached ) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7006] set_robust_list(0x55557eba4660, 24executing program [pid 7005] write(1, "executing program\n", 18 [pid 7006] <... set_robust_list resumed>) = 0 [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7006 [pid 7005] <... write resumed>) = 18 [pid 7006] chdir("./230" [pid 7005] memfd_create("syzkaller", 0./strace-static-x86_64: Process 7007 attached [pid 7006] <... chdir resumed>) = 0 [pid 7005] <... memfd_create resumed>) = 3 [pid 7006] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7005] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7007 [pid 7006] <... prctl resumed>) = 0 [pid 7007] set_robust_list(0x55557eba4660, 24 [pid 7006] setpgid(0, 0 [pid 7005] <... mmap resumed>) = 0x7f957a000000 [pid 7007] <... set_robust_list resumed>) = 0 [pid 7006] <... setpgid resumed>) = 0 [pid 7007] chdir("./233" [pid 7006] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7005] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7003] <... mount resumed>) = 0 [ 203.000218][ T7003] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 203.016935][ T7004] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [pid 7003] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7007] <... chdir resumed>) = 0 [pid 7006] <... openat resumed>) = 3 [pid 7003] <... openat resumed>) = 3 [pid 7007] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7006] write(3, "1000", 4 [pid 7007] <... prctl resumed>) = 0 [pid 7005] <... write resumed>) = 65536 [pid 7003] chdir("./file0") = 0 [pid 7003] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7003] openat(AT_FDCWD, ".", O_RDONLY [pid 7007] setpgid(0, 0 [pid 7006] <... write resumed>) = 4 [pid 7003] <... openat resumed>) = 4 [pid 7007] <... setpgid resumed>) = 0 [pid 7006] close(3 [pid 7005] munmap(0x7f957a000000, 138412032) = 0 [pid 7005] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7006] <... close resumed>) = 0 [pid 7007] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7006] symlink("/dev/binderfs", "./binderfs" [pid 7005] <... openat resumed>) = 4 [pid 7003] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0executing program [pid 7006] <... symlink resumed>) = 0 [pid 7005] ioctl(4, LOOP_SET_FD, 3 [pid 7004] <... mount resumed>) = 0 [pid 7006] write(1, "executing program\n", 18 [pid 7007] <... openat resumed>) = 3 [pid 7006] <... write resumed>) = 18 [pid 7005] <... ioctl resumed>) = 0 [pid 7004] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7007] write(3, "1000", 4 [pid 7006] memfd_create("syzkaller", 0 [pid 7003] <... renameat2 resumed>) = 0 [pid 7004] <... openat resumed>) = 3 [pid 7003] sync( [pid 7007] <... write resumed>) = 4 [pid 7006] <... memfd_create resumed>) = 3 [pid 7004] chdir("./file0" [pid 7007] close(3 [pid 7006] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7004] <... chdir resumed>) = 0 [pid 7007] <... close resumed>) = 0 [pid 7006] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7004] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7007] symlink("/dev/binderfs", "./binderfs" [pid 7004] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7004] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7004] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = 0 [pid 7006] <... write resumed>) = 65536 [pid 7005] close(3 [pid 7004] sync( [pid 7007] <... symlink resumed>) = 0 [pid 7005] <... close resumed>) = 0 [pid 7005] close(4) = 0 executing program [pid 7006] munmap(0x7f957a000000, 138412032 [pid 7005] mkdir("./file0", 0777 [pid 7007] write(1, "executing program\n", 18) = 18 [pid 7006] <... munmap resumed>) = 0 [pid 7005] <... mkdir resumed>) = 0 [pid 7003] <... sync resumed>) = 0 [pid 7007] memfd_create("syzkaller", 0 [pid 7006] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7005] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [ 203.094756][ T7005] loop3: detected capacity change from 0 to 128 [pid 7003] exit_group(0 [pid 7007] <... memfd_create resumed>) = 3 [pid 7003] <... exit_group resumed>) = ? [pid 7007] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7006] <... openat resumed>) = 4 [pid 7003] +++ exited with 0 +++ [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7003, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5825] restart_syscall(<... resuming interrupted clone ...> [pid 7007] <... mmap resumed>) = 0x7f957a000000 [pid 5825] <... restart_syscall resumed>) = 0 [pid 5825] umount2("./230", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7006] ioctl(4, LOOP_SET_FD, 3 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7007] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5825] openat(AT_FDCWD, "./230", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5825] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 7007] <... write resumed>) = 65536 [pid 5825] umount2("./230/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7006] <... ioctl resumed>) = 0 [pid 7007] munmap(0x7f957a000000, 138412032 [pid 5825] <... umount2 resumed>) = 0 [pid 7007] <... munmap resumed>) = 0 [pid 7007] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7006] close(3 [pid 7007] <... openat resumed>) = 4 [pid 5825] umount2("./230/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7007] ioctl(4, LOOP_SET_FD, 3 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7006] <... close resumed>) = 0 [pid 7006] close(4) = 0 [ 203.162214][ T7006] loop1: detected capacity change from 0 to 128 [ 203.174905][ T7005] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [pid 7006] mkdir("./file0", 0777) = 0 [pid 5825] newfstatat(AT_FDCWD, "./230/file0", [pid 7006] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] umount2("./230/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./230/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7007] <... ioctl resumed>) = 0 [pid 5825] <... openat resumed>) = 4 [pid 5825] newfstatat(4, "", [pid 7007] close(3 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7007] <... close resumed>) = 0 [pid 5825] getdents64(4, [pid 7007] close(4 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] getdents64(4, [pid 7007] <... close resumed>) = 0 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 7007] mkdir("./file0", 0777) = 0 [pid 5825] close(4 [pid 7007] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5825] <... close resumed>) = 0 [pid 5825] rmdir("./230/file0") = 0 [pid 7005] <... mount resumed>) = 0 [pid 5825] umount2("./230/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7005] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7005] <... openat resumed>) = 3 [ 203.208404][ T7007] loop0: detected capacity change from 0 to 128 [ 203.219996][ T7006] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [pid 5825] newfstatat(AT_FDCWD, "./230/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7005] chdir("./file0" [pid 5825] unlink("./230/binderfs" [pid 7006] <... mount resumed>) = 0 [pid 7005] <... chdir resumed>) = 0 [pid 7006] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7005] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5825] <... unlink resumed>) = 0 [pid 7006] <... openat resumed>) = 3 [pid 7005] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5825] getdents64(3, [pid 7007] <... mount resumed>) = 0 [pid 7006] chdir("./file0" [pid 7004] <... sync resumed>) = 0 [pid 7007] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7006] <... chdir resumed>) = 0 [pid 7005] openat(AT_FDCWD, ".", O_RDONLY [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7006] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5825] close(3 [pid 7007] <... openat resumed>) = 3 [pid 7006] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7005] <... openat resumed>) = 4 [pid 7004] exit_group(0 [pid 5825] <... close resumed>) = 0 [pid 7007] chdir("./file0" [pid 7006] openat(AT_FDCWD, ".", O_RDONLY [pid 7005] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5825] rmdir("./230" [pid 7007] <... chdir resumed>) = 0 [pid 7007] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7006] <... openat resumed>) = 4 [pid 7005] <... renameat2 resumed>) = 0 [pid 7004] <... exit_group resumed>) = ? [pid 5825] <... rmdir resumed>) = 0 [pid 7007] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7006] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7005] sync( [pid 7004] +++ exited with 0 +++ [pid 5825] mkdir("./231", 0777 [pid 7007] openat(AT_FDCWD, ".", O_RDONLY [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7004, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5825] <... mkdir resumed>) = 0 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 7007] <... openat resumed>) = 4 [pid 7007] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5825] ioctl(3, LOOP_CLR_FD) = 0 [pid 5825] close(3 [pid 7007] <... renameat2 resumed>) = 0 [pid 7006] <... renameat2 resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 7007] sync( [pid 7006] sync( [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7008 attached [pid 5827] umount2("./225", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7008 [pid 5827] openat(AT_FDCWD, "./225", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7008] set_robust_list(0x55557eba4660, 24 [pid 5827] <... openat resumed>) = 3 [pid 7008] <... set_robust_list resumed>) = 0 [ 203.255904][ T7007] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [pid 5827] newfstatat(3, "", [pid 7008] chdir("./231" [pid 7007] <... sync resumed>) = 0 [pid 7006] <... sync resumed>) = 0 [pid 7005] <... sync resumed>) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] getdents64(3, [pid 7007] exit_group(0 [pid 7006] exit_group(0 [pid 7005] exit_group(0 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 7008] <... chdir resumed>) = 0 [pid 7007] <... exit_group resumed>) = ? [pid 7006] <... exit_group resumed>) = ? [pid 7005] <... exit_group resumed>) = ? [pid 5827] umount2("./225/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7008] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7006] +++ exited with 0 +++ [pid 7005] +++ exited with 0 +++ [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7006, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7005, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 5826] restart_syscall(<... resuming interrupted clone ...> [pid 7008] setpgid(0, 0) = 0 [pid 5824] <... restart_syscall resumed>) = 0 [pid 7008] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7007] +++ exited with 0 +++ [pid 5826] <... restart_syscall resumed>) = 0 [pid 5824] umount2("./230", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7008] write(3, "1000", 4 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7007, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5824] openat(AT_FDCWD, "./230", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 7008] <... write resumed>) = 4 [pid 5826] umount2("./234", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7008] close(3 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7008] <... close resumed>) = 0 [pid 5827] <... umount2 resumed>) = 0 [pid 5826] openat(AT_FDCWD, "./234", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] <... openat resumed>) = 3 [pid 5823] <... restart_syscall resumed>) = 0 [pid 7008] symlink("/dev/binderfs", "./binderfs" [pid 5827] umount2("./225/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... openat resumed>) = 3 [pid 5824] newfstatat(3, "", [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 executing program [pid 5827] newfstatat(AT_FDCWD, "./225/file0", [pid 5824] getdents64(3, [pid 5823] umount2("./233", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7008] <... symlink resumed>) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] newfstatat(3, "", [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7008] write(1, "executing program\n", 18 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] openat(AT_FDCWD, "./233", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7008] <... write resumed>) = 18 [pid 5824] umount2("./230/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... openat resumed>) = 3 [pid 7008] memfd_create("syzkaller", 0 [pid 5826] getdents64(3, [pid 5823] newfstatat(3, "", [pid 5827] umount2("./225/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7008] <... memfd_create resumed>) = 3 [pid 5827] openat(AT_FDCWD, "./225/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] getdents64(3, [pid 5827] <... openat resumed>) = 4 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 7008] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5827] newfstatat(4, "", [pid 5826] umount2("./234/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] umount2("./233/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7008] <... mmap resumed>) = 0x7f957a000000 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7008] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5827] getdents64(4, [pid 7008] <... write resumed>) = 65536 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 7008] munmap(0x7f957a000000, 138412032 [pid 5827] getdents64(4, [pid 5824] <... umount2 resumed>) = 0 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] umount2("./230/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] close(4 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7008] <... munmap resumed>) = 0 [pid 5827] <... close resumed>) = 0 [pid 5824] newfstatat(AT_FDCWD, "./230/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] umount2("./230/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] rmdir("./225/file0" [pid 5824] openat(AT_FDCWD, "./230/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5823] <... umount2 resumed>) = 0 [pid 5826] <... umount2 resumed>) = 0 [pid 5824] newfstatat(4, "", [pid 5823] umount2("./233/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... rmdir resumed>) = 0 [pid 5826] umount2("./234/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] getdents64(4, [pid 5823] newfstatat(AT_FDCWD, "./233/file0", [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./234/file0", [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7008] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] umount2("./225/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] getdents64(4, [pid 5823] umount2("./233/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] umount2("./234/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7008] <... openat resumed>) = 4 [pid 5827] newfstatat(AT_FDCWD, "./225/binderfs", [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] close(4 [pid 5823] openat(AT_FDCWD, "./233/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7008] ioctl(4, LOOP_SET_FD, 3 [pid 5823] <... openat resumed>) = 4 [pid 5823] newfstatat(4, "", [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] openat(AT_FDCWD, "./234/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] unlink("./225/binderfs" [pid 5824] <... close resumed>) = 0 [pid 5826] <... openat resumed>) = 4 [pid 5824] rmdir("./230/file0" [pid 5823] getdents64(4, [pid 5827] <... unlink resumed>) = 0 [pid 5827] getdents64(3, [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 5823] getdents64(4, [pid 5827] close(3 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5827] <... close resumed>) = 0 [pid 5826] newfstatat(4, "", [pid 5824] umount2("./230/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] close(4 [pid 5827] rmdir("./225") = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... close resumed>) = 0 [pid 5823] rmdir("./233/file0" [pid 5824] newfstatat(AT_FDCWD, "./230/binderfs", [pid 5827] mkdir("./226", 0777 [pid 5826] getdents64(4, [pid 5823] <... rmdir resumed>) = 0 [pid 5827] <... mkdir resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] umount2("./233/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7008] <... ioctl resumed>) = 0 [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5826] getdents64(4, [pid 5824] unlink("./230/binderfs" [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7008] close(3 [pid 5827] <... openat resumed>) = 3 [pid 5826] close(4 [pid 5824] <... unlink resumed>) = 0 [pid 5823] newfstatat(AT_FDCWD, "./233/binderfs", [pid 5826] <... close resumed>) = 0 [pid 5827] ioctl(3, LOOP_CLR_FD [pid 5826] rmdir("./234/file0" [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] getdents64(3, [pid 7008] <... close resumed>) = 0 [pid 7008] close(4 [pid 5827] <... ioctl resumed>) = 0 [pid 5826] <... rmdir resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] unlink("./233/binderfs" [pid 7008] <... close resumed>) = 0 [pid 5824] close(3 [pid 7008] mkdir("./file0", 0777 [pid 5827] close(3 [pid 5826] umount2("./234/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... close resumed>) = 0 [pid 5823] <... unlink resumed>) = 0 [pid 5824] rmdir("./230" [pid 5823] getdents64(3, [pid 5827] <... close resumed>) = 0 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7008] <... mkdir resumed>) = 0 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... rmdir resumed>) = 0 [pid 5823] close(3 [pid 5826] newfstatat(AT_FDCWD, "./234/binderfs", [pid 5824] mkdir("./231", 0777 [pid 5823] <... close resumed>) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] rmdir("./233"./strace-static-x86_64: Process 7009 attached [pid 7008] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5826] unlink("./234/binderfs" [pid 5824] <... mkdir resumed>) = 0 [pid 7009] set_robust_list(0x55557eba4660, 24) = 0 [pid 7009] chdir("./226" [pid 5826] <... unlink resumed>) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7009] <... chdir resumed>) = 0 [pid 7009] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7009] setpgid(0, 0 [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7009 [pid 5826] getdents64(3, [pid 5824] <... openat resumed>) = 3 [pid 5823] <... rmdir resumed>) = 0 [pid 7009] <... setpgid resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] ioctl(3, LOOP_CLR_FD [pid 5823] mkdir("./234", 0777 [ 203.409155][ T7008] loop2: detected capacity change from 0 to 128 [pid 5826] close(3 [pid 7009] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5826] <... close resumed>) = 0 [pid 5824] <... ioctl resumed>) = 0 [pid 5823] <... mkdir resumed>) = 0 [pid 5826] rmdir("./234" [pid 5824] close(3 [pid 7009] write(3, "1000", 4 [pid 5826] <... rmdir resumed>) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7009] <... write resumed>) = 4 [pid 5826] mkdir("./235", 0777 [pid 5824] <... close resumed>) = 0 [pid 5823] <... openat resumed>) = 3 [pid 7009] close(3) = 0 [pid 7009] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 7009] write(1, "executing program\n", 18) = 18 [pid 7009] memfd_create("syzkaller", 0) = 3 [pid 7009] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 5823] ioctl(3, LOOP_CLR_FD [pid 7009] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 7009] munmap(0x7f957a000000, 138412032) = 0 [pid 7009] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5823] <... ioctl resumed>) = 0 [pid 7009] ioctl(4, LOOP_SET_FD, 3 [pid 5826] <... mkdir resumed>) = 0 [pid 5823] close(3 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557eba4650) = 7010 [pid 5823] <... close resumed>) = 0 ./strace-static-x86_64: Process 7010 attached [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7010] set_robust_list(0x55557eba4660, 24) = 0 [pid 7010] chdir("./231"./strace-static-x86_64: Process 7011 attached ) = 0 [pid 5826] <... openat resumed>) = 3 [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7011 [pid 7011] set_robust_list(0x55557eba4660, 24 [pid 7010] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5826] ioctl(3, LOOP_CLR_FD [pid 7010] <... prctl resumed>) = 0 [pid 5826] <... ioctl resumed>) = 0 [pid 7011] <... set_robust_list resumed>) = 0 [pid 7010] setpgid(0, 0) = 0 [pid 7010] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7010] write(3, "1000", 4) = 4 [pid 7010] close(3) = 0 [pid 7011] chdir("./234" [pid 7010] symlink("/dev/binderfs", "./binderfs" [pid 5826] close(3 [pid 7010] <... symlink resumed>) = 0 [pid 7010] write(1, "executing program\n", 18executing program [pid 7011] <... chdir resumed>) = 0 [pid 5826] <... close resumed>) = 0 [pid 7011] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7011] <... prctl resumed>) = 0 [pid 7010] <... write resumed>) = 18 [pid 7010] memfd_create("syzkaller", 0 [pid 7011] setpgid(0, 0 [pid 7010] <... memfd_create resumed>) = 3 [pid 7011] <... setpgid resumed>) = 0 [pid 7010] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7011] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7010] <... mmap resumed>) = 0x7f957a000000 [pid 7011] <... openat resumed>) = 3 [pid 7010] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7011] write(3, "1000", 4) = 4 ./strace-static-x86_64: Process 7012 attached [pid 7011] close(3 [pid 7010] <... write resumed>) = 65536 [pid 7011] <... close resumed>) = 0 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7012 [pid 7012] set_robust_list(0x55557eba4660, 24 [pid 7011] symlink("/dev/binderfs", "./binderfs" [pid 7010] munmap(0x7f957a000000, 138412032 [pid 7009] <... ioctl resumed>) = 0 [pid 7008] <... mount resumed>) = 0 [pid 7012] <... set_robust_list resumed>) = 0 [pid 7011] <... symlink resumed>) = 0 [pid 7010] <... munmap resumed>) = 0 [pid 7009] close(3 [pid 7008] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7012] chdir("./235" [pid 7008] <... openat resumed>) = 3 [pid 7012] <... chdir resumed>) = 0 [pid 7011] write(1, "executing program\n", 18 [pid 7010] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7009] <... close resumed>) = 0 [pid 7008] chdir("./file0" [pid 7012] prctl(PR_SET_PDEATHSIG, SIGKILL [ 203.474596][ T7008] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 203.498333][ T7009] loop4: detected capacity change from 0 to 128 [pid 7010] <... openat resumed>) = 4 executing program [pid 7009] close(4 [pid 7012] <... prctl resumed>) = 0 [pid 7011] <... write resumed>) = 18 [pid 7010] ioctl(4, LOOP_SET_FD, 3 [pid 7009] <... close resumed>) = 0 [pid 7012] setpgid(0, 0 [pid 7011] memfd_create("syzkaller", 0 [pid 7009] mkdir("./file0", 0777 [pid 7008] <... chdir resumed>) = 0 [pid 7012] <... setpgid resumed>) = 0 [pid 7011] <... memfd_create resumed>) = 3 [pid 7009] <... mkdir resumed>) = 0 [pid 7012] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7011] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7009] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7011] <... mmap resumed>) = 0x7f957a000000 [pid 7008] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7012] <... openat resumed>) = 3 [pid 7011] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7008] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7008] openat(AT_FDCWD, ".", O_RDONLY [pid 7012] write(3, "1000", 4 [pid 7011] <... write resumed>) = 65536 [pid 7008] <... openat resumed>) = 4 [pid 7012] <... write resumed>) = 4 [pid 7011] munmap(0x7f957a000000, 138412032 [pid 7012] close(3 [pid 7011] <... munmap resumed>) = 0 [pid 7008] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7012] <... close resumed>) = 0 [pid 7011] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7012] symlink("/dev/binderfs", "./binderfs" [pid 7011] <... openat resumed>) = 4 [pid 7012] <... symlink resumed>) = 0 [pid 7011] ioctl(4, LOOP_SET_FD, 3 [pid 7008] <... renameat2 resumed>) = 0 [pid 7008] sync(executing program [pid 7012] write(1, "executing program\n", 18 [pid 7010] <... ioctl resumed>) = 0 [pid 7012] <... write resumed>) = 18 [pid 7012] memfd_create("syzkaller", 0) = 3 [pid 7010] close(3 [pid 7012] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7010] <... close resumed>) = 0 [pid 7012] <... mmap resumed>) = 0x7f957a000000 [pid 7010] close(4 [pid 7012] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7010] <... close resumed>) = 0 [pid 7012] <... write resumed>) = 65536 [pid 7010] mkdir("./file0", 0777 [pid 7012] munmap(0x7f957a000000, 138412032 [pid 7010] <... mkdir resumed>) = 0 [pid 7012] <... munmap resumed>) = 0 [pid 7010] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [ 203.557332][ T7010] loop1: detected capacity change from 0 to 128 [ 203.587732][ T7009] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 203.598923][ T7011] loop0: detected capacity change from 0 to 128 [pid 7012] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 7011] <... ioctl resumed>) = 0 [pid 7012] ioctl(4, LOOP_SET_FD, 3 [pid 7011] close(3) = 0 [pid 7011] close(4) = 0 [pid 7011] mkdir("./file0", 0777) = 0 [pid 7011] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7012] <... ioctl resumed>) = 0 [pid 7012] close(3) = 0 [pid 7012] close(4) = 0 [pid 7012] mkdir("./file0", 0777) = 0 [ 203.630285][ T7012] loop3: detected capacity change from 0 to 128 [ 203.645026][ T7010] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 203.655725][ T7011] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [pid 7012] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7009] <... mount resumed>) = 0 [pid 7009] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7009] chdir("./file0") = 0 [pid 7009] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7009] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7009] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7010] <... mount resumed>) = 0 [pid 7009] <... renameat2 resumed>) = 0 [pid 7010] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7009] sync( [pid 7010] <... openat resumed>) = 3 [pid 7010] chdir("./file0") = 0 [pid 7010] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7011] <... mount resumed>) = 0 [pid 7010] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7012] <... mount resumed>) = 0 [pid 7011] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7012] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7011] chdir("./file0") = 0 [pid 7012] chdir("./file0" [ 203.680639][ T7012] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [pid 7011] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7010] openat(AT_FDCWD, ".", O_RDONLY [pid 7012] <... chdir resumed>) = 0 [pid 7010] <... openat resumed>) = 4 [pid 7012] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7010] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7012] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7011] openat(AT_FDCWD, ".", O_RDONLY [pid 7012] openat(AT_FDCWD, ".", O_RDONLY [pid 7011] <... openat resumed>) = 4 [pid 7012] <... openat resumed>) = 4 [pid 7011] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7012] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7011] <... renameat2 resumed>) = 0 [pid 7010] <... renameat2 resumed>) = 0 [pid 7011] sync( [pid 7010] sync( [pid 7012] <... renameat2 resumed>) = 0 [pid 7010] <... sync resumed>) = 0 [pid 7009] <... sync resumed>) = 0 [pid 7008] <... sync resumed>) = 0 [pid 7010] exit_group(0 [pid 7009] exit_group(0 [pid 7011] <... sync resumed>) = 0 [pid 7010] <... exit_group resumed>) = ? [pid 7011] exit_group(0 [pid 7010] +++ exited with 0 +++ [pid 7009] <... exit_group resumed>) = ? [pid 7008] exit_group(0 [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7010, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 7012] sync( [pid 7011] <... exit_group resumed>) = ? [pid 7009] +++ exited with 0 +++ [pid 7008] <... exit_group resumed>) = ? [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7009, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7012] <... sync resumed>) = 0 [pid 7011] +++ exited with 0 +++ [pid 7008] +++ exited with 0 +++ [pid 5824] <... restart_syscall resumed>) = 0 [pid 7012] exit_group(0 [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7011, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7012] <... exit_group resumed>) = ? [pid 7012] +++ exited with 0 +++ [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7008, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5827] umount2("./226", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7012, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] restart_syscall(<... resuming interrupted clone ...> [pid 5825] restart_syscall(<... resuming interrupted clone ...> [pid 5824] umount2("./231", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] openat(AT_FDCWD, "./226", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] umount2("./234", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... openat resumed>) = 3 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] newfstatat(3, "", [pid 5824] openat(AT_FDCWD, "./231", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] openat(AT_FDCWD, "./234", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] <... restart_syscall resumed>) = 0 [pid 5825] <... restart_syscall resumed>) = 0 [pid 5824] <... openat resumed>) = 3 [pid 5823] <... openat resumed>) = 3 [pid 5827] getdents64(3, [pid 5824] newfstatat(3, "", [pid 5823] newfstatat(3, "", [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] umount2("./231", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] umount2("./226/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] umount2("./235", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] getdents64(3, [pid 5823] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5825] openat(AT_FDCWD, "./231", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] umount2("./234/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... openat resumed>) = 3 [pid 5825] newfstatat(3, "", [pid 5824] umount2("./231/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(3, [pid 5826] openat(AT_FDCWD, "./235", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5826] <... openat resumed>) = 3 [pid 5825] umount2("./231/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5826] umount2("./235/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... umount2 resumed>) = 0 [pid 5823] umount2("./234/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./234/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] umount2("./234/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./234/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5823] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] close(4) = 0 [pid 5825] <... umount2 resumed>) = 0 [pid 5823] rmdir("./234/file0" [pid 5827] <... umount2 resumed>) = 0 [pid 5824] <... umount2 resumed>) = 0 [pid 5823] <... rmdir resumed>) = 0 [pid 5827] umount2("./226/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... umount2 resumed>) = 0 [pid 5824] umount2("./231/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] umount2("./235/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./231/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] umount2("./234/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] newfstatat(AT_FDCWD, "./226/file0", [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./231/file0", [pid 5825] newfstatat(AT_FDCWD, "./231/file0", [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./235/file0", [pid 5823] newfstatat(AT_FDCWD, "./234/binderfs", [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] umount2("./231/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] unlink("./234/binderfs" [pid 5826] umount2("./235/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] umount2("./231/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... unlink resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./231/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] getdents64(3, [pid 5826] openat(AT_FDCWD, "./235/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] umount2("./226/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... openat resumed>) = 4 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... openat resumed>) = 4 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] newfstatat(4, "", [pid 5825] newfstatat(4, "", [pid 5823] close(3 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] getdents64(4, [pid 5825] getdents64(4, [pid 5824] openat(AT_FDCWD, "./231/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] <... close resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5827] openat(AT_FDCWD, "./226/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] getdents64(4, [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] <... openat resumed>) = 4 [pid 5823] rmdir("./234" [pid 5827] <... openat resumed>) = 4 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5825] getdents64(4, [pid 5824] newfstatat(4, "", [pid 5827] newfstatat(4, "", [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] close(4 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] getdents64(4, [pid 5823] <... rmdir resumed>) = 0 [pid 5827] getdents64(4, [pid 5826] <... close resumed>) = 0 [pid 5825] close(4 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5826] rmdir("./235/file0" [pid 5825] <... close resumed>) = 0 [pid 5824] getdents64(4, [pid 5823] mkdir("./235", 0777 [pid 5827] getdents64(4, [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] close(4 [pid 5827] close(4 [pid 5826] <... rmdir resumed>) = 0 [pid 5825] rmdir("./231/file0" [pid 5824] <... close resumed>) = 0 [pid 5827] <... close resumed>) = 0 [pid 5824] rmdir("./231/file0" [pid 5827] rmdir("./226/file0" [pid 5826] umount2("./235/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... rmdir resumed>) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 5823] <... mkdir resumed>) = 0 [pid 5827] <... rmdir resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] umount2("./231/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./231/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5827] umount2("./226/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./235/binderfs", [pid 5825] newfstatat(AT_FDCWD, "./231/binderfs", [pid 5824] newfstatat(AT_FDCWD, "./231/binderfs", [pid 5823] <... openat resumed>) = 3 [pid 5827] newfstatat(AT_FDCWD, "./226/binderfs", [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] ioctl(3, LOOP_CLR_FD [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./235/binderfs" [pid 5825] unlink("./231/binderfs" [pid 5824] unlink("./231/binderfs" [pid 5827] unlink("./226/binderfs" [pid 5825] <... unlink resumed>) = 0 [pid 5824] <... unlink resumed>) = 0 [pid 5823] <... ioctl resumed>) = 0 [pid 5827] <... unlink resumed>) = 0 [pid 5826] <... unlink resumed>) = 0 [pid 5825] getdents64(3, [pid 5823] close(3 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] close(3 [pid 5827] getdents64(3, [pid 5824] <... close resumed>) = 0 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5825] close(3 [pid 5823] <... close resumed>) = 0 [pid 5827] close(3 [pid 5825] <... close resumed>) = 0 [pid 5824] rmdir("./231" [pid 5827] <... close resumed>) = 0 [pid 5825] rmdir("./231" [pid 5824] <... rmdir resumed>) = 0 [pid 5827] rmdir("./226") = 0 [pid 5825] <... rmdir resumed>) = 0 [pid 5824] mkdir("./232", 0777 [pid 5827] mkdir("./227", 0777 [pid 5824] <... mkdir resumed>) = 0 [pid 5827] <... mkdir resumed>) = 0 [pid 5825] mkdir("./232", 0777 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5826] getdents64(3, [pid 5825] <... mkdir resumed>) = 0 [pid 5824] <... openat resumed>) = 3 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5826] close(3 [pid 5824] ioctl(3, LOOP_CLR_FD [pid 5827] <... openat resumed>) = 3 [pid 5827] ioctl(3, LOOP_CLR_FD) = 0 [pid 5824] <... ioctl resumed>) = 0 [pid 5827] close(3 [pid 5824] close(3) = 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5826] <... close resumed>) = 0 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5826] rmdir("./235"./strace-static-x86_64: Process 7013 attached [pid 5825] <... openat resumed>) = 3 [pid 5826] <... rmdir resumed>) = 0 [pid 7013] set_robust_list(0x55557eba4660, 24) = 0 ./strace-static-x86_64: Process 7014 attached [pid 5827] <... close resumed>) = 0 [pid 5826] mkdir("./236", 0777 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 7013] chdir("./232" [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7013 [pid 7013] <... chdir resumed>) = 0 [pid 7013] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7013] <... prctl resumed>) = 0 [pid 5825] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 7015 attached [pid 7013] setpgid(0, 0) = 0 [pid 7013] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7015] set_robust_list(0x55557eba4660, 24 [pid 5826] <... mkdir resumed>) = 0 [pid 5825] close(3 [pid 7015] <... set_robust_list resumed>) = 0 [pid 7013] <... openat resumed>) = 3 [pid 7015] chdir("./227" [pid 7013] write(3, "1000", 4 [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7015 [pid 7013] <... write resumed>) = 4 [pid 7015] <... chdir resumed>) = 0 [pid 7013] close(3 [pid 7015] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7013] <... close resumed>) = 0 [pid 7015] <... prctl resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7014 [pid 7015] setpgid(0, 0 [pid 7013] symlink("/dev/binderfs", "./binderfs" [pid 7014] set_robust_list(0x55557eba4660, 24 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7015] <... setpgid resumed>) = 0 [pid 7013] <... symlink resumed>) = 0 [pid 7015] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7013] write(1, "executing program\n", 18executing program ./strace-static-x86_64: Process 7016 attached [pid 7015] write(3, "1000", 4 [pid 7013] <... write resumed>) = 18 [pid 7014] <... set_robust_list resumed>) = 0 [pid 5826] <... openat resumed>) = 3 [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7016 [pid 7016] set_robust_list(0x55557eba4660, 24 [pid 7015] <... write resumed>) = 4 [pid 7014] chdir("./235" [pid 7013] memfd_create("syzkaller", 0 [pid 5826] ioctl(3, LOOP_CLR_FD [pid 7016] <... set_robust_list resumed>) = 0 [pid 7015] close(3 [pid 7014] <... chdir resumed>) = 0 [pid 5826] <... ioctl resumed>) = 0 [pid 7016] chdir("./232" [pid 7015] <... close resumed>) = 0 [pid 7013] <... memfd_create resumed>) = 3 [pid 5826] close(3 [pid 7015] symlink("/dev/binderfs", "./binderfs" [pid 7016] <... chdir resumed>) = 0 [pid 7015] <... symlink resumed>) = 0 [pid 7013] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5826] <... close resumed>) = 0 [pid 7014] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7016] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7014] <... prctl resumed>) = 0 [pid 7013] <... mmap resumed>) = 0x7f957a000000 [pid 7016] <... prctl resumed>) = 0 [pid 7015] write(1, "executing program\n", 18 [pid 7014] setpgid(0, 0 [pid 7013] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7014] <... setpgid resumed>) = 0 executing program [pid 7016] setpgid(0, 0 [pid 7015] <... write resumed>) = 18 [pid 7014] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 7017 attached [pid 7016] <... setpgid resumed>) = 0 [pid 7015] memfd_create("syzkaller", 0 [pid 7013] <... write resumed>) = 65536 [pid 7016] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7014] <... openat resumed>) = 3 [pid 7015] <... memfd_create resumed>) = 3 [pid 7016] write(3, "1000", 4 [pid 7015] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7016] <... write resumed>) = 4 [pid 7015] <... mmap resumed>) = 0x7f957a000000 [pid 7013] munmap(0x7f957a000000, 138412032 [pid 7016] close(3 [pid 7014] write(3, "1000", 4 [pid 7013] <... munmap resumed>) = 0 [pid 7017] set_robust_list(0x55557eba4660, 24 [pid 7016] <... close resumed>) = 0 [pid 7015] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7014] <... write resumed>) = 4 [pid 7017] <... set_robust_list resumed>) = 0 [pid 7016] symlink("/dev/binderfs", "./binderfs" [pid 7013] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7017] chdir("./236" [pid 7014] close(3 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7017 [pid 7017] <... chdir resumed>) = 0 [pid 7014] <... close resumed>) = 0 [pid 7017] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7016] <... symlink resumed>) = 0 [pid 7015] <... write resumed>) = 65536 [pid 7014] symlink("/dev/binderfs", "./binderfs" [pid 7013] <... openat resumed>) = 4 executing program [pid 7016] write(1, "executing program\n", 18 [pid 7014] <... symlink resumed>) = 0 [pid 7017] <... prctl resumed>) = 0 [pid 7016] <... write resumed>) = 18 [pid 7017] setpgid(0, 0) = 0 [pid 7016] memfd_create("syzkaller", 0 [pid 7013] ioctl(4, LOOP_SET_FD, 3executing program [pid 7017] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7014] write(1, "executing program\n", 18 [pid 7016] <... memfd_create resumed>) = 3 [pid 7014] <... write resumed>) = 18 [pid 7016] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7014] memfd_create("syzkaller", 0 [pid 7016] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7015] munmap(0x7f957a000000, 138412032) = 0 [pid 7014] <... memfd_create resumed>) = 3 [pid 7017] <... openat resumed>) = 3 [pid 7014] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7017] write(3, "1000", 4 [pid 7014] <... mmap resumed>) = 0x7f957a000000 [pid 7017] <... write resumed>) = 4 [pid 7017] close(3 [pid 7016] <... write resumed>) = 65536 [pid 7015] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7014] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7017] <... close resumed>) = 0 [pid 7017] symlink("/dev/binderfs", "./binderfs" [pid 7016] munmap(0x7f957a000000, 138412032 [pid 7015] <... openat resumed>) = 4 [pid 7016] <... munmap resumed>) = 0 [pid 7015] ioctl(4, LOOP_SET_FD, 3executing program [pid 7017] <... symlink resumed>) = 0 [pid 7016] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7014] <... write resumed>) = 65536 [pid 7017] write(1, "executing program\n", 18) = 18 [pid 7016] <... openat resumed>) = 4 [pid 7016] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7014] munmap(0x7f957a000000, 138412032 [pid 7017] memfd_create("syzkaller", 0) = 3 [pid 7014] <... munmap resumed>) = 0 [pid 7017] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7014] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7017] <... mmap resumed>) = 0x7f957a000000 [pid 7014] <... openat resumed>) = 4 [pid 7013] <... ioctl resumed>) = 0 [pid 7017] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7013] close(3 [pid 7014] ioctl(4, LOOP_SET_FD, 3 [pid 7013] <... close resumed>) = 0 [pid 7013] close(4) = 0 [pid 7013] mkdir("./file0", 0777) = 0 [pid 7013] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7015] <... ioctl resumed>) = 0 [pid 7015] close(3) = 0 [pid 7015] close(4) = 0 [ 203.959636][ T7013] loop1: detected capacity change from 0 to 128 [ 203.974988][ T7015] loop4: detected capacity change from 0 to 128 [ 203.984815][ T7016] loop2: detected capacity change from 0 to 128 [ 203.995977][ T7014] loop0: detected capacity change from 0 to 128 [pid 7017] <... write resumed>) = 65536 [pid 7015] mkdir("./file0", 0777 [pid 7017] munmap(0x7f957a000000, 138412032 [pid 7014] <... ioctl resumed>) = 0 [pid 7017] <... munmap resumed>) = 0 [pid 7017] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7014] close(3 [pid 7016] close(3 [pid 7014] <... close resumed>) = 0 [pid 7017] <... openat resumed>) = 4 [pid 7014] close(4 [pid 7017] ioctl(4, LOOP_SET_FD, 3 [pid 7016] <... close resumed>) = 0 [pid 7014] <... close resumed>) = 0 [pid 7016] close(4 [pid 7014] mkdir("./file0", 0777 [pid 7016] <... close resumed>) = 0 [pid 7015] <... mkdir resumed>) = 0 [pid 7016] mkdir("./file0", 0777 [pid 7015] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7016] <... mkdir resumed>) = 0 [pid 7016] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7017] <... ioctl resumed>) = 0 [pid 7017] close(3) = 0 [pid 7017] close(4 [pid 7014] <... mkdir resumed>) = 0 [pid 7017] <... close resumed>) = 0 [pid 7014] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7017] mkdir("./file0", 0777) = 0 [ 204.004039][ T7013] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 204.016053][ T7017] loop3: detected capacity change from 0 to 128 [ 204.023671][ T7015] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 204.023722][ T7016] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 204.047202][ T7014] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [pid 7017] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7016] <... mount resumed>) = 0 [pid 7016] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7015] <... mount resumed>) = 0 [pid 7013] <... mount resumed>) = 0 [pid 7015] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7013] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7015] <... openat resumed>) = 3 [pid 7013] <... openat resumed>) = 3 [pid 7014] <... mount resumed>) = 0 [pid 7015] chdir("./file0" [pid 7014] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7013] chdir("./file0" [pid 7016] chdir("./file0") = 0 [pid 7015] <... chdir resumed>) = 0 [pid 7014] <... openat resumed>) = 3 [pid 7013] <... chdir resumed>) = 0 [pid 7016] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7015] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7014] chdir("./file0" [pid 7013] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7016] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7015] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7014] <... chdir resumed>) = 0 [pid 7013] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7016] openat(AT_FDCWD, ".", O_RDONLY [pid 7014] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7016] <... openat resumed>) = 4 [pid 7015] openat(AT_FDCWD, ".", O_RDONLY [pid 7014] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7013] openat(AT_FDCWD, ".", O_RDONLY [pid 7016] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7014] openat(AT_FDCWD, ".", O_RDONLY [pid 7015] <... openat resumed>) = 4 [pid 7014] <... openat resumed>) = 4 [pid 7013] <... openat resumed>) = 4 [pid 7014] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7015] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7014] <... renameat2 resumed>) = 0 [pid 7013] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7016] <... renameat2 resumed>) = 0 [pid 7014] sync( [pid 7016] sync( [pid 7013] <... renameat2 resumed>) = 0 [pid 7015] <... renameat2 resumed>) = 0 [pid 7013] sync( [pid 7015] sync( [pid 7017] <... mount resumed>) = 0 [ 204.063659][ T7017] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [pid 7017] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7017] chdir("./file0") = 0 [pid 7017] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7017] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7017] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = 0 [pid 7017] sync() = 0 [pid 7017] exit_group(0 [pid 7016] <... sync resumed>) = 0 [pid 7015] <... sync resumed>) = 0 [pid 7014] <... sync resumed>) = 0 [pid 7013] <... sync resumed>) = 0 [pid 7017] <... exit_group resumed>) = ? [pid 7016] exit_group(0 [pid 7015] exit_group(0 [pid 7014] exit_group(0 [pid 7013] exit_group(0 [pid 7016] <... exit_group resumed>) = ? [pid 7015] <... exit_group resumed>) = ? [pid 7014] <... exit_group resumed>) = ? [pid 7013] <... exit_group resumed>) = ? [pid 7015] +++ exited with 0 +++ [pid 7013] +++ exited with 0 +++ [pid 7017] +++ exited with 0 +++ [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7015, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5827] restart_syscall(<... resuming interrupted clone ...> [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7013, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5824] umount2("./232", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... restart_syscall resumed>) = 0 [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7017, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 7014] +++ exited with 0 +++ [pid 5826] restart_syscall(<... resuming interrupted clone ...> [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... restart_syscall resumed>) = 0 [pid 5824] openat(AT_FDCWD, "./232", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7014, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 7016] +++ exited with 0 +++ [pid 5827] umount2("./227", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7016, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5824] <... openat resumed>) = 3 [pid 5827] openat(AT_FDCWD, "./227", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] umount2("./236", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] newfstatat(3, "", [pid 5823] umount2("./235", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... openat resumed>) = 3 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./236", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] openat(AT_FDCWD, "./235", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] newfstatat(3, "", [pid 5826] <... openat resumed>) = 3 [pid 5824] getdents64(3, [pid 5823] <... openat resumed>) = 3 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] newfstatat(3, "", [pid 5827] getdents64(3, [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5826] newfstatat(3, "", [pid 5824] umount2("./232/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] getdents64(3, [pid 5827] umount2("./227/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] umount2("./235/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./232", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] getdents64(3, [pid 5825] openat(AT_FDCWD, "./232", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5825] <... openat resumed>) = 3 [pid 5826] umount2("./236/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5825] umount2("./232/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... umount2 resumed>) = 0 [pid 5824] umount2("./232/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./232/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] umount2("./232/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./232/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5823] <... umount2 resumed>) = 0 [pid 5824] newfstatat(4, "", [pid 5823] umount2("./235/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(4, [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./235/file0", [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] getdents64(4, [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] close(4 [pid 5823] umount2("./235/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... close resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] rmdir("./232/file0" [pid 5823] openat(AT_FDCWD, "./235/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5823] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 5824] umount2("./232/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] getdents64(4, [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] newfstatat(AT_FDCWD, "./232/binderfs", [pid 5823] getdents64(4, [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] unlink("./232/binderfs") = 0 [pid 5823] close(4 [pid 5824] getdents64(3, [pid 5827] <... umount2 resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] <... close resumed>) = 0 [pid 5827] umount2("./227/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] close(3 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... close resumed>) = 0 [pid 5823] rmdir("./235/file0" [pid 5827] newfstatat(AT_FDCWD, "./227/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] rmdir("./232" [pid 5823] <... rmdir resumed>) = 0 [pid 5827] umount2("./227/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] umount2("./235/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] <... rmdir resumed>) = 0 [pid 5823] newfstatat(AT_FDCWD, "./235/binderfs", [pid 5824] mkdir("./233", 0777 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] openat(AT_FDCWD, "./227/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] <... mkdir resumed>) = 0 [pid 5823] unlink("./235/binderfs" [pid 5827] <... openat resumed>) = 4 [pid 5826] <... umount2 resumed>) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5823] <... unlink resumed>) = 0 [pid 5827] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] umount2("./236/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... openat resumed>) = 3 [pid 5823] getdents64(3, [pid 5827] getdents64(4, [pid 5824] ioctl(3, LOOP_CLR_FD [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... ioctl resumed>) = 0 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5827] getdents64(4, [pid 5826] newfstatat(AT_FDCWD, "./236/file0", [pid 5824] close(3 [pid 5823] close(3 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... close resumed>) = 0 [pid 5823] <... close resumed>) = 0 [pid 5827] close(4 [pid 5826] umount2("./236/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... umount2 resumed>) = 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5827] <... close resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] umount2("./232/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] rmdir("./235" [pid 5826] openat(AT_FDCWD, "./236/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 7018 attached [pid 5827] rmdir("./227/file0" [pid 5826] <... openat resumed>) = 4 [pid 5825] newfstatat(AT_FDCWD, "./232/file0", [pid 7018] set_robust_list(0x55557eba4660, 24 [pid 5827] <... rmdir resumed>) = 0 [pid 5826] newfstatat(4, "", [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7018 [pid 5823] mkdir("./236", 0777 [pid 7018] <... set_robust_list resumed>) = 0 [pid 5827] umount2("./227/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./232/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7018] chdir("./233" [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./232/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] newfstatat(AT_FDCWD, "./227/binderfs", [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7018] <... chdir resumed>) = 0 [pid 5823] <... mkdir resumed>) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7018] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5827] unlink("./227/binderfs" [pid 5826] getdents64(4, [pid 5825] <... openat resumed>) = 4 [pid 7018] setpgid(0, 0 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] newfstatat(4, "", [pid 7018] <... setpgid resumed>) = 0 [pid 5827] <... unlink resumed>) = 0 [pid 5826] getdents64(4, [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7018] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5827] getdents64(3, [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5825] getdents64(4, [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7018] <... openat resumed>) = 3 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] close(4 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 7018] write(3, "1000", 4 [pid 5827] close(3 [pid 5826] <... close resumed>) = 0 [pid 5825] getdents64(4, [pid 5823] <... openat resumed>) = 3 [pid 7018] <... write resumed>) = 4 [pid 5827] <... close resumed>) = 0 [pid 5826] rmdir("./236/file0" [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] ioctl(3, LOOP_CLR_FD [pid 7018] close(3 [pid 5827] rmdir("./227" [pid 5826] <... rmdir resumed>) = 0 [pid 5825] close(4) = 0 [pid 5823] <... ioctl resumed>) = 0 [pid 5825] rmdir("./232/file0" [pid 5823] close(3 [pid 7018] <... close resumed>) = 0 [pid 5827] <... rmdir resumed>) = 0 [pid 5825] <... rmdir resumed>) = 0 [pid 5823] <... close resumed>) = 0 [pid 7018] symlink("/dev/binderfs", "./binderfs" [pid 5827] mkdir("./228", 0777 [pid 5826] umount2("./236/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./232/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7019 attached [pid 7018] <... symlink resumed>) = 0 [pid 5827] <... mkdir resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) executing program [pid 7019] set_robust_list(0x55557eba4660, 24 [pid 7018] write(1, "executing program\n", 18 [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5826] newfstatat(AT_FDCWD, "./236/binderfs", [pid 5825] newfstatat(AT_FDCWD, "./232/binderfs", [pid 7018] <... write resumed>) = 18 [pid 5827] <... openat resumed>) = 3 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./232/binderfs" [pid 5827] ioctl(3, LOOP_CLR_FD [pid 5825] <... unlink resumed>) = 0 [pid 5825] getdents64(3, [pid 7019] <... set_robust_list resumed>) = 0 [pid 7018] memfd_create("syzkaller", 0 [pid 5827] <... ioctl resumed>) = 0 [pid 5826] unlink("./236/binderfs" [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7019 [pid 7019] chdir("./236" [pid 5826] <... unlink resumed>) = 0 [pid 5825] close(3 [pid 5827] close(3 [pid 7019] <... chdir resumed>) = 0 [pid 5826] getdents64(3, [pid 5825] <... close resumed>) = 0 [pid 7019] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5827] <... close resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5825] rmdir("./232" [pid 7019] <... prctl resumed>) = 0 [pid 7018] <... memfd_create resumed>) = 3 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5826] close(3 [pid 5825] <... rmdir resumed>) = 0 [pid 7019] setpgid(0, 0) = 0 [pid 7019] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5826] <... close resumed>) = 0 [pid 5825] mkdir("./233", 0777./strace-static-x86_64: Process 7020 attached [pid 7019] write(3, "1000", 4 [pid 7018] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5826] rmdir("./236" [pid 5825] <... mkdir resumed>) = 0 [pid 7019] <... write resumed>) = 4 [pid 7018] <... mmap resumed>) = 0x7f957a000000 [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7020 [pid 5826] <... rmdir resumed>) = 0 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7020] set_robust_list(0x55557eba4660, 24) = 0 [pid 7019] close(3 [pid 5825] <... openat resumed>) = 3 [pid 7020] chdir("./228" [pid 7019] <... close resumed>) = 0 [pid 7019] symlink("/dev/binderfs", "./binderfs" [pid 5825] ioctl(3, LOOP_CLR_FD [pid 7020] <... chdir resumed>) = 0 [pid 7019] <... symlink resumed>) = 0 [pid 7018] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5825] <... ioctl resumed>) = 0 [pid 7020] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7018] <... write resumed>) = 65536 [pid 5826] mkdir("./237", 0777executing program [pid 5825] close(3 [pid 7020] <... prctl resumed>) = 0 [pid 7019] write(1, "executing program\n", 18 [pid 7018] munmap(0x7f957a000000, 138412032 [pid 5826] <... mkdir resumed>) = 0 [pid 7019] <... write resumed>) = 18 [pid 5825] <... close resumed>) = 0 [pid 7019] memfd_create("syzkaller", 0 [pid 7018] <... munmap resumed>) = 0 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7020] setpgid(0, 0 [pid 7019] <... memfd_create resumed>) = 3 [pid 7018] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7020] <... setpgid resumed>) = 0 [pid 7019] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7018] <... openat resumed>) = 4 [pid 7020] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7019] <... mmap resumed>) = 0x7f957a000000 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR./strace-static-x86_64: Process 7021 attached [pid 7019] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5826] <... openat resumed>) = 3 [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7021 [pid 5826] ioctl(3, LOOP_CLR_FD [pid 7021] set_robust_list(0x55557eba4660, 24 [pid 5826] <... ioctl resumed>) = 0 [pid 7019] <... write resumed>) = 65536 [pid 5826] close(3 [pid 7021] <... set_robust_list resumed>) = 0 [pid 5826] <... close resumed>) = 0 [pid 7021] chdir("./233" [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7022 attached [pid 7021] <... chdir resumed>) = 0 [pid 7021] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7019] munmap(0x7f957a000000, 138412032 [pid 7021] <... prctl resumed>) = 0 [pid 7019] <... munmap resumed>) = 0 [pid 7022] set_robust_list(0x55557eba4660, 24 [pid 7021] setpgid(0, 0 [pid 7022] <... set_robust_list resumed>) = 0 [pid 7021] <... setpgid resumed>) = 0 [pid 7019] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7021] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7020] <... openat resumed>) = 3 [pid 7018] ioctl(4, LOOP_SET_FD, 3 [pid 7022] chdir("./237" [pid 7019] <... openat resumed>) = 4 [pid 7022] <... chdir resumed>) = 0 [pid 7021] <... openat resumed>) = 3 [pid 7019] ioctl(4, LOOP_SET_FD, 3 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7022 [pid 7019] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 7022] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7021] write(3, "1000", 4 [pid 7022] <... prctl resumed>) = 0 [pid 7019] ioctl(4, LOOP_CLR_FD [pid 7022] setpgid(0, 0 [pid 7021] <... write resumed>) = 4 [pid 7019] <... ioctl resumed>) = 0 [pid 7022] <... setpgid resumed>) = 0 [pid 7021] close(3 [pid 7022] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7021] <... close resumed>) = 0 [pid 7020] write(3, "1000", 4 [pid 7022] <... openat resumed>) = 3 [pid 7021] symlink("/dev/binderfs", "./binderfs" [pid 7020] <... write resumed>) = 4 [pid 7020] close(3 [pid 7019] ioctl(4, LOOP_SET_FD, 3 [pid 7021] <... symlink resumed>) = 0 [pid 7019] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) executing program [pid 7022] write(3, "1000", 4 [pid 7021] write(1, "executing program\n", 18 [pid 7019] close(4 [pid 7020] <... close resumed>) = 0 [pid 7022] <... write resumed>) = 4 [pid 7021] <... write resumed>) = 18 [pid 7020] symlink("/dev/binderfs", "./binderfs" [pid 7019] <... close resumed>) = 0 [pid 7022] close(3 [pid 7021] memfd_create("syzkaller", 0 [pid 7019] close(3 [pid 7022] <... close resumed>) = 0 [pid 7021] <... memfd_create resumed>) = 3 [pid 7019] <... close resumed>) = 0 [pid 7022] symlink("/dev/binderfs", "./binderfs" [pid 7021] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7019] openat(AT_FDCWD, ".", O_RDONLY [pid 7022] <... symlink resumed>) = 0 [pid 7021] <... mmap resumed>) = 0x7f957a000000 [pid 7019] <... openat resumed>) = 3 executing program [pid 7022] write(1, "executing program\n", 18 [pid 7021] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7019] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7022] <... write resumed>) = 18 [pid 7021] <... write resumed>) = 65536 [pid 7019] <... renameat2 resumed>) = -1 ENOENT (No such file or directory) [pid 7022] memfd_create("syzkaller", 0 [pid 7019] sync( [pid 7020] <... symlink resumed>) = 0 [pid 7021] munmap(0x7f957a000000, 138412032) = 0 [pid 7022] <... memfd_create resumed>) = 3 [pid 7021] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7022] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7021] <... openat resumed>) = 4 [pid 7021] ioctl(4, LOOP_SET_FD, 3 [pid 7020] write(1, "executing program\n", 18executing program [pid 7021] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 7020] <... write resumed>) = 18 [pid 7018] <... ioctl resumed>) = 0 [pid 7022] <... mmap resumed>) = 0x7f957a000000 [pid 7021] ioctl(4, LOOP_CLR_FD [pid 7022] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7020] memfd_create("syzkaller", 0 [pid 7018] close(3 [pid 7020] <... memfd_create resumed>) = 3 [pid 7018] <... close resumed>) = 0 [pid 7021] <... ioctl resumed>) = 0 [pid 7020] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7018] close(4 [pid 7022] <... write resumed>) = 65536 [pid 7020] <... mmap resumed>) = 0x7f957a000000 [pid 7018] <... close resumed>) = 0 [pid 7021] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 7021] close(4 [pid 7020] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7021] <... close resumed>) = 0 [pid 7018] mkdir("./file0", 0777 [pid 7021] close(3 [pid 7022] munmap(0x7f957a000000, 138412032 [pid 7021] <... close resumed>) = 0 [pid 7019] <... sync resumed>) = 0 [pid 7022] <... munmap resumed>) = 0 [pid 7021] openat(AT_FDCWD, ".", O_RDONLY [pid 7019] exit_group(0 [pid 7021] <... openat resumed>) = 3 [pid 7019] <... exit_group resumed>) = ? [pid 7018] <... mkdir resumed>) = 0 [pid 7021] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7018] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [ 204.386295][ T7018] loop1: detected capacity change from 0 to 128 [pid 7022] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7021] <... renameat2 resumed>) = -1 ENOENT (No such file or directory) [pid 7020] <... write resumed>) = 65536 [pid 7019] +++ exited with 0 +++ [pid 7022] <... openat resumed>) = 4 [pid 7021] sync( [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7019, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 7022] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 7022] ioctl(4, LOOP_CLR_FD) = 0 [pid 7022] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 7022] close(4) = 0 [pid 7022] close(3) = 0 [pid 7022] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 7022] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = -1 ENOENT (No such file or directory) [pid 7022] sync( [pid 7020] munmap(0x7f957a000000, 138412032 [pid 5823] umount2("./236", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./236", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5823] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(3, 0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 7020] <... munmap resumed>) = 0 [pid 5823] umount2("./236/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7020] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./236/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./236/binderfs") = 0 [pid 5823] getdents64(3, [pid 7020] <... openat resumed>) = 4 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7020] ioctl(4, LOOP_SET_FD, 3 [pid 5823] close(3) = 0 [pid 5823] rmdir("./236") = 0 [pid 5823] mkdir("./237", 0777) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5823] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5823] close(3) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7023 attached [pid 7020] <... ioctl resumed>) = 0 [pid 7023] set_robust_list(0x55557eba4660, 24 [pid 7020] close(3 [pid 7023] <... set_robust_list resumed>) = 0 [pid 7020] <... close resumed>) = 0 [pid 7023] chdir("./237" [pid 7018] <... mount resumed>) = 0 [pid 7020] close(4 [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7023 [pid 7018] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7020] <... close resumed>) = 0 [pid 7023] <... chdir resumed>) = 0 [pid 7020] mkdir("./file0", 0777 [pid 7023] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7023] setpgid(0, 0 [pid 7018] <... openat resumed>) = 3 [pid 7023] <... setpgid resumed>) = 0 [pid 7018] chdir("./file0" [pid 7023] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7018] <... chdir resumed>) = 0 [pid 7023] <... openat resumed>) = 3 [pid 7018] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7023] write(3, "1000", 4 [pid 7020] <... mkdir resumed>) = 0 [pid 7021] <... sync resumed>) = 0 [pid 7018] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7022] <... sync resumed>) = 0 [ 204.443676][ T7018] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 204.483671][ T7020] loop4: detected capacity change from 0 to 128 [pid 7023] <... write resumed>) = 4 [pid 7022] exit_group(0 [pid 7021] exit_group(0 [pid 7020] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7018] openat(AT_FDCWD, ".", O_RDONLY [pid 7023] close(3) = 0 [pid 7023] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7022] <... exit_group resumed>) = ? [pid 7023] write(1, "executing program\n", 18executing program ) = 18 [pid 7023] memfd_create("syzkaller", 0) = 3 [pid 7023] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7022] +++ exited with 0 +++ [pid 7018] <... openat resumed>) = 4 [pid 7021] <... exit_group resumed>) = ? [pid 7023] <... mmap resumed>) = 0x7f957a000000 [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7022, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 7018] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7023] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5826] umount2("./237", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7023] <... write resumed>) = 65536 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7021] +++ exited with 0 +++ [pid 7018] <... renameat2 resumed>) = 0 [pid 5826] openat(AT_FDCWD, "./237", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 7023] munmap(0x7f957a000000, 138412032 [pid 5826] newfstatat(3, "", [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7021, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 7023] <... munmap resumed>) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] restart_syscall(<... resuming interrupted clone ...> [pid 7023] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5826] getdents64(3, [pid 7023] <... openat resumed>) = 4 [pid 7018] sync( [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 7023] ioctl(4, LOOP_SET_FD, 3 [pid 5826] umount2("./237/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] <... restart_syscall resumed>) = 0 [pid 5826] newfstatat(AT_FDCWD, "./237/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./237/binderfs" [pid 5825] umount2("./233", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... unlink resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] getdents64(3, [pid 5825] openat(AT_FDCWD, "./233", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5825] <... openat resumed>) = 3 [pid 5826] close(3 [pid 5825] newfstatat(3, "", [pid 5826] <... close resumed>) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] rmdir("./237" [pid 5825] getdents64(3, [pid 5826] <... rmdir resumed>) = 0 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 5826] mkdir("./238", 0777 [pid 5825] umount2("./233/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... mkdir resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./233/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5825] unlink("./233/binderfs" [pid 5826] ioctl(3, LOOP_CLR_FD [pid 5825] <... unlink resumed>) = 0 [pid 5825] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5825] close(3) = 0 [pid 5825] rmdir("./233") = 0 [pid 5825] mkdir("./234", 0777) = 0 [pid 7023] <... ioctl resumed>) = 0 [pid 7020] <... mount resumed>) = 0 [pid 5826] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7023] close(3 [pid 7020] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5826] close(3 [pid 7023] <... close resumed>) = 0 [pid 7020] <... openat resumed>) = 3 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7023] close(4 [pid 7020] chdir("./file0" [pid 5825] <... openat resumed>) = 3 [pid 7023] <... close resumed>) = 0 [pid 7020] <... chdir resumed>) = 0 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 7023] mkdir("./file0", 0777 [pid 7020] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7023] <... mkdir resumed>) = 0 [pid 7020] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5825] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7020] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 5825] close(3 [ 204.547109][ T7020] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 204.568012][ T7023] loop0: detected capacity change from 0 to 128 [pid 7020] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7023] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5826] <... close resumed>) = 0 [pid 7020] <... renameat2 resumed>) = 0 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5825] <... close resumed>) = 0 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7025 attached ./strace-static-x86_64: Process 7024 attached [pid 7025] set_robust_list(0x55557eba4660, 24 [pid 7020] sync( [pid 7025] <... set_robust_list resumed>) = 0 [pid 7025] chdir("./234" [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7025 [pid 7025] <... chdir resumed>) = 0 [pid 7025] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7025] setpgid(0, 0) = 0 [pid 7025] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7024] set_robust_list(0x55557eba4660, 24 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7024 [pid 7025] write(3, "1000", 4 [pid 7024] <... set_robust_list resumed>) = 0 [pid 7025] <... write resumed>) = 4 [pid 7025] close(3) = 0 [pid 7025] symlink("/dev/binderfs", "./binderfs" [pid 7024] chdir("./238" [pid 7025] <... symlink resumed>) = 0 [pid 7024] <... chdir resumed>) = 0 executing program [pid 7025] write(1, "executing program\n", 18 [pid 7024] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7025] <... write resumed>) = 18 [pid 7025] memfd_create("syzkaller", 0) = 3 [pid 7024] <... prctl resumed>) = 0 [pid 7025] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7024] setpgid(0, 0 [pid 7025] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7024] <... setpgid resumed>) = 0 [pid 7025] <... write resumed>) = 65536 [ 204.645594][ T7023] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [pid 7024] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXECexecuting program [pid 7025] munmap(0x7f957a000000, 138412032 [pid 7024] <... openat resumed>) = 3 [pid 7024] write(3, "1000", 4 [pid 7025] <... munmap resumed>) = 0 [pid 7024] <... write resumed>) = 4 [pid 7025] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7024] close(3 [pid 7025] <... openat resumed>) = 4 [pid 7024] <... close resumed>) = 0 [pid 7025] ioctl(4, LOOP_SET_FD, 3 [pid 7024] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7024] write(1, "executing program\n", 18) = 18 [pid 7024] memfd_create("syzkaller", 0) = 3 [pid 7024] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7024] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 7023] <... mount resumed>) = 0 [pid 7023] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7024] munmap(0x7f957a000000, 138412032) = 0 [pid 7023] <... openat resumed>) = 3 [pid 7018] <... sync resumed>) = 0 [pid 7024] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7023] chdir("./file0" [pid 7024] <... openat resumed>) = 4 [pid 7018] exit_group(0 [pid 7024] ioctl(4, LOOP_SET_FD, 3 [pid 7023] <... chdir resumed>) = 0 [pid 7018] <... exit_group resumed>) = ? [pid 7024] <... ioctl resumed>) = 0 [pid 7023] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7025] <... ioctl resumed>) = 0 [pid 7023] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7020] <... sync resumed>) = 0 [pid 7025] close(3 [pid 7023] openat(AT_FDCWD, ".", O_RDONLY [pid 7020] exit_group(0 [pid 7018] +++ exited with 0 +++ [pid 7025] <... close resumed>) = 0 [pid 7023] <... openat resumed>) = 4 [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7018, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 7025] close(4 [pid 7023] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7020] <... exit_group resumed>) = ? [pid 7025] <... close resumed>) = 0 [pid 7020] +++ exited with 0 +++ [pid 5824] umount2("./233", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7025] mkdir("./file0", 0777 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7025] <... mkdir resumed>) = 0 [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7020, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5827] restart_syscall(<... resuming interrupted clone ...> [pid 7025] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7023] <... renameat2 resumed>) = 0 [pid 5824] openat(AT_FDCWD, "./233", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7023] sync( [pid 5827] <... restart_syscall resumed>) = 0 [pid 5824] <... openat resumed>) = 3 [pid 5824] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(3, [pid 5827] umount2("./228", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [ 204.689103][ T7025] loop2: detected capacity change from 0 to 128 [ 204.713587][ T7024] loop3: detected capacity change from 0 to 128 [pid 7024] close(3 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] umount2("./233/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] openat(AT_FDCWD, "./228", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7024] <... close resumed>) = 0 [pid 5827] <... openat resumed>) = 3 [pid 7024] close(4 [pid 5827] newfstatat(3, "", [pid 7024] <... close resumed>) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7024] mkdir("./file0", 0777 [pid 5827] getdents64(3, [pid 5824] <... umount2 resumed>) = 0 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5827] umount2("./228/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5827] umount2("./228/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] newfstatat(AT_FDCWD, "./228/file0", [pid 7024] <... mkdir resumed>) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] umount2("./233/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7024] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5827] umount2("./228/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] openat(AT_FDCWD, "./228/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5824] newfstatat(AT_FDCWD, "./233/file0", [pid 5827] newfstatat(4, "", [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] umount2("./233/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] getdents64(4, [pid 5824] openat(AT_FDCWD, "./233/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] <... openat resumed>) = 4 [pid 5827] close(4 [pid 5824] newfstatat(4, "", [pid 5827] <... close resumed>) = 0 [pid 5827] rmdir("./228/file0") = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] umount2("./228/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] newfstatat(AT_FDCWD, "./228/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] unlink("./228/binderfs") = 0 [pid 5824] getdents64(4, [pid 5827] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5827] close(3) = 0 [pid 5827] rmdir("./228" [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 7025] <... mount resumed>) = 0 [pid 5827] <... rmdir resumed>) = 0 [pid 7025] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5827] mkdir("./229", 0777 [pid 5824] getdents64(4, [pid 7025] chdir("./file0" [pid 5827] <... mkdir resumed>) = 0 [pid 7025] <... chdir resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 7025] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5824] close(4 [pid 7025] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7025] openat(AT_FDCWD, ".", O_RDONLY [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5824] <... close resumed>) = 0 [pid 7025] <... openat resumed>) = 4 [pid 5827] <... openat resumed>) = 3 [pid 7025] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5827] ioctl(3, LOOP_CLR_FD [pid 5824] rmdir("./233/file0" [pid 5827] <... ioctl resumed>) = 0 [ 204.747839][ T7025] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 204.787202][ T7024] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [pid 5827] close(3) = 0 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7025] <... renameat2 resumed>) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 5824] umount2("./233/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./233/binderfs", ./strace-static-x86_64: Process 7026 attached [pid 7026] set_robust_list(0x55557eba4660, 24 [pid 7025] sync( [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7026 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7026] <... set_robust_list resumed>) = 0 [pid 5824] unlink("./233/binderfs" [pid 7026] chdir("./229") = 0 [pid 5824] <... unlink resumed>) = 0 [pid 7026] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5824] getdents64(3, [pid 7026] <... prctl resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7026] setpgid(0, 0 [pid 5824] close(3 [pid 7026] <... setpgid resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 7026] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5824] rmdir("./233" [pid 7026] <... openat resumed>) = 3 [pid 5824] <... rmdir resumed>) = 0 [pid 7024] <... mount resumed>) = 0 [pid 5824] mkdir("./234", 0777 [pid 7026] write(3, "1000", 4) = 4 [pid 7026] close(3) = 0 [pid 7026] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5824] <... mkdir resumed>) = 0 [pid 7024] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORYexecuting program [pid 7026] write(1, "executing program\n", 18) = 18 [pid 7026] memfd_create("syzkaller", 0 [pid 7024] <... openat resumed>) = 3 [pid 7024] chdir("./file0") = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7026] <... memfd_create resumed>) = 3 [pid 5824] <... openat resumed>) = 3 [pid 7026] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7025] <... sync resumed>) = 0 [pid 7023] <... sync resumed>) = 0 [pid 7026] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7025] exit_group(0 [pid 7026] <... write resumed>) = 65536 [pid 7025] <... exit_group resumed>) = ? [pid 7025] +++ exited with 0 +++ [pid 7024] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5824] ioctl(3, LOOP_CLR_FD [pid 7026] munmap(0x7f957a000000, 138412032 [pid 7024] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7023] exit_group(0 [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7025, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5824] <... ioctl resumed>) = 0 [pid 7026] <... munmap resumed>) = 0 [pid 7024] openat(AT_FDCWD, ".", O_RDONLY [pid 7023] <... exit_group resumed>) = ? [pid 5824] close(3 [pid 7024] <... openat resumed>) = 4 [pid 7023] +++ exited with 0 +++ [pid 7026] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5825] umount2("./234", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7026] <... openat resumed>) = 4 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... close resumed>) = 0 [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7023, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7024] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7026] ioctl(4, LOOP_SET_FD, 3 [pid 5825] openat(AT_FDCWD, "./234", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 5825] <... openat resumed>) = 3 [pid 7026] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5825] newfstatat(3, "", [pid 7026] ioctl(4, LOOP_CLR_FD [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(3, [pid 7026] <... ioctl resumed>) = 0 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5825] umount2("./234/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... restart_syscall resumed>) = 0 [pid 7026] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 5823] umount2("./237", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7026] close(4 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7026] <... close resumed>) = 0 [pid 5823] openat(AT_FDCWD, "./237", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7026] close(3 [pid 5823] <... openat resumed>) = 3 [pid 7026] <... close resumed>) = 0 [pid 5823] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 7027 attached [pid 7024] <... renameat2 resumed>) = 0 [pid 5823] getdents64(3, [pid 7027] set_robust_list(0x55557eba4660, 24 [pid 7026] openat(AT_FDCWD, ".", O_RDONLY [pid 7024] sync( [pid 7026] <... openat resumed>) = 3 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 7027] <... set_robust_list resumed>) = 0 [pid 7026] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5823] umount2("./237/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7027] chdir("./234" [pid 7026] <... renameat2 resumed>) = -1 ENOENT (No such file or directory) [pid 7027] <... chdir resumed>) = 0 [pid 7026] sync( [pid 7027] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7027] setpgid(0, 0) = 0 [pid 7027] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7027] write(3, "1000", 4) = 4 [pid 7027] close(3) = 0 [pid 7027] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7027] write(1, "executing program\n", 18executing program ) = 18 [pid 7027] memfd_create("syzkaller", 0) = 3 [pid 7027] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7027] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 7027] munmap(0x7f957a000000, 138412032) = 0 [pid 7027] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 7027] ioctl(4, LOOP_SET_FD, 3 [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7027 [pid 7024] <... sync resumed>) = 0 [pid 7026] <... sync resumed>) = 0 [pid 7026] exit_group(0 [pid 7024] exit_group(0 [pid 7026] <... exit_group resumed>) = ? [pid 7026] +++ exited with 0 +++ [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7026, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5827] restart_syscall(<... resuming interrupted clone ...> [pid 7024] <... exit_group resumed>) = ? [pid 5827] <... restart_syscall resumed>) = 0 [pid 5823] <... umount2 resumed>) = 0 [pid 5825] <... umount2 resumed>) = 0 [pid 5823] umount2("./237/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./234/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] umount2("./229", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./237/file0", [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./234/file0", [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] openat(AT_FDCWD, "./229", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] umount2("./237/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... openat resumed>) = 3 [pid 5825] umount2("./234/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] newfstatat(3, "", [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./237/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7024] +++ exited with 0 +++ [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] getdents64(3, [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7024, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5825] openat(AT_FDCWD, "./234/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] <... openat resumed>) = 4 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 5826] restart_syscall(<... resuming interrupted clone ...> [pid 5825] <... openat resumed>) = 4 [pid 5823] newfstatat(4, "", [pid 5827] umount2("./229/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] newfstatat(4, "", [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(4, [pid 7027] <... ioctl resumed>) = 0 [pid 5827] newfstatat(AT_FDCWD, "./229/binderfs", [pid 5826] <... restart_syscall resumed>) = 0 [pid 5825] getdents64(4, [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5827] unlink("./229/binderfs" [pid 5825] getdents64(4, [pid 5823] getdents64(4, [pid 7027] close(3 [pid 5827] <... unlink resumed>) = 0 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 7027] <... close resumed>) = 0 [pid 5825] close(4 [pid 5823] close(4 [pid 7027] close(4 [pid 5827] getdents64(3, [pid 5825] <... close resumed>) = 0 [pid 5823] <... close resumed>) = 0 [pid 7027] <... close resumed>) = 0 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] umount2("./238", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] rmdir("./234/file0" [pid 5823] rmdir("./237/file0" [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7027] mkdir("./file0", 0777 [pid 5827] close(3 [pid 5826] openat(AT_FDCWD, "./238", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] <... rmdir resumed>) = 0 [pid 5823] <... rmdir resumed>) = 0 [pid 7027] <... mkdir resumed>) = 0 [pid 5827] <... close resumed>) = 0 [pid 5826] <... openat resumed>) = 3 [pid 5825] umount2("./234/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] umount2("./237/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] newfstatat(3, "", [pid 5827] rmdir("./229" [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... rmdir resumed>) = 0 [pid 5826] getdents64(3, [pid 5825] newfstatat(AT_FDCWD, "./234/binderfs", [pid 5823] newfstatat(AT_FDCWD, "./237/binderfs", [pid 7027] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 204.922902][ T7027] loop1: detected capacity change from 0 to 128 [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] mkdir("./230", 0777 [pid 5826] umount2("./238/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] unlink("./234/binderfs" [pid 5827] <... mkdir resumed>) = 0 [pid 5825] <... unlink resumed>) = 0 [pid 5823] unlink("./237/binderfs") = 0 [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5826] <... umount2 resumed>) = 0 [pid 5825] getdents64(3, [pid 5823] getdents64(3, [pid 5827] <... openat resumed>) = 3 [pid 5826] umount2("./238/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] close(3 [pid 5827] ioctl(3, LOOP_CLR_FD [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5827] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5826] newfstatat(AT_FDCWD, "./238/file0", [pid 5825] <... close resumed>) = 0 [pid 5823] close(3) = 0 [pid 5823] rmdir("./237" [pid 5827] close(3 [pid 5823] <... rmdir resumed>) = 0 [pid 5827] <... close resumed>) = 0 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5823] mkdir("./238", 0777) = 0 ./strace-static-x86_64: Process 7028 attached [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7028 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] rmdir("./234" [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5823] ioctl(3, LOOP_CLR_FD [pid 7028] set_robust_list(0x55557eba4660, 24 [pid 5825] <... rmdir resumed>) = 0 [pid 5823] <... ioctl resumed>) = 0 [pid 7028] <... set_robust_list resumed>) = 0 [pid 5826] umount2("./238/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] mkdir("./235", 0777 [pid 5823] close(3 [pid 7028] chdir("./230" [pid 5823] <... close resumed>) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... mkdir resumed>) = 0 [pid 5826] openat(AT_FDCWD, "./238/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7028] <... chdir resumed>) = 0 [pid 7028] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7029 ./strace-static-x86_64: Process 7029 attached [pid 7028] setpgid(0, 0 [pid 5826] <... openat resumed>) = 4 [pid 7029] set_robust_list(0x55557eba4660, 24 [pid 7028] <... setpgid resumed>) = 0 [pid 5826] newfstatat(4, "", [pid 5825] <... openat resumed>) = 3 [pid 7028] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 7029] <... set_robust_list resumed>) = 0 [pid 7028] <... openat resumed>) = 3 [pid 5826] getdents64(4, [pid 5825] <... ioctl resumed>) = 0 [pid 7029] chdir("./238" [pid 7028] write(3, "1000", 4 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] close(3 [pid 7029] <... chdir resumed>) = 0 [pid 7028] <... write resumed>) = 4 [pid 7028] close(3) = 0 [pid 7029] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7028] symlink("/dev/binderfs", "./binderfs" [pid 5825] <... close resumed>) = 0 executing program [pid 7029] <... prctl resumed>) = 0 [pid 7028] <... symlink resumed>) = 0 [pid 5826] getdents64(4, [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7029] setpgid(0, 0 [pid 7028] write(1, "executing program\n", 18./strace-static-x86_64: Process 7030 attached [pid 7029] <... setpgid resumed>) = 0 [pid 7028] <... write resumed>) = 18 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 7030] set_robust_list(0x55557eba4660, 24 [pid 7029] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7028] memfd_create("syzkaller", 0 [pid 5826] close(4 [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7030 [pid 7030] <... set_robust_list resumed>) = 0 [pid 7029] <... openat resumed>) = 3 [pid 7028] <... memfd_create resumed>) = 3 [pid 5826] <... close resumed>) = 0 [ 204.990066][ T7027] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [pid 7030] chdir("./235" [pid 7029] write(3, "1000", 4 [pid 7028] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5826] rmdir("./238/file0" [pid 7030] <... chdir resumed>) = 0 [pid 7029] <... write resumed>) = 4 [pid 7028] <... mmap resumed>) = 0x7f957a000000 [pid 7027] <... mount resumed>) = 0 [pid 5826] <... rmdir resumed>) = 0 [pid 7030] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7029] close(3 [pid 7030] <... prctl resumed>) = 0 [pid 7029] <... close resumed>) = 0 [pid 7030] setpgid(0, 0 [pid 7029] symlink("/dev/binderfs", "./binderfs" [pid 7030] <... setpgid resumed>) = 0 executing program [pid 7030] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7029] <... symlink resumed>) = 0 [pid 7028] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7027] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7030] <... openat resumed>) = 3 [pid 7029] write(1, "executing program\n", 18 [pid 7027] <... openat resumed>) = 3 [pid 7030] write(3, "1000", 4 [pid 7029] <... write resumed>) = 18 [pid 7030] <... write resumed>) = 4 [pid 7029] memfd_create("syzkaller", 0 [pid 7030] close(3 [pid 7027] chdir("./file0" [pid 7030] <... close resumed>) = 0 [pid 7027] <... chdir resumed>) = 0 [pid 7030] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 7029] <... memfd_create resumed>) = 3 [pid 7028] <... write resumed>) = 65536 [pid 7027] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7030] write(1, "executing program\n", 18 [pid 7029] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7030] <... write resumed>) = 18 [pid 5826] umount2("./238/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7027] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7030] memfd_create("syzkaller", 0 [pid 7027] openat(AT_FDCWD, ".", O_RDONLY [pid 7030] <... memfd_create resumed>) = 3 [pid 7029] <... mmap resumed>) = 0x7f957a000000 [pid 7027] <... openat resumed>) = 4 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7030] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5826] newfstatat(AT_FDCWD, "./238/binderfs", [pid 7030] <... mmap resumed>) = 0x7f957a000000 [pid 7028] munmap(0x7f957a000000, 138412032 [pid 7027] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7030] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7029] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7028] <... munmap resumed>) = 0 [pid 5826] unlink("./238/binderfs" [pid 7028] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7030] <... write resumed>) = 65536 [pid 7029] <... write resumed>) = 65536 [pid 7028] <... openat resumed>) = 4 [pid 5826] <... unlink resumed>) = 0 [pid 7030] munmap(0x7f957a000000, 138412032 [pid 7029] munmap(0x7f957a000000, 138412032 [pid 5826] getdents64(3, [pid 7029] <... munmap resumed>) = 0 [pid 7027] <... renameat2 resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] close(3 [pid 7028] ioctl(4, LOOP_SET_FD, 3 [pid 7027] sync( [pid 5826] <... close resumed>) = 0 [pid 7030] <... munmap resumed>) = 0 [pid 7030] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7029] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5826] rmdir("./238" [pid 7030] <... openat resumed>) = 4 [pid 5826] <... rmdir resumed>) = 0 [pid 5826] mkdir("./239", 0777 [pid 7029] <... openat resumed>) = 4 [pid 7030] ioctl(4, LOOP_SET_FD, 3 [pid 5826] <... mkdir resumed>) = 0 [pid 7029] ioctl(4, LOOP_SET_FD, 3 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 7027] <... sync resumed>) = 0 [pid 5826] ioctl(3, LOOP_CLR_FD [pid 7027] exit_group(0) = ? [pid 7027] +++ exited with 0 +++ [pid 5826] <... ioctl resumed>) = 0 [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7027, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5826] close(3 [pid 7028] <... ioctl resumed>) = 0 [pid 5824] umount2("./234", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... close resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7028] close(3 [pid 5824] openat(AT_FDCWD, "./234", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5824] <... openat resumed>) = 3 ./strace-static-x86_64: Process 7031 attached [pid 7028] <... close resumed>) = 0 [pid 5824] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] umount2("./234/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7031] set_robust_list(0x55557eba4660, 24) = 0 [pid 7028] close(4 [pid 7031] chdir("./239") = 0 [pid 7028] <... close resumed>) = 0 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7031 [ 205.085170][ T7028] loop4: detected capacity change from 0 to 128 [ 205.120324][ T7029] loop0: detected capacity change from 0 to 128 [ 205.128210][ T7030] loop2: detected capacity change from 0 to 128 [pid 7031] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7030] <... ioctl resumed>) = 0 [pid 7029] <... ioctl resumed>) = 0 [pid 7028] mkdir("./file0", 0777 [pid 7029] close(3 [pid 7031] <... prctl resumed>) = 0 [pid 7029] <... close resumed>) = 0 [pid 7028] <... mkdir resumed>) = 0 [pid 7030] close(3 [pid 7029] close(4 [pid 7030] <... close resumed>) = 0 [pid 7028] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7030] close(4 [pid 7029] <... close resumed>) = 0 [pid 7031] setpgid(0, 0 [pid 7030] <... close resumed>) = 0 [pid 7029] mkdir("./file0", 0777 [pid 7030] mkdir("./file0", 0777 [pid 7029] <... mkdir resumed>) = 0 [pid 7031] <... setpgid resumed>) = 0 [pid 7031] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7030] <... mkdir resumed>) = 0 [pid 7029] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7031] <... openat resumed>) = 3 [pid 7030] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5824] <... umount2 resumed>) = 0 [pid 5824] umount2("./234/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7031] write(3, "1000", 4 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7031] <... write resumed>) = 4 [pid 7031] close(3) = 0 [pid 7031] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 7031] write(1, "executing program\n", 18 [pid 5824] newfstatat(AT_FDCWD, "./234/file0", [pid 7031] <... write resumed>) = 18 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7031] memfd_create("syzkaller", 0) = 3 [pid 5824] umount2("./234/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7031] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7031] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 5824] openat(AT_FDCWD, "./234/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7031] munmap(0x7f957a000000, 138412032) = 0 [pid 7031] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5824] <... openat resumed>) = 4 [pid 5824] newfstatat(4, "", [pid 7031] <... openat resumed>) = 4 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7031] ioctl(4, LOOP_SET_FD, 3 [pid 5824] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] close(4) = 0 [pid 5824] rmdir("./234/file0") = 0 [pid 5824] umount2("./234/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7030] <... mount resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7029] <... mount resumed>) = 0 [pid 7029] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5824] newfstatat(AT_FDCWD, "./234/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7029] <... openat resumed>) = 3 [pid 5824] unlink("./234/binderfs" [pid 7030] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7029] chdir("./file0" [pid 5824] <... unlink resumed>) = 0 [pid 7030] <... openat resumed>) = 3 [pid 7029] <... chdir resumed>) = 0 [pid 5824] getdents64(3, [pid 7029] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] close(3 [pid 7029] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5824] <... close resumed>) = 0 [pid 5824] rmdir("./234" [pid 7031] <... ioctl resumed>) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 7029] openat(AT_FDCWD, ".", O_RDONLY [ 205.181006][ T7030] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 205.196314][ T7029] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 205.211970][ T7028] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 205.218824][ T7031] loop3: detected capacity change from 0 to 128 [pid 5824] mkdir("./235", 0777 [pid 7031] close(3 [pid 7029] <... openat resumed>) = 4 [pid 7028] <... mount resumed>) = 0 [pid 5824] <... mkdir resumed>) = 0 [pid 7031] <... close resumed>) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7031] close(4) = 0 [pid 7031] mkdir("./file0", 0777) = 0 [pid 7028] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5824] <... openat resumed>) = 3 [pid 5824] ioctl(3, LOOP_CLR_FD [pid 7028] <... openat resumed>) = 3 [pid 7029] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7028] chdir("./file0" [pid 5824] <... ioctl resumed>) = 0 [pid 5824] close(3 [pid 7028] <... chdir resumed>) = 0 [pid 7031] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7030] chdir("./file0" [pid 7029] <... renameat2 resumed>) = 0 [pid 7028] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5824] <... close resumed>) = 0 [pid 7030] <... chdir resumed>) = 0 [pid 7029] sync( [pid 7028] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7030] openat(AT_FDCWD, "/dev/loop2", O_RDWR./strace-static-x86_64: Process 7032 attached ) = -1 EBUSY (Device or resource busy) [pid 7028] openat(AT_FDCWD, ".", O_RDONLY [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7032 [pid 7028] <... openat resumed>) = 4 [pid 7030] openat(AT_FDCWD, ".", O_RDONLY [pid 7032] set_robust_list(0x55557eba4660, 24 [pid 7030] <... openat resumed>) = 4 [pid 7028] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7030] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7028] <... renameat2 resumed>) = 0 [pid 7032] <... set_robust_list resumed>) = 0 [pid 7030] <... renameat2 resumed>) = 0 [pid 7028] sync( [pid 7030] sync( [pid 7032] chdir("./235") = 0 [pid 7032] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7032] setpgid(0, 0) = 0 [pid 7032] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7032] write(3, "1000", 4) = 4 [pid 7032] close(3) = 0 [pid 7032] symlink("/dev/binderfs", "./binderfs") = 0 [ 205.292017][ T7031] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 executing program [pid 7032] write(1, "executing program\n", 18 [pid 7031] <... mount resumed>) = 0 [pid 7031] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7031] chdir("./file0") = 0 [pid 7031] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7032] <... write resumed>) = 18 [pid 7031] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7032] memfd_create("syzkaller", 0 [pid 7031] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7032] <... memfd_create resumed>) = 3 [pid 7031] <... renameat2 resumed>) = 0 [pid 7031] sync( [pid 7032] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7032] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 7032] munmap(0x7f957a000000, 138412032) = 0 [pid 7031] <... sync resumed>) = 0 [pid 7028] <... sync resumed>) = 0 [pid 7032] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7031] exit_group(0 [pid 7030] <... sync resumed>) = 0 [pid 7029] <... sync resumed>) = 0 [pid 7031] <... exit_group resumed>) = ? [pid 7028] exit_group(0 [pid 7032] <... openat resumed>) = 4 [pid 7031] +++ exited with 0 +++ [pid 7030] exit_group(0 [pid 7029] exit_group(0 [pid 7028] <... exit_group resumed>) = ? [pid 7032] ioctl(4, LOOP_SET_FD, 3 [pid 7030] <... exit_group resumed>) = ? [pid 7029] <... exit_group resumed>) = ? [pid 7028] +++ exited with 0 +++ [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7031, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7028, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5827] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5827] umount2("./230", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] openat(AT_FDCWD, "./230", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5827] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] getdents64(3, [pid 7029] +++ exited with 0 +++ [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5827] umount2("./230/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7029, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 7030] +++ exited with 0 +++ [pid 5827] <... umount2 resumed>) = 0 [pid 5823] <... restart_syscall resumed>) = 0 [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7030, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5823] umount2("./238", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./238", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5823] newfstatat(3, "", [pid 7032] <... ioctl resumed>) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(3, [pid 7032] close(3 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 7032] <... close resumed>) = 0 [pid 7032] close(4) = 0 [pid 7032] mkdir("./file0", 0777 [pid 5823] umount2("./238/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7032] <... mkdir resumed>) = 0 [pid 5827] umount2("./230/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... umount2 resumed>) = 0 [pid 5825] umount2("./235", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] umount2("./238/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] umount2("./239", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] newfstatat(AT_FDCWD, "./230/file0", [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./235", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] newfstatat(AT_FDCWD, "./238/file0", [pid 5826] openat(AT_FDCWD, "./239", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] umount2("./230/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... openat resumed>) = 3 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] <... openat resumed>) = 3 [pid 5825] newfstatat(3, "", [pid 5826] newfstatat(3, "", [pid 7032] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] umount2("./238/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] getdents64(3, [pid 5825] getdents64(3, [pid 5827] openat(AT_FDCWD, "./230/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... openat resumed>) = 4 [pid 5826] umount2("./239/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] openat(AT_FDCWD, "./238/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] newfstatat(4, "", [pid 5825] umount2("./235/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... openat resumed>) = 4 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] newfstatat(4, "", [pid 5827] getdents64(4, [pid 5826] <... umount2 resumed>) = 0 [pid 5825] <... umount2 resumed>) = 0 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5827] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] close(4 [pid 5823] getdents64(4, [pid 5827] <... close resumed>) = 0 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5827] rmdir("./230/file0" [pid 5823] getdents64(4, [pid 5827] <... rmdir resumed>) = 0 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5827] umount2("./230/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] close(4 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] umount2("./235/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... close resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] umount2("./239/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] rmdir("./238/file0" [pid 5827] newfstatat(AT_FDCWD, "./230/binderfs", [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./235/file0", [pid 5823] <... rmdir resumed>) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] newfstatat(AT_FDCWD, "./239/file0", [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] umount2("./238/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] umount2("./235/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] unlink("./230/binderfs" [pid 5826] umount2("./239/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./235/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] <... unlink resumed>) = 0 [pid 5826] openat(AT_FDCWD, "./239/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] <... openat resumed>) = 4 [pid 5823] newfstatat(AT_FDCWD, "./238/binderfs", [pid 5826] <... openat resumed>) = 4 [pid 5825] newfstatat(4, "", [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] newfstatat(4, "", [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] getdents64(3, [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(4, [pid 5823] unlink("./238/binderfs" [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] <... unlink resumed>) = 0 [pid 5825] getdents64(4, [pid 5826] getdents64(4, [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5825] close(4 [pid 7032] <... mount resumed>) = 0 [ 205.409557][ T7032] loop1: detected capacity change from 0 to 128 [ 205.447951][ T7032] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [pid 5827] close(3 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] getdents64(3, [pid 7032] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5827] <... close resumed>) = 0 [pid 5826] getdents64(4, [pid 5825] <... close resumed>) = 0 [pid 5827] rmdir("./230" [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5827] <... rmdir resumed>) = 0 [pid 5823] close(3 [pid 5827] mkdir("./231", 0777 [pid 5823] <... close resumed>) = 0 [pid 5827] <... mkdir resumed>) = 0 [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5823] rmdir("./238" [pid 7032] <... openat resumed>) = 3 [pid 5827] <... openat resumed>) = 3 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5825] rmdir("./235/file0" [pid 5823] <... rmdir resumed>) = 0 [pid 7032] chdir("./file0" [pid 5826] close(4 [pid 7032] <... chdir resumed>) = 0 [pid 5827] ioctl(3, LOOP_CLR_FD [pid 5826] <... close resumed>) = 0 [pid 7032] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5827] <... ioctl resumed>) = 0 [pid 5826] rmdir("./239/file0" [pid 5825] <... rmdir resumed>) = 0 [pid 5823] mkdir("./239", 0777 [pid 7032] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7032] openat(AT_FDCWD, ".", O_RDONLY [pid 5827] close(3 [pid 5826] <... rmdir resumed>) = 0 [pid 5825] umount2("./235/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... mkdir resumed>) = 0 [pid 7032] <... openat resumed>) = 4 [pid 5827] <... close resumed>) = 0 [pid 5826] umount2("./239/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7032] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./235/binderfs", [pid 5826] newfstatat(AT_FDCWD, "./239/binderfs", [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5825] unlink("./235/binderfs" [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... unlink resumed>) = 0 [pid 5823] <... openat resumed>) = 3 [pid 5823] ioctl(3, LOOP_CLR_FD [pid 5825] getdents64(3, [pid 5823] <... ioctl resumed>) = 0 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7032] <... renameat2 resumed>) = 0 [pid 5823] close(3 [pid 5826] unlink("./239/binderfs" [pid 7032] sync( [pid 5826] <... unlink resumed>) = 0 [pid 5825] close(3 [pid 5823] <... close resumed>) = 0 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5826] getdents64(3, [pid 5825] <... close resumed>) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7033 attached [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5825] rmdir("./235" [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7033 [pid 5825] <... rmdir resumed>) = 0 [pid 5826] close(3./strace-static-x86_64: Process 7034 attached [pid 5825] mkdir("./236", 0777 [pid 5826] <... close resumed>) = 0 [pid 5825] <... mkdir resumed>) = 0 [pid 5826] rmdir("./239") = 0 [pid 7034] set_robust_list(0x55557eba4660, 24 [pid 7033] set_robust_list(0x55557eba4660, 24 [pid 5826] mkdir("./240", 0777 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7034 [pid 7034] <... set_robust_list resumed>) = 0 [pid 7033] <... set_robust_list resumed>) = 0 [pid 7034] chdir("./239" [pid 7033] chdir("./231" [pid 7034] <... chdir resumed>) = 0 [pid 7033] <... chdir resumed>) = 0 [pid 7034] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5825] <... openat resumed>) = 3 [pid 7034] <... prctl resumed>) = 0 [pid 7033] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7034] setpgid(0, 0 [pid 7033] <... prctl resumed>) = 0 [pid 5826] <... mkdir resumed>) = 0 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 7034] <... setpgid resumed>) = 0 [pid 7033] setpgid(0, 0 [pid 7034] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7033] <... setpgid resumed>) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5825] <... ioctl resumed>) = 0 [pid 7034] <... openat resumed>) = 3 [pid 7033] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7032] <... sync resumed>) = 0 [pid 5825] close(3 [pid 5826] <... openat resumed>) = 3 [pid 7032] exit_group(0 [pid 5825] <... close resumed>) = 0 [pid 7034] write(3, "1000", 4 [pid 7033] <... openat resumed>) = 3 [pid 7032] <... exit_group resumed>) = ? [pid 5826] ioctl(3, LOOP_CLR_FD [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7032] +++ exited with 0 +++ [pid 5826] <... ioctl resumed>) = 0 [pid 5826] close(3 [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7032, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- ./strace-static-x86_64: Process 7035 attached [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 7034] <... write resumed>) = 4 [pid 5826] <... close resumed>) = 0 [pid 7034] close(3 [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7035 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7034] <... close resumed>) = 0 ./strace-static-x86_64: Process 7036 attached [pid 7035] set_robust_list(0x55557eba4660, 24 [pid 7034] symlink("/dev/binderfs", "./binderfs" [pid 7033] write(3, "1000", 4 [pid 7035] <... set_robust_list resumed>) = 0 [pid 7033] <... write resumed>) = 4 [pid 7036] set_robust_list(0x55557eba4660, 24 [pid 7035] chdir("./236" [pid 7034] <... symlink resumed>) = 0 [pid 7033] close(3 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7036 [pid 7035] <... chdir resumed>) = 0 [pid 7035] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7035] setpgid(0, 0 [pid 5824] <... restart_syscall resumed>) = 0 [pid 7035] <... setpgid resumed>) = 0 [pid 7036] <... set_robust_list resumed>) = 0 [pid 7035] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7034] write(1, "executing program\n", 18 [pid 7033] <... close resumed>) = 0 executing program [pid 7036] chdir("./240" [pid 7035] <... openat resumed>) = 3 [pid 7034] <... write resumed>) = 18 [pid 7033] symlink("/dev/binderfs", "./binderfs" [pid 7036] <... chdir resumed>) = 0 [pid 7035] write(3, "1000", 4 [pid 7034] memfd_create("syzkaller", 0 [pid 7033] <... symlink resumed>) = 0 [pid 5824] umount2("./235", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7035] <... write resumed>) = 4 [pid 7035] close(3) = 0 [pid 7035] symlink("/dev/binderfs", "./binderfs"executing program executing program ) = 0 [pid 7035] write(1, "executing program\n", 18) = 18 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./235", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7033] write(1, "executing program\n", 18 [pid 7036] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7035] memfd_create("syzkaller", 0 [pid 7034] <... memfd_create resumed>) = 3 [pid 7033] <... write resumed>) = 18 [pid 5824] <... openat resumed>) = 3 [pid 7035] <... memfd_create resumed>) = 3 [pid 5824] newfstatat(3, "", [pid 7033] memfd_create("syzkaller", 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7035] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7033] <... memfd_create resumed>) = 3 [pid 5824] getdents64(3, [pid 7035] <... mmap resumed>) = 0x7f957a000000 [pid 7033] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 7036] <... prctl resumed>) = 0 [pid 7034] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5824] umount2("./235/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7036] setpgid(0, 0) = 0 [pid 7035] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7034] <... mmap resumed>) = 0x7f957a000000 [pid 7033] <... mmap resumed>) = 0x7f957a000000 [pid 7036] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7035] <... write resumed>) = 65536 [pid 7033] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7036] <... openat resumed>) = 3 [pid 7035] munmap(0x7f957a000000, 138412032 [pid 7036] write(3, "1000", 4 [pid 7035] <... munmap resumed>) = 0 [pid 7034] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7033] <... write resumed>) = 65536 [pid 5824] <... umount2 resumed>) = 0 [pid 7033] munmap(0x7f957a000000, 138412032 [pid 5824] umount2("./235/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7035] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5824] newfstatat(AT_FDCWD, "./235/file0", [pid 7035] <... openat resumed>) = 4 [pid 7033] <... munmap resumed>) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7034] <... write resumed>) = 65536 [pid 7036] <... write resumed>) = 4 [pid 7035] ioctl(4, LOOP_SET_FD, 3 [pid 7034] munmap(0x7f957a000000, 138412032 [pid 7033] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5824] umount2("./235/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7036] close(3) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7033] <... openat resumed>) = 4 [pid 7033] ioctl(4, LOOP_SET_FD, 3 [pid 7036] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 7035] <... ioctl resumed>) = 0 [pid 7036] write(1, "executing program\n", 18 [pid 7034] <... munmap resumed>) = 0 [pid 5824] openat(AT_FDCWD, "./235/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7036] <... write resumed>) = 18 [pid 7034] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7036] memfd_create("syzkaller", 0 [pid 7035] close(3 [pid 7033] <... ioctl resumed>) = 0 [pid 5824] <... openat resumed>) = 4 [pid 7036] <... memfd_create resumed>) = 3 [pid 7035] <... close resumed>) = 0 [pid 7034] <... openat resumed>) = 4 [pid 7033] close(3 [pid 5824] newfstatat(4, "", [pid 7036] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7035] close(4 [pid 7034] ioctl(4, LOOP_SET_FD, 3 [pid 7036] <... mmap resumed>) = 0x7f957a000000 [pid 7035] <... close resumed>) = 0 [pid 7033] <... close resumed>) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7036] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7035] mkdir("./file0", 0777) = 0 [pid 7035] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7036] <... write resumed>) = 65536 [pid 7033] close(4 [pid 5824] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 7036] munmap(0x7f957a000000, 138412032 [pid 7033] <... close resumed>) = 0 [pid 7036] <... munmap resumed>) = 0 [pid 5824] getdents64(4, [pid 7033] mkdir("./file0", 0777) = 0 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 7033] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [ 205.617727][ T7035] loop2: detected capacity change from 0 to 128 [ 205.627336][ T7033] loop4: detected capacity change from 0 to 128 [ 205.650646][ T7034] loop0: detected capacity change from 0 to 128 [pid 5824] close(4 [pid 7036] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7034] <... ioctl resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 5824] rmdir("./235/file0") = 0 [pid 7036] <... openat resumed>) = 4 [pid 7034] close(3 [pid 7036] ioctl(4, LOOP_SET_FD, 3 [pid 7034] <... close resumed>) = 0 [pid 5824] umount2("./235/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7036] <... ioctl resumed>) = 0 [pid 7034] close(4 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7036] close(3 [pid 7034] <... close resumed>) = 0 [pid 5824] newfstatat(AT_FDCWD, "./235/binderfs", [pid 7036] <... close resumed>) = 0 [pid 7034] mkdir("./file0", 0777 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7036] close(4 [pid 7035] <... mount resumed>) = 0 [pid 7034] <... mkdir resumed>) = 0 [pid 7033] <... mount resumed>) = 0 [pid 5824] unlink("./235/binderfs" [pid 7036] <... close resumed>) = 0 [pid 7035] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7034] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [ 205.674026][ T7035] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 205.685877][ T7033] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 205.705591][ T7036] loop3: detected capacity change from 0 to 128 [pid 7033] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5824] <... unlink resumed>) = 0 [pid 7036] mkdir("./file0", 0777 [pid 7035] <... openat resumed>) = 3 [pid 7033] <... openat resumed>) = 3 [pid 7033] chdir("./file0" [pid 5824] getdents64(3, [pid 7036] <... mkdir resumed>) = 0 [pid 7035] chdir("./file0" [pid 7033] <... chdir resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7035] <... chdir resumed>) = 0 [pid 7033] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7035] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7033] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5824] close(3 [pid 7035] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7033] openat(AT_FDCWD, ".", O_RDONLY [pid 7035] openat(AT_FDCWD, ".", O_RDONLY [pid 7033] <... openat resumed>) = 4 [pid 5824] <... close resumed>) = 0 [pid 7036] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7035] <... openat resumed>) = 4 [pid 7033] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5824] rmdir("./235" [pid 7035] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7033] <... renameat2 resumed>) = 0 [pid 7033] sync( [pid 5824] <... rmdir resumed>) = 0 [pid 5824] mkdir("./236", 0777 [pid 7035] <... renameat2 resumed>) = 0 [pid 7035] sync( [pid 5824] <... mkdir resumed>) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5824] ioctl(3, LOOP_CLR_FD) = 0 [pid 5824] close(3) = 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7037 attached [pid 7037] set_robust_list(0x55557eba4660, 24 [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7037 [pid 7037] <... set_robust_list resumed>) = 0 [pid 7037] chdir("./236") = 0 [pid 7037] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7037] setpgid(0, 0) = 0 [pid 7037] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7036] <... mount resumed>) = 0 [pid 7037] write(3, "1000", 4 [pid 7036] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7037] <... write resumed>) = 4 [pid 7036] <... openat resumed>) = 3 [pid 7037] close(3 [pid 7036] chdir("./file0") = 0 [ 205.732688][ T7034] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 205.759671][ T7036] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [pid 7036] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7036] openat(AT_FDCWD, ".", O_RDONLY [pid 7037] <... close resumed>) = 0 [pid 7037] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 7036] <... openat resumed>) = 4 [pid 7037] write(1, "executing program\n", 18) = 18 [pid 7036] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7037] memfd_create("syzkaller", 0) = 3 [pid 7034] <... mount resumed>) = 0 [pid 7037] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7034] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7037] <... mmap resumed>) = 0x7f957a000000 [pid 7034] <... openat resumed>) = 3 [pid 7034] chdir("./file0" [pid 7036] <... renameat2 resumed>) = 0 [pid 7034] <... chdir resumed>) = 0 [pid 7037] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7035] <... sync resumed>) = 0 [pid 7033] <... sync resumed>) = 0 [pid 7033] exit_group(0 [pid 7037] <... write resumed>) = 65536 [pid 7036] sync( [pid 7034] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7033] <... exit_group resumed>) = ? [pid 7037] munmap(0x7f957a000000, 138412032 [pid 7036] <... sync resumed>) = 0 [pid 7035] exit_group(0 [pid 7034] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7033] +++ exited with 0 +++ [pid 7037] <... munmap resumed>) = 0 [pid 7036] exit_group(0 [pid 7035] <... exit_group resumed>) = ? [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7033, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5827] restart_syscall(<... resuming interrupted clone ...> [pid 7037] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7036] <... exit_group resumed>) = ? [pid 7035] +++ exited with 0 +++ [pid 7036] +++ exited with 0 +++ [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7035, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7036, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5825] restart_syscall(<... resuming interrupted clone ...> [pid 7037] <... openat resumed>) = 4 [pid 5826] restart_syscall(<... resuming interrupted clone ...> [pid 7037] ioctl(4, LOOP_SET_FD, 3 [pid 7034] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 5825] <... restart_syscall resumed>) = 0 [pid 7034] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5825] umount2("./236", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./236", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] <... restart_syscall resumed>) = 0 [pid 5826] <... restart_syscall resumed>) = 0 [pid 5825] <... openat resumed>) = 3 [pid 5825] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] umount2("./231", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] umount2("./240", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] getdents64(3, [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5827] openat(AT_FDCWD, "./231", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] openat(AT_FDCWD, "./240", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] umount2("./236/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... openat resumed>) = 3 [pid 5826] <... openat resumed>) = 3 [pid 5827] newfstatat(3, "", [pid 5826] newfstatat(3, "", [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] getdents64(3, [pid 5826] getdents64(3, [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5827] umount2("./231/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] umount2("./240/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7037] <... ioctl resumed>) = 0 [pid 7034] <... renameat2 resumed>) = 0 [pid 5825] <... umount2 resumed>) = 0 [pid 5825] umount2("./236/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7034] sync( [pid 5827] <... umount2 resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] umount2("./231/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] newfstatat(AT_FDCWD, "./236/file0", [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] newfstatat(AT_FDCWD, "./231/file0", [pid 5825] umount2("./236/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] <... umount2 resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] umount2("./231/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] openat(AT_FDCWD, "./236/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7037] close(3 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] umount2("./240/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... openat resumed>) = 4 [pid 7037] <... close resumed>) = 0 [pid 7037] close(4 [pid 5827] openat(AT_FDCWD, "./231/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] newfstatat(4, "", [pid 7037] <... close resumed>) = 0 [pid 5827] <... openat resumed>) = 4 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7037] mkdir("./file0", 0777 [pid 5827] newfstatat(4, "", [pid 5825] getdents64(4, [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] newfstatat(AT_FDCWD, "./240/file0", [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 7037] <... mkdir resumed>) = 0 [pid 5827] getdents64(4, [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7037] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7034] <... sync resumed>) = 0 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5826] umount2("./240/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7034] exit_group(0 [pid 5827] getdents64(4, [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] getdents64(4, [pid 7034] <... exit_group resumed>) = ? [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5826] openat(AT_FDCWD, "./240/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5827] close(4 [pid 5825] close(4 [pid 5827] <... close resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 5827] rmdir("./231/file0" [pid 5825] rmdir("./236/file0" [pid 7034] +++ exited with 0 +++ [pid 5827] <... rmdir resumed>) = 0 [pid 5825] <... rmdir resumed>) = 0 [ 205.855655][ T7037] loop1: detected capacity change from 0 to 128 [pid 5827] umount2("./231/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... openat resumed>) = 4 [pid 5825] umount2("./236/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7034, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 5826] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(4, [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5825] newfstatat(AT_FDCWD, "./236/binderfs", [pid 5826] close(4) = 0 [pid 5826] rmdir("./240/file0" [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] newfstatat(AT_FDCWD, "./231/binderfs", [pid 5826] <... rmdir resumed>) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./236/binderfs" [pid 5827] unlink("./231/binderfs" [pid 5826] umount2("./240/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... unlink resumed>) = 0 [pid 5827] <... unlink resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] getdents64(3, [pid 5826] newfstatat(AT_FDCWD, "./240/binderfs", [pid 7037] <... mount resumed>) = 0 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7037] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5827] close(3 [pid 5826] unlink("./240/binderfs" [pid 5825] getdents64(3, [pid 5823] <... restart_syscall resumed>) = 0 [pid 5827] <... close resumed>) = 0 [pid 5826] <... unlink resumed>) = 0 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] getdents64(3, [pid 7037] <... openat resumed>) = 3 [pid 5827] rmdir("./231" [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5825] close(3 [pid 7037] chdir("./file0" [pid 5826] close(3 [pid 7037] <... chdir resumed>) = 0 [pid 7037] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5827] <... rmdir resumed>) = 0 [pid 5826] <... close resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 5823] umount2("./239", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7037] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5826] rmdir("./240" [pid 5825] rmdir("./236" [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7037] openat(AT_FDCWD, ".", O_RDONLY [pid 5826] <... rmdir resumed>) = 0 [pid 5825] <... rmdir resumed>) = 0 [pid 5823] openat(AT_FDCWD, "./239", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7037] <... openat resumed>) = 4 [pid 5827] mkdir("./232", 0777 [pid 5826] mkdir("./241", 0777 [pid 5825] mkdir("./237", 0777 [pid 5823] <... openat resumed>) = 3 [pid 7037] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5827] <... mkdir resumed>) = 0 [pid 5826] <... mkdir resumed>) = 0 [pid 5825] <... mkdir resumed>) = 0 [pid 5823] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5823] getdents64(3, [pid 5826] <... openat resumed>) = 3 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5826] ioctl(3, LOOP_CLR_FD [pid 5823] umount2("./239/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... ioctl resumed>) = 0 [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5826] close(3 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5827] ioctl(3, LOOP_CLR_FD [pid 5826] <... close resumed>) = 0 [pid 5825] <... openat resumed>) = 3 [pid 5823] <... umount2 resumed>) = 0 [pid 5823] umount2("./239/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... ioctl resumed>) = 0 [pid 7037] <... renameat2 resumed>) = 0 [pid 5827] close(3 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 205.910120][ T7037] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [pid 7037] sync( [pid 5827] <... close resumed>) = 0 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5825] <... ioctl resumed>) = 0 [pid 5823] newfstatat(AT_FDCWD, "./239/file0", [pid 5825] close(3) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5823] umount2("./239/file0", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7038 attached [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7039 attached [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7038 [pid 5823] openat(AT_FDCWD, "./239/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7038] set_robust_list(0x55557eba4660, 24./strace-static-x86_64: Process 7040 attached [pid 5823] <... openat resumed>) = 4 [pid 7038] <... set_robust_list resumed>) = 0 [pid 5823] newfstatat(4, "", [pid 7040] set_robust_list(0x55557eba4660, 24 [pid 7039] set_robust_list(0x55557eba4660, 24 [pid 7038] chdir("./237" [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7039 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7040 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7040] <... set_robust_list resumed>) = 0 [pid 7039] <... set_robust_list resumed>) = 0 [pid 5823] getdents64(4, [pid 7040] chdir("./241" [pid 7039] chdir("./232" [pid 7038] <... chdir resumed>) = 0 [pid 7039] <... chdir resumed>) = 0 [pid 7038] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7039] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7038] <... prctl resumed>) = 0 [pid 7039] <... prctl resumed>) = 0 [pid 7038] setpgid(0, 0 [pid 7039] setpgid(0, 0 [pid 7038] <... setpgid resumed>) = 0 [pid 7039] <... setpgid resumed>) = 0 [pid 7038] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 7039] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5823] getdents64(4, [pid 7038] write(3, "1000", 4) = 4 [pid 7039] <... openat resumed>) = 3 [pid 7038] close(3) = 0 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 7040] <... chdir resumed>) = 0 [pid 5823] close(4 [pid 7038] symlink("/dev/binderfs", "./binderfs" [pid 7039] write(3, "1000", 4executing program [pid 7040] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7039] <... write resumed>) = 4 [pid 7038] <... symlink resumed>) = 0 [pid 7037] <... sync resumed>) = 0 [pid 5823] <... close resumed>) = 0 [pid 7040] <... prctl resumed>) = 0 [pid 5823] rmdir("./239/file0" [pid 7040] setpgid(0, 0 [pid 7039] close(3 [pid 7038] write(1, "executing program\n", 18 [pid 7039] <... close resumed>) = 0 [pid 7038] <... write resumed>) = 18 [pid 5823] <... rmdir resumed>) = 0 [pid 7040] <... setpgid resumed>) = 0 [pid 7040] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7039] symlink("/dev/binderfs", "./binderfs" [pid 7038] memfd_create("syzkaller", 0 [pid 5823] umount2("./239/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7040] <... openat resumed>) = 3 [pid 7039] <... symlink resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7040] write(3, "1000", 4) = 4 executing program [pid 7039] write(1, "executing program\n", 18 [pid 7038] <... memfd_create resumed>) = 3 [pid 7037] exit_group(0 [pid 5823] newfstatat(AT_FDCWD, "./239/binderfs", [pid 7040] close(3 [pid 7039] <... write resumed>) = 18 [pid 7040] <... close resumed>) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7040] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7039] memfd_create("syzkaller", 0 [pid 7038] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5823] unlink("./239/binderfs"executing program [pid 7040] write(1, "executing program\n", 18) = 18 [pid 5823] <... unlink resumed>) = 0 [pid 7039] <... memfd_create resumed>) = 3 [pid 7038] <... mmap resumed>) = 0x7f957a000000 [pid 7040] memfd_create("syzkaller", 0 [pid 7039] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7038] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7037] <... exit_group resumed>) = ? [pid 5823] getdents64(3, [pid 7040] <... memfd_create resumed>) = 3 [pid 7039] <... mmap resumed>) = 0x7f957a000000 [pid 7039] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7038] <... write resumed>) = 65536 [pid 7037] +++ exited with 0 +++ [pid 7038] munmap(0x7f957a000000, 138412032 [pid 7040] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7037, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7040] <... mmap resumed>) = 0x7f957a000000 [pid 7039] <... write resumed>) = 65536 [pid 7038] <... munmap resumed>) = 0 [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 5823] close(3 [pid 5824] <... restart_syscall resumed>) = 0 [pid 7040] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5823] <... close resumed>) = 0 [pid 5823] rmdir("./239" [pid 5824] umount2("./236", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7038] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5824] openat(AT_FDCWD, "./236", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5823] <... rmdir resumed>) = 0 [pid 7039] munmap(0x7f957a000000, 138412032 [pid 5824] newfstatat(3, "", [pid 5823] mkdir("./240", 0777 [pid 7040] <... write resumed>) = 65536 [pid 7039] <... munmap resumed>) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7039] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5824] getdents64(3, [pid 7039] <... openat resumed>) = 4 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] <... mkdir resumed>) = 0 [pid 7040] munmap(0x7f957a000000, 138412032 [pid 7039] ioctl(4, LOOP_SET_FD, 3 [pid 7038] <... openat resumed>) = 4 [pid 5824] umount2("./236/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7040] <... munmap resumed>) = 0 [pid 7038] ioctl(4, LOOP_SET_FD, 3 [pid 5823] <... openat resumed>) = 3 [pid 7040] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5824] <... umount2 resumed>) = 0 [pid 5823] ioctl(3, LOOP_CLR_FD) = 0 [pid 5823] close(3 [pid 7040] <... openat resumed>) = 4 [pid 5823] <... close resumed>) = 0 [pid 7038] <... ioctl resumed>) = 0 [pid 7040] ioctl(4, LOOP_SET_FD, 3 [pid 7039] <... ioctl resumed>) = 0 [pid 5824] umount2("./236/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7039] close(3) = 0 [pid 7038] close(3 [pid 7039] close(4 [pid 7038] <... close resumed>) = 0 [pid 7039] <... close resumed>) = 0 [pid 7038] close(4 [pid 7039] mkdir("./file0", 0777 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7039] <... mkdir resumed>) = 0 [pid 7038] <... close resumed>) = 0 [pid 7038] mkdir("./file0", 0777 [pid 5824] newfstatat(AT_FDCWD, "./236/file0", [pid 7038] <... mkdir resumed>) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] umount2("./236/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./236/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 7038] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5824] newfstatat(4, "", [pid 7039] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] close(4) = 0 [pid 5824] rmdir("./236/file0"./strace-static-x86_64: Process 7041 attached [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7041 [ 206.041540][ T7038] loop2: detected capacity change from 0 to 128 [ 206.048279][ T7039] loop4: detected capacity change from 0 to 128 [ 206.072074][ T7040] loop3: detected capacity change from 0 to 128 [pid 7041] set_robust_list(0x55557eba4660, 24 [pid 7040] <... ioctl resumed>) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 7041] <... set_robust_list resumed>) = 0 [pid 7041] chdir("./240" [pid 7040] close(3 [pid 5824] umount2("./236/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7041] <... chdir resumed>) = 0 [pid 7040] <... close resumed>) = 0 [pid 7041] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7040] close(4 [pid 7041] <... prctl resumed>) = 0 [pid 7040] <... close resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7041] setpgid(0, 0 [pid 7040] mkdir("./file0", 0777 [pid 7041] <... setpgid resumed>) = 0 [pid 7041] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7040] <... mkdir resumed>) = 0 [pid 5824] newfstatat(AT_FDCWD, "./236/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./236/binderfs") = 0 [pid 5824] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] close(3) = 0 [pid 5824] rmdir("./236") = 0 [pid 5824] mkdir("./237", 0777 [pid 7041] <... openat resumed>) = 3 [pid 7040] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5824] <... mkdir resumed>) = 0 [pid 7041] write(3, "1000", 4 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5824] ioctl(3, LOOP_CLR_FD) = 0 [pid 5824] close(3) = 0 [ 206.089848][ T7038] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 206.103983][ T7039] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDexecuting program ./strace-static-x86_64: Process 7042 attached [pid 7041] <... write resumed>) = 4 [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7042 [pid 7042] set_robust_list(0x55557eba4660, 24) = 0 [pid 7042] chdir("./237") = 0 [pid 7042] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7042] setpgid(0, 0) = 0 [pid 7042] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7042] write(3, "1000", 4) = 4 [pid 7042] close(3) = 0 [pid 7042] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7042] write(1, "executing program\n", 18) = 18 [pid 7042] memfd_create("syzkaller", 0 [pid 7041] close(3 [pid 7042] <... memfd_create resumed>) = 3 [pid 7042] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7041] <... close resumed>) = 0 [pid 7042] <... mmap resumed>) = 0x7f957a000000 [pid 7041] symlink("/dev/binderfs", "./binderfs" [pid 7039] <... mount resumed>) = 0 [pid 7039] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7041] <... symlink resumed>) = 0 [pid 7039] <... openat resumed>) = 3 executing program [pid 7041] write(1, "executing program\n", 18 [pid 7042] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7041] <... write resumed>) = 18 [pid 7039] chdir("./file0" [pid 7042] <... write resumed>) = 65536 [pid 7039] <... chdir resumed>) = 0 [pid 7039] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7041] memfd_create("syzkaller", 0 [pid 7039] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7038] <... mount resumed>) = 0 [pid 7042] munmap(0x7f957a000000, 138412032 [pid 7039] openat(AT_FDCWD, ".", O_RDONLY [pid 7038] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7042] <... munmap resumed>) = 0 [pid 7041] <... memfd_create resumed>) = 3 [pid 7039] <... openat resumed>) = 4 [pid 7038] <... openat resumed>) = 3 [pid 7039] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7038] chdir("./file0" [pid 7041] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7038] <... chdir resumed>) = 0 [pid 7042] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7041] <... mmap resumed>) = 0x7f957a000000 [pid 7038] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7042] <... openat resumed>) = 4 [pid 7041] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7039] <... renameat2 resumed>) = 0 [pid 7038] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7039] sync( [pid 7038] openat(AT_FDCWD, ".", O_RDONLY [pid 7041] <... write resumed>) = 65536 [pid 7038] <... openat resumed>) = 4 [pid 7042] ioctl(4, LOOP_SET_FD, 3 [pid 7041] munmap(0x7f957a000000, 138412032 [pid 7038] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7042] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 7042] ioctl(4, LOOP_CLR_FD [pid 7041] <... munmap resumed>) = 0 [pid 7042] <... ioctl resumed>) = 0 [pid 7041] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7038] <... renameat2 resumed>) = 0 [pid 7041] ioctl(4, LOOP_SET_FD, 3 [ 206.133888][ T7040] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [pid 7038] sync( [pid 7042] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 7042] close(4) = 0 [pid 7042] close(3) = 0 [pid 7042] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 7042] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = -1 ENOENT (No such file or directory) [pid 7042] sync( [pid 7040] <... mount resumed>) = 0 [pid 7040] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7040] chdir("./file0" [pid 7042] <... sync resumed>) = 0 [pid 7040] <... chdir resumed>) = 0 [pid 7039] <... sync resumed>) = 0 [pid 7038] <... sync resumed>) = 0 [pid 7040] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7038] exit_group(0 [pid 7042] exit_group(0 [pid 7039] exit_group(0 [pid 7038] <... exit_group resumed>) = ? [pid 7042] <... exit_group resumed>) = ? [pid 7040] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7042] +++ exited with 0 +++ [pid 7041] <... ioctl resumed>) = 0 [pid 7040] openat(AT_FDCWD, ".", O_RDONLY [pid 7039] <... exit_group resumed>) = ? [pid 7038] +++ exited with 0 +++ [pid 7041] close(3 [pid 7040] <... openat resumed>) = 4 [pid 7039] +++ exited with 0 +++ [pid 7041] <... close resumed>) = 0 [pid 7041] close(4 [pid 7040] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7039, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7041] <... close resumed>) = 0 [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7038, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7041] mkdir("./file0", 0777 [pid 5825] umount2("./237", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7042, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5827] umount2("./232", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] umount2("./237", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] openat(AT_FDCWD, "./232", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] openat(AT_FDCWD, "./237", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7041] <... mkdir resumed>) = 0 [pid 5827] <... openat resumed>) = 3 [pid 5825] <... openat resumed>) = 3 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] newfstatat(3, "", [pid 5825] newfstatat(3, "", [pid 5824] openat(AT_FDCWD, "./237", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] getdents64(3, [pid 5825] getdents64(3, [pid 5824] <... openat resumed>) = 3 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] newfstatat(3, "", [pid 5827] umount2("./232/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./237/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7041] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7040] <... renameat2 resumed>) = 0 [ 206.186528][ T7041] loop0: detected capacity change from 0 to 128 [pid 5824] getdents64(3, [pid 7040] sync( [pid 5827] <... umount2 resumed>) = 0 [pid 5825] <... umount2 resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 5827] umount2("./232/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./237/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./237/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] newfstatat(AT_FDCWD, "./232/file0", [pid 5824] newfstatat(AT_FDCWD, "./237/binderfs", [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] umount2("./232/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] unlink("./237/binderfs" [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./237/file0", [pid 5824] <... unlink resumed>) = 0 [pid 5827] openat(AT_FDCWD, "./232/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] getdents64(3, [pid 5827] <... openat resumed>) = 4 [pid 5825] umount2("./237/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] newfstatat(4, "", [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] getdents64(4, [pid 5825] openat(AT_FDCWD, "./237/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] close(3 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] <... openat resumed>) = 4 [pid 5824] <... close resumed>) = 0 [pid 5827] getdents64(4, [pid 5825] newfstatat(4, "", [pid 5824] rmdir("./237" [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 5827] close(4 [pid 5825] getdents64(4, [pid 5824] mkdir("./238", 0777 [pid 5827] <... close resumed>) = 0 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] <... mkdir resumed>) = 0 [pid 5827] rmdir("./232/file0" [pid 5825] getdents64(4, [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5827] <... rmdir resumed>) = 0 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] <... openat resumed>) = 3 [pid 5825] close(4 [pid 5824] ioctl(3, LOOP_CLR_FD [pid 5825] <... close resumed>) = 0 [pid 5825] rmdir("./237/file0" [pid 5824] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5825] <... rmdir resumed>) = 0 [pid 5824] close(3 [pid 5827] umount2("./232/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... close resumed>) = 0 [pid 5825] umount2("./237/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./237/binderfs", [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] newfstatat(AT_FDCWD, "./232/binderfs", [pid 5825] unlink("./237/binderfs" [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7041] <... mount resumed>) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... unlink resumed>) = 0 [pid 7041] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY./strace-static-x86_64: Process 7043 attached ) = 3 [pid 5827] unlink("./232/binderfs" [pid 5825] getdents64(3, [pid 7041] chdir("./file0" [pid 5827] <... unlink resumed>) = 0 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7043 [pid 5825] close(3 [pid 7041] <... chdir resumed>) = 0 [pid 7041] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5827] getdents64(3, [pid 5825] <... close resumed>) = 0 [pid 7043] set_robust_list(0x55557eba4660, 24 [pid 7041] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5825] rmdir("./237" [pid 7041] openat(AT_FDCWD, ".", O_RDONLY [pid 7043] <... set_robust_list resumed>) = 0 [pid 7041] <... openat resumed>) = 4 [pid 5827] close(3 [pid 5825] <... rmdir resumed>) = 0 [pid 7043] chdir("./238" [pid 7041] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5827] <... close resumed>) = 0 [pid 5825] mkdir("./238", 0777 [pid 5827] rmdir("./232" [pid 7043] <... chdir resumed>) = 0 [pid 5827] <... rmdir resumed>) = 0 [pid 5825] <... mkdir resumed>) = 0 [pid 7043] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7043] <... prctl resumed>) = 0 [pid 5825] <... openat resumed>) = 3 [pid 7043] setpgid(0, 0 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 7043] <... setpgid resumed>) = 0 [pid 5827] mkdir("./233", 0777 [pid 5825] <... ioctl resumed>) = 0 [pid 7043] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5827] <... mkdir resumed>) = 0 [pid 5825] close(3) = 0 [pid 7043] <... openat resumed>) = 3 [ 206.251118][ T7041] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7043] write(3, "1000", 4 [pid 7041] <... renameat2 resumed>) = 0 [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR./strace-static-x86_64: Process 7044 attached [pid 7043] <... write resumed>) = 4 [pid 7041] sync( [pid 5827] <... openat resumed>) = 3 [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7044 [pid 7040] <... sync resumed>) = 0 [pid 7044] set_robust_list(0x55557eba4660, 24 [pid 7043] close(3 [pid 5827] ioctl(3, LOOP_CLR_FD [pid 7043] <... close resumed>) = 0 [pid 7040] exit_group(0 [pid 5827] <... ioctl resumed>) = 0 [pid 7044] <... set_robust_list resumed>) = 0 [pid 7040] <... exit_group resumed>) = ? [pid 7043] symlink("/dev/binderfs", "./binderfs" [pid 5827] close(3) = 0 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7044] chdir("./238") = 0 [pid 7043] <... symlink resumed>) = 0 [pid 7044] prctl(PR_SET_PDEATHSIG, SIGKILLexecuting program ) = 0 [pid 7043] write(1, "executing program\n", 18) = 18 [pid 7043] memfd_create("syzkaller", 0) = 3 [pid 7044] setpgid(0, 0 [pid 7043] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7045 [pid 7044] <... setpgid resumed>) = 0 ./strace-static-x86_64: Process 7045 attached [pid 7044] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7043] <... mmap resumed>) = 0x7f957a000000 [pid 7045] set_robust_list(0x55557eba4660, 24 [pid 7043] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7040] +++ exited with 0 +++ [pid 7044] <... openat resumed>) = 3 [pid 7045] <... set_robust_list resumed>) = 0 [pid 7043] <... write resumed>) = 65536 [pid 7045] chdir("./233" [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7040, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7045] <... chdir resumed>) = 0 [pid 5826] restart_syscall(<... resuming interrupted clone ...> [pid 7045] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7043] munmap(0x7f957a000000, 138412032 [pid 7045] setpgid(0, 0 [pid 7043] <... munmap resumed>) = 0 [pid 7045] <... setpgid resumed>) = 0 [pid 7045] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7043] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7045] write(3, "1000", 4 [pid 7044] write(3, "1000", 4 [pid 7043] <... openat resumed>) = 4 [pid 7045] <... write resumed>) = 4 [pid 7045] close(3 [pid 5826] <... restart_syscall resumed>) = 0 [pid 7043] ioctl(4, LOOP_SET_FD, 3 [pid 7044] <... write resumed>) = 4 executing program [pid 7045] <... close resumed>) = 0 [pid 7044] close(3 [pid 5826] umount2("./241", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7045] symlink("/dev/binderfs", "./binderfs" [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7045] <... symlink resumed>) = 0 [pid 7044] <... close resumed>) = 0 [pid 5826] openat(AT_FDCWD, "./241", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5826] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5826] umount2("./241/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7045] write(1, "executing program\n", 18) = 18 [pid 7044] symlink("/dev/binderfs", "./binderfs" [pid 7045] memfd_create("syzkaller", 0) = 3 [pid 7044] <... symlink resumed>) = 0 executing program [pid 7045] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7044] write(1, "executing program\n", 18 [pid 7045] <... mmap resumed>) = 0x7f957a000000 [pid 7044] <... write resumed>) = 18 [pid 7045] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7044] memfd_create("syzkaller", 0 [pid 7045] <... write resumed>) = 65536 [pid 7045] munmap(0x7f957a000000, 138412032) = 0 [pid 7045] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7044] <... memfd_create resumed>) = 3 [pid 7043] <... ioctl resumed>) = 0 [pid 7041] <... sync resumed>) = 0 [pid 7043] close(3) = 0 [pid 7043] close(4) = 0 [pid 7043] mkdir("./file0", 0777) = 0 [pid 7045] <... openat resumed>) = 4 [pid 7044] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7041] exit_group(0 [pid 5826] <... umount2 resumed>) = 0 [pid 7045] ioctl(4, LOOP_SET_FD, 3 [pid 7044] <... mmap resumed>) = 0x7f957a000000 [pid 7041] <... exit_group resumed>) = ? [ 206.347524][ T7043] loop1: detected capacity change from 0 to 128 [pid 5826] umount2("./241/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7044] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7043] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7041] +++ exited with 0 +++ [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./241/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] umount2("./241/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./241/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5826] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5826] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5826] close(4 [pid 7044] <... write resumed>) = 65536 [pid 5826] <... close resumed>) = 0 [pid 5826] rmdir("./241/file0" [pid 7044] munmap(0x7f957a000000, 138412032 [pid 5826] <... rmdir resumed>) = 0 [pid 5826] umount2("./241/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./241/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./241/binderfs") = 0 [pid 5826] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] close(3) = 0 [pid 5826] rmdir("./241") = 0 [pid 7044] <... munmap resumed>) = 0 [pid 5826] mkdir("./242", 0777 [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7041, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 7044] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5826] <... mkdir resumed>) = 0 [pid 7044] <... openat resumed>) = 4 [pid 5823] umount2("./240", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7044] ioctl(4, LOOP_SET_FD, 3 [pid 7045] <... ioctl resumed>) = 0 [ 206.390708][ T7045] loop4: detected capacity change from 0 to 128 [ 206.398804][ T7043] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [pid 5826] ioctl(3, LOOP_CLR_FD) = 0 [pid 5823] openat(AT_FDCWD, "./240", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] close(3) = 0 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7046 attached [pid 7045] close(3 [pid 7044] <... ioctl resumed>) = 0 [pid 5823] <... openat resumed>) = 3 [pid 7045] <... close resumed>) = 0 [pid 7046] set_robust_list(0x55557eba4660, 24 [pid 7045] close(4 [pid 5823] newfstatat(3, "", [pid 7046] <... set_robust_list resumed>) = 0 [pid 7046] chdir("./242" [pid 7045] <... close resumed>) = 0 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7046 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7045] mkdir("./file0", 0777 [pid 5823] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 7046] <... chdir resumed>) = 0 [pid 7046] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7045] <... mkdir resumed>) = 0 [pid 5823] umount2("./240/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7046] <... prctl resumed>) = 0 [pid 7046] setpgid(0, 0 [pid 7045] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7046] <... setpgid resumed>) = 0 [pid 7046] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7046] write(3, "1000", 4) = 4 [pid 7046] close(3) = 0 executing program [pid 7046] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7046] write(1, "executing program\n", 18) = 18 [pid 7046] memfd_create("syzkaller", 0) = 3 [pid 7046] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7046] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 5823] <... umount2 resumed>) = 0 [pid 5823] umount2("./240/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./240/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] umount2("./240/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./240/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 7046] munmap(0x7f957a000000, 138412032 [pid 5823] newfstatat(4, "", [pid 7046] <... munmap resumed>) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7046] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5823] getdents64(4, [pid 7046] <... openat resumed>) = 4 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [ 206.433508][ T7044] loop2: detected capacity change from 0 to 128 [ 206.469403][ T7045] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [pid 7046] ioctl(4, LOOP_SET_FD, 3 [pid 7044] close(3 [pid 7043] <... mount resumed>) = 0 [pid 5823] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 7044] <... close resumed>) = 0 [pid 7043] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7044] close(4 [pid 7043] <... openat resumed>) = 3 [pid 5823] close(4 [pid 7044] <... close resumed>) = 0 [pid 7043] chdir("./file0" [pid 7044] mkdir("./file0", 0777 [pid 7043] <... chdir resumed>) = 0 [pid 5823] <... close resumed>) = 0 [pid 7044] <... mkdir resumed>) = 0 [pid 7043] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5823] rmdir("./240/file0") = 0 [pid 5823] umount2("./240/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./240/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./240/binderfs") = 0 [pid 7043] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7043] openat(AT_FDCWD, ".", O_RDONLY [pid 5823] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7043] <... openat resumed>) = 4 [pid 5823] close(3 [pid 7044] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7043] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5823] <... close resumed>) = 0 [pid 5823] rmdir("./240") = 0 [pid 5823] mkdir("./241", 0777 [pid 7043] <... renameat2 resumed>) = 0 [pid 5823] <... mkdir resumed>) = 0 [pid 7043] sync( [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5823] ioctl(3, LOOP_CLR_FD) = 0 [pid 5823] close(3 [pid 7045] <... mount resumed>) = 0 [pid 5823] <... close resumed>) = 0 [pid 7046] <... ioctl resumed>) = 0 [pid 7045] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7046] close(3 [pid 7045] <... openat resumed>) = 3 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7045] chdir("./file0") = 0 [pid 7046] <... close resumed>) = 0 [pid 7045] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7046] close(4 [pid 7045] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7046] <... close resumed>) = 0 [pid 7045] openat(AT_FDCWD, ".", O_RDONLY [pid 7046] mkdir("./file0", 0777 [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7047 ./strace-static-x86_64: Process 7047 attached [pid 7046] <... mkdir resumed>) = 0 [pid 7045] <... openat resumed>) = 4 [pid 7045] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7047] set_robust_list(0x55557eba4660, 24 [pid 7046] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7045] <... renameat2 resumed>) = 0 [pid 7047] <... set_robust_list resumed>) = 0 [pid 7045] sync( [pid 7047] chdir("./241") = 0 [pid 7044] <... mount resumed>) = 0 [pid 7047] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7044] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7047] <... prctl resumed>) = 0 [pid 7044] <... openat resumed>) = 3 [pid 7047] setpgid(0, 0 [pid 7044] chdir("./file0") = 0 [ 206.492399][ T7046] loop3: detected capacity change from 0 to 128 [ 206.522694][ T7044] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [pid 7047] <... setpgid resumed>) = 0 [pid 7044] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7047] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7044] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7044] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7047] <... openat resumed>) = 3 [pid 7044] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7047] write(3, "1000", 4) = 4 [pid 7047] close(3) = 0 [pid 7047] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 7047] write(1, "executing program\n", 18) = 18 [pid 7047] memfd_create("syzkaller", 0 [pid 7044] <... renameat2 resumed>) = 0 [pid 7047] <... memfd_create resumed>) = 3 [pid 7047] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7047] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 7047] munmap(0x7f957a000000, 138412032) = 0 [pid 7047] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7047] ioctl(4, LOOP_SET_FD, 3 [pid 7044] sync( [pid 7047] <... ioctl resumed>) = 0 [pid 7046] <... mount resumed>) = 0 [pid 7043] <... sync resumed>) = 0 [pid 7046] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7043] exit_group(0 [pid 7046] <... openat resumed>) = 3 [pid 7043] <... exit_group resumed>) = ? [pid 7047] close(3 [pid 7046] chdir("./file0" [pid 7047] <... close resumed>) = 0 [pid 7046] <... chdir resumed>) = 0 [pid 7045] <... sync resumed>) = 0 [pid 7044] <... sync resumed>) = 0 [pid 7043] +++ exited with 0 +++ [pid 7046] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7043, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7044] exit_group(0 [pid 7045] exit_group(0 [pid 7044] <... exit_group resumed>) = ? [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 7047] close(4 [ 206.580515][ T7046] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 206.598048][ T7047] loop0: detected capacity change from 0 to 128 [pid 7046] openat(AT_FDCWD, ".", O_RDONLY [pid 7047] <... close resumed>) = 0 [pid 7046] <... openat resumed>) = 4 [pid 7047] mkdir("./file0", 0777 [pid 7046] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7047] <... mkdir resumed>) = 0 [pid 7044] +++ exited with 0 +++ [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7044, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7047] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7046] <... renameat2 resumed>) = 0 [pid 7045] <... exit_group resumed>) = ? [pid 5824] <... restart_syscall resumed>) = 0 [pid 7045] +++ exited with 0 +++ [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7045, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5824] umount2("./238", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] umount2("./233", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./238", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] openat(AT_FDCWD, "./233", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] openat(AT_FDCWD, "./238", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] openat(AT_FDCWD, "./238", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7046] sync( [pid 5827] <... openat resumed>) = 3 [pid 5825] <... openat resumed>) = 3 [pid 5824] <... openat resumed>) = 3 [pid 5824] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] newfstatat(3, "", [pid 5824] getdents64(3, [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] newfstatat(3, "", [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5827] getdents64(3, [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] umount2("./238/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5825] umount2("./238/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] umount2("./233/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... umount2 resumed>) = 0 [pid 5824] <... umount2 resumed>) = 0 [pid 5825] umount2("./238/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./238/file0", [pid 5824] umount2("./238/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... umount2 resumed>) = 0 [pid 5825] umount2("./238/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./238/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] umount2("./233/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... openat resumed>) = 4 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(4, "", [pid 5827] newfstatat(AT_FDCWD, "./233/file0", [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] getdents64(4, [pid 5827] umount2("./233/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] getdents64(4, [pid 5827] openat(AT_FDCWD, "./233/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5827] <... openat resumed>) = 4 [pid 5825] close(4 [pid 5827] newfstatat(4, "", [pid 5825] <... close resumed>) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] rmdir("./238/file0" [pid 5827] getdents64(4, [pid 5825] <... rmdir resumed>) = 0 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] umount2("./238/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] getdents64(4, [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5825] newfstatat(AT_FDCWD, "./238/binderfs", [pid 5827] close(4 [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] <... close resumed>) = 0 [pid 5825] unlink("./238/binderfs" [pid 5827] rmdir("./233/file0" [pid 5825] <... unlink resumed>) = 0 [pid 5827] <... rmdir resumed>) = 0 [pid 5825] getdents64(3, [pid 5824] newfstatat(AT_FDCWD, "./238/file0", [pid 5827] umount2("./233/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5825] close(3) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] rmdir("./238" [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] newfstatat(AT_FDCWD, "./233/binderfs", [pid 5825] <... rmdir resumed>) = 0 [pid 5824] umount2("./238/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] mkdir("./239", 0777 [pid 5827] unlink("./233/binderfs" [pid 5825] <... mkdir resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... unlink resumed>) = 0 [pid 5824] openat(AT_FDCWD, "./238/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 206.657004][ T7047] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5827] getdents64(3, [pid 5825] <... openat resumed>) = 3 [pid 5824] newfstatat(4, "", [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7047] <... mount resumed>) = 0 [pid 5827] close(3 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 7047] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5827] <... close resumed>) = 0 [pid 5825] <... ioctl resumed>) = 0 [pid 5824] getdents64(4, [pid 5827] rmdir("./233" [pid 5825] close(3 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] <... close resumed>) = 0 [pid 5824] getdents64(4, [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 7048 attached [pid 5824] close(4) = 0 [pid 5824] rmdir("./238/file0" [pid 7047] <... openat resumed>) = 3 [pid 7047] chdir("./file0") = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 7048] set_robust_list(0x55557eba4660, 24 [pid 7047] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7048] <... set_robust_list resumed>) = 0 [pid 7047] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7046] <... sync resumed>) = 0 [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7048 [pid 5824] umount2("./238/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7048] chdir("./239" [pid 7046] exit_group(0 [pid 5827] <... rmdir resumed>) = 0 [pid 7047] openat(AT_FDCWD, ".", O_RDONLY [pid 7046] <... exit_group resumed>) = ? [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7046] +++ exited with 0 +++ [pid 5824] newfstatat(AT_FDCWD, "./238/binderfs", [pid 7048] <... chdir resumed>) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7048] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7047] <... openat resumed>) = 4 [pid 5824] unlink("./238/binderfs" [pid 7048] <... prctl resumed>) = 0 [pid 7047] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7046, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7048] setpgid(0, 0 [pid 5826] umount2("./242", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... unlink resumed>) = 0 [pid 7048] <... setpgid resumed>) = 0 [pid 7047] <... renameat2 resumed>) = 0 [pid 5827] mkdir("./234", 0777 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] getdents64(3, [pid 7048] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7047] sync( [pid 5827] <... mkdir resumed>) = 0 [pid 5826] openat(AT_FDCWD, "./242", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7048] <... openat resumed>) = 3 [pid 5826] <... openat resumed>) = 3 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5826] newfstatat(3, "", [pid 7048] write(3, "1000", 4 [pid 5827] <... openat resumed>) = 3 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] close(3 [pid 7048] <... write resumed>) = 4 [pid 5827] ioctl(3, LOOP_CLR_FD [pid 5826] getdents64(3, [pid 5824] <... close resumed>) = 0 [pid 5827] <... ioctl resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] rmdir("./238" [pid 5827] close(3) = 0 [pid 5826] umount2("./242/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5824] <... rmdir resumed>) = 0 [pid 7048] close(3 [pid 5824] mkdir("./239", 0777./strace-static-x86_64: Process 7049 attached [pid 7048] <... close resumed>) = 0 [pid 7049] set_robust_list(0x55557eba4660, 24 [pid 7048] symlink("/dev/binderfs", "./binderfs" [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7049 [pid 7048] <... symlink resumed>) = 0 [pid 5824] <... mkdir resumed>) = 0 executing program [pid 7048] write(1, "executing program\n", 18 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7049] <... set_robust_list resumed>) = 0 [pid 7048] <... write resumed>) = 18 [pid 5826] <... umount2 resumed>) = 0 [pid 5824] <... openat resumed>) = 3 [pid 7049] chdir("./234" [pid 5824] ioctl(3, LOOP_CLR_FD) = 0 [pid 7048] memfd_create("syzkaller", 0 [pid 7047] <... sync resumed>) = 0 [pid 7049] <... chdir resumed>) = 0 [pid 5824] close(3 [pid 5826] umount2("./242/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7049] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7048] <... memfd_create resumed>) = 3 [pid 7047] exit_group(0 [pid 5824] <... close resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7049] <... prctl resumed>) = 0 [pid 7048] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7047] <... exit_group resumed>) = ? [pid 5826] newfstatat(AT_FDCWD, "./242/file0", [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7049] setpgid(0, 0 [pid 7048] <... mmap resumed>) = 0x7f957a000000 [pid 7047] +++ exited with 0 +++ [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 7050 attached [pid 7049] <... setpgid resumed>) = 0 [pid 7048] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5826] umount2("./242/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7050 [pid 7049] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7047, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 7049] <... openat resumed>) = 3 [pid 7050] set_robust_list(0x55557eba4660, 24 [pid 7048] <... write resumed>) = 65536 [pid 5826] openat(AT_FDCWD, "./242/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7050] <... set_robust_list resumed>) = 0 [pid 7049] write(3, "1000", 4 [pid 7048] munmap(0x7f957a000000, 138412032 [pid 5826] <... openat resumed>) = 4 [pid 5823] <... restart_syscall resumed>) = 0 [pid 5826] newfstatat(4, "", [pid 7050] chdir("./239" [pid 7049] <... write resumed>) = 4 [pid 7048] <... munmap resumed>) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7049] close(3 [pid 7048] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5826] getdents64(4, [pid 7049] <... close resumed>) = 0 [pid 5823] umount2("./241", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7049] symlink("/dev/binderfs", "./binderfs" [pid 7048] <... openat resumed>) = 4 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7049] <... symlink resumed>) = 0 [pid 5826] getdents64(4, [pid 5823] openat(AT_FDCWD, "./241", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 7048] ioctl(4, LOOP_SET_FD, 3 [pid 5823] newfstatat(3, "", [pid 7050] <... chdir resumed>) = 0 [pid 7050] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] close(4) = 0 [pid 5826] rmdir("./242/file0") = 0 [pid 5826] umount2("./242/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./242/binderfs", [pid 5823] getdents64(3, [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./242/binderfs") = 0 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5826] getdents64(3, executing program [pid 7050] <... prctl resumed>) = 0 [pid 7049] write(1, "executing program\n", 18 [pid 5823] umount2("./241/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7049] <... write resumed>) = 18 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7050] setpgid(0, 0) = 0 [pid 7049] memfd_create("syzkaller", 0 [pid 5826] close(3 [pid 7050] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7049] <... memfd_create resumed>) = 3 [pid 5826] <... close resumed>) = 0 [pid 7049] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7050] write(3, "1000", 4) = 4 [pid 7049] <... mmap resumed>) = 0x7f957a000000 [pid 5823] <... umount2 resumed>) = 0 [pid 7050] close(3) = 0 [pid 7049] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5826] rmdir("./242" [pid 5823] umount2("./241/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7050] symlink("/dev/binderfs", "./binderfs" [pid 7048] <... ioctl resumed>) = 0 executing program [pid 7050] <... symlink resumed>) = 0 [pid 7048] close(3 [pid 5826] <... rmdir resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7050] write(1, "executing program\n", 18) = 18 [pid 7048] <... close resumed>) = 0 [pid 5823] newfstatat(AT_FDCWD, "./241/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7050] memfd_create("syzkaller", 0 [pid 5823] umount2("./241/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7048] close(4 [pid 7050] <... memfd_create resumed>) = 3 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7048] <... close resumed>) = 0 [pid 7050] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7048] mkdir("./file0", 0777 [pid 5826] mkdir("./243", 0777 [pid 5823] openat(AT_FDCWD, "./241/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7050] <... mmap resumed>) = 0x7f957a000000 [pid 7048] <... mkdir resumed>) = 0 [pid 5826] <... mkdir resumed>) = 0 [pid 5823] <... openat resumed>) = 4 [pid 5823] newfstatat(4, "", [pid 7050] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7049] <... write resumed>) = 65536 [pid 7048] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] close(4) = 0 [pid 5823] rmdir("./241/file0" [pid 7049] munmap(0x7f957a000000, 138412032 [pid 5823] <... rmdir resumed>) = 0 [pid 5826] <... openat resumed>) = 3 [pid 7050] <... write resumed>) = 65536 [pid 7049] <... munmap resumed>) = 0 [pid 5826] ioctl(3, LOOP_CLR_FD) = 0 [pid 5823] umount2("./241/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] close(3 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7050] munmap(0x7f957a000000, 138412032 [pid 7049] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5826] <... close resumed>) = 0 [ 206.811588][ T7048] loop2: detected capacity change from 0 to 128 [pid 7050] <... munmap resumed>) = 0 [pid 7049] <... openat resumed>) = 4 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5823] newfstatat(AT_FDCWD, "./241/binderfs", [pid 7049] ioctl(4, LOOP_SET_FD, 3 [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7050] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5823] unlink("./241/binderfs") = 0 [pid 7050] <... openat resumed>) = 4 [pid 5823] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] close(3 [pid 7050] ioctl(4, LOOP_SET_FD, 3 [pid 5823] <... close resumed>) = 0 [pid 5823] rmdir("./241" [pid 7050] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5823] <... rmdir resumed>) = 0 [pid 7050] ioctl(4, LOOP_CLR_FD [pid 5823] mkdir("./242", 0777 [pid 7050] <... ioctl resumed>) = 0 [pid 5823] <... mkdir resumed>) = 0 [pid 7050] ioctl(4, LOOP_SET_FD, 3 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7051 [pid 7050] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5823] ioctl(3, LOOP_CLR_FD) = 0 ./strace-static-x86_64: Process 7051 attached [pid 5823] close(3) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7050] close(4 [pid 7049] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 7052 attached [pid 7051] set_robust_list(0x55557eba4660, 24 [pid 7050] <... close resumed>) = 0 [pid 7049] close(3 [pid 7050] close(3 [pid 7051] <... set_robust_list resumed>) = 0 [pid 7050] <... close resumed>) = 0 [pid 7049] <... close resumed>) = 0 [pid 7050] openat(AT_FDCWD, ".", O_RDONLY [pid 7049] close(4 [pid 7052] set_robust_list(0x55557eba4660, 24) = 0 [pid 7050] <... openat resumed>) = 3 [pid 7049] <... close resumed>) = 0 [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7052 [pid 7049] mkdir("./file0", 0777 [pid 7052] chdir("./242" [pid 7051] chdir("./243" [pid 7050] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7049] <... mkdir resumed>) = 0 [pid 7048] <... mount resumed>) = 0 [pid 7051] <... chdir resumed>) = 0 [pid 7050] <... renameat2 resumed>) = -1 ENOENT (No such file or directory) [pid 7049] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7048] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7050] sync( [pid 7051] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7051] setpgid(0, 0) = 0 [pid 7051] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7051] write(3, "1000", 4) = 4 [pid 7051] close(3) = 0 [pid 7048] <... openat resumed>) = 3 [pid 7051] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 7051] write(1, "executing program\n", 18) = 18 [pid 7051] memfd_create("syzkaller", 0 [pid 7048] chdir("./file0" [pid 7052] <... chdir resumed>) = 0 [pid 7048] <... chdir resumed>) = 0 [pid 7052] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7051] <... memfd_create resumed>) = 3 [pid 7051] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7052] setpgid(0, 0 [pid 7051] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7052] <... setpgid resumed>) = 0 [pid 7051] <... write resumed>) = 65536 [ 206.867027][ T7048] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 206.887275][ T7049] loop4: detected capacity change from 0 to 128 [pid 7048] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7052] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7048] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7051] munmap(0x7f957a000000, 138412032) = 0 [pid 7051] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 7051] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 7051] ioctl(4, LOOP_CLR_FD) = 0 [pid 7052] <... openat resumed>) = 3 [pid 7051] ioctl(4, LOOP_SET_FD, 3 [pid 7048] openat(AT_FDCWD, ".", O_RDONLY [pid 7051] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 7051] close(4) = 0 [pid 7051] close(3 [pid 7052] write(3, "1000", 4 [pid 7051] <... close resumed>) = 0 [pid 7048] <... openat resumed>) = 4 [pid 7051] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 7051] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7052] <... write resumed>) = 4 [pid 7052] close(3 [pid 7051] <... renameat2 resumed>) = -1 ENOENT (No such file or directory) [pid 7048] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7051] sync( [pid 7052] <... close resumed>) = 0 [pid 7052] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 7052] write(1, "executing program\n", 18 [pid 7048] <... renameat2 resumed>) = 0 [pid 7052] <... write resumed>) = 18 [pid 7048] sync( [pid 7052] memfd_create("syzkaller", 0) = 3 [pid 7052] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7049] <... mount resumed>) = 0 [pid 7052] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7049] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7052] <... write resumed>) = 65536 [pid 7049] chdir("./file0") = 0 [pid 7049] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7049] openat(AT_FDCWD, ".", O_RDONLY) = 4 [ 206.942281][ T7049] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [pid 7052] munmap(0x7f957a000000, 138412032 [pid 7050] <... sync resumed>) = 0 [pid 7049] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7052] <... munmap resumed>) = 0 [pid 7051] <... sync resumed>) = 0 [pid 7050] exit_group(0 [pid 7048] <... sync resumed>) = 0 [pid 7052] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7050] <... exit_group resumed>) = ? [pid 7048] exit_group(0) = ? [pid 7052] <... openat resumed>) = 4 [pid 7051] exit_group(0 [pid 7050] +++ exited with 0 +++ [pid 7048] +++ exited with 0 +++ [pid 7051] <... exit_group resumed>) = ? [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7048, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 7052] ioctl(4, LOOP_SET_FD, 3 [pid 7051] +++ exited with 0 +++ [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7050, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7051, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5824] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5826] umount2("./243", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7049] <... renameat2 resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] umount2("./239", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] openat(AT_FDCWD, "./243", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... openat resumed>) = 3 [pid 5824] openat(AT_FDCWD, "./239", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] newfstatat(3, "", [pid 5824] <... openat resumed>) = 3 [pid 5825] umount2("./239", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(3, [pid 5824] getdents64(3, [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 7052] <... ioctl resumed>) = 0 [pid 7049] sync( [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] umount2("./239/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7052] close(3 [pid 5826] umount2("./243/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] openat(AT_FDCWD, "./239", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7052] <... close resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... openat resumed>) = 3 [pid 5824] newfstatat(AT_FDCWD, "./239/binderfs", [pid 7052] close(4 [pid 5825] newfstatat(3, "", [pid 7052] <... close resumed>) = 0 [pid 5826] newfstatat(AT_FDCWD, "./243/binderfs", [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7052] mkdir("./file0", 0777 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] getdents64(3, [pid 5824] unlink("./239/binderfs" [pid 7049] <... sync resumed>) = 0 [pid 5826] unlink("./243/binderfs" [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] <... unlink resumed>) = 0 [pid 5825] umount2("./239/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7049] exit_group(0 [pid 5826] <... unlink resumed>) = 0 [pid 5824] getdents64(3, [pid 7052] <... mkdir resumed>) = 0 [pid 5826] getdents64(3, [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] close(3 [pid 5826] close(3 [pid 5824] <... close resumed>) = 0 [pid 5826] <... close resumed>) = 0 [pid 5824] rmdir("./239" [pid 7049] <... exit_group resumed>) = ? [pid 5826] rmdir("./243" [pid 5824] <... rmdir resumed>) = 0 [pid 5826] <... rmdir resumed>) = 0 [pid 5824] mkdir("./240", 0777) = 0 [pid 5826] mkdir("./244", 0777 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7049] +++ exited with 0 +++ [pid 5826] <... mkdir resumed>) = 0 [pid 5824] <... openat resumed>) = 3 [ 207.030620][ T7052] loop0: detected capacity change from 0 to 128 [pid 7052] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7049, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5824] ioctl(3, LOOP_CLR_FD [pid 5827] restart_syscall(<... resuming interrupted clone ...> [pid 5824] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5827] <... restart_syscall resumed>) = 0 [pid 5824] close(3 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5824] <... close resumed>) = 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7053 attached [pid 5826] <... openat resumed>) = 3 [pid 5827] umount2("./234", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7053 [pid 5826] close(3 [pid 7053] set_robust_list(0x55557eba4660, 24 [pid 5826] <... close resumed>) = 0 [pid 7053] <... set_robust_list resumed>) = 0 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7054 attached [pid 7053] chdir("./240" [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7053] <... chdir resumed>) = 0 [pid 5827] openat(AT_FDCWD, "./234", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7053] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7054] set_robust_list(0x55557eba4660, 24 [pid 7053] setpgid(0, 0 [pid 5827] <... openat resumed>) = 3 [pid 5825] <... umount2 resumed>) = 0 [pid 5827] newfstatat(3, "", [pid 7054] <... set_robust_list resumed>) = 0 [pid 7053] <... setpgid resumed>) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] umount2("./239/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] getdents64(3, [pid 7054] chdir("./244" [pid 7053] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7054 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7054] <... chdir resumed>) = 0 [pid 7053] <... openat resumed>) = 3 [pid 5827] umount2("./234/file0", MNT_FORCE|UMOUNT_NOFOLLOWexecuting program [pid 5825] newfstatat(AT_FDCWD, "./239/file0", [pid 7054] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7053] write(3, "1000", 4 [pid 7054] <... prctl resumed>) = 0 [pid 7053] <... write resumed>) = 4 [pid 7054] setpgid(0, 0 [pid 7053] close(3 [pid 7054] <... setpgid resumed>) = 0 [pid 7053] <... close resumed>) = 0 [pid 7054] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7053] symlink("/dev/binderfs", "./binderfs" [pid 7054] <... openat resumed>) = 3 [pid 7053] <... symlink resumed>) = 0 [pid 7053] write(1, "executing program\n", 18) = 18 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] umount2("./239/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7053] memfd_create("syzkaller", 0 [pid 5825] openat(AT_FDCWD, "./239/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7054] write(3, "1000", 4 [pid 5825] <... openat resumed>) = 4 [pid 7054] <... write resumed>) = 4 [pid 7053] <... memfd_create resumed>) = 3 [pid 5827] <... umount2 resumed>) = 0 [pid 5825] newfstatat(4, "", [pid 7054] close(3 [pid 7053] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7054] <... close resumed>) = 0 [pid 7053] <... mmap resumed>) = 0x7f957a000000 [pid 7054] symlink("/dev/binderfs", "./binderfs" [pid 7053] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5827] umount2("./234/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7054] <... symlink resumed>) = 0 [pid 7053] <... write resumed>) = 65536 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] getdents64(4, [pid 7053] munmap(0x7f957a000000, 138412032 [pid 5827] newfstatat(AT_FDCWD, "./234/file0", [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 7054] write(1, "executing program\n", 18 [pid 7053] <... munmap resumed>) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 executing program [pid 5825] getdents64(4, [pid 7054] <... write resumed>) = 18 [pid 5827] umount2("./234/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 7054] memfd_create("syzkaller", 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] close(4 [pid 7054] <... memfd_create resumed>) = 3 [pid 7053] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7054] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7053] <... openat resumed>) = 4 [pid 5827] openat(AT_FDCWD, "./234/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] <... close resumed>) = 0 [pid 7054] <... mmap resumed>) = 0x7f957a000000 [pid 7053] ioctl(4, LOOP_SET_FD, 3 [pid 7054] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5827] <... openat resumed>) = 4 [pid 5825] rmdir("./239/file0" [pid 5827] newfstatat(4, "", [pid 7054] <... write resumed>) = 65536 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] <... rmdir resumed>) = 0 [pid 5827] getdents64(4, [pid 5825] umount2("./239/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7054] munmap(0x7f957a000000, 138412032 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 7054] <... munmap resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] getdents64(4, [pid 5825] newfstatat(AT_FDCWD, "./239/binderfs", [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 7052] <... mount resumed>) = 0 [pid 5827] close(4 [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7054] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5825] unlink("./239/binderfs" [pid 5827] <... close resumed>) = 0 [pid 7054] <... openat resumed>) = 4 [pid 7052] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7054] ioctl(4, LOOP_SET_FD, 3 [pid 5827] rmdir("./234/file0" [pid 5825] <... unlink resumed>) = 0 [pid 7052] <... openat resumed>) = 3 [pid 5825] getdents64(3, [pid 5827] <... rmdir resumed>) = 0 [ 207.086654][ T7052] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [pid 7052] chdir("./file0" [pid 7053] <... ioctl resumed>) = 0 [pid 5827] umount2("./234/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7054] <... ioctl resumed>) = 0 [pid 7052] <... chdir resumed>) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] close(3 [pid 7052] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5827] newfstatat(AT_FDCWD, "./234/binderfs", [pid 5825] <... close resumed>) = 0 [pid 7052] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5825] rmdir("./239" [pid 7052] openat(AT_FDCWD, ".", O_RDONLY [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7053] close(3 [pid 7054] close(3 [pid 7053] <... close resumed>) = 0 [pid 7054] <... close resumed>) = 0 [pid 7053] close(4 [pid 5827] unlink("./234/binderfs" [pid 5825] <... rmdir resumed>) = 0 [pid 7054] close(4 [pid 7053] <... close resumed>) = 0 [pid 7052] <... openat resumed>) = 4 [pid 7054] <... close resumed>) = 0 [pid 7053] mkdir("./file0", 0777 [pid 7054] mkdir("./file0", 0777 [pid 7053] <... mkdir resumed>) = 0 [pid 7052] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5827] <... unlink resumed>) = 0 [pid 5825] mkdir("./240", 0777 [pid 7054] <... mkdir resumed>) = 0 [pid 7053] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [ 207.145148][ T7053] loop1: detected capacity change from 0 to 128 [ 207.151939][ T7054] loop3: detected capacity change from 0 to 128 [ 207.176408][ T7053] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [pid 7054] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5827] getdents64(3, [pid 5825] <... mkdir resumed>) = 0 [pid 7052] <... renameat2 resumed>) = 0 [pid 7052] sync( [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5827] close(3 [pid 5825] <... openat resumed>) = 3 [pid 5827] <... close resumed>) = 0 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 5827] rmdir("./234" [pid 5825] <... ioctl resumed>) = 0 [pid 5825] close(3 [pid 5827] <... rmdir resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 5827] mkdir("./235", 0777 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7055 attached , child_tidptr=0x55557eba4650) = 7055 [pid 5827] <... mkdir resumed>) = 0 [pid 7055] set_robust_list(0x55557eba4660, 24) = 0 [pid 7055] chdir("./240") = 0 [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7055] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5827] <... openat resumed>) = 3 [pid 7055] <... prctl resumed>) = 0 [pid 5827] ioctl(3, LOOP_CLR_FD) = 0 [pid 7055] setpgid(0, 0 [pid 5827] close(3 [pid 7055] <... setpgid resumed>) = 0 [pid 5827] <... close resumed>) = 0 [ 207.186425][ T7054] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [pid 7055] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7055] <... openat resumed>) = 3 ./strace-static-x86_64: Process 7056 attached [pid 7055] write(3, "1000", 4) = 4 [pid 7055] close(3) = 0 [pid 7055] symlink("/dev/binderfs", "./binderfs" [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7056 [pid 7056] set_robust_list(0x55557eba4660, 24 [pid 7055] <... symlink resumed>) = 0 [pid 7056] <... set_robust_list resumed>) = 0 [pid 7056] chdir("./235") = 0 executing program [pid 7055] write(1, "executing program\n", 18 [pid 7056] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7055] <... write resumed>) = 18 [pid 7056] <... prctl resumed>) = 0 [pid 7055] memfd_create("syzkaller", 0 [pid 7054] <... mount resumed>) = 0 [pid 7053] <... mount resumed>) = 0 [pid 7056] setpgid(0, 0 [pid 7055] <... memfd_create resumed>) = 3 [pid 7054] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7053] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7056] <... setpgid resumed>) = 0 [pid 7054] <... openat resumed>) = 3 [pid 7056] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7054] chdir("./file0" [pid 7056] <... openat resumed>) = 3 [pid 7055] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7054] <... chdir resumed>) = 0 [pid 7053] <... openat resumed>) = 3 [pid 7056] write(3, "1000", 4 [pid 7054] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7056] <... write resumed>) = 4 [pid 7054] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7056] close(3 [pid 7054] openat(AT_FDCWD, ".", O_RDONLY [pid 7056] <... close resumed>) = 0 [pid 7055] <... mmap resumed>) = 0x7f957a000000 [pid 7054] <... openat resumed>) = 4 [pid 7053] chdir("./file0" [pid 7056] symlink("/dev/binderfs", "./binderfs" [pid 7055] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7054] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7055] <... write resumed>) = 65536 [pid 7053] <... chdir resumed>) = 0 executing program [pid 7055] munmap(0x7f957a000000, 138412032 [pid 7054] <... renameat2 resumed>) = 0 [pid 7053] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7056] <... symlink resumed>) = 0 [pid 7053] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7053] openat(AT_FDCWD, ".", O_RDONLY [pid 7056] write(1, "executing program\n", 18) = 18 [pid 7054] sync( [pid 7053] <... openat resumed>) = 4 [pid 7056] memfd_create("syzkaller", 0 [pid 7055] <... munmap resumed>) = 0 [pid 7056] <... memfd_create resumed>) = 3 [pid 7056] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7055] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7053] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7052] <... sync resumed>) = 0 [pid 7056] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7055] <... openat resumed>) = 4 [pid 7052] exit_group(0 [pid 7055] ioctl(4, LOOP_SET_FD, 3 [pid 7053] <... renameat2 resumed>) = 0 [pid 7052] <... exit_group resumed>) = ? [pid 7052] +++ exited with 0 +++ [pid 7056] <... write resumed>) = 65536 [pid 7055] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 7053] sync( [pid 7056] munmap(0x7f957a000000, 138412032 [pid 7055] ioctl(4, LOOP_CLR_FD [pid 7056] <... munmap resumed>) = 0 [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7052, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7056] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5823] umount2("./242", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7056] <... openat resumed>) = 4 [pid 7054] <... sync resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7055] <... ioctl resumed>) = 0 [pid 7056] ioctl(4, LOOP_SET_FD, 3 [pid 7054] exit_group(0 [pid 7053] <... sync resumed>) = 0 [pid 5823] openat(AT_FDCWD, "./242", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7054] <... exit_group resumed>) = ? [pid 7056] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5823] <... openat resumed>) = 3 [pid 7056] ioctl(4, LOOP_CLR_FD) = 0 [pid 5823] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] umount2("./242/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7054] +++ exited with 0 +++ [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7054, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5826] restart_syscall(<... resuming interrupted clone ...> [pid 7053] exit_group(0) = ? [pid 7053] +++ exited with 0 +++ [pid 5826] <... restart_syscall resumed>) = 0 [pid 7056] ioctl(4, LOOP_SET_FD, 3 [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7053, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 7056] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 7055] ioctl(4, LOOP_SET_FD, 3 [pid 7056] close(4 [pid 7055] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5826] umount2("./244", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7056] <... close resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] umount2("./240", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7056] close(3 [pid 5826] openat(AT_FDCWD, "./244", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7056] <... close resumed>) = 0 [pid 5826] <... openat resumed>) = 3 [pid 5824] openat(AT_FDCWD, "./240", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7056] openat(AT_FDCWD, ".", O_RDONLY [pid 5826] newfstatat(3, "", [pid 5824] <... openat resumed>) = 3 [pid 7056] <... openat resumed>) = 3 [pid 7055] close(4 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7056] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7055] <... close resumed>) = 0 [pid 5826] getdents64(3, [pid 5824] newfstatat(3, "", [pid 7056] <... renameat2 resumed>) = -1 ENOENT (No such file or directory) [pid 7055] close(3 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7056] sync( [pid 7055] <... close resumed>) = 0 [pid 5826] umount2("./244/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7055] openat(AT_FDCWD, ".", O_RDONLY [pid 5824] getdents64(3, [pid 7055] <... openat resumed>) = 3 [pid 7055] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5823] <... umount2 resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] umount2("./242/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7055] <... renameat2 resumed>) = -1 ENOENT (No such file or directory) [pid 5824] umount2("./240/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7055] sync( [pid 5823] newfstatat(AT_FDCWD, "./242/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] umount2("./242/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./242/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5823] newfstatat(4, "", [pid 5826] <... umount2 resumed>) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] umount2("./244/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] getdents64(4, [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 7056] <... sync resumed>) = 0 [pid 5826] newfstatat(AT_FDCWD, "./244/file0", [pid 5823] getdents64(4, [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7056] exit_group(0) = ? [pid 5826] umount2("./244/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... umount2 resumed>) = 0 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 7056] +++ exited with 0 +++ [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] umount2("./240/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] close(4 [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7056, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5826] openat(AT_FDCWD, "./244/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... close resumed>) = 0 [pid 7055] <... sync resumed>) = 0 [pid 5827] restart_syscall(<... resuming interrupted clone ...> [pid 5826] <... openat resumed>) = 4 [pid 5823] rmdir("./242/file0") = 0 [pid 5824] newfstatat(AT_FDCWD, "./240/file0", [pid 5826] newfstatat(4, "", [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(4, [pid 5824] umount2("./240/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./240/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] getdents64(4, [pid 5824] <... openat resumed>) = 4 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5826] close(4) = 0 [pid 7055] exit_group(0 [pid 5827] <... restart_syscall resumed>) = 0 [pid 5826] rmdir("./244/file0" [pid 5824] newfstatat(4, "", [pid 5823] umount2("./242/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./242/binderfs", [pid 7055] <... exit_group resumed>) = ? [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./242/binderfs" [pid 5827] umount2("./235", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... rmdir resumed>) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... unlink resumed>) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] openat(AT_FDCWD, "./235", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5826] umount2("./244/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] getdents64(4, [pid 5823] getdents64(3, [pid 5827] newfstatat(3, "", [pid 7055] +++ exited with 0 +++ [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5827] getdents64(3, [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7055, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5826] newfstatat(AT_FDCWD, "./244/binderfs", [pid 5824] getdents64(4, [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 5823] close(3 [pid 5827] umount2("./235/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] <... close resumed>) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] unlink("./244/binderfs" [pid 5824] close(4 [pid 5827] newfstatat(AT_FDCWD, "./235/binderfs", [pid 5826] <... unlink resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 5823] rmdir("./242" [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] getdents64(3, [pid 5824] rmdir("./240/file0" [pid 5823] <... rmdir resumed>) = 0 [pid 5827] unlink("./235/binderfs" [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 5826] close(3 [pid 5824] umount2("./240/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... unlink resumed>) = 0 [pid 5826] <... close resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] mkdir("./243", 0777 [pid 5827] getdents64(3, [pid 5826] rmdir("./244" [pid 5824] newfstatat(AT_FDCWD, "./240/binderfs", [pid 5823] <... mkdir resumed>) = 0 [pid 5825] umount2("./240", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... rmdir resumed>) = 0 [pid 5825] openat(AT_FDCWD, "./240", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] unlink("./240/binderfs" [pid 5827] close(3 [pid 5825] <... openat resumed>) = 3 [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5825] newfstatat(3, "", [pid 5827] <... close resumed>) = 0 [pid 5827] rmdir("./235" [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... openat resumed>) = 3 [pid 5823] ioctl(3, LOOP_CLR_FD) = 0 [pid 5823] close(3 [pid 5827] <... rmdir resumed>) = 0 [pid 5825] getdents64(3, [pid 5823] <... close resumed>) = 0 [pid 5826] mkdir("./245", 0777) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 5826] <... openat resumed>) = 3 [pid 5825] umount2("./240/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] mkdir("./236", 0777 [pid 5825] newfstatat(AT_FDCWD, "./240/binderfs", [pid 5826] ioctl(3, LOOP_CLR_FD [pid 5827] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 7057 attached [pid 5826] <... ioctl resumed>) = 0 [pid 5826] close(3 [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5826] <... close resumed>) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... unlink resumed>) = 0 [pid 5825] unlink("./240/binderfs" [pid 5827] <... openat resumed>) = 3 [pid 5827] ioctl(3, LOOP_CLR_FD [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5825] <... unlink resumed>) = 0 [pid 7057] set_robust_list(0x55557eba4660, 24 [pid 5824] getdents64(3, [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7057 [pid 7057] <... set_robust_list resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7057] chdir("./243" [pid 5825] getdents64(3, [pid 5824] close(3 [pid 5827] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] <... close resumed>) = 0 [pid 5824] rmdir("./240") = 0 [pid 7057] <... chdir resumed>) = 0 [pid 7057] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5824] mkdir("./241", 0777 [pid 7057] setpgid(0, 0 [pid 5824] <... mkdir resumed>) = 0 [pid 7057] <... setpgid resumed>) = 0 [pid 7057] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7058 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 7057] write(3, "1000", 4 [pid 5824] ioctl(3, LOOP_CLR_FD [pid 7057] <... write resumed>) = 4 [pid 5824] <... ioctl resumed>) = 0 [pid 7057] close(3 [pid 5824] close(3 [pid 7057] <... close resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 7057] symlink("/dev/binderfs", "./binderfs" [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5827] close(3 [pid 5825] close(3./strace-static-x86_64: Process 7058 attached [pid 5827] <... close resumed>) = 0 ./strace-static-x86_64: Process 7059 attached [pid 7058] set_robust_list(0x55557eba4660, 24 [pid 7057] <... symlink resumed>) = 0 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5825] <... close resumed>) = 0 executing program ./strace-static-x86_64: Process 7060 attached [pid 7058] <... set_robust_list resumed>) = 0 [pid 7057] write(1, "executing program\n", 18 [pid 5825] rmdir("./240" [pid 7059] set_robust_list(0x55557eba4660, 24 [pid 7057] <... write resumed>) = 18 [pid 7059] <... set_robust_list resumed>) = 0 [pid 7057] memfd_create("syzkaller", 0 [pid 5825] <... rmdir resumed>) = 0 [pid 7060] set_robust_list(0x55557eba4660, 24 [pid 7059] chdir("./241" [pid 7058] chdir("./245" [pid 7057] <... memfd_create resumed>) = 3 [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7060 [pid 5825] mkdir("./241", 0777 [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7059 [pid 7059] <... chdir resumed>) = 0 [pid 7057] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7060] <... set_robust_list resumed>) = 0 [pid 7058] <... chdir resumed>) = 0 [pid 7057] <... mmap resumed>) = 0x7f957a000000 [pid 5825] <... mkdir resumed>) = 0 [pid 7060] chdir("./236" [pid 7058] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7060] <... chdir resumed>) = 0 [pid 7059] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7058] <... prctl resumed>) = 0 [pid 7057] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7060] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7059] <... prctl resumed>) = 0 [pid 7058] setpgid(0, 0 [pid 7057] <... write resumed>) = 65536 [pid 5825] <... openat resumed>) = 3 [pid 7060] <... prctl resumed>) = 0 [pid 7059] setpgid(0, 0 [pid 7058] <... setpgid resumed>) = 0 [pid 7057] munmap(0x7f957a000000, 138412032 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 7060] setpgid(0, 0 [pid 7058] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7057] <... munmap resumed>) = 0 [pid 5825] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7060] <... setpgid resumed>) = 0 [pid 7059] <... setpgid resumed>) = 0 [pid 7057] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5825] close(3 [pid 7060] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7059] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7058] <... openat resumed>) = 3 [pid 7057] <... openat resumed>) = 4 [pid 5825] <... close resumed>) = 0 [pid 7060] <... openat resumed>) = 3 [pid 7059] <... openat resumed>) = 3 [pid 7058] write(3, "1000", 4 [pid 7057] ioctl(4, LOOP_SET_FD, 3 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7060] write(3, "1000", 4./strace-static-x86_64: Process 7061 attached ) = 4 [pid 7058] <... write resumed>) = 4 [pid 7059] write(3, "1000", 4) = 4 [pid 7059] close(3 [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7061 [pid 7059] <... close resumed>) = 0 [pid 7059] symlink("/dev/binderfs", "./binderfs" [pid 7060] close(3 [pid 7058] close(3 [pid 7060] <... close resumed>) = 0 executing program executing program [pid 7061] set_robust_list(0x55557eba4660, 24 [pid 7060] symlink("/dev/binderfs", "./binderfs" [pid 7059] <... symlink resumed>) = 0 [pid 7058] <... close resumed>) = 0 [pid 7059] write(1, "executing program\n", 18 [pid 7058] symlink("/dev/binderfs", "./binderfs" [pid 7059] <... write resumed>) = 18 [pid 7060] <... symlink resumed>) = 0 [pid 7059] memfd_create("syzkaller", 0 [pid 7058] <... symlink resumed>) = 0 [pid 7061] <... set_robust_list resumed>) = 0 [pid 7060] write(1, "executing program\n", 18 [pid 7059] <... memfd_create resumed>) = 3 [pid 7059] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7059] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7061] chdir("./241" [pid 7060] <... write resumed>) = 18 [pid 7059] <... write resumed>) = 65536 executing program [pid 7058] write(1, "executing program\n", 18 [pid 7061] <... chdir resumed>) = 0 [pid 7060] memfd_create("syzkaller", 0 [pid 7058] <... write resumed>) = 18 [pid 7059] munmap(0x7f957a000000, 138412032) = 0 [pid 7058] memfd_create("syzkaller", 0 [pid 7060] <... memfd_create resumed>) = 3 [pid 7059] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7061] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7058] <... memfd_create resumed>) = 3 [pid 7060] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7058] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7060] <... mmap resumed>) = 0x7f957a000000 [pid 7058] <... mmap resumed>) = 0x7f957a000000 [pid 7058] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7057] <... ioctl resumed>) = 0 [pid 7057] close(3) = 0 [pid 7061] <... prctl resumed>) = 0 [pid 7060] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7059] <... openat resumed>) = 4 [pid 7058] <... write resumed>) = 65536 [pid 7061] setpgid(0, 0 [pid 7059] ioctl(4, LOOP_SET_FD, 3 [pid 7061] <... setpgid resumed>) = 0 [pid 7060] <... write resumed>) = 65536 [pid 7058] munmap(0x7f957a000000, 138412032 [pid 7057] close(4) = 0 [pid 7058] <... munmap resumed>) = 0 [pid 7057] mkdir("./file0", 0777 [pid 7061] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7058] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7057] <... mkdir resumed>) = 0 [pid 7061] <... openat resumed>) = 3 [pid 7060] munmap(0x7f957a000000, 138412032 [pid 7058] <... openat resumed>) = 4 [ 207.482422][ T7057] loop0: detected capacity change from 0 to 128 [ 207.521718][ T7059] loop1: detected capacity change from 0 to 128 [pid 7057] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7061] write(3, "1000", 4 [pid 7060] <... munmap resumed>) = 0 [pid 7058] ioctl(4, LOOP_SET_FD, 3 [pid 7061] <... write resumed>) = 4 [pid 7060] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7061] close(3 [pid 7060] <... openat resumed>) = 4 [pid 7061] <... close resumed>) = 0 [pid 7060] ioctl(4, LOOP_SET_FD, 3 [pid 7061] symlink("/dev/binderfs", "./binderfs" [pid 7059] <... ioctl resumed>) = 0 [pid 7059] close(3) = 0 [pid 7059] close(4 [pid 7061] <... symlink resumed>) = 0 [pid 7060] <... ioctl resumed>) = 0 [pid 7059] <... close resumed>) = 0 [pid 7058] <... ioctl resumed>) = 0 executing program [pid 7061] write(1, "executing program\n", 18 [pid 7059] mkdir("./file0", 0777 [pid 7058] close(3 [pid 7061] <... write resumed>) = 18 [pid 7059] <... mkdir resumed>) = 0 [pid 7058] <... close resumed>) = 0 [pid 7061] memfd_create("syzkaller", 0 [pid 7060] close(3 [pid 7059] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7058] close(4 [pid 7061] <... memfd_create resumed>) = 3 [pid 7060] <... close resumed>) = 0 [pid 7058] <... close resumed>) = 0 [pid 7058] mkdir("./file0", 0777 [pid 7061] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7060] close(4) = 0 [pid 7061] <... mmap resumed>) = 0x7f957a000000 [pid 7058] <... mkdir resumed>) = 0 [pid 7061] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7060] mkdir("./file0", 0777 [pid 7058] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7060] <... mkdir resumed>) = 0 [pid 7061] <... write resumed>) = 65536 [ 207.546177][ T7058] loop3: detected capacity change from 0 to 128 [ 207.558196][ T7060] loop4: detected capacity change from 0 to 128 [ 207.564191][ T7057] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 207.585431][ T7059] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [pid 7060] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7061] munmap(0x7f957a000000, 138412032) = 0 [pid 7061] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 7057] <... mount resumed>) = 0 [pid 7057] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7057] chdir("./file0" [pid 7061] ioctl(4, LOOP_SET_FD, 3 [pid 7057] <... chdir resumed>) = 0 [pid 7057] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7057] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7057] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = 0 [pid 7057] sync( [pid 7059] <... mount resumed>) = 0 [pid 7059] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7059] chdir("./file0" [pid 7061] <... ioctl resumed>) = 0 [pid 7059] <... chdir resumed>) = 0 [pid 7059] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7059] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7059] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7061] close(3) = 0 [pid 7059] <... renameat2 resumed>) = 0 [pid 7059] sync( [pid 7061] close(4) = 0 [pid 7061] mkdir("./file0", 0777) = 0 [pid 7061] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7060] <... mount resumed>) = 0 [pid 7060] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7060] chdir("./file0") = 0 [ 207.610871][ T7060] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 207.628717][ T7058] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 207.643686][ T7061] loop2: detected capacity change from 0 to 128 [pid 7060] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7060] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7060] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = 0 [ 207.682108][ T7061] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [pid 7060] sync( [pid 7058] <... mount resumed>) = 0 [pid 7058] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7058] chdir("./file0") = 0 [pid 7058] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7058] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7061] <... mount resumed>) = 0 [pid 7058] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7061] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7061] chdir("./file0") = 0 [pid 7061] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7061] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7061] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7058] <... renameat2 resumed>) = 0 [pid 7058] sync( [pid 7061] <... renameat2 resumed>) = 0 [pid 7061] sync() = 0 [pid 7060] <... sync resumed>) = 0 [pid 7059] <... sync resumed>) = 0 [pid 7058] <... sync resumed>) = 0 [pid 7057] <... sync resumed>) = 0 [pid 7061] exit_group(0 [pid 7060] exit_group(0 [pid 7058] exit_group(0 [pid 7057] exit_group(0 [pid 7061] <... exit_group resumed>) = ? [pid 7060] <... exit_group resumed>) = ? [pid 7058] <... exit_group resumed>) = ? [pid 7057] <... exit_group resumed>) = ? [pid 7060] +++ exited with 0 +++ [pid 7058] +++ exited with 0 +++ [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7060, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7058, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5827] restart_syscall(<... resuming interrupted clone ...> [pid 5826] restart_syscall(<... resuming interrupted clone ...> [pid 7059] exit_group(0) = ? [pid 7061] +++ exited with 0 +++ [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7061, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5827] <... restart_syscall resumed>) = 0 [pid 5826] <... restart_syscall resumed>) = 0 [pid 5825] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5827] umount2("./236", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7059] +++ exited with 0 +++ [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] openat(AT_FDCWD, "./236", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] umount2("./241", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... openat resumed>) = 3 [pid 5826] umount2("./245", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7059, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] newfstatat(3, "", [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7057] +++ exited with 0 +++ [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] openat(AT_FDCWD, "./245", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] openat(AT_FDCWD, "./241", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] <... openat resumed>) = 3 [pid 5826] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5826] umount2("./245/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7057, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5823] umount2("./243", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./241", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./243", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] openat(AT_FDCWD, "./241", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] <... openat resumed>) = 3 [pid 5824] <... openat resumed>) = 3 [pid 5823] newfstatat(3, "", [pid 5824] newfstatat(3, "", [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(3, [pid 5827] getdents64(3, [pid 5825] <... openat resumed>) = 3 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5825] newfstatat(3, "", [pid 5824] getdents64(3, [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5827] umount2("./236/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] umount2("./243/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... umount2 resumed>) = 0 [pid 5826] umount2("./245/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5826] newfstatat(AT_FDCWD, "./245/file0", [pid 5824] umount2("./241/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] umount2("./245/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./245/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5826] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5826] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5825] getdents64(3, [pid 5826] close(4) = 0 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5826] rmdir("./245/file0" [pid 5825] umount2("./241/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... rmdir resumed>) = 0 [pid 5826] umount2("./245/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./245/binderfs", [pid 5825] <... umount2 resumed>) = 0 [pid 5823] <... umount2 resumed>) = 0 [pid 5823] umount2("./243/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./243/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] umount2("./243/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... umount2 resumed>) = 0 [pid 5825] umount2("./241/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] umount2("./236/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... umount2 resumed>) = 0 [pid 5824] umount2("./241/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./241/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] newfstatat(AT_FDCWD, "./241/file0", [pid 5824] umount2("./241/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] newfstatat(AT_FDCWD, "./236/file0", [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] umount2("./241/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] openat(AT_FDCWD, "./241/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] openat(AT_FDCWD, "./243/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] umount2("./236/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./241/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] <... openat resumed>) = 4 [pid 5823] <... openat resumed>) = 4 [pid 5827] openat(AT_FDCWD, "./236/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] unlink("./245/binderfs" [pid 5825] <... openat resumed>) = 4 [pid 5824] newfstatat(4, "", [pid 5823] newfstatat(4, "", [pid 5825] newfstatat(4, "", [pid 5827] <... openat resumed>) = 4 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(4, [pid 5823] getdents64(4, [pid 5827] newfstatat(4, "", [pid 5826] <... unlink resumed>) = 0 [pid 5825] getdents64(4, [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5827] getdents64(4, [pid 5826] getdents64(3, [pid 5825] getdents64(4, [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] getdents64(4, [pid 5826] close(3 [pid 5825] close(4 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5826] <... close resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 5823] close(4 [pid 5827] getdents64(4, [pid 5826] rmdir("./245" [pid 5825] rmdir("./241/file0" [pid 5824] getdents64(4, [pid 5823] <... close resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] rmdir("./243/file0" [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5826] <... rmdir resumed>) = 0 [pid 5825] <... rmdir resumed>) = 0 [pid 5824] close(4 [pid 5823] <... rmdir resumed>) = 0 [pid 5827] close(4 [pid 5826] mkdir("./246", 0777 [pid 5825] umount2("./241/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... close resumed>) = 0 [pid 5823] umount2("./243/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] rmdir("./241/file0" [pid 5823] newfstatat(AT_FDCWD, "./243/binderfs", [pid 5827] <... close resumed>) = 0 [pid 5825] newfstatat(AT_FDCWD, "./241/binderfs", [pid 5824] <... rmdir resumed>) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] rmdir("./236/file0" [pid 5825] unlink("./241/binderfs") = 0 [pid 5824] umount2("./241/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] unlink("./243/binderfs" [pid 5827] <... rmdir resumed>) = 0 [pid 5827] umount2("./236/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] getdents64(3, [pid 5823] <... unlink resumed>) = 0 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] getdents64(3, [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] close(3 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... close resumed>) = 0 [pid 5825] rmdir("./241" [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] newfstatat(AT_FDCWD, "./241/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] newfstatat(AT_FDCWD, "./236/binderfs", [pid 5826] <... mkdir resumed>) = 0 [pid 5825] <... rmdir resumed>) = 0 [pid 5823] close(3 [pid 5824] unlink("./241/binderfs" [pid 5823] <... close resumed>) = 0 [pid 5825] mkdir("./242", 0777 [pid 5824] <... unlink resumed>) = 0 [pid 5823] rmdir("./243" [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5825] <... mkdir resumed>) = 0 [pid 5827] unlink("./236/binderfs" [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5827] <... unlink resumed>) = 0 [pid 5826] <... openat resumed>) = 3 [pid 5825] <... openat resumed>) = 3 [pid 5824] getdents64(3, [pid 5823] <... rmdir resumed>) = 0 [pid 5827] getdents64(3, [pid 5826] ioctl(3, LOOP_CLR_FD [pid 5825] ioctl(3, LOOP_CLR_FD [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] mkdir("./244", 0777 [pid 5825] <... ioctl resumed>) = 0 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] <... ioctl resumed>) = 0 [pid 5825] close(3 [pid 5824] close(3 [pid 5823] <... mkdir resumed>) = 0 [pid 5827] close(3 [pid 5826] close(3 [pid 5824] <... close resumed>) = 0 [pid 5824] rmdir("./241") = 0 [pid 5825] <... close resumed>) = 0 [pid 5827] <... close resumed>) = 0 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5824] mkdir("./242", 0777 [pid 5823] ioctl(3, LOOP_CLR_FD [pid 5824] <... mkdir resumed>) = 0 [pid 5823] <... ioctl resumed>) = 0 [pid 5823] close(3 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR./strace-static-x86_64: Process 7062 attached [pid 5827] rmdir("./236" [pid 5826] <... close resumed>) = 0 [pid 5823] <... close resumed>) = 0 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5824] <... openat resumed>) = 3 ./strace-static-x86_64: Process 7063 attached [pid 7062] set_robust_list(0x55557eba4660, 24 [pid 5827] <... rmdir resumed>) = 0 [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7062 [pid 5824] ioctl(3, LOOP_CLR_FD [pid 7063] set_robust_list(0x55557eba4660, 24 [pid 7062] <... set_robust_list resumed>) = 0 [pid 5827] mkdir("./237", 0777 [pid 5824] <... ioctl resumed>) = 0 [pid 5824] close(3 [pid 7062] chdir("./242" [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7063 [pid 7062] <... chdir resumed>) = 0 [pid 5827] <... mkdir resumed>) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7063] <... set_robust_list resumed>) = 0 [pid 7062] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7063] chdir("./246" [pid 7062] <... prctl resumed>) = 0 [pid 5827] <... openat resumed>) = 3 [pid 5824] <... close resumed>) = 0 ./strace-static-x86_64: Process 7064 attached [pid 7064] set_robust_list(0x55557eba4660, 24) = 0 [pid 7064] chdir("./244" [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7065 attached [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7064 [pid 7064] <... chdir resumed>) = 0 [pid 7064] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7065] set_robust_list(0x55557eba4660, 24 [pid 7064] <... prctl resumed>) = 0 [pid 7065] <... set_robust_list resumed>) = 0 [pid 7064] setpgid(0, 0 [pid 7065] chdir("./242" [pid 7064] <... setpgid resumed>) = 0 [pid 7064] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7065] <... chdir resumed>) = 0 [pid 7065] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7065] setpgid(0, 0) = 0 [pid 7064] write(3, "1000", 4 [pid 7065] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7064] <... write resumed>) = 4 [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7065 [pid 7064] close(3 [pid 7065] <... openat resumed>) = 3 [pid 7064] <... close resumed>) = 0 [pid 7064] symlink("/dev/binderfs", "./binderfs" [pid 7065] write(3, "1000", 4 [pid 7064] <... symlink resumed>) = 0 [pid 7065] <... write resumed>) = 4 [pid 7065] close(3) = 0 [pid 7065] symlink("/dev/binderfs", "./binderfs"executing program [pid 7064] write(1, "executing program\n", 18 [pid 7063] <... chdir resumed>) = 0 [pid 7062] setpgid(0, 0 [pid 5827] ioctl(3, LOOP_CLR_FD [pid 7065] <... symlink resumed>) = 0 [pid 7064] <... write resumed>) = 18 [pid 7064] memfd_create("syzkaller", 0executing program [pid 7065] write(1, "executing program\n", 18) = 18 [pid 7065] memfd_create("syzkaller", 0 [pid 7064] <... memfd_create resumed>) = 3 [pid 7064] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7065] <... memfd_create resumed>) = 3 [pid 7064] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7065] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7065] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7063] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7062] <... setpgid resumed>) = 0 [pid 5827] <... ioctl resumed>) = 0 [pid 7064] <... write resumed>) = 65536 [pid 7063] <... prctl resumed>) = 0 [pid 7062] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5827] close(3 [pid 7065] <... write resumed>) = 65536 [pid 7064] munmap(0x7f957a000000, 138412032) = 0 [pid 5827] <... close resumed>) = 0 [pid 7062] <... openat resumed>) = 3 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7063] setpgid(0, 0 [pid 7062] write(3, "1000", 4 [pid 7065] munmap(0x7f957a000000, 138412032 [pid 7064] openat(AT_FDCWD, "/dev/loop0", O_RDWR./strace-static-x86_64: Process 7066 attached [pid 7065] <... munmap resumed>) = 0 [pid 7064] <... openat resumed>) = 4 [pid 7063] <... setpgid resumed>) = 0 [pid 7062] <... write resumed>) = 4 [pid 7066] set_robust_list(0x55557eba4660, 24 [pid 7063] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7062] close(3 [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7066 [pid 7066] <... set_robust_list resumed>) = 0 [pid 7064] ioctl(4, LOOP_SET_FD, 3 [pid 7066] chdir("./237" [pid 7065] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7063] <... openat resumed>) = 3 [pid 7062] <... close resumed>) = 0 [pid 7062] symlink("/dev/binderfs", "./binderfs" [pid 7065] <... openat resumed>) = 4 [pid 7065] ioctl(4, LOOP_SET_FD, 3executing program [pid 7066] <... chdir resumed>) = 0 [pid 7063] write(3, "1000", 4 [pid 7062] <... symlink resumed>) = 0 [pid 7063] <... write resumed>) = 4 [pid 7062] write(1, "executing program\n", 18 [pid 7066] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7062] <... write resumed>) = 18 [pid 7066] <... prctl resumed>) = 0 [pid 7066] setpgid(0, 0) = 0 [pid 7066] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7062] memfd_create("syzkaller", 0 [pid 7066] write(3, "1000", 4 [pid 7062] <... memfd_create resumed>) = 3 [pid 7066] <... write resumed>) = 4 [pid 7066] close(3) = 0 [pid 7065] <... ioctl resumed>) = 0 [pid 7063] close(3 [pid 7062] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7066] symlink("/dev/binderfs", "./binderfs" [pid 7063] <... close resumed>) = 0 [pid 7062] <... mmap resumed>) = 0x7f957a000000 [pid 7066] <... symlink resumed>) = 0 [pid 7063] symlink("/dev/binderfs", "./binderfs"executing program [pid 7066] write(1, "executing program\n", 18 [pid 7062] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7066] <... write resumed>) = 18 [pid 7066] memfd_create("syzkaller", 0 [pid 7065] close(3 [pid 7066] <... memfd_create resumed>) = 3 [pid 7065] <... close resumed>) = 0 [pid 7066] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7065] close(4 [pid 7066] <... mmap resumed>) = 0x7f957a000000 [pid 7065] <... close resumed>) = 0 [pid 7066] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7065] mkdir("./file0", 0777 [pid 7063] <... symlink resumed>) = 0 executing program [pid 7065] <... mkdir resumed>) = 0 [pid 7063] write(1, "executing program\n", 18 [pid 7062] <... write resumed>) = 65536 [pid 7063] <... write resumed>) = 18 [pid 7062] munmap(0x7f957a000000, 138412032) = 0 [pid 7066] <... write resumed>) = 65536 [pid 7063] memfd_create("syzkaller", 0 [pid 7062] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7066] munmap(0x7f957a000000, 138412032 [pid 7065] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7064] <... ioctl resumed>) = 0 [pid 7063] <... memfd_create resumed>) = 3 [pid 7062] <... openat resumed>) = 4 [pid 7063] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7062] ioctl(4, LOOP_SET_FD, 3 [pid 7066] <... munmap resumed>) = 0 [pid 7063] <... mmap resumed>) = 0x7f957a000000 [pid 7066] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7064] close(3 [pid 7066] <... openat resumed>) = 4 [pid 7064] <... close resumed>) = 0 [pid 7063] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7064] close(4 [pid 7066] ioctl(4, LOOP_SET_FD, 3 [pid 7064] <... close resumed>) = 0 [pid 7064] mkdir("./file0", 0777) = 0 [ 208.001762][ T7064] loop0: detected capacity change from 0 to 128 [ 208.013100][ T7065] loop1: detected capacity change from 0 to 128 [ 208.040483][ T7066] loop4: detected capacity change from 0 to 128 [pid 7064] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7066] <... ioctl resumed>) = 0 [pid 7063] <... write resumed>) = 65536 [pid 7063] munmap(0x7f957a000000, 138412032) = 0 [pid 7066] close(3) = 0 [pid 7066] close(4 [pid 7063] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7066] <... close resumed>) = 0 [pid 7066] mkdir("./file0", 0777) = 0 [pid 7066] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7063] <... openat resumed>) = 4 [pid 7063] ioctl(4, LOOP_SET_FD, 3 [pid 7064] <... mount resumed>) = 0 [pid 7064] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7064] chdir("./file0") = 0 [pid 7064] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7063] <... ioctl resumed>) = 0 [pid 7064] openat(AT_FDCWD, ".", O_RDONLY [pid 7062] <... ioctl resumed>) = 0 [pid 7064] <... openat resumed>) = 4 [pid 7064] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = 0 [pid 7064] sync( [pid 7066] <... mount resumed>) = 0 [pid 7065] <... mount resumed>) = 0 [pid 7063] close(3 [pid 7062] close(3) = 0 [pid 7062] close(4) = 0 [pid 7062] mkdir("./file0", 0777 [pid 7065] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7066] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7065] <... openat resumed>) = 3 [pid 7063] <... close resumed>) = 0 [pid 7066] <... openat resumed>) = 3 [pid 7063] close(4 [pid 7066] chdir("./file0" [pid 7065] chdir("./file0" [pid 7063] <... close resumed>) = 0 [pid 7066] <... chdir resumed>) = 0 [pid 7065] <... chdir resumed>) = 0 [pid 7063] mkdir("./file0", 0777 [pid 7066] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7065] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7066] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7065] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7066] openat(AT_FDCWD, ".", O_RDONLY [pid 7065] openat(AT_FDCWD, ".", O_RDONLY [pid 7066] <... openat resumed>) = 4 [pid 7065] <... openat resumed>) = 4 [pid 7066] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [ 208.043660][ T7062] loop2: detected capacity change from 0 to 128 [ 208.054248][ T7065] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 208.065523][ T7064] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 208.081702][ T7066] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 208.093646][ T7063] loop3: detected capacity change from 0 to 128 [pid 7065] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7066] <... renameat2 resumed>) = 0 [pid 7065] <... renameat2 resumed>) = 0 [pid 7066] sync( [pid 7063] <... mkdir resumed>) = 0 [pid 7062] <... mkdir resumed>) = 0 [pid 7065] sync( [pid 7063] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7062] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "") = 0 [ 208.159104][ T7062] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 208.179418][ T7063] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [pid 7062] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7063] <... mount resumed>) = 0 [pid 7062] <... openat resumed>) = 3 [pid 7063] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7062] chdir("./file0" [pid 7063] <... openat resumed>) = 3 [pid 7062] <... chdir resumed>) = 0 [pid 7063] chdir("./file0" [pid 7062] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7063] <... chdir resumed>) = 0 [pid 7063] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7062] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7063] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7063] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7063] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7062] openat(AT_FDCWD, ".", O_RDONLY [pid 7064] <... sync resumed>) = 0 [pid 7062] <... openat resumed>) = 4 [pid 7062] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7064] exit_group(0 [pid 7063] <... renameat2 resumed>) = 0 [pid 7063] sync( [pid 7064] <... exit_group resumed>) = ? [pid 7062] <... renameat2 resumed>) = 0 [pid 7066] <... sync resumed>) = 0 [pid 7065] <... sync resumed>) = 0 [pid 7066] exit_group(0 [pid 7065] exit_group(0 [pid 7063] <... sync resumed>) = 0 [pid 7065] <... exit_group resumed>) = ? [pid 7064] +++ exited with 0 +++ [pid 7063] exit_group(0 [pid 7062] sync( [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7064, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7066] <... exit_group resumed>) = ? [pid 7066] +++ exited with 0 +++ [pid 7065] +++ exited with 0 +++ [pid 7062] <... sync resumed>) = 0 [pid 5823] umount2("./244", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7066, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5827] restart_syscall(<... resuming interrupted clone ...> [pid 7062] exit_group(0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7062] <... exit_group resumed>) = ? [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7065, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5823] openat(AT_FDCWD, "./244", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 5823] <... openat resumed>) = 3 [pid 5823] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7063] <... exit_group resumed>) = ? [pid 5823] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 7063] +++ exited with 0 +++ [pid 7062] +++ exited with 0 +++ [pid 5827] <... restart_syscall resumed>) = 0 [pid 5824] <... restart_syscall resumed>) = 0 [pid 5823] umount2("./244/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7063, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7062, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5827] umount2("./237", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] openat(AT_FDCWD, "./237", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] umount2("./246", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./242", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... openat resumed>) = 3 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] umount2("./242", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... umount2 resumed>) = 0 [pid 5827] newfstatat(3, "", [pid 5826] openat(AT_FDCWD, "./246", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./242", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] umount2("./244/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] <... openat resumed>) = 3 [pid 5825] openat(AT_FDCWD, "./242", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] <... openat resumed>) = 3 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] getdents64(3, [pid 5826] newfstatat(3, "", [pid 5825] <... openat resumed>) = 3 [pid 5824] newfstatat(3, "", [pid 5823] newfstatat(AT_FDCWD, "./244/file0", [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] newfstatat(3, "", [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] umount2("./237/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] getdents64(3, [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(3, [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5825] getdents64(3, [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] umount2("./244/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] umount2("./246/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] umount2("./242/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./242/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./244/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5823] newfstatat(4, "", [pid 5827] <... umount2 resumed>) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] umount2("./237/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] getdents64(4, [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5827] newfstatat(AT_FDCWD, "./237/file0", [pid 5823] getdents64(4, [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5827] umount2("./237/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] close(4 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... close resumed>) = 0 [pid 5827] openat(AT_FDCWD, "./237/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] rmdir("./244/file0" [pid 5827] <... openat resumed>) = 4 [pid 5823] <... rmdir resumed>) = 0 [pid 5827] newfstatat(4, "", [pid 5823] umount2("./244/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] getdents64(4, [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] newfstatat(AT_FDCWD, "./244/binderfs", [pid 5827] getdents64(4, [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] unlink("./244/binderfs" [pid 5827] close(4 [pid 5823] <... unlink resumed>) = 0 [pid 5827] <... close resumed>) = 0 [pid 5823] getdents64(3, [pid 5827] rmdir("./237/file0" [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5827] <... rmdir resumed>) = 0 [pid 5823] close(3) = 0 [pid 5823] rmdir("./244") = 0 [pid 5827] umount2("./237/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] mkdir("./245", 0777 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... mkdir resumed>) = 0 [pid 5827] newfstatat(AT_FDCWD, "./237/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5827] unlink("./237/binderfs" [pid 5826] <... umount2 resumed>) = 0 [pid 5827] <... unlink resumed>) = 0 [pid 5825] <... umount2 resumed>) = 0 [pid 5824] <... umount2 resumed>) = 0 [pid 5823] <... openat resumed>) = 3 [pid 5826] umount2("./246/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] umount2("./242/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] newfstatat(AT_FDCWD, "./246/file0", [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] newfstatat(AT_FDCWD, "./242/file0", [pid 5826] umount2("./246/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./242/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] umount2("./242/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] ioctl(3, LOOP_CLR_FD [pid 5827] getdents64(3, [pid 5826] openat(AT_FDCWD, "./246/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] newfstatat(AT_FDCWD, "./242/file0", [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... ioctl resumed>) = 0 [pid 5826] <... openat resumed>) = 4 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] openat(AT_FDCWD, "./242/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] close(3 [pid 5824] <... openat resumed>) = 4 [pid 5823] <... close resumed>) = 0 [pid 5825] umount2("./242/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] newfstatat(4, "", [pid 5826] newfstatat(4, "", [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7067 attached [pid 5827] close(3 [pid 5825] openat(AT_FDCWD, "./242/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7067] set_robust_list(0x55557eba4660, 24 [pid 5826] getdents64(4, [pid 5825] <... openat resumed>) = 4 [pid 5824] getdents64(4, [pid 7067] <... set_robust_list resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] newfstatat(4, "", [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 7067] chdir("./245" [pid 5827] <... close resumed>) = 0 [pid 5826] getdents64(4, [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(4, [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5825] getdents64(4, [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5826] close(4 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] close(4 [pid 7067] <... chdir resumed>) = 0 [pid 5826] <... close resumed>) = 0 [pid 5825] getdents64(4, [pid 5824] <... close resumed>) = 0 [pid 7067] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5827] rmdir("./237" [pid 5826] rmdir("./246/file0" [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] rmdir("./242/file0" [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7067 [pid 7067] <... prctl resumed>) = 0 [pid 7067] setpgid(0, 0 [pid 5825] close(4 [pid 5824] <... rmdir resumed>) = 0 [pid 5826] <... rmdir resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 7067] <... setpgid resumed>) = 0 [pid 5825] rmdir("./242/file0" [pid 5824] umount2("./242/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7067] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5827] <... rmdir resumed>) = 0 [pid 5825] <... rmdir resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7067] <... openat resumed>) = 3 [pid 5826] umount2("./246/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] newfstatat(AT_FDCWD, "./242/binderfs", [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] mkdir("./238", 0777 [pid 5825] umount2("./242/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7067] write(3, "1000", 4 [pid 5826] newfstatat(AT_FDCWD, "./246/binderfs", [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] unlink("./242/binderfs" [pid 5827] <... mkdir resumed>) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] newfstatat(AT_FDCWD, "./242/binderfs", [pid 5824] <... unlink resumed>) = 0 [pid 5826] unlink("./246/binderfs" [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7067] <... write resumed>) = 4 [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5826] <... unlink resumed>) = 0 [pid 7067] close(3 [pid 5825] unlink("./242/binderfs" [pid 5824] getdents64(3, [pid 7067] <... close resumed>) = 0 [pid 5826] getdents64(3, [pid 5825] <... unlink resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7067] symlink("/dev/binderfs", "./binderfs" [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5825] getdents64(3, [pid 5824] close(3 [pid 7067] <... symlink resumed>) = 0 [pid 5826] close(3executing program [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] <... close resumed>) = 0 [pid 7067] write(1, "executing program\n", 18 [pid 5826] <... close resumed>) = 0 [pid 5825] close(3 [pid 5824] rmdir("./242" [pid 7067] <... write resumed>) = 18 [pid 5827] <... openat resumed>) = 3 [pid 5826] rmdir("./246" [pid 5825] <... close resumed>) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 5827] ioctl(3, LOOP_CLR_FD [pid 7067] memfd_create("syzkaller", 0 [pid 5826] <... rmdir resumed>) = 0 [pid 5825] rmdir("./242" [pid 7067] <... memfd_create resumed>) = 3 [pid 5827] <... ioctl resumed>) = 0 [pid 5825] <... rmdir resumed>) = 0 [pid 5824] mkdir("./243", 0777 [pid 7067] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5826] mkdir("./247", 0777 [pid 5825] mkdir("./243", 0777 [pid 5824] <... mkdir resumed>) = 0 [pid 7067] <... mmap resumed>) = 0x7f957a000000 [pid 5826] <... mkdir resumed>) = 0 [pid 5825] <... mkdir resumed>) = 0 [pid 7067] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5827] close(3 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5825] <... openat resumed>) = 3 [pid 5824] <... openat resumed>) = 3 [pid 5826] <... openat resumed>) = 3 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 5824] ioctl(3, LOOP_CLR_FD [pid 5825] <... ioctl resumed>) = 0 [pid 5824] <... ioctl resumed>) = 0 [pid 5826] ioctl(3, LOOP_CLR_FD [pid 5825] close(3 [pid 5824] close(3 [pid 7067] <... write resumed>) = 65536 [pid 5826] <... ioctl resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 5826] close(3 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5826] <... close resumed>) = 0 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7068 attached [pid 7067] munmap(0x7f957a000000, 138412032 [pid 5827] <... close resumed>) = 0 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7070 attached [pid 7068] set_robust_list(0x55557eba4660, 24 [pid 7067] <... munmap resumed>) = 0 [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7068 [pid 7068] <... set_robust_list resumed>) = 0 [pid 7067] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7068] chdir("./243" [pid 7067] <... openat resumed>) = 4 [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7069 [pid 7070] set_robust_list(0x55557eba4660, 24 [pid 7067] ioctl(4, LOOP_SET_FD, 3 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7070 [pid 7070] <... set_robust_list resumed>) = 0 [pid 7068] <... chdir resumed>) = 0 [pid 7067] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 7070] chdir("./247") = 0 [pid 7068] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7067] ioctl(4, LOOP_CLR_FD [pid 7070] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7068] <... prctl resumed>) = 0 [pid 7067] <... ioctl resumed>) = 0 [pid 7070] <... prctl resumed>) = 0 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7070] setpgid(0, 0 [pid 7068] setpgid(0, 0 [pid 7070] <... setpgid resumed>) = 0 [pid 7070] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 7069 attached [pid 7067] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 7067] close(4) = 0 [pid 7067] close(3 [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7071 ./strace-static-x86_64: Process 7071 attached [pid 7069] set_robust_list(0x55557eba4660, 24 [pid 7070] <... openat resumed>) = 3 [pid 7068] <... setpgid resumed>) = 0 [pid 7067] <... close resumed>) = 0 [pid 7068] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7070] write(3, "1000", 4 [pid 7068] <... openat resumed>) = 3 [pid 7067] openat(AT_FDCWD, ".", O_RDONLY [pid 7070] <... write resumed>) = 4 [pid 7068] write(3, "1000", 4 [pid 7067] <... openat resumed>) = 3 [pid 7070] close(3 [pid 7068] <... write resumed>) = 4 [pid 7067] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7068] close(3 [pid 7067] <... renameat2 resumed>) = -1 ENOENT (No such file or directory) [pid 7068] <... close resumed>) = 0 [pid 7067] sync( [pid 7070] <... close resumed>) = 0 [pid 7068] symlink("/dev/binderfs", "./binderfs" [pid 7070] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7068] <... symlink resumed>) = 0 executing program [pid 7068] write(1, "executing program\n", 18executing program [pid 7070] write(1, "executing program\n", 18 [pid 7068] <... write resumed>) = 18 [pid 7071] set_robust_list(0x55557eba4660, 24 [pid 7070] <... write resumed>) = 18 [pid 7069] <... set_robust_list resumed>) = 0 [pid 7068] memfd_create("syzkaller", 0 [pid 7071] <... set_robust_list resumed>) = 0 [pid 7070] memfd_create("syzkaller", 0 [pid 7069] chdir("./243" [pid 7071] chdir("./238" [pid 7069] <... chdir resumed>) = 0 [pid 7071] <... chdir resumed>) = 0 [pid 7070] <... memfd_create resumed>) = 3 [pid 7069] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7071] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7070] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7068] <... memfd_create resumed>) = 3 [pid 7070] <... mmap resumed>) = 0x7f957a000000 [pid 7068] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7071] <... prctl resumed>) = 0 [pid 7069] <... prctl resumed>) = 0 [pid 7067] <... sync resumed>) = 0 [pid 7071] setpgid(0, 0 [pid 7069] setpgid(0, 0 [pid 7071] <... setpgid resumed>) = 0 [pid 7070] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7069] <... setpgid resumed>) = 0 [pid 7067] exit_group(0 [pid 7069] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7068] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7071] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7069] <... openat resumed>) = 3 [pid 7068] <... write resumed>) = 65536 [pid 7067] <... exit_group resumed>) = ? [pid 7070] <... write resumed>) = 65536 [pid 7069] write(3, "1000", 4 [pid 7071] <... openat resumed>) = 3 [pid 7069] <... write resumed>) = 4 [pid 7071] write(3, "1000", 4 [pid 7069] close(3 [pid 7068] munmap(0x7f957a000000, 138412032 [pid 7067] +++ exited with 0 +++ [pid 7071] <... write resumed>) = 4 [pid 7070] munmap(0x7f957a000000, 138412032 [pid 7069] <... close resumed>) = 0 [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7067, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 7071] close(3 [pid 7070] <... munmap resumed>) = 0 [pid 7068] <... munmap resumed>) = 0 [pid 5823] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 7071] <... close resumed>) = 0 [pid 7069] symlink("/dev/binderfs", "./binderfs" [pid 7068] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7071] symlink("/dev/binderfs", "./binderfs" [pid 7070] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7069] <... symlink resumed>) = 0 [pid 5823] umount2("./245", MNT_FORCE|UMOUNT_NOFOLLOWexecuting program [pid 7071] <... symlink resumed>) = 0 [pid 7070] <... openat resumed>) = 4 [pid 7069] write(1, "executing program\n", 18 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) executing program [pid 7071] write(1, "executing program\n", 18 [pid 7070] ioctl(4, LOOP_SET_FD, 3 [pid 7069] <... write resumed>) = 18 [pid 5823] openat(AT_FDCWD, "./245", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7071] <... write resumed>) = 18 [pid 7068] <... openat resumed>) = 4 [pid 7068] ioctl(4, LOOP_SET_FD, 3 [pid 7071] memfd_create("syzkaller", 0 [pid 7069] memfd_create("syzkaller", 0 [pid 7071] <... memfd_create resumed>) = 3 [pid 7069] <... memfd_create resumed>) = 3 [pid 7071] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7069] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7071] <... mmap resumed>) = 0x7f957a000000 [pid 7069] <... mmap resumed>) = 0x7f957a000000 [pid 5823] <... openat resumed>) = 3 [pid 5823] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7069] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5823] getdents64(3, 0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 7071] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5823] umount2("./245/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./245/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./245/binderfs") = 0 [pid 5823] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] close(3) = 0 [pid 5823] rmdir("./245" [pid 7069] <... write resumed>) = 65536 [pid 5823] <... rmdir resumed>) = 0 [pid 5823] mkdir("./246", 0777 [pid 7071] <... write resumed>) = 65536 [pid 7069] munmap(0x7f957a000000, 138412032 [pid 5823] <... mkdir resumed>) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5823] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5823] close(3) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7072 attached [pid 7071] munmap(0x7f957a000000, 138412032 [pid 7070] <... ioctl resumed>) = 0 [pid 7069] <... munmap resumed>) = 0 [pid 7072] set_robust_list(0x55557eba4660, 24 [pid 7070] close(3 [pid 7072] <... set_robust_list resumed>) = 0 [pid 7070] <... close resumed>) = 0 [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7072 [pid 7070] close(4 [pid 7069] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7068] <... ioctl resumed>) = 0 [pid 7072] chdir("./246" [pid 7071] <... munmap resumed>) = 0 [pid 7070] <... close resumed>) = 0 [pid 7072] <... chdir resumed>) = 0 [pid 7070] mkdir("./file0", 0777 [pid 7068] close(3 [pid 7072] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7070] <... mkdir resumed>) = 0 [pid 7068] <... close resumed>) = 0 [pid 7069] <... openat resumed>) = 4 [pid 7071] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7072] setpgid(0, 0 [pid 7071] <... openat resumed>) = 4 [pid 7069] ioctl(4, LOOP_SET_FD, 3 [pid 7068] close(4) = 0 [pid 7072] <... setpgid resumed>) = 0 [pid 7072] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7070] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7068] mkdir("./file0", 0777) = 0 [pid 7072] write(3, "1000", 4) = 4 [pid 7072] close(3) = 0 [ 208.459594][ T7070] loop3: detected capacity change from 0 to 128 [ 208.467632][ T7068] loop1: detected capacity change from 0 to 128 [pid 7072] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7068] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, ""executing program [pid 7071] ioctl(4, LOOP_SET_FD, 3 [pid 7069] <... ioctl resumed>) = 0 [pid 7072] write(1, "executing program\n", 18) = 18 [pid 7072] memfd_create("syzkaller", 0) = 3 [pid 7072] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7072] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 7069] close(3 [pid 7072] munmap(0x7f957a000000, 138412032 [pid 7069] <... close resumed>) = 0 [pid 7072] <... munmap resumed>) = 0 [pid 7069] close(4) = 0 [pid 7069] mkdir("./file0", 0777 [pid 7072] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7069] <... mkdir resumed>) = 0 [pid 7072] ioctl(4, LOOP_SET_FD, 3 [pid 7069] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7071] <... ioctl resumed>) = 0 [ 208.511268][ T7069] loop2: detected capacity change from 0 to 128 [ 208.519769][ T7070] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 208.532772][ T7071] loop4: detected capacity change from 0 to 128 [ 208.552485][ T7072] loop0: detected capacity change from 0 to 128 [pid 7071] close(3) = 0 [pid 7071] close(4) = 0 [pid 7071] mkdir("./file0", 0777) = 0 [pid 7071] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7072] <... ioctl resumed>) = 0 [pid 7072] close(3) = 0 [pid 7070] <... mount resumed>) = 0 [pid 7072] close(4) = 0 [pid 7070] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7072] mkdir("./file0", 0777) = 0 [pid 7070] <... openat resumed>) = 3 [pid 7070] chdir("./file0") = 0 [pid 7072] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [ 208.561606][ T7068] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 208.574090][ T7069] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [pid 7070] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7070] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7070] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = 0 [pid 7068] <... mount resumed>) = 0 [pid 7068] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7068] chdir("./file0") = 0 [pid 7068] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7068] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7068] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7070] sync( [pid 7068] <... renameat2 resumed>) = 0 [pid 7068] sync( [pid 7069] <... mount resumed>) = 0 [pid 7069] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7072] <... mount resumed>) = 0 [pid 7072] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7072] chdir("./file0") = 0 [pid 7069] <... openat resumed>) = 3 [pid 7072] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7069] chdir("./file0" [pid 7072] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7069] <... chdir resumed>) = 0 [pid 7072] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7072] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = 0 [ 208.606314][ T7072] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 208.630640][ T7071] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [pid 7069] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7069] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7069] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7072] sync( [pid 7069] <... renameat2 resumed>) = 0 [pid 7071] <... mount resumed>) = 0 [pid 7069] sync( [pid 7071] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7072] <... sync resumed>) = 0 [pid 7070] <... sync resumed>) = 0 [pid 7069] <... sync resumed>) = 0 [pid 7068] <... sync resumed>) = 0 [pid 7071] chdir("./file0" [pid 7072] exit_group(0 [pid 7071] <... chdir resumed>) = 0 [pid 7069] exit_group(0 [pid 7068] exit_group(0 [pid 7072] <... exit_group resumed>) = ? [pid 7068] <... exit_group resumed>) = ? [pid 7070] exit_group(0 [pid 7068] +++ exited with 0 +++ [pid 7070] <... exit_group resumed>) = ? [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7068, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7071] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7069] <... exit_group resumed>) = ? [pid 7070] +++ exited with 0 +++ [pid 5824] umount2("./243", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7072] +++ exited with 0 +++ [pid 7071] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7069] +++ exited with 0 +++ [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7070, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7071] openat(AT_FDCWD, ".", O_RDONLY [pid 5826] restart_syscall(<... resuming interrupted clone ...> [pid 5824] openat(AT_FDCWD, "./243", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7071] <... openat resumed>) = 4 [pid 5826] <... restart_syscall resumed>) = 0 [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7069, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5824] <... openat resumed>) = 3 [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7072, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7071] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5824] newfstatat(3, "", [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] umount2("./247", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] getdents64(3, [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] umount2("./243", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] <... restart_syscall resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] umount2("./243/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] openat(AT_FDCWD, "./247", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] openat(AT_FDCWD, "./243", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] <... openat resumed>) = 3 [pid 5825] <... openat resumed>) = 3 [pid 5823] umount2("./246", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] newfstatat(3, "", [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(3, "", [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] openat(AT_FDCWD, "./246", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(3, [pid 5823] <... openat resumed>) = 3 [pid 7071] <... renameat2 resumed>) = 0 [pid 5826] getdents64(3, [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] newfstatat(3, "", [pid 7071] sync( [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5825] umount2("./243/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(3, [pid 5826] umount2("./247/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5825] <... umount2 resumed>) = 0 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] <... umount2 resumed>) = 0 [pid 5823] umount2("./246/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] umount2("./247/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./243/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./243/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... umount2 resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./243/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] newfstatat(AT_FDCWD, "./247/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] umount2("./243/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] umount2("./247/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] umount2("./246/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./243/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./247/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] <... openat resumed>) = 4 [pid 5823] newfstatat(AT_FDCWD, "./246/file0", [pid 5826] <... openat resumed>) = 4 [pid 5825] newfstatat(4, "", [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] newfstatat(4, "", [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] umount2("./246/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(4, [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] getdents64(4, [pid 5824] newfstatat(AT_FDCWD, "./243/file0", [pid 5823] openat(AT_FDCWD, "./246/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... openat resumed>) = 4 [pid 5824] umount2("./243/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] openat(AT_FDCWD, "./243/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] getdents64(4, [pid 5824] <... openat resumed>) = 4 [pid 5824] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] getdents64(4, [pid 5825] getdents64(4, [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5825] close(4 [pid 5826] getdents64(4, [pid 5825] <... close resumed>) = 0 [pid 5824] close(4 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5826] close(4 [pid 5824] <... close resumed>) = 0 [pid 5826] <... close resumed>) = 0 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] rmdir("./243/file0" [pid 7071] <... sync resumed>) = 0 [pid 5826] rmdir("./247/file0" [pid 5825] rmdir("./243/file0" [pid 5824] <... rmdir resumed>) = 0 [pid 5823] getdents64(4, [pid 7071] exit_group(0 [pid 5824] umount2("./243/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7071] <... exit_group resumed>) = ? [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... rmdir resumed>) = 0 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 7071] +++ exited with 0 +++ [pid 5826] <... rmdir resumed>) = 0 [pid 5824] newfstatat(AT_FDCWD, "./243/binderfs", [pid 5823] close(4 [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7071, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5825] umount2("./243/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... close resumed>) = 0 [pid 5826] umount2("./247/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] unlink("./243/binderfs" [pid 5823] rmdir("./246/file0" [pid 5824] <... unlink resumed>) = 0 [pid 5823] <... rmdir resumed>) = 0 [pid 5827] umount2("./238", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] openat(AT_FDCWD, "./238", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... openat resumed>) = 3 [pid 5826] newfstatat(AT_FDCWD, "./247/binderfs", [pid 5825] newfstatat(AT_FDCWD, "./243/binderfs", [pid 5827] newfstatat(3, "", [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] getdents64(3, [pid 5823] umount2("./246/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] unlink("./247/binderfs" [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5827] getdents64(3, [pid 5825] unlink("./243/binderfs" [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5826] <... unlink resumed>) = 0 [pid 5825] <... unlink resumed>) = 0 [pid 5824] close(3 [pid 5823] newfstatat(AT_FDCWD, "./246/binderfs", [pid 5827] umount2("./238/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] getdents64(3, [pid 5825] getdents64(3, [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] unlink("./246/binderfs" [pid 5826] close(3 [pid 5824] <... close resumed>) = 0 [pid 5823] <... unlink resumed>) = 0 [pid 5826] <... close resumed>) = 0 [pid 5825] close(3 [pid 5826] rmdir("./247" [pid 5825] <... close resumed>) = 0 [pid 5823] getdents64(3, [pid 5826] <... rmdir resumed>) = 0 [pid 5825] rmdir("./243" [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5827] <... umount2 resumed>) = 0 [pid 5825] <... rmdir resumed>) = 0 [pid 5823] close(3 [pid 5827] umount2("./238/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... close resumed>) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] mkdir("./248", 0777 [pid 5823] rmdir("./246" [pid 5827] newfstatat(AT_FDCWD, "./238/file0", [pid 5826] <... mkdir resumed>) = 0 [pid 5823] <... rmdir resumed>) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] umount2("./238/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] mkdir("./244", 0777 [pid 5824] rmdir("./243" [pid 5823] mkdir("./247", 0777 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5823] <... mkdir resumed>) = 0 [pid 5826] <... openat resumed>) = 3 [pid 5824] <... rmdir resumed>) = 0 [pid 5826] ioctl(3, LOOP_CLR_FD [pid 5824] mkdir("./244", 0777 [pid 5826] <... ioctl resumed>) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5826] close(3 [pid 5823] <... openat resumed>) = 3 [pid 5823] ioctl(3, LOOP_CLR_FD [pid 5824] <... mkdir resumed>) = 0 [pid 5826] <... close resumed>) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5823] <... ioctl resumed>) = 0 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5823] close(3 [pid 5824] <... openat resumed>) = 3 [pid 5824] ioctl(3, LOOP_CLR_FD [pid 5823] <... close resumed>) = 0 [pid 5825] <... mkdir resumed>) = 0 [pid 5824] <... ioctl resumed>) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] close(3 [pid 5827] openat(AT_FDCWD, "./238/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5827] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7073 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7073 attached [pid 5827] getdents64(4, [pid 5825] ioctl(3, LOOP_CLR_FD [pid 5824] <... close resumed>) = 0 ./strace-static-x86_64: Process 7074 attached [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] <... ioctl resumed>) = 0 [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7074 [pid 5825] close(3./strace-static-x86_64: Process 7075 attached [pid 7074] set_robust_list(0x55557eba4660, 24 [pid 7073] set_robust_list(0x55557eba4660, 24 [pid 5827] getdents64(4, [pid 5825] <... close resumed>) = 0 [pid 7075] set_robust_list(0x55557eba4660, 24 [pid 7074] <... set_robust_list resumed>) = 0 [pid 7073] <... set_robust_list resumed>) = 0 [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7075 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 7073] chdir("./248" [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7074] chdir("./247" [pid 7073] <... chdir resumed>) = 0 [pid 7075] <... set_robust_list resumed>) = 0 [pid 7074] <... chdir resumed>) = 0 [pid 7073] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5827] close(4 [pid 7075] chdir("./244" [pid 7074] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7073] <... prctl resumed>) = 0 [pid 5827] <... close resumed>) = 0 [pid 7074] <... prctl resumed>) = 0 [pid 7073] setpgid(0, 0 [pid 5827] rmdir("./238/file0" [pid 7074] setpgid(0, 0 [pid 7073] <... setpgid resumed>) = 0 [pid 5827] <... rmdir resumed>) = 0 [pid 5827] umount2("./238/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7073] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5827] newfstatat(AT_FDCWD, "./238/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7073] <... openat resumed>) = 3 [pid 5827] unlink("./238/binderfs" [pid 7074] <... setpgid resumed>) = 0 [pid 7073] write(3, "1000", 4 [pid 7075] <... chdir resumed>) = 0 [pid 7075] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7074] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7073] <... write resumed>) = 4 [pid 5827] <... unlink resumed>) = 0 [pid 7075] <... prctl resumed>) = 0 [pid 7073] close(3 [pid 5827] getdents64(3, ./strace-static-x86_64: Process 7076 attached [pid 7073] <... close resumed>) = 0 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7075] setpgid(0, 0 [pid 5827] close(3 [pid 7074] <... openat resumed>) = 3 [pid 7076] set_robust_list(0x55557eba4660, 24 [pid 7074] write(3, "1000", 4 [pid 5827] <... close resumed>) = 0 [pid 7074] <... write resumed>) = 4 [pid 7076] <... set_robust_list resumed>) = 0 [pid 7075] <... setpgid resumed>) = 0 [pid 7074] close(3 [pid 7073] symlink("/dev/binderfs", "./binderfs" [pid 5827] rmdir("./238" [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7076 [pid 7074] <... close resumed>) = 0 [pid 7075] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7074] symlink("/dev/binderfs", "./binderfs" [pid 7073] <... symlink resumed>) = 0 [pid 5827] <... rmdir resumed>) = 0 [pid 7076] chdir("./244" [pid 7075] <... openat resumed>) = 3 [pid 5827] mkdir("./239", 0777 [pid 7074] <... symlink resumed>) = 0 [pid 7076] <... chdir resumed>) = 0 [pid 5827] <... mkdir resumed>) = 0 [pid 7076] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7076] setpgid(0, 0 [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7076] <... setpgid resumed>) = 0 [pid 7075] write(3, "1000", 4 [pid 7074] write(1, "executing program\n", 18 [pid 7073] write(1, "executing program\n", 18 [pid 5827] <... openat resumed>) = 3 [pid 7076] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5827] ioctl(3, LOOP_CLR_FD [pid 7076] <... openat resumed>) = 3 [pid 5827] <... ioctl resumed>) = 0 [pid 5827] close(3) = 0 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7077 attached executing program executing program , child_tidptr=0x55557eba4650) = 7077 [pid 7076] write(3, "1000", 4 [pid 7075] <... write resumed>) = 4 [pid 7074] <... write resumed>) = 18 [pid 7073] <... write resumed>) = 18 [pid 7077] set_robust_list(0x55557eba4660, 24 [pid 7076] <... write resumed>) = 4 [pid 7076] close(3 [pid 7075] close(3 [pid 7074] memfd_create("syzkaller", 0 [pid 7073] memfd_create("syzkaller", 0 [pid 7077] <... set_robust_list resumed>) = 0 [pid 7077] chdir("./239" [pid 7075] <... close resumed>) = 0 [pid 7073] <... memfd_create resumed>) = 3 [pid 7074] <... memfd_create resumed>) = 3 [pid 7075] symlink("/dev/binderfs", "./binderfs" [pid 7073] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7074] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7077] <... chdir resumed>) = 0 [pid 7076] <... close resumed>) = 0 [pid 7075] <... symlink resumed>) = 0 [pid 7074] <... mmap resumed>) = 0x7f957a000000 [pid 7073] <... mmap resumed>) = 0x7f957a000000 [pid 7075] write(1, "executing program\n", 18 [pid 7077] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7076] symlink("/dev/binderfs", "./binderfs" [pid 7077] <... prctl resumed>) = 0 [pid 7076] <... symlink resumed>) = 0 [pid 7074] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7077] setpgid(0, 0 [pid 7073] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 executing program [pid 7077] <... setpgid resumed>) = 0 [pid 7076] write(1, "executing program\n", 18executing program [pid 7077] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7076] <... write resumed>) = 18 [pid 7074] <... write resumed>) = 65536 [pid 7077] <... openat resumed>) = 3 [pid 7076] memfd_create("syzkaller", 0 [pid 7075] <... write resumed>) = 18 [pid 7074] munmap(0x7f957a000000, 138412032 [pid 7073] <... write resumed>) = 65536 [pid 7075] memfd_create("syzkaller", 0 [pid 7074] <... munmap resumed>) = 0 [pid 7073] munmap(0x7f957a000000, 138412032 [pid 7077] write(3, "1000", 4 [pid 7073] <... munmap resumed>) = 0 [pid 7075] <... memfd_create resumed>) = 3 [pid 7077] <... write resumed>) = 4 [pid 7076] <... memfd_create resumed>) = 3 [pid 7074] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7077] close(3) = 0 [pid 7076] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7077] symlink("/dev/binderfs", "./binderfs" [pid 7076] <... mmap resumed>) = 0x7f957a000000 [pid 7077] <... symlink resumed>) = 0 [pid 7076] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7074] <... openat resumed>) = 4 [pid 7077] write(1, "executing program\n", 18executing program [pid 7075] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7074] ioctl(4, LOOP_SET_FD, 3 [pid 7073] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7076] <... write resumed>) = 65536 [pid 7073] <... openat resumed>) = 4 [pid 7077] <... write resumed>) = 18 [pid 7077] memfd_create("syzkaller", 0) = 3 [pid 7076] munmap(0x7f957a000000, 138412032 [pid 7075] <... mmap resumed>) = 0x7f957a000000 [pid 7077] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7077] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7076] <... munmap resumed>) = 0 [pid 7077] <... write resumed>) = 65536 [pid 7076] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7075] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7073] ioctl(4, LOOP_SET_FD, 3 [pid 7076] <... openat resumed>) = 4 [pid 7076] ioctl(4, LOOP_SET_FD, 3 [pid 7075] <... write resumed>) = 65536 [pid 7074] <... ioctl resumed>) = 0 [pid 7075] munmap(0x7f957a000000, 138412032 [pid 7077] munmap(0x7f957a000000, 138412032 [pid 7075] <... munmap resumed>) = 0 [pid 7077] <... munmap resumed>) = 0 [pid 7075] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7074] close(3 [pid 7073] <... ioctl resumed>) = 0 [pid 7077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7075] <... openat resumed>) = 4 [pid 7074] <... close resumed>) = 0 [pid 7073] close(3 [pid 7074] close(4 [pid 7075] ioctl(4, LOOP_SET_FD, 3 [pid 7073] <... close resumed>) = 0 [pid 7074] <... close resumed>) = 0 [pid 7077] <... openat resumed>) = 4 [pid 7077] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 7077] ioctl(4, LOOP_CLR_FD) = 0 [pid 7077] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 7074] mkdir("./file0", 0777 [pid 7073] close(4 [pid 7077] close(4) = 0 [pid 7077] close(3) = 0 [pid 7074] <... mkdir resumed>) = 0 [pid 7073] <... close resumed>) = 0 [pid 7077] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 7077] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = -1 ENOENT (No such file or directory) [pid 7077] sync( [pid 7073] mkdir("./file0", 0777) = 0 [pid 7074] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [ 208.977354][ T7074] loop0: detected capacity change from 0 to 128 [ 208.994615][ T7073] loop3: detected capacity change from 0 to 128 [ 208.994771][ T7076] loop2: detected capacity change from 0 to 128 [ 209.016177][ T7075] loop1: detected capacity change from 0 to 128 [pid 7073] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7076] <... ioctl resumed>) = 0 [pid 7076] close(3) = 0 [pid 7076] close(4) = 0 [pid 7076] mkdir("./file0", 0777) = 0 [pid 7076] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7075] <... ioctl resumed>) = 0 [pid 7075] close(3) = 0 [ 209.040505][ T7073] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 209.053813][ T7074] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [pid 7075] close(4) = 0 [pid 7075] mkdir("./file0", 0777) = 0 [pid 7075] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7073] <... mount resumed>) = 0 [pid 7073] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7074] <... mount resumed>) = 0 [pid 7073] <... openat resumed>) = 3 [ 209.101591][ T7076] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [pid 7074] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7073] chdir("./file0" [pid 7074] <... openat resumed>) = 3 [pid 7074] chdir("./file0" [pid 7073] <... chdir resumed>) = 0 [pid 7074] <... chdir resumed>) = 0 [pid 7073] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7074] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7073] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7074] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7073] openat(AT_FDCWD, ".", O_RDONLY [pid 7074] openat(AT_FDCWD, ".", O_RDONLY [pid 7073] <... openat resumed>) = 4 [pid 7074] <... openat resumed>) = 4 [pid 7073] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7074] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7073] <... renameat2 resumed>) = 0 [pid 7073] sync( [pid 7074] <... renameat2 resumed>) = 0 [pid 7074] sync( [pid 7076] <... mount resumed>) = 0 [pid 7076] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7075] <... mount resumed>) = 0 [pid 7075] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7077] <... sync resumed>) = 0 [pid 7077] exit_group(0) = ? [pid 7077] +++ exited with 0 +++ [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7077, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5827] restart_syscall(<... resuming interrupted clone ...> [pid 7075] <... openat resumed>) = 3 [pid 7075] chdir("./file0") = 0 [pid 7075] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7075] openat(AT_FDCWD, ".", O_RDONLY) = 4 [ 209.157290][ T7075] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [pid 7075] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7076] <... openat resumed>) = 3 [pid 5827] <... restart_syscall resumed>) = 0 [pid 7076] chdir("./file0") = 0 [pid 5827] umount2("./239", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7076] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7076] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7075] <... renameat2 resumed>) = 0 [pid 7074] <... sync resumed>) = 0 [pid 7073] <... sync resumed>) = 0 [pid 5827] openat(AT_FDCWD, "./239", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7076] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 5827] <... openat resumed>) = 3 [pid 7076] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5827] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] getdents64(3, [pid 7074] exit_group(0 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 7074] <... exit_group resumed>) = ? [pid 7073] exit_group(0 [pid 5827] umount2("./239/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] newfstatat(AT_FDCWD, "./239/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] unlink("./239/binderfs" [pid 7074] +++ exited with 0 +++ [pid 7073] <... exit_group resumed>) = ? [pid 5827] <... unlink resumed>) = 0 [pid 5827] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7074, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5827] close(3 [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 5827] <... close resumed>) = 0 [pid 5827] rmdir("./239") = 0 [pid 5823] <... restart_syscall resumed>) = 0 [pid 7073] +++ exited with 0 +++ [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7073, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5823] umount2("./247", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7076] <... renameat2 resumed>) = 0 [pid 7075] sync( [pid 5827] mkdir("./240", 0777 [pid 5826] umount2("./248", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7076] sync( [pid 5827] <... mkdir resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./247", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] openat(AT_FDCWD, "./248", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] <... openat resumed>) = 3 [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5826] <... openat resumed>) = 3 [pid 5823] newfstatat(3, "", [pid 5827] <... openat resumed>) = 3 [pid 5826] newfstatat(3, "", [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] ioctl(3, LOOP_CLR_FD [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(3, [pid 5827] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5826] getdents64(3, [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] umount2("./247/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] close(3 [pid 5826] umount2("./248/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... close resumed>) = 0 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7078 attached , child_tidptr=0x55557eba4650) = 7078 [pid 7078] set_robust_list(0x55557eba4660, 24) = 0 [pid 5823] <... umount2 resumed>) = 0 [pid 7078] chdir("./240" [pid 7076] <... sync resumed>) = 0 [pid 7075] <... sync resumed>) = 0 [pid 5826] <... umount2 resumed>) = 0 [pid 7078] <... chdir resumed>) = 0 [pid 7075] exit_group(0 [pid 5826] umount2("./248/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7078] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7075] <... exit_group resumed>) = ? [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7078] <... prctl resumed>) = 0 [pid 7076] exit_group(0 [pid 5826] newfstatat(AT_FDCWD, "./248/file0", [pid 5823] umount2("./247/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7078] setpgid(0, 0 [pid 7076] <... exit_group resumed>) = ? [pid 7075] +++ exited with 0 +++ [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7078] <... setpgid resumed>) = 0 [pid 5826] umount2("./248/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7075, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5823] newfstatat(AT_FDCWD, "./247/file0", [pid 7078] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7078] <... openat resumed>) = 3 [pid 5826] openat(AT_FDCWD, "./248/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] umount2("./247/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7078] write(3, "1000", 4 [pid 7076] +++ exited with 0 +++ [pid 5826] <... openat resumed>) = 4 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7078] <... write resumed>) = 4 [pid 5826] newfstatat(4, "", [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7076, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5823] openat(AT_FDCWD, "./247/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7078] close(3 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] restart_syscall(<... resuming interrupted clone ...> [pid 5823] <... openat resumed>) = 4 [pid 7078] <... close resumed>) = 0 [pid 5826] getdents64(4, [pid 5823] newfstatat(4, "", [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 7078] symlink("/dev/binderfs", "./binderfs" [pid 5826] getdents64(4, [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7078] <... symlink resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] getdents64(4, [pid 5826] close(4) = 0 [pid 5826] rmdir("./248/file0") = 0 [pid 5826] umount2("./248/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 executing program [pid 7078] write(1, "executing program\n", 18 [pid 5826] newfstatat(AT_FDCWD, "./248/binderfs", [pid 7078] <... write resumed>) = 18 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] getdents64(4, [pid 5825] <... restart_syscall resumed>) = 0 [pid 5824] <... restart_syscall resumed>) = 0 [pid 7078] memfd_create("syzkaller", 0 [pid 5826] unlink("./248/binderfs" [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5826] <... unlink resumed>) = 0 [pid 5825] umount2("./244", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./244", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] close(4 [pid 7078] <... memfd_create resumed>) = 3 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./244", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] openat(AT_FDCWD, "./244", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] <... close resumed>) = 0 [pid 7078] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5826] getdents64(3, [pid 5825] <... openat resumed>) = 3 [pid 5824] <... openat resumed>) = 3 [pid 5823] rmdir("./247/file0" [pid 7078] <... mmap resumed>) = 0x7f957a000000 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5825] newfstatat(3, "", [pid 5824] newfstatat(3, "", [pid 5823] <... rmdir resumed>) = 0 [pid 7078] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5826] close(3 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(3, [pid 5824] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] umount2("./244/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] umount2("./247/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./244/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... close resumed>) = 0 [pid 5826] rmdir("./248" [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... umount2 resumed>) = 0 [pid 5824] <... umount2 resumed>) = 0 [pid 5823] newfstatat(AT_FDCWD, "./247/binderfs", [pid 7078] <... write resumed>) = 65536 [pid 5826] <... rmdir resumed>) = 0 [pid 5825] umount2("./244/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./244/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./244/file0", [pid 5824] newfstatat(AT_FDCWD, "./244/file0", [pid 5823] unlink("./247/binderfs" [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... unlink resumed>) = 0 [pid 7078] munmap(0x7f957a000000, 138412032 [pid 5826] mkdir("./249", 0777 [pid 5825] umount2("./244/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./244/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7078] <... munmap resumed>) = 0 [pid 5826] <... mkdir resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] getdents64(3, [pid 5825] openat(AT_FDCWD, "./244/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] openat(AT_FDCWD, "./244/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7078] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5825] <... openat resumed>) = 4 [pid 5824] <... openat resumed>) = 4 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7078] <... openat resumed>) = 4 [pid 5826] <... openat resumed>) = 3 [pid 5825] newfstatat(4, "", [pid 5824] newfstatat(4, "", [pid 5823] close(3 [pid 7078] ioctl(4, LOOP_SET_FD, 3 [pid 5826] ioctl(3, LOOP_CLR_FD [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... close resumed>) = 0 [pid 5825] getdents64(4, [pid 5824] getdents64(4, [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] rmdir("./247" [pid 5825] getdents64(4, [pid 5823] <... rmdir resumed>) = 0 [pid 5826] <... ioctl resumed>) = 0 [pid 5824] getdents64(4, [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5825] close(4 [pid 5824] close(4 [pid 5826] close(3 [pid 5825] <... close resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 5826] <... close resumed>) = 0 [pid 5825] rmdir("./244/file0" [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5824] rmdir("./244/file0" [pid 5823] mkdir("./248", 0777 [pid 5824] <... rmdir resumed>) = 0 [pid 5823] <... mkdir resumed>) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ./strace-static-x86_64: Process 7079 attached [pid 5824] umount2("./244/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./244/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./244/binderfs") = 0 [pid 5823] ioctl(3, LOOP_CLR_FD [pid 7079] set_robust_list(0x55557eba4660, 24 [pid 5823] <... ioctl resumed>) = 0 [pid 5825] <... rmdir resumed>) = 0 [pid 5823] close(3 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7079 [pid 5825] umount2("./244/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] getdents64(3, [pid 7079] <... set_robust_list resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5825] newfstatat(AT_FDCWD, "./244/binderfs", [pid 5824] close(3 [pid 7079] chdir("./249" [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... close resumed>) = 0 [pid 5823] <... close resumed>) = 0 [pid 5825] unlink("./244/binderfs" [pid 5824] rmdir("./244" [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7079] <... chdir resumed>) = 0 [pid 5825] <... unlink resumed>) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 7079] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5825] getdents64(3, [pid 7079] <... prctl resumed>) = 0 [pid 7079] setpgid(0, 0 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7079] <... setpgid resumed>) = 0 [pid 5825] close(3 [pid 7079] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7078] <... ioctl resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 5824] mkdir("./245", 0777./strace-static-x86_64: Process 7080 attached [pid 7079] <... openat resumed>) = 3 [pid 5825] rmdir("./244" [pid 7080] set_robust_list(0x55557eba4660, 24 [pid 5825] <... rmdir resumed>) = 0 [pid 5824] <... mkdir resumed>) = 0 [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7080 [pid 7080] <... set_robust_list resumed>) = 0 [pid 7079] write(3, "1000", 4 [pid 7078] close(3 [pid 7079] <... write resumed>) = 4 [pid 7078] <... close resumed>) = 0 [pid 5825] mkdir("./245", 0777 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7080] chdir("./248") = 0 [pid 7079] close(3 [pid 7078] close(4 [pid 5825] <... mkdir resumed>) = 0 [pid 5824] <... openat resumed>) = 3 [pid 7078] <... close resumed>) = 0 [pid 7078] mkdir("./file0", 0777 [pid 5824] ioctl(3, LOOP_CLR_FD [pid 7080] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7079] <... close resumed>) = 0 [pid 7078] <... mkdir resumed>) = 0 [pid 5824] <... ioctl resumed>) = 0 [pid 7080] <... prctl resumed>) = 0 [pid 7079] symlink("/dev/binderfs", "./binderfs" [pid 7078] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5824] close(3 [pid 7080] setpgid(0, 0 [pid 7079] <... symlink resumed>) = 0 [pid 5825] <... openat resumed>) = 3 [pid 5824] <... close resumed>) = 0 [pid 5825] ioctl(3, LOOP_CLR_FD [ 209.307255][ T7078] loop4: detected capacity change from 0 to 128 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7080] <... setpgid resumed>) = 0 [pid 7079] write(1, "executing program\n", 18 [pid 5825] <... ioctl resumed>) = 0 [pid 7080] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7080] write(3, "1000", 4) = 4 [pid 7080] close(3) = 0 [pid 7080] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 7080] write(1, "executing program\n", 18) = 18 [pid 7080] memfd_create("syzkaller", 0executing program ./strace-static-x86_64: Process 7081 attached ) = 3 [pid 5825] close(3 [pid 7081] set_robust_list(0x55557eba4660, 24 [pid 7080] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7079] <... write resumed>) = 18 [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7081 [pid 7081] <... set_robust_list resumed>) = 0 [pid 7079] memfd_create("syzkaller", 0) = 3 [pid 7081] chdir("./245" [pid 7080] <... mmap resumed>) = 0x7f957a000000 [pid 7081] <... chdir resumed>) = 0 [pid 7080] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7079] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5825] <... close resumed>) = 0 [pid 7081] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7081] setpgid(0, 0 [pid 7079] <... mmap resumed>) = 0x7f957a000000 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7081] <... setpgid resumed>) = 0 ./strace-static-x86_64: Process 7082 attached [pid 7081] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7080] <... write resumed>) = 65536 [pid 7079] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7082] set_robust_list(0x55557eba4660, 24) = 0 [pid 7081] <... openat resumed>) = 3 [pid 7079] <... write resumed>) = 65536 [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7082 [pid 7082] chdir("./245" [pid 7079] munmap(0x7f957a000000, 138412032 [pid 7082] <... chdir resumed>) = 0 [pid 7082] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7081] write(3, "1000", 4 [pid 7080] munmap(0x7f957a000000, 138412032 [pid 7079] <... munmap resumed>) = 0 [pid 7082] <... prctl resumed>) = 0 [pid 7081] <... write resumed>) = 4 [pid 7080] <... munmap resumed>) = 0 [pid 7079] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7082] setpgid(0, 0 [pid 7081] close(3 [pid 7080] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7081] <... close resumed>) = 0 [pid 7080] <... openat resumed>) = 4 [pid 7081] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7080] ioctl(4, LOOP_SET_FD, 3executing program ) = -1 EBUSY (Device or resource busy) [pid 7081] write(1, "executing program\n", 18 [pid 7080] ioctl(4, LOOP_CLR_FD [pid 7082] <... setpgid resumed>) = 0 [pid 7081] <... write resumed>) = 18 [pid 7080] <... ioctl resumed>) = 0 [pid 7079] <... openat resumed>) = 4 [pid 7082] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7081] memfd_create("syzkaller", 0 [pid 7079] ioctl(4, LOOP_SET_FD, 3 [pid 7082] <... openat resumed>) = 3 [pid 7079] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 7079] ioctl(4, LOOP_CLR_FD) = 0 [pid 7081] <... memfd_create resumed>) = 3 [pid 7081] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7080] ioctl(4, LOOP_SET_FD, 3 [pid 7082] write(3, "1000", 4 [pid 7081] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7080] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 7080] close(4) = 0 [ 209.370552][ T7078] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [pid 7080] close(3 [pid 7081] <... write resumed>) = 65536 [pid 7080] <... close resumed>) = 0 [pid 7080] openat(AT_FDCWD, ".", O_RDONLY [pid 7082] <... write resumed>) = 4 [pid 7080] <... openat resumed>) = 3 [pid 7079] ioctl(4, LOOP_SET_FD, 3 [pid 7080] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7079] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 7082] close(3 [pid 7081] munmap(0x7f957a000000, 138412032 [pid 7080] <... renameat2 resumed>) = -1 ENOENT (No such file or directory) [pid 7079] close(4 [pid 7082] <... close resumed>) = 0 [pid 7079] <... close resumed>) = 0 [pid 7082] symlink("/dev/binderfs", "./binderfs" [pid 7081] <... munmap resumed>) = 0 [pid 7080] sync( [pid 7082] <... symlink resumed>) = 0 [pid 7081] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7079] close(3 [pid 7082] write(1, "executing program\n", 18 [pid 7081] <... openat resumed>) = 4 executing program [pid 7082] <... write resumed>) = 18 [pid 7081] ioctl(4, LOOP_SET_FD, 3 [pid 7079] <... close resumed>) = 0 [pid 7082] memfd_create("syzkaller", 0 [pid 7079] openat(AT_FDCWD, ".", O_RDONLY [pid 7082] <... memfd_create resumed>) = 3 [pid 7081] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 7079] <... openat resumed>) = 3 [pid 7078] <... mount resumed>) = 0 [pid 7082] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7078] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7079] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7082] <... mmap resumed>) = 0x7f957a000000 [pid 7081] ioctl(4, LOOP_CLR_FD) = 0 [pid 7082] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7079] <... renameat2 resumed>) = -1 ENOENT (No such file or directory) [pid 7078] <... openat resumed>) = 3 [pid 7079] sync( [pid 7078] chdir("./file0" [pid 7082] <... write resumed>) = 65536 [pid 7078] <... chdir resumed>) = 0 [pid 7081] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 7081] close(4) = 0 [pid 7078] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7082] munmap(0x7f957a000000, 138412032 [pid 7081] close(3 [pid 7082] <... munmap resumed>) = 0 [pid 7081] <... close resumed>) = 0 [pid 7078] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7082] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7081] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 7082] <... openat resumed>) = 4 [pid 7081] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7078] openat(AT_FDCWD, ".", O_RDONLY [pid 7082] ioctl(4, LOOP_SET_FD, 3 [pid 7081] <... renameat2 resumed>) = -1 ENOENT (No such file or directory) [pid 7078] <... openat resumed>) = 4 [pid 7081] sync( [pid 7078] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7081] <... sync resumed>) = 0 [pid 7080] <... sync resumed>) = 0 [pid 7079] <... sync resumed>) = 0 [pid 7078] <... renameat2 resumed>) = 0 [pid 7079] exit_group(0 [pid 7078] sync( [pid 7082] <... ioctl resumed>) = 0 [pid 7081] exit_group(0 [pid 7082] close(3 [pid 7079] <... exit_group resumed>) = ? [pid 7082] <... close resumed>) = 0 [pid 7082] close(4 [pid 7080] exit_group(0 [pid 7081] <... exit_group resumed>) = ? [pid 7082] <... close resumed>) = 0 [pid 7082] mkdir("./file0", 0777 [pid 7081] +++ exited with 0 +++ [pid 7079] +++ exited with 0 +++ [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7079, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5826] restart_syscall(<... resuming interrupted clone ...> [pid 7080] <... exit_group resumed>) = ? [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7081, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 7082] <... mkdir resumed>) = 0 [pid 7080] +++ exited with 0 +++ [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 7082] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7080, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5826] <... restart_syscall resumed>) = 0 [pid 5824] <... restart_syscall resumed>) = 0 [pid 5823] umount2("./248", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] umount2("./249", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./248", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] openat(AT_FDCWD, "./249", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5824] umount2("./245", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... openat resumed>) = 3 [pid 5826] newfstatat(3, "", [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./245", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5824] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(3, 0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 5824] umount2("./245/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(3, "", [pid 5824] newfstatat(AT_FDCWD, "./245/binderfs", [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] getdents64(3, [pid 5824] unlink("./245/binderfs" [pid 5823] getdents64(3, [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 5824] <... unlink resumed>) = 0 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 5826] umount2("./249/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 209.472181][ T7082] loop2: detected capacity change from 0 to 128 [pid 5823] umount2("./248/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] newfstatat(AT_FDCWD, "./249/binderfs", [pid 5824] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] close(3 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... close resumed>) = 0 [pid 5823] newfstatat(AT_FDCWD, "./248/binderfs", [pid 5824] rmdir("./245" [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 5826] unlink("./249/binderfs" [pid 5824] mkdir("./246", 0777 [pid 5823] unlink("./248/binderfs" [pid 5826] <... unlink resumed>) = 0 [pid 5824] <... mkdir resumed>) = 0 [pid 5826] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5824] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5824] close(3 [pid 5826] close(3 [pid 5824] <... close resumed>) = 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7083 attached [pid 5826] <... close resumed>) = 0 [pid 5823] <... unlink resumed>) = 0 [pid 7083] set_robust_list(0x55557eba4660, 24 [pid 5826] rmdir("./249" [pid 5823] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7083 [pid 5823] close(3 [pid 5826] <... rmdir resumed>) = 0 [pid 5826] mkdir("./250", 0777 [pid 5823] <... close resumed>) = 0 [pid 5823] rmdir("./248") = 0 [pid 7083] <... set_robust_list resumed>) = 0 [pid 5826] <... mkdir resumed>) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7083] chdir("./246" [pid 5826] <... openat resumed>) = 3 [pid 5823] mkdir("./249", 0777 [pid 7083] <... chdir resumed>) = 0 [pid 7082] <... mount resumed>) = 0 [pid 7078] <... sync resumed>) = 0 [pid 5826] ioctl(3, LOOP_CLR_FD [pid 7083] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5826] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7083] <... prctl resumed>) = 0 [pid 7082] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7078] exit_group(0 [pid 5826] close(3 [pid 5823] <... mkdir resumed>) = 0 [pid 7078] <... exit_group resumed>) = ? [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7083] setpgid(0, 0 [pid 7082] <... openat resumed>) = 3 [pid 7078] +++ exited with 0 +++ [pid 5826] <... close resumed>) = 0 [pid 5823] <... openat resumed>) = 3 [pid 7083] <... setpgid resumed>) = 0 [pid 7082] chdir("./file0" [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7078, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5823] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 7084 attached [pid 7083] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7082] <... chdir resumed>) = 0 [pid 5827] restart_syscall(<... resuming interrupted clone ...> [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7084 [pid 7084] set_robust_list(0x55557eba4660, 24 [pid 5827] <... restart_syscall resumed>) = 0 [pid 5823] close(3 [pid 7084] <... set_robust_list resumed>) = 0 [pid 7082] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5823] <... close resumed>) = 0 [pid 7084] chdir("./250" [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7084] <... chdir resumed>) = 0 [pid 7083] <... openat resumed>) = 3 [pid 7082] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5827] umount2("./240", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7085 attached [pid 7084] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7084] <... prctl resumed>) = 0 [pid 7082] openat(AT_FDCWD, ".", O_RDONLY [pid 7083] write(3, "1000", 4 [pid 5827] openat(AT_FDCWD, "./240", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [ 209.518198][ T7082] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [pid 7084] setpgid(0, 0 [pid 7085] set_robust_list(0x55557eba4660, 24 [pid 7084] <... setpgid resumed>) = 0 [pid 7083] <... write resumed>) = 4 [pid 7082] <... openat resumed>) = 4 [pid 5827] <... openat resumed>) = 3 [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7085 [pid 7084] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5827] newfstatat(3, "", [pid 7083] close(3 [pid 7082] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7085] <... set_robust_list resumed>) = 0 [pid 7085] chdir("./249" [pid 7083] <... close resumed>) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7083] symlink("/dev/binderfs", "./binderfs" [pid 5827] getdents64(3, [pid 7085] <... chdir resumed>) = 0 [pid 7083] <... symlink resumed>) = 0 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 executing program [pid 7085] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5827] umount2("./240/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7085] <... prctl resumed>) = 0 [pid 7085] setpgid(0, 0 [pid 7083] write(1, "executing program\n", 18 [pid 7085] <... setpgid resumed>) = 0 [pid 7085] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7084] <... openat resumed>) = 3 [pid 7083] <... write resumed>) = 18 [pid 7084] write(3, "1000", 4 [pid 7083] memfd_create("syzkaller", 0 [pid 7082] <... renameat2 resumed>) = 0 [pid 7085] <... openat resumed>) = 3 [pid 7085] write(3, "1000", 4) = 4 [pid 7085] close(3) = 0 [pid 7084] <... write resumed>) = 4 [pid 7083] <... memfd_create resumed>) = 3 [pid 7082] sync( [pid 7084] close(3 [pid 7083] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7085] symlink("/dev/binderfs", "./binderfs" [pid 7084] <... close resumed>) = 0 [pid 7083] <... mmap resumed>) = 0x7f957a000000 [pid 7085] <... symlink resumed>) = 0 [pid 7084] symlink("/dev/binderfs", "./binderfs" [pid 7083] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536executing program [pid 7085] write(1, "executing program\n", 18 [pid 7084] <... symlink resumed>) = 0 executing program [pid 7085] <... write resumed>) = 18 [pid 7084] write(1, "executing program\n", 18 [pid 7083] <... write resumed>) = 65536 [pid 7085] memfd_create("syzkaller", 0 [pid 7084] <... write resumed>) = 18 [pid 7083] munmap(0x7f957a000000, 138412032 [pid 7085] <... memfd_create resumed>) = 3 [pid 7084] memfd_create("syzkaller", 0 [pid 7083] <... munmap resumed>) = 0 [pid 7085] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7084] <... memfd_create resumed>) = 3 [pid 7083] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7085] <... mmap resumed>) = 0x7f957a000000 [pid 7084] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7083] <... openat resumed>) = 4 [pid 7085] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7084] <... mmap resumed>) = 0x7f957a000000 [pid 7083] ioctl(4, LOOP_SET_FD, 3 [pid 7085] <... write resumed>) = 65536 [pid 7084] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7082] <... sync resumed>) = 0 [pid 5827] <... umount2 resumed>) = 0 [pid 7082] exit_group(0 [pid 7084] <... write resumed>) = 65536 [pid 7082] <... exit_group resumed>) = ? [pid 7085] munmap(0x7f957a000000, 138412032) = 0 [pid 7084] munmap(0x7f957a000000, 138412032 [pid 7082] +++ exited with 0 +++ [pid 5827] umount2("./240/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7085] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7084] <... munmap resumed>) = 0 [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7082, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] restart_syscall(<... resuming interrupted clone ...> [pid 5827] newfstatat(AT_FDCWD, "./240/file0", [pid 7085] <... openat resumed>) = 4 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7085] ioctl(4, LOOP_SET_FD, 3 [pid 7084] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7083] <... ioctl resumed>) = 0 [pid 5827] umount2("./240/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7084] <... openat resumed>) = 4 [pid 7083] close(3 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7084] ioctl(4, LOOP_SET_FD, 3 [pid 7083] <... close resumed>) = 0 [pid 5827] openat(AT_FDCWD, "./240/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] <... restart_syscall resumed>) = 0 [pid 5825] umount2("./245", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] <... openat resumed>) = 4 [pid 5825] openat(AT_FDCWD, "./245", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7083] close(4) = 0 [pid 5827] newfstatat(4, "", [pid 5825] <... openat resumed>) = 3 [pid 7083] mkdir("./file0", 0777 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] newfstatat(3, "", [pid 7083] <... mkdir resumed>) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7083] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5827] getdents64(4, [pid 5825] getdents64(3, [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5827] getdents64(4, [pid 5825] umount2("./245/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 7085] <... ioctl resumed>) = 0 [ 209.612351][ T7083] loop1: detected capacity change from 0 to 128 [ 209.631931][ T7085] loop0: detected capacity change from 0 to 128 [ 209.639696][ T7084] loop3: detected capacity change from 0 to 128 [pid 5827] close(4 [pid 7085] close(3 [pid 5825] <... umount2 resumed>) = 0 [pid 7085] <... close resumed>) = 0 [pid 7085] close(4) = 0 [pid 7085] mkdir("./file0", 0777) = 0 [pid 7085] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5827] <... close resumed>) = 0 [pid 5825] umount2("./245/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] rmdir("./240/file0" [pid 5825] newfstatat(AT_FDCWD, "./245/file0", [pid 5827] <... rmdir resumed>) = 0 [pid 7084] <... ioctl resumed>) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] umount2("./240/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7084] close(3 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] umount2("./245/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] newfstatat(AT_FDCWD, "./240/binderfs", [pid 7084] <... close resumed>) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] openat(AT_FDCWD, "./245/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7084] close(4 [pid 5827] unlink("./240/binderfs" [pid 7084] <... close resumed>) = 0 [pid 7084] mkdir("./file0", 0777 [pid 5827] <... unlink resumed>) = 0 [pid 5825] <... openat resumed>) = 4 [pid 7084] <... mkdir resumed>) = 0 [pid 7083] <... mount resumed>) = 0 [pid 5827] getdents64(3, [pid 5825] newfstatat(4, "", [pid 7084] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7083] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7083] <... openat resumed>) = 3 [pid 5825] getdents64(4, [pid 7083] chdir("./file0") = 0 [pid 5827] close(3 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [ 209.663442][ T7083] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 209.688666][ T7085] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [pid 7083] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5827] <... close resumed>) = 0 [pid 5825] getdents64(4, [pid 7085] <... mount resumed>) = 0 [pid 7083] openat(AT_FDCWD, ".", O_RDONLY [pid 5827] rmdir("./240" [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 7085] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7085] chdir("./file0") = 0 [pid 5825] close(4 [pid 7085] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7083] <... openat resumed>) = 4 [pid 5827] <... rmdir resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 7085] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7083] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5827] mkdir("./241", 0777 [pid 5825] rmdir("./245/file0" [pid 7085] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5827] <... mkdir resumed>) = 0 [pid 5825] <... rmdir resumed>) = 0 [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5825] umount2("./245/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] <... openat resumed>) = 3 [pid 5825] newfstatat(AT_FDCWD, "./245/binderfs", [pid 5827] ioctl(3, LOOP_CLR_FD [pid 7085] <... renameat2 resumed>) = 0 [pid 7083] <... renameat2 resumed>) = 0 [pid 5827] <... ioctl resumed>) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7083] sync( [pid 5825] unlink("./245/binderfs" [pid 5827] close(3 [pid 7085] sync( [pid 5825] <... unlink resumed>) = 0 [pid 5827] <... close resumed>) = 0 [pid 5825] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5825] close(3 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5825] <... close resumed>) = 0 ./strace-static-x86_64: Process 7086 attached [pid 5825] rmdir("./245") = 0 [pid 5825] mkdir("./246", 0777 [pid 7086] set_robust_list(0x55557eba4660, 24 [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7086 [pid 5825] <... mkdir resumed>) = 0 [pid 7086] <... set_robust_list resumed>) = 0 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7086] chdir("./241" [pid 5825] <... openat resumed>) = 3 [ 209.716166][ T7084] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 7086] <... chdir resumed>) = 0 [pid 7084] <... mount resumed>) = 0 [pid 5825] <... ioctl resumed>) = 0 [pid 7086] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5825] close(3 [pid 7086] <... prctl resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 7086] setpgid(0, 0 [pid 7084] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7086] <... setpgid resumed>) = 0 [pid 7084] <... openat resumed>) = 3 [pid 7084] chdir("./file0" [pid 7086] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 7087 attached [pid 7084] <... chdir resumed>) = 0 [pid 7086] <... openat resumed>) = 3 [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7087 [pid 7086] write(3, "1000", 4 [pid 7087] set_robust_list(0x55557eba4660, 24 [pid 7084] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7086] <... write resumed>) = 4 [pid 7086] close(3 [pid 7087] <... set_robust_list resumed>) = 0 [pid 7086] <... close resumed>) = 0 [pid 7084] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7086] symlink("/dev/binderfs", "./binderfs" [pid 7084] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7087] chdir("./246" [pid 7084] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0executing program [pid 7087] <... chdir resumed>) = 0 [pid 7086] <... symlink resumed>) = 0 [pid 7084] <... renameat2 resumed>) = 0 [pid 7087] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7086] write(1, "executing program\n", 18 [pid 7087] <... prctl resumed>) = 0 [pid 7086] <... write resumed>) = 18 [pid 7087] setpgid(0, 0 [pid 7086] memfd_create("syzkaller", 0 [pid 7087] <... setpgid resumed>) = 0 [pid 7086] <... memfd_create resumed>) = 3 [pid 7085] <... sync resumed>) = 0 [pid 7084] sync( [pid 7083] <... sync resumed>) = 0 [pid 7087] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7086] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7085] exit_group(0 [pid 7083] exit_group(0 [pid 7085] <... exit_group resumed>) = ? [pid 7083] <... exit_group resumed>) = ? [pid 7086] <... mmap resumed>) = 0x7f957a000000 [pid 7087] <... openat resumed>) = 3 [pid 7087] write(3, "1000", 4 [pid 7086] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7084] <... sync resumed>) = 0 [pid 7087] <... write resumed>) = 4 [pid 7084] exit_group(0 [pid 7087] close(3 [pid 7084] <... exit_group resumed>) = ? [pid 7087] <... close resumed>) = 0 [pid 7086] <... write resumed>) = 65536 [pid 7085] +++ exited with 0 +++ [pid 7084] +++ exited with 0 +++ [pid 7083] +++ exited with 0 +++ [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7083, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7085, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7087] symlink("/dev/binderfs", "./binderfs" [pid 7086] munmap(0x7f957a000000, 138412032 [pid 5824] <... restart_syscall resumed>) = 0 [pid 7086] <... munmap resumed>) = 0 [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7084, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 7087] <... symlink resumed>) = 0 [pid 5824] umount2("./246", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./246", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] umount2("./250", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... openat resumed>) = 3 [pid 5824] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(3, [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 executing program [pid 5823] <... restart_syscall resumed>) = 0 [pid 7087] write(1, "executing program\n", 18 [pid 7086] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5826] openat(AT_FDCWD, "./250", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] umount2("./246/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7087] <... write resumed>) = 18 [pid 7086] <... openat resumed>) = 4 [pid 5826] <... openat resumed>) = 3 [pid 5823] umount2("./249", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] newfstatat(3, "", [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./249", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7087] memfd_create("syzkaller", 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... openat resumed>) = 3 [pid 5826] getdents64(3, [pid 7086] ioctl(4, LOOP_SET_FD, 3 [pid 5823] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] umount2("./249/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5824] <... umount2 resumed>) = 0 [pid 5823] umount2("./249/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./246/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./249/file0", [pid 5824] newfstatat(AT_FDCWD, "./246/file0", [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7087] <... memfd_create resumed>) = 3 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] umount2("./249/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7087] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5826] umount2("./250/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./249/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7087] <... mmap resumed>) = 0x7f957a000000 [pid 5823] <... openat resumed>) = 4 [pid 5824] umount2("./246/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./246/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] newfstatat(4, "", [pid 5824] <... openat resumed>) = 4 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(4, [pid 5824] newfstatat(4, "", [pid 7087] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5826] <... umount2 resumed>) = 0 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5826] umount2("./250/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(4, [pid 7087] <... write resumed>) = 65536 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] getdents64(4, [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5826] newfstatat(AT_FDCWD, "./250/file0", [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] close(4 [pid 7087] munmap(0x7f957a000000, 138412032 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] getdents64(4, [pid 5823] <... close resumed>) = 0 [pid 5826] umount2("./250/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] rmdir("./249/file0" [pid 7087] <... munmap resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] close(4 [pid 5823] <... rmdir resumed>) = 0 [pid 7087] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7086] <... ioctl resumed>) = 0 [pid 5826] openat(AT_FDCWD, "./250/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] <... close resumed>) = 0 [pid 7087] <... openat resumed>) = 4 [pid 7086] close(3 [pid 5826] <... openat resumed>) = 4 [pid 5823] umount2("./249/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] newfstatat(4, "", [pid 5824] rmdir("./246/file0" [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7087] ioctl(4, LOOP_SET_FD, 3 [pid 7086] <... close resumed>) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 5823] newfstatat(AT_FDCWD, "./249/binderfs", [pid 7087] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 7086] close(4 [pid 5826] getdents64(4, [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7086] <... close resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] umount2("./246/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] getdents64(4, [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] unlink("./249/binderfs" [pid 5824] newfstatat(AT_FDCWD, "./246/binderfs", [pid 5823] <... unlink resumed>) = 0 [pid 7087] ioctl(4, LOOP_CLR_FD [pid 7086] mkdir("./file0", 0777 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7087] <... ioctl resumed>) = 0 [pid 7086] <... mkdir resumed>) = 0 [pid 5826] close(4 [pid 5824] unlink("./246/binderfs" [pid 5826] <... close resumed>) = 0 [pid 5824] <... unlink resumed>) = 0 [pid 7086] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5823] getdents64(3, [pid 7087] ioctl(4, LOOP_SET_FD, 3 [pid 5826] rmdir("./250/file0" [pid 5824] getdents64(3, [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7087] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 7087] close(4 [pid 5826] <... rmdir resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] close(3 [pid 5824] close(3 [pid 5823] <... close resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 5823] rmdir("./249" [pid 7087] <... close resumed>) = 0 [pid 5824] rmdir("./246" [pid 5823] <... rmdir resumed>) = 0 [pid 5826] umount2("./250/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... rmdir resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./250/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./250/binderfs") = 0 [pid 5826] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [ 209.858323][ T7086] loop4: detected capacity change from 0 to 128 [pid 5824] mkdir("./247", 0777 [pid 5826] close(3 [pid 5824] <... mkdir resumed>) = 0 [pid 5823] mkdir("./250", 0777 [pid 5826] <... close resumed>) = 0 [pid 5823] <... mkdir resumed>) = 0 [pid 5826] rmdir("./250") = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5823] <... openat resumed>) = 3 [pid 5826] mkdir("./251", 0777 [pid 5824] <... openat resumed>) = 3 [pid 5823] ioctl(3, LOOP_CLR_FD [pid 7087] close(3 [pid 5823] <... ioctl resumed>) = 0 [pid 5826] <... mkdir resumed>) = 0 [pid 7087] <... close resumed>) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5824] ioctl(3, LOOP_CLR_FD [pid 5823] close(3 [pid 5826] <... openat resumed>) = 3 [pid 5824] <... ioctl resumed>) = 0 [pid 5826] ioctl(3, LOOP_CLR_FD) = 0 [pid 5826] close(3) = 0 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5824] close(3./strace-static-x86_64: Process 7088 attached [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7088 [pid 5824] <... close resumed>) = 0 [pid 7088] set_robust_list(0x55557eba4660, 24 [pid 7087] openat(AT_FDCWD, ".", O_RDONLY [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7089 attached [pid 7088] <... set_robust_list resumed>) = 0 [pid 7087] <... openat resumed>) = 3 [pid 7088] chdir("./251" [pid 7087] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7089 [pid 7089] set_robust_list(0x55557eba4660, 24 [pid 7088] <... chdir resumed>) = 0 [pid 7087] <... renameat2 resumed>) = -1 ENOENT (No such file or directory) [pid 7089] <... set_robust_list resumed>) = 0 [pid 7088] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7087] sync( [pid 7089] chdir("./247" [pid 7088] <... prctl resumed>) = 0 [pid 7089] <... chdir resumed>) = 0 [pid 7088] setpgid(0, 0 [pid 7089] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7088] <... setpgid resumed>) = 0 [pid 7089] <... prctl resumed>) = 0 [pid 7088] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5823] <... close resumed>) = 0 [pid 7089] setpgid(0, 0 [pid 7088] <... openat resumed>) = 3 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7090 attached [pid 7089] <... setpgid resumed>) = 0 [pid 7088] write(3, "1000", 4 [pid 7086] <... mount resumed>) = 0 [ 209.933590][ T7086] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [pid 7086] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7090] set_robust_list(0x55557eba4660, 24 [pid 7089] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7088] <... write resumed>) = 4 [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7090 [pid 7089] <... openat resumed>) = 3 [pid 7088] close(3) = 0 [pid 7088] symlink("/dev/binderfs", "./binderfs" [pid 7090] <... set_robust_list resumed>) = 0 [pid 7089] write(3, "1000", 4 [pid 7090] chdir("./250" [pid 7089] <... write resumed>) = 4 [pid 7090] <... chdir resumed>) = 0 executing program [pid 7089] close(3 [pid 7088] <... symlink resumed>) = 0 [pid 7086] <... openat resumed>) = 3 [pid 7090] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7086] chdir("./file0" [pid 7090] <... prctl resumed>) = 0 [pid 7089] <... close resumed>) = 0 [pid 7088] write(1, "executing program\n", 18 [pid 7090] setpgid(0, 0 [pid 7089] symlink("/dev/binderfs", "./binderfs" [pid 7088] <... write resumed>) = 18 [pid 7090] <... setpgid resumed>) = 0 [pid 7089] <... symlink resumed>) = 0 [pid 7088] memfd_create("syzkaller", 0 [pid 7086] <... chdir resumed>) = 0 executing program [pid 7090] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7089] write(1, "executing program\n", 18 [pid 7088] <... memfd_create resumed>) = 3 [pid 7090] <... openat resumed>) = 3 [pid 7089] <... write resumed>) = 18 [pid 7088] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7086] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7090] write(3, "1000", 4 [pid 7089] memfd_create("syzkaller", 0 [pid 7088] <... mmap resumed>) = 0x7f957a000000 [pid 7087] <... sync resumed>) = 0 [pid 7090] <... write resumed>) = 4 [pid 7089] <... memfd_create resumed>) = 3 [pid 7088] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7086] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7087] exit_group(0 [pid 7086] openat(AT_FDCWD, ".", O_RDONLY [pid 7087] <... exit_group resumed>) = ? [pid 7086] <... openat resumed>) = 4 [pid 7089] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7090] close(3 [pid 7089] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7087] +++ exited with 0 +++ [pid 7086] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7090] <... close resumed>) = 0 [pid 7089] <... write resumed>) = 65536 [pid 7088] <... write resumed>) = 65536 [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7087, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7086] <... renameat2 resumed>) = 0 [pid 5825] restart_syscall(<... resuming interrupted clone ...> [pid 7086] sync( [pid 7090] symlink("/dev/binderfs", "./binderfs" [pid 7089] munmap(0x7f957a000000, 138412032 [pid 7088] munmap(0x7f957a000000, 138412032 [pid 7089] <... munmap resumed>) = 0 [pid 7088] <... munmap resumed>) = 0 [pid 5825] <... restart_syscall resumed>) = 0 [pid 7089] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7088] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7089] <... openat resumed>) = 4 [pid 7088] <... openat resumed>) = 4 [pid 7090] <... symlink resumed>) = 0 [pid 7089] ioctl(4, LOOP_SET_FD, 3 [pid 7088] ioctl(4, LOOP_SET_FD, 3 [pid 7086] <... sync resumed>) = 0 [pid 5825] umount2("./246", MNT_FORCE|UMOUNT_NOFOLLOWexecuting program [pid 7086] exit_group(0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7090] write(1, "executing program\n", 18) = 18 [pid 7090] memfd_create("syzkaller", 0) = 3 [pid 5825] openat(AT_FDCWD, "./246", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7090] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 5825] <... openat resumed>) = 3 [pid 7090] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5825] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7090] <... write resumed>) = 65536 [pid 7086] <... exit_group resumed>) = ? [pid 7086] +++ exited with 0 +++ [pid 5825] getdents64(3, [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7086, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 7090] munmap(0x7f957a000000, 138412032 [pid 5825] umount2("./246/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] umount2("./241", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7090] <... munmap resumed>) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./246/binderfs", [pid 5827] openat(AT_FDCWD, "./241", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7090] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] <... openat resumed>) = 3 [pid 5825] unlink("./246/binderfs" [pid 5827] newfstatat(3, "", [pid 7090] <... openat resumed>) = 4 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] <... unlink resumed>) = 0 [pid 7090] ioctl(4, LOOP_SET_FD, 3 [pid 5827] getdents64(3, [pid 5825] getdents64(3, [pid 7090] <... ioctl resumed>) = 0 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5825] close(3) = 0 [pid 5825] rmdir("./246") = 0 [pid 5825] mkdir("./247", 0777 [pid 7089] <... ioctl resumed>) = 0 [pid 5825] <... mkdir resumed>) = 0 [pid 7089] close(3 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5827] umount2("./241/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7089] <... close resumed>) = 0 [pid 7088] <... ioctl resumed>) = 0 [pid 5825] <... openat resumed>) = 3 [pid 7089] close(4 [pid 7088] close(3 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 7089] <... close resumed>) = 0 [pid 7088] <... close resumed>) = 0 [pid 5825] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7089] mkdir("./file0", 0777 [pid 7088] close(4 [pid 5825] close(3 [pid 7089] <... mkdir resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 7088] <... close resumed>) = 0 [pid 7088] mkdir("./file0", 0777) = 0 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7089] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7088] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, ""./strace-static-x86_64: Process 7091 attached [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7091 [pid 7091] set_robust_list(0x55557eba4660, 24) = 0 [ 210.042698][ T7089] loop1: detected capacity change from 0 to 128 [ 210.051890][ T7088] loop3: detected capacity change from 0 to 128 [ 210.075009][ T7090] loop0: detected capacity change from 0 to 128 [pid 7091] chdir("./247") = 0 [pid 7090] close(3 [pid 7091] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7090] <... close resumed>) = 0 [pid 5827] <... umount2 resumed>) = 0 [pid 7090] close(4 [pid 7091] setpgid(0, 0 [pid 7090] <... close resumed>) = 0 [pid 5827] umount2("./241/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7091] <... setpgid resumed>) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7091] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7090] mkdir("./file0", 0777 [pid 5827] newfstatat(AT_FDCWD, "./241/file0", [pid 7090] <... mkdir resumed>) = 0 [pid 7090] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7091] <... openat resumed>) = 3 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7091] write(3, "1000", 4 [ 210.106592][ T7088] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 210.121742][ T7089] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [pid 5827] umount2("./241/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7091] <... write resumed>) = 4 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] openat(AT_FDCWD, "./241/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7091] close(3) = 0 [pid 7091] symlink("/dev/binderfs", "./binderfs" [pid 5827] <... openat resumed>) = 4 [pid 7091] <... symlink resumed>) = 0 [pid 5827] newfstatat(4, "", executing program [pid 7091] write(1, "executing program\n", 18 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7091] <... write resumed>) = 18 [pid 7091] memfd_create("syzkaller", 0 [pid 5827] getdents64(4, [pid 7091] <... memfd_create resumed>) = 3 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 7088] <... mount resumed>) = 0 [pid 7091] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7088] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5827] getdents64(4, [pid 7091] <... mmap resumed>) = 0x7f957a000000 [pid 7088] <... openat resumed>) = 3 [pid 7089] <... mount resumed>) = 0 [pid 7091] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7089] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7088] chdir("./file0" [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 7089] <... openat resumed>) = 3 [pid 5827] close(4 [pid 7088] <... chdir resumed>) = 0 [pid 7089] chdir("./file0" [pid 7088] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5827] <... close resumed>) = 0 [pid 7089] <... chdir resumed>) = 0 [pid 7089] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7088] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5827] rmdir("./241/file0" [pid 7091] <... write resumed>) = 65536 [pid 7089] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7088] openat(AT_FDCWD, ".", O_RDONLY [pid 5827] <... rmdir resumed>) = 0 [pid 7091] munmap(0x7f957a000000, 138412032 [pid 7089] openat(AT_FDCWD, ".", O_RDONLY [pid 7088] <... openat resumed>) = 4 [pid 5827] umount2("./241/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7088] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7089] <... openat resumed>) = 4 [pid 7091] <... munmap resumed>) = 0 [pid 7089] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5827] newfstatat(AT_FDCWD, "./241/binderfs", [pid 7091] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7088] <... renameat2 resumed>) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7090] <... mount resumed>) = 0 [pid 7090] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7090] chdir("./file0") = 0 [pid 7089] <... renameat2 resumed>) = 0 [pid 5827] unlink("./241/binderfs" [pid 7091] <... openat resumed>) = 4 [pid 7090] openat(AT_FDCWD, "/dev/loop0", O_RDWR [ 210.150789][ T7090] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [pid 7088] sync( [pid 5827] <... unlink resumed>) = 0 [pid 7090] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7091] ioctl(4, LOOP_SET_FD, 3 [pid 5827] getdents64(3, [pid 7090] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7090] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7089] sync( [pid 5827] close(3) = 0 [pid 5827] rmdir("./241") = 0 [pid 5827] mkdir("./242", 0777 [pid 7090] <... renameat2 resumed>) = 0 [pid 5827] <... mkdir resumed>) = 0 [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 7090] sync( [pid 5827] ioctl(3, LOOP_CLR_FD [pid 7089] <... sync resumed>) = 0 [pid 5827] <... ioctl resumed>) = 0 [pid 7088] <... sync resumed>) = 0 [pid 7089] exit_group(0 [pid 7088] exit_group(0 [pid 5827] close(3 [pid 7091] <... ioctl resumed>) = 0 [pid 7089] <... exit_group resumed>) = ? [pid 7088] <... exit_group resumed>) = ? [pid 5827] <... close resumed>) = 0 [pid 7091] close(3 [pid 7090] <... sync resumed>) = 0 [pid 7089] +++ exited with 0 +++ [pid 7088] +++ exited with 0 +++ [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7090] exit_group(0 [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7088, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7089, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5826] restart_syscall(<... resuming interrupted clone ...> [pid 5824] umount2("./247", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7092 attached [pid 7091] <... close resumed>) = 0 [pid 7090] <... exit_group resumed>) = ? [pid 5826] <... restart_syscall resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./247", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5824] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] umount2("./251", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] getdents64(3, [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5826] openat(AT_FDCWD, "./251", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [ 210.211826][ T7091] loop2: detected capacity change from 0 to 128 [pid 5824] umount2("./247/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... openat resumed>) = 3 [pid 7092] set_robust_list(0x55557eba4660, 24 [pid 7091] close(4 [pid 5826] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7091] <... close resumed>) = 0 [pid 5826] getdents64(3, [pid 7092] <... set_robust_list resumed>) = 0 [pid 7091] mkdir("./file0", 0777 [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7092 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 7090] +++ exited with 0 +++ [pid 7092] chdir("./242" [pid 5826] umount2("./251/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7091] <... mkdir resumed>) = 0 [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7090, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5823] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5823] umount2("./250", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./250", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 7092] <... chdir resumed>) = 0 [pid 7091] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5823] newfstatat(3, "", [pid 7092] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] umount2("./250/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7092] <... prctl resumed>) = 0 [pid 7092] setpgid(0, 0) = 0 [pid 5826] <... umount2 resumed>) = 0 [pid 5823] <... umount2 resumed>) = 0 [pid 5823] umount2("./250/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./250/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7092] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5826] umount2("./251/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... umount2 resumed>) = 0 [pid 7092] <... openat resumed>) = 3 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] umount2("./247/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./247/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] umount2("./247/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./247/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5824] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] umount2("./250/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] getdents64(4, [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] openat(AT_FDCWD, "./250/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5823] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(4, [pid 5823] getdents64(4, [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] close(4 [pid 5823] getdents64(4, [pid 5824] <... close resumed>) = 0 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] rmdir("./247/file0" [pid 5823] close(4 [pid 5826] newfstatat(AT_FDCWD, "./251/file0", [pid 5824] <... rmdir resumed>) = 0 [pid 5823] <... close resumed>) = 0 [pid 5823] rmdir("./250/file0" [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... rmdir resumed>) = 0 [pid 5826] umount2("./251/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./247/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] umount2("./250/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7092] write(3, "1000", 4 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./247/binderfs", [ 210.284850][ T7091] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [pid 5823] newfstatat(AT_FDCWD, "./250/binderfs", [pid 7092] <... write resumed>) = 4 [pid 5826] openat(AT_FDCWD, "./251/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7092] close(3 [pid 5823] unlink("./250/binderfs" [pid 5826] <... openat resumed>) = 4 [pid 7092] <... close resumed>) = 0 [pid 5826] newfstatat(4, "", [pid 7092] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5823] <... unlink resumed>) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7092] write(1, "executing program\n", 18) = 18 [pid 5826] getdents64(4, [pid 5823] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] close(3 [pid 7092] memfd_create("syzkaller", 0 [pid 5823] <... close resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 7092] <... memfd_create resumed>) = 3 [pid 5823] rmdir("./250" [pid 5826] getdents64(4, [pid 7092] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] <... rmdir resumed>) = 0 [pid 5823] mkdir("./251", 0777 [pid 7092] <... mmap resumed>) = 0x7f957a000000 [pid 5826] close(4 [pid 5823] <... mkdir resumed>) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7092] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5826] <... close resumed>) = 0 [pid 7092] <... write resumed>) = 65536 [pid 5826] rmdir("./251/file0" [pid 5824] unlink("./247/binderfs" [pid 5823] <... openat resumed>) = 3 [pid 7092] munmap(0x7f957a000000, 138412032) = 0 [pid 5826] <... rmdir resumed>) = 0 [pid 5824] <... unlink resumed>) = 0 [pid 5823] ioctl(3, LOOP_CLR_FD [pid 5826] umount2("./251/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7092] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7092] <... openat resumed>) = 4 [pid 5823] <... ioctl resumed>) = 0 [pid 5826] newfstatat(AT_FDCWD, "./251/binderfs", [pid 7092] ioctl(4, LOOP_SET_FD, 3 [pid 5824] getdents64(3, [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] close(3 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] <... close resumed>) = 0 [pid 5824] close(3 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7093 attached [pid 5826] unlink("./251/binderfs" [pid 5824] <... close resumed>) = 0 [pid 5826] <... unlink resumed>) = 0 [pid 5824] rmdir("./247" [pid 7093] set_robust_list(0x55557eba4660, 24 [pid 5826] getdents64(3, [pid 5824] <... rmdir resumed>) = 0 [pid 7093] <... set_robust_list resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7093] chdir("./251" [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7093 [pid 7093] <... chdir resumed>) = 0 [pid 7092] <... ioctl resumed>) = 0 [pid 7091] <... mount resumed>) = 0 [pid 5826] close(3 [pid 5824] mkdir("./248", 0777 [pid 5826] <... close resumed>) = 0 [pid 7093] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7092] close(3 [pid 7091] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5826] rmdir("./251" [pid 5824] <... mkdir resumed>) = 0 [pid 7093] <... prctl resumed>) = 0 [pid 7092] <... close resumed>) = 0 [pid 7091] <... openat resumed>) = 3 [pid 5826] <... rmdir resumed>) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7093] setpgid(0, 0 [pid 7092] close(4 [pid 7091] chdir("./file0" [pid 5826] mkdir("./252", 0777 [pid 5824] <... openat resumed>) = 3 [pid 7092] <... close resumed>) = 0 [pid 7091] <... chdir resumed>) = 0 [pid 7093] <... setpgid resumed>) = 0 [pid 7092] mkdir("./file0", 0777 [pid 7091] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5826] <... mkdir resumed>) = 0 [pid 5824] ioctl(3, LOOP_CLR_FD [pid 7093] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7091] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5824] <... ioctl resumed>) = 0 [pid 7091] openat(AT_FDCWD, ".", O_RDONLY [pid 5826] <... openat resumed>) = 3 [pid 7093] <... openat resumed>) = 3 [pid 7092] <... mkdir resumed>) = 0 [pid 7091] <... openat resumed>) = 4 [pid 5826] ioctl(3, LOOP_CLR_FD [pid 5824] close(3 [pid 7093] write(3, "1000", 4 [pid 7091] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5826] <... ioctl resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 7093] <... write resumed>) = 4 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7094 attached [pid 7093] close(3 [pid 5826] close(3 [pid 7094] set_robust_list(0x55557eba4660, 24 [pid 7093] <... close resumed>) = 0 [pid 5826] <... close resumed>) = 0 [pid 7094] <... set_robust_list resumed>) = 0 [ 210.357776][ T7092] loop4: detected capacity change from 0 to 128 [pid 7093] symlink("/dev/binderfs", "./binderfs"executing program [pid 7094] chdir("./248" [pid 7093] <... symlink resumed>) = 0 [pid 7092] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7091] <... renameat2 resumed>) = 0 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7093] write(1, "executing program\n", 18) = 18 [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7094 [pid 7093] memfd_create("syzkaller", 0./strace-static-x86_64: Process 7095 attached [pid 7094] <... chdir resumed>) = 0 [pid 7093] <... memfd_create resumed>) = 3 [pid 7091] sync( [pid 7094] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7093] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7095] set_robust_list(0x55557eba4660, 24 [pid 7094] <... prctl resumed>) = 0 [pid 7093] <... mmap resumed>) = 0x7f957a000000 [pid 7095] <... set_robust_list resumed>) = 0 [pid 7094] setpgid(0, 0 [pid 7093] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7094] <... setpgid resumed>) = 0 [pid 7094] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7095] chdir("./252" [pid 7094] write(3, "1000", 4 [pid 7093] <... write resumed>) = 65536 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7095 executing program [pid 7095] <... chdir resumed>) = 0 [pid 7094] <... write resumed>) = 4 [pid 7093] munmap(0x7f957a000000, 138412032 [pid 7094] close(3 [pid 7093] <... munmap resumed>) = 0 [pid 7094] <... close resumed>) = 0 [pid 7094] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7093] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7094] write(1, "executing program\n", 18 [pid 7093] <... openat resumed>) = 4 [pid 7094] <... write resumed>) = 18 [pid 7094] memfd_create("syzkaller", 0 [pid 7093] ioctl(4, LOOP_SET_FD, 3 [pid 7094] <... memfd_create resumed>) = 3 [pid 7094] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7095] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7094] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7095] setpgid(0, 0) = 0 [pid 7094] <... write resumed>) = 65536 [pid 7094] munmap(0x7f957a000000, 138412032) = 0 [pid 7095] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7094] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 7094] ioctl(4, LOOP_SET_FD, 3 [pid 7095] <... openat resumed>) = 3 [pid 7093] <... ioctl resumed>) = 0 [pid 7095] write(3, "1000", 4) = 4 executing program [pid 7095] close(3 [pid 7093] close(3 [pid 7095] <... close resumed>) = 0 [pid 7095] symlink("/dev/binderfs", "./binderfs" [pid 7093] <... close resumed>) = 0 [pid 7093] close(4) = 0 [pid 7093] mkdir("./file0", 0777 [pid 7095] <... symlink resumed>) = 0 [pid 7093] <... mkdir resumed>) = 0 [pid 7095] write(1, "executing program\n", 18) = 18 [pid 7093] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7095] memfd_create("syzkaller", 0) = 3 [ 210.435356][ T7092] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 210.445132][ T7093] loop0: detected capacity change from 0 to 128 [ 210.467876][ T7094] loop1: detected capacity change from 0 to 128 [pid 7095] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7094] <... ioctl resumed>) = 0 [pid 7095] <... mmap resumed>) = 0x7f957a000000 [pid 7092] <... mount resumed>) = 0 [pid 7095] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7092] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7095] <... write resumed>) = 65536 [pid 7092] chdir("./file0" [pid 7095] munmap(0x7f957a000000, 138412032 [pid 7094] close(3 [pid 7092] <... chdir resumed>) = 0 [pid 7095] <... munmap resumed>) = 0 [pid 7094] <... close resumed>) = 0 [pid 7092] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7094] close(4) = 0 [pid 7094] mkdir("./file0", 0777 [pid 7095] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7092] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7095] <... openat resumed>) = 4 [pid 7094] <... mkdir resumed>) = 0 [pid 7092] openat(AT_FDCWD, ".", O_RDONLY [pid 7095] ioctl(4, LOOP_SET_FD, 3 [pid 7094] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7092] <... openat resumed>) = 4 [ 210.495335][ T7093] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 210.522729][ T7095] loop3: detected capacity change from 0 to 128 [pid 7092] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7095] <... ioctl resumed>) = 0 [pid 7092] <... renameat2 resumed>) = 0 [pid 7092] sync( [pid 7095] close(3) = 0 [pid 7095] close(4) = 0 [pid 7095] mkdir("./file0", 0777) = 0 [ 210.537349][ T7094] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [pid 7093] <... mount resumed>) = 0 [pid 7095] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7093] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7093] chdir("./file0") = 0 [pid 7093] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7093] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7093] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7094] <... mount resumed>) = 0 [pid 7094] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7093] <... renameat2 resumed>) = 0 [pid 7094] chdir("./file0") = 0 [pid 7094] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7093] sync( [pid 7094] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7094] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7094] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = 0 [pid 7094] sync( [pid 7095] <... mount resumed>) = 0 [pid 7095] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7095] chdir("./file0") = 0 [pid 7095] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7095] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7095] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = 0 [ 210.594215][ T7095] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [pid 7095] sync( [pid 7094] <... sync resumed>) = 0 [pid 7093] <... sync resumed>) = 0 [pid 7092] <... sync resumed>) = 0 [pid 7091] <... sync resumed>) = 0 [pid 7092] exit_group(0 [pid 7093] exit_group(0 [pid 7092] <... exit_group resumed>) = ? [pid 7091] exit_group(0 [pid 7095] <... sync resumed>) = 0 [pid 7094] exit_group(0 [pid 7093] <... exit_group resumed>) = ? [pid 7092] +++ exited with 0 +++ [pid 7095] exit_group(0 [pid 7094] <... exit_group resumed>) = ? [pid 7093] +++ exited with 0 +++ [pid 7091] <... exit_group resumed>) = ? [pid 7095] <... exit_group resumed>) = ? [pid 7094] +++ exited with 0 +++ [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7092, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5827] umount2("./242", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7094, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7093, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 5827] openat(AT_FDCWD, "./242", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5827] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] getdents64(3, [pid 5824] <... restart_syscall resumed>) = 0 [pid 7095] +++ exited with 0 +++ [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 7091] +++ exited with 0 +++ [pid 5827] umount2("./242/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7095, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5824] umount2("./248", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] umount2("./252", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7091, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... umount2 resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] restart_syscall(<... resuming interrupted clone ...> [pid 5824] openat(AT_FDCWD, "./248", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] <... restart_syscall resumed>) = 0 [pid 5826] openat(AT_FDCWD, "./252", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] <... restart_syscall resumed>) = 0 [pid 5824] <... openat resumed>) = 3 [pid 5826] <... openat resumed>) = 3 [pid 5824] newfstatat(3, "", [pid 5826] newfstatat(3, "", [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] umount2("./251", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] umount2("./242/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] umount2("./247", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] getdents64(3, [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] getdents64(3, [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] openat(AT_FDCWD, "./251", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] newfstatat(AT_FDCWD, "./242/file0", [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5825] openat(AT_FDCWD, "./247", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] umount2("./248/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... openat resumed>) = 3 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] umount2("./252/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... openat resumed>) = 3 [pid 5824] <... umount2 resumed>) = 0 [pid 5823] newfstatat(3, "", [pid 5827] umount2("./242/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./248/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(3, [pid 5827] openat(AT_FDCWD, "./242/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] getdents64(3, [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5827] <... openat resumed>) = 4 [pid 5825] umount2("./247/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] umount2("./251/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] newfstatat(AT_FDCWD, "./248/file0", [pid 5827] newfstatat(4, "", [pid 5826] <... umount2 resumed>) = 0 [pid 5825] <... umount2 resumed>) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... umount2 resumed>) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] umount2("./252/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./247/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./248/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] umount2("./251/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] getdents64(4, [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5826] newfstatat(AT_FDCWD, "./252/file0", [pid 5825] newfstatat(AT_FDCWD, "./247/file0", [pid 5824] openat(AT_FDCWD, "./248/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] newfstatat(AT_FDCWD, "./251/file0", [pid 5827] getdents64(4, [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... openat resumed>) = 4 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5826] umount2("./252/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./247/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] newfstatat(4, "", [pid 5823] umount2("./251/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] close(4 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] openat(AT_FDCWD, "./247/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(4, "", [pid 5823] openat(AT_FDCWD, "./251/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] openat(AT_FDCWD, "./252/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(4, [pid 5823] <... openat resumed>) = 4 [pid 5826] <... openat resumed>) = 4 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] getdents64(4, [pid 5824] getdents64(4, [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5825] close(4 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] <... close resumed>) = 0 [pid 5823] newfstatat(4, "", [pid 5825] rmdir("./247/file0" [pid 5826] newfstatat(4, "", [pid 5827] <... close resumed>) = 0 [pid 5825] <... rmdir resumed>) = 0 [pid 5824] getdents64(4, [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] rmdir("./242/file0" [pid 5825] umount2("./247/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] getdents64(4, [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... rmdir resumed>) = 0 [pid 5825] newfstatat(AT_FDCWD, "./247/binderfs", [pid 5824] close(4 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... close resumed>) = 0 [pid 5823] getdents64(4, [pid 5825] unlink("./247/binderfs" [pid 5824] rmdir("./248/file0" [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5825] <... unlink resumed>) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 5823] close(4 [pid 5825] getdents64(3, [pid 5824] umount2("./248/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... close resumed>) = 0 [pid 5827] umount2("./242/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] getdents64(4, [pid 5824] newfstatat(AT_FDCWD, "./248/binderfs", [pid 5823] rmdir("./251/file0" [pid 5827] newfstatat(AT_FDCWD, "./242/binderfs", [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] close(3 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... rmdir resumed>) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] getdents64(4, [pid 5825] <... close resumed>) = 0 [pid 5824] unlink("./248/binderfs" [pid 5823] umount2("./251/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] unlink("./242/binderfs" [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5825] rmdir("./247" [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... unlink resumed>) = 0 [pid 5826] close(4 [pid 5825] <... rmdir resumed>) = 0 [pid 5824] <... unlink resumed>) = 0 [pid 5823] newfstatat(AT_FDCWD, "./251/binderfs", [pid 5827] getdents64(3, [pid 5826] <... close resumed>) = 0 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] rmdir("./252/file0" [pid 5827] close(3 [pid 5826] <... rmdir resumed>) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] <... close resumed>) = 0 [pid 5825] mkdir("./248", 0777 [pid 5824] getdents64(3, [pid 5823] unlink("./251/binderfs" [pid 5827] rmdir("./242" [pid 5826] umount2("./252/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... unlink resumed>) = 0 [pid 5827] <... rmdir resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... mkdir resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] newfstatat(AT_FDCWD, "./252/binderfs", [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] close(3 [pid 5823] getdents64(3, [pid 5827] mkdir("./243", 0777 [pid 5824] <... close resumed>) = 0 [pid 5827] <... mkdir resumed>) = 0 [pid 5825] <... openat resumed>) = 3 [pid 5824] rmdir("./248" [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5826] unlink("./252/binderfs" [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 5826] <... unlink resumed>) = 0 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 5824] mkdir("./249", 0777 [pid 5827] ioctl(3, LOOP_CLR_FD [pid 5823] close(3 [pid 5827] <... ioctl resumed>) = 0 [pid 5826] getdents64(3, [pid 5824] <... mkdir resumed>) = 0 [pid 5823] <... close resumed>) = 0 [pid 5825] <... ioctl resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] rmdir("./251" [pid 5827] close(3 [pid 5826] close(3 [pid 5823] <... rmdir resumed>) = 0 [pid 5827] <... close resumed>) = 0 [pid 5826] <... close resumed>) = 0 [pid 5825] close(3 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5823] mkdir("./252", 0777 [pid 5826] rmdir("./252" [pid 5824] <... openat resumed>) = 3 [pid 5823] <... mkdir resumed>) = 0 [pid 5826] <... rmdir resumed>) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5823] ioctl(3, LOOP_CLR_FD) = 0 [pid 5823] close(3 [pid 5826] mkdir("./253", 0777 [pid 5823] <... close resumed>) = 0 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5826] <... mkdir resumed>) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7097 attached ./strace-static-x86_64: Process 7096 attached [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7097] set_robust_list(0x55557eba4660, 24) = 0 [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7097 [pid 7097] chdir("./252" [pid 7096] set_robust_list(0x55557eba4660, 24 [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7096 [pid 5826] <... openat resumed>) = 3 [pid 5825] <... close resumed>) = 0 [pid 5824] ioctl(3, LOOP_CLR_FD [pid 7097] <... chdir resumed>) = 0 [pid 7096] <... set_robust_list resumed>) = 0 [pid 5826] ioctl(3, LOOP_CLR_FD [pid 5824] <... ioctl resumed>) = 0 [pid 5826] <... ioctl resumed>) = 0 [pid 5826] close(3 [pid 7096] chdir("./243" [pid 5826] <... close resumed>) = 0 [pid 5824] close(3 [pid 7097] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7097] setpgid(0, 0) = 0 [pid 7097] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5824] <... close resumed>) = 0 [pid 7097] <... openat resumed>) = 3 [pid 7097] write(3, "1000", 4 [pid 7096] <... chdir resumed>) = 0 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7097] <... write resumed>) = 4 [pid 7096] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7097] close(3 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7098 [pid 7097] <... close resumed>) = 0 ./strace-static-x86_64: Process 7099 attached [pid 7097] symlink("/dev/binderfs", "./binderfs" [pid 7099] set_robust_list(0x55557eba4660, 24 [pid 7097] <... symlink resumed>) = 0 [pid 7097] write(1, "executing program\n", 18executing program [pid 7096] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 7100 attached ./strace-static-x86_64: Process 7098 attached [pid 7099] <... set_robust_list resumed>) = 0 [pid 7097] <... write resumed>) = 18 [pid 7096] setpgid(0, 0 [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7099 [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7100 [pid 7100] set_robust_list(0x55557eba4660, 24 [pid 7099] chdir("./248" [pid 7097] memfd_create("syzkaller", 0 [pid 7096] <... setpgid resumed>) = 0 [pid 7100] <... set_robust_list resumed>) = 0 [pid 7097] <... memfd_create resumed>) = 3 [pid 7097] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7096] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7097] <... mmap resumed>) = 0x7f957a000000 [pid 7100] chdir("./249" [pid 7099] <... chdir resumed>) = 0 [pid 7098] set_robust_list(0x55557eba4660, 24 [pid 7097] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7096] <... openat resumed>) = 3 [pid 7100] <... chdir resumed>) = 0 [pid 7099] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7098] <... set_robust_list resumed>) = 0 [pid 7096] write(3, "1000", 4 [pid 7100] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7096] <... write resumed>) = 4 [pid 7099] <... prctl resumed>) = 0 [pid 7096] close(3 [pid 7100] <... prctl resumed>) = 0 [pid 7099] setpgid(0, 0 [pid 7098] chdir("./253" [pid 7097] <... write resumed>) = 65536 [pid 7096] <... close resumed>) = 0 [pid 7099] <... setpgid resumed>) = 0 [pid 7096] symlink("/dev/binderfs", "./binderfs" [pid 7099] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7096] <... symlink resumed>) = 0 executing program [pid 7100] setpgid(0, 0 [pid 7099] <... openat resumed>) = 3 [pid 7098] <... chdir resumed>) = 0 [pid 7096] write(1, "executing program\n", 18 [pid 7100] <... setpgid resumed>) = 0 [pid 7100] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7098] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7097] munmap(0x7f957a000000, 138412032 [pid 7096] <... write resumed>) = 18 [pid 7100] <... openat resumed>) = 3 [pid 7099] write(3, "1000", 4 [pid 7098] <... prctl resumed>) = 0 [pid 7096] memfd_create("syzkaller", 0 [pid 7098] setpgid(0, 0 [pid 7100] write(3, "1000", 4 [pid 7099] <... write resumed>) = 4 [pid 7097] <... munmap resumed>) = 0 [pid 7096] <... memfd_create resumed>) = 3 [pid 7099] close(3 [pid 7097] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7099] <... close resumed>) = 0 [pid 7099] symlink("/dev/binderfs", "./binderfs" [pid 7097] <... openat resumed>) = 4 [pid 7099] <... symlink resumed>) = 0 [pid 7097] ioctl(4, LOOP_SET_FD, 3executing program [pid 7100] <... write resumed>) = 4 [pid 7099] write(1, "executing program\n", 18 [pid 7097] <... ioctl resumed>) = 0 [pid 7096] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7099] <... write resumed>) = 18 [pid 7099] memfd_create("syzkaller", 0) = 3 [pid 7099] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7099] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7100] close(3 [pid 7099] <... write resumed>) = 65536 [pid 7098] <... setpgid resumed>) = 0 [pid 7096] <... mmap resumed>) = 0x7f957a000000 [pid 7099] munmap(0x7f957a000000, 138412032) = 0 [pid 7099] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 7099] ioctl(4, LOOP_SET_FD, 3 [pid 7100] <... close resumed>) = 0 [pid 7098] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7096] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7098] <... openat resumed>) = 3 [pid 7096] <... write resumed>) = 65536 [pid 7100] symlink("/dev/binderfs", "./binderfs" [pid 7098] write(3, "1000", 4 [pid 7097] close(3 [pid 7098] <... write resumed>) = 4 [pid 7100] <... symlink resumed>) = 0 [pid 7098] close(3 [pid 7096] munmap(0x7f957a000000, 138412032 [pid 7100] write(1, "executing program\n", 18executing program [pid 7097] <... close resumed>) = 0 [pid 7100] <... write resumed>) = 18 [pid 7098] <... close resumed>) = 0 [pid 7097] close(4 [pid 7098] symlink("/dev/binderfs", "./binderfs" [pid 7097] <... close resumed>) = 0 [pid 7096] <... munmap resumed>) = 0 [pid 7097] mkdir("./file0", 0777executing program [pid 7100] memfd_create("syzkaller", 0 [pid 7098] <... symlink resumed>) = 0 [pid 7097] <... mkdir resumed>) = 0 [pid 7096] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7098] write(1, "executing program\n", 18) = 18 [pid 7097] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7096] <... openat resumed>) = 4 [pid 7100] <... memfd_create resumed>) = 3 [ 210.865713][ T7097] loop0: detected capacity change from 0 to 128 [ 210.888624][ T7099] loop2: detected capacity change from 0 to 128 [pid 7100] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7098] memfd_create("syzkaller", 0 [pid 7096] ioctl(4, LOOP_SET_FD, 3 [pid 7098] <... memfd_create resumed>) = 3 [pid 7100] <... mmap resumed>) = 0x7f957a000000 [pid 7099] <... ioctl resumed>) = 0 [pid 7098] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7100] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7099] close(3 [pid 7098] <... mmap resumed>) = 0x7f957a000000 [pid 7099] <... close resumed>) = 0 [pid 7100] <... write resumed>) = 65536 [pid 7099] close(4 [pid 7098] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7099] <... close resumed>) = 0 [pid 7099] mkdir("./file0", 0777 [pid 7100] munmap(0x7f957a000000, 138412032 [pid 7099] <... mkdir resumed>) = 0 [pid 7098] <... write resumed>) = 65536 [pid 7100] <... munmap resumed>) = 0 [pid 7099] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7098] munmap(0x7f957a000000, 138412032 [pid 7100] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7098] <... munmap resumed>) = 0 [pid 7100] <... openat resumed>) = 4 [pid 7100] ioctl(4, LOOP_SET_FD, 3 [pid 7098] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7096] <... ioctl resumed>) = 0 [pid 7100] <... ioctl resumed>) = 0 [pid 7098] <... openat resumed>) = 4 [pid 7097] <... mount resumed>) = 0 [ 210.910515][ T7096] loop4: detected capacity change from 0 to 128 [ 210.911004][ T7097] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 210.948249][ T7100] loop1: detected capacity change from 0 to 128 [ 210.955803][ T7099] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [pid 7096] close(3 [pid 7100] close(3 [pid 7098] ioctl(4, LOOP_SET_FD, 3 [pid 7097] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7096] <... close resumed>) = 0 [pid 7097] <... openat resumed>) = 3 [pid 7097] chdir("./file0" [pid 7100] <... close resumed>) = 0 [pid 7097] <... chdir resumed>) = 0 [pid 7096] close(4 [pid 7100] close(4 [pid 7097] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7096] <... close resumed>) = 0 [pid 7100] <... close resumed>) = 0 [pid 7097] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7096] mkdir("./file0", 0777 [pid 7097] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7097] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7100] mkdir("./file0", 0777 [pid 7097] <... renameat2 resumed>) = 0 [pid 7096] <... mkdir resumed>) = 0 [pid 7097] sync( [pid 7096] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7100] <... mkdir resumed>) = 0 [pid 7100] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7099] <... mount resumed>) = 0 [pid 7098] <... ioctl resumed>) = 0 [pid 7098] close(3) = 0 [pid 7099] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 210.985249][ T7098] loop3: detected capacity change from 0 to 128 [ 211.004097][ T7096] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [pid 7098] close(4) = 0 [pid 7099] chdir("./file0") = 0 [pid 7099] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7099] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7099] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7098] mkdir("./file0", 0777 [pid 7099] <... renameat2 resumed>) = 0 [pid 7098] <... mkdir resumed>) = 0 [pid 7098] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7099] sync( [pid 7096] <... mount resumed>) = 0 [pid 7096] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7096] chdir("./file0") = 0 [pid 7096] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7096] openat(AT_FDCWD, ".", O_RDONLY) = 4 [ 211.032632][ T7100] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 211.062214][ T7098] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [pid 7100] <... mount resumed>) = 0 [pid 7096] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7100] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7098] <... mount resumed>) = 0 [pid 7096] <... renameat2 resumed>) = 0 [pid 7100] <... openat resumed>) = 3 [pid 7098] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7096] sync( [pid 7100] chdir("./file0" [pid 7098] <... openat resumed>) = 3 [pid 7098] chdir("./file0" [pid 7100] <... chdir resumed>) = 0 [pid 7098] <... chdir resumed>) = 0 [pid 7100] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7098] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7100] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7098] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7100] openat(AT_FDCWD, ".", O_RDONLY [pid 7098] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7100] <... openat resumed>) = 4 [pid 7098] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7100] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7098] <... renameat2 resumed>) = 0 [pid 7098] sync( [pid 7100] <... renameat2 resumed>) = 0 [pid 7100] sync() = 0 [pid 7099] <... sync resumed>) = 0 [pid 7097] <... sync resumed>) = 0 [pid 7096] <... sync resumed>) = 0 [pid 7098] <... sync resumed>) = 0 [pid 7097] exit_group(0 [pid 7096] exit_group(0 [pid 7098] exit_group(0 [pid 7096] <... exit_group resumed>) = ? [pid 7100] exit_group(0 [pid 7099] exit_group(0 [pid 7098] <... exit_group resumed>) = ? [pid 7097] <... exit_group resumed>) = ? [pid 7096] +++ exited with 0 +++ [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7096, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5827] restart_syscall(<... resuming interrupted clone ...> [pid 7097] +++ exited with 0 +++ [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7097, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 7098] +++ exited with 0 +++ [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7098, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5826] restart_syscall(<... resuming interrupted clone ...> [pid 7099] <... exit_group resumed>) = ? [pid 5827] <... restart_syscall resumed>) = 0 [pid 5826] <... restart_syscall resumed>) = 0 [pid 5823] <... restart_syscall resumed>) = 0 [pid 7100] <... exit_group resumed>) = ? [pid 7099] +++ exited with 0 +++ [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7099, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5826] umount2("./253", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./253", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] umount2("./252", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... openat resumed>) = 3 [pid 5827] umount2("./243", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] newfstatat(3, "", [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] openat(AT_FDCWD, "./252", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] openat(AT_FDCWD, "./243", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] getdents64(3, [pid 5823] <... openat resumed>) = 3 [pid 5827] <... openat resumed>) = 3 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] newfstatat(3, "", [pid 5827] newfstatat(3, "", [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(3, [pid 5826] umount2("./253/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5827] getdents64(3, [pid 5823] umount2("./252/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7100] +++ exited with 0 +++ [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5826] <... umount2 resumed>) = 0 [pid 5823] <... umount2 resumed>) = 0 [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7100, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5827] umount2("./243/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] umount2("./253/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 5823] umount2("./252/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... restart_syscall resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./253/file0", [pid 5823] newfstatat(AT_FDCWD, "./252/file0", [pid 5827] <... umount2 resumed>) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] umount2("./253/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./248", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./249", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] umount2("./252/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./248", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5823] openat(AT_FDCWD, "./252/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] newfstatat(3, "", [pid 5823] <... openat resumed>) = 4 [pid 5826] openat(AT_FDCWD, "./253/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] newfstatat(4, "", [pid 5827] umount2("./243/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... openat resumed>) = 4 [pid 5825] getdents64(3, [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] newfstatat(4, "", [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] getdents64(4, [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] umount2("./248/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] openat(AT_FDCWD, "./249", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5827] newfstatat(AT_FDCWD, "./243/file0", [pid 5826] getdents64(4, [pid 5823] getdents64(4, [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] close(4) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] rmdir("./252/file0" [pid 5827] umount2("./243/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... rmdir resumed>) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] getdents64(4, [pid 5827] openat(AT_FDCWD, "./243/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5827] <... openat resumed>) = 4 [pid 5823] umount2("./252/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] newfstatat(4, "", [pid 5826] close(4 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] <... close resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] getdents64(4, [pid 5826] rmdir("./253/file0" [pid 5823] newfstatat(AT_FDCWD, "./252/binderfs", [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5826] <... rmdir resumed>) = 0 [pid 5824] <... openat resumed>) = 3 [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] getdents64(4, [pid 5826] umount2("./253/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... umount2 resumed>) = 0 [pid 5824] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] getdents64(3, [pid 5825] umount2("./248/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] close(4 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... close resumed>) = 0 [pid 5825] newfstatat(AT_FDCWD, "./248/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] rmdir("./243/file0") = 0 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] umount2("./248/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] unlink("./252/binderfs" [pid 5824] umount2("./249/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] newfstatat(AT_FDCWD, "./253/binderfs", [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... umount2 resumed>) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] openat(AT_FDCWD, "./248/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] umount2("./249/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] unlink("./253/binderfs" [pid 5825] <... openat resumed>) = 4 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... unlink resumed>) = 0 [pid 5825] newfstatat(4, "", [pid 5824] newfstatat(AT_FDCWD, "./249/file0", [pid 5827] umount2("./243/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] getdents64(3, [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5825] getdents64(4, [pid 5824] umount2("./249/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] newfstatat(AT_FDCWD, "./243/binderfs", [pid 5826] close(3 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] <... close resumed>) = 0 [pid 5825] getdents64(4, [pid 5827] unlink("./243/binderfs" [pid 5826] rmdir("./253" [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] openat(AT_FDCWD, "./249/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] <... unlink resumed>) = 0 [pid 5826] <... rmdir resumed>) = 0 [pid 5825] close(4 [pid 5824] <... openat resumed>) = 4 [pid 5823] <... unlink resumed>) = 0 [pid 5824] newfstatat(4, "", [pid 5827] getdents64(3, [pid 5826] mkdir("./254", 0777 [pid 5825] <... close resumed>) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(3, [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] <... mkdir resumed>) = 0 [pid 5825] rmdir("./248/file0" [pid 5824] getdents64(4, [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5827] close(3 [pid 5825] <... rmdir resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] close(3 [pid 5827] <... close resumed>) = 0 [pid 5825] umount2("./248/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] getdents64(4, [pid 5823] <... close resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] rmdir("./252" [pid 5827] rmdir("./243" [pid 5825] newfstatat(AT_FDCWD, "./248/binderfs", [pid 5824] close(4 [pid 5823] <... rmdir resumed>) = 0 [pid 5827] <... rmdir resumed>) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5824] <... close resumed>) = 0 [pid 5827] mkdir("./244", 0777 [pid 5826] <... openat resumed>) = 3 [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] rmdir("./249/file0" [pid 5823] mkdir("./253", 0777 [pid 5826] ioctl(3, LOOP_CLR_FD [pid 5825] unlink("./248/binderfs" [pid 5824] <... rmdir resumed>) = 0 [pid 5823] <... mkdir resumed>) = 0 [pid 5826] <... ioctl resumed>) = 0 [pid 5825] <... unlink resumed>) = 0 [pid 5824] umount2("./249/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] close(3 [pid 5827] <... mkdir resumed>) = 0 [pid 5826] <... close resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5825] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] newfstatat(AT_FDCWD, "./249/binderfs", [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5825] close(3./strace-static-x86_64: Process 7101 attached [pid 5827] <... openat resumed>) = 3 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... openat resumed>) = 3 [pid 5824] unlink("./249/binderfs" [pid 5827] ioctl(3, LOOP_CLR_FD [pid 5825] <... close resumed>) = 0 [pid 5823] ioctl(3, LOOP_CLR_FD [pid 7101] set_robust_list(0x55557eba4660, 24 [pid 5827] <... ioctl resumed>) = 0 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7101 [pid 5825] rmdir("./248" [pid 5824] <... unlink resumed>) = 0 [pid 5823] <... ioctl resumed>) = 0 [pid 7101] <... set_robust_list resumed>) = 0 [pid 5827] close(3 [pid 5824] getdents64(3, [pid 7101] chdir("./254" [pid 5827] <... close resumed>) = 0 [pid 5825] <... rmdir resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] close(3) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7102 attached [pid 7101] <... chdir resumed>) = 0 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5825] mkdir("./249", 0777 [pid 5824] close(3 [pid 7101] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5825] <... mkdir resumed>) = 0 [pid 5824] <... close resumed>) = 0 ./strace-static-x86_64: Process 7103 attached [pid 7102] set_robust_list(0x55557eba4660, 24 [pid 7101] setpgid(0, 0 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5824] rmdir("./249" [pid 7101] <... setpgid resumed>) = 0 [pid 7102] <... set_robust_list resumed>) = 0 [pid 5825] <... openat resumed>) = 3 [pid 7102] chdir("./253" [pid 5824] <... rmdir resumed>) = 0 [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7102 [pid 7101] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5825] ioctl(3, LOOP_CLR_FD [pid 5824] mkdir("./250", 0777 [pid 7102] <... chdir resumed>) = 0 [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7103 [pid 7102] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5824] <... mkdir resumed>) = 0 [pid 7102] setpgid(0, 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7102] <... setpgid resumed>) = 0 [pid 7102] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5824] <... openat resumed>) = 3 executing program [pid 7102] <... openat resumed>) = 3 [pid 5824] ioctl(3, LOOP_CLR_FD [pid 7102] write(3, "1000", 4 [pid 5824] <... ioctl resumed>) = 0 [pid 7101] <... openat resumed>) = 3 [pid 7102] <... write resumed>) = 4 [pid 5825] <... ioctl resumed>) = 0 [pid 5824] close(3 [pid 7103] set_robust_list(0x55557eba4660, 24 [pid 5825] close(3 [pid 7102] close(3) = 0 [pid 7102] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7102] write(1, "executing program\n", 18) = 18 [pid 7103] <... set_robust_list resumed>) = 0 [pid 7102] memfd_create("syzkaller", 0 [pid 7101] write(3, "1000", 4 [pid 5825] <... close resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 7102] <... memfd_create resumed>) = 3 [pid 7102] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7102] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 7102] munmap(0x7f957a000000, 138412032) = 0 [pid 7103] chdir("./244" [pid 7101] <... write resumed>) = 4 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7103] <... chdir resumed>) = 0 [pid 7101] close(3 [pid 7102] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7102] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 7104 attached [pid 7101] <... close resumed>) = 0 ./strace-static-x86_64: Process 7105 attached [pid 7104] set_robust_list(0x55557eba4660, 24 [pid 7103] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7101] symlink("/dev/binderfs", "./binderfs" [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7104 [pid 7104] <... set_robust_list resumed>) = 0 [pid 7103] <... prctl resumed>) = 0 [pid 7102] <... ioctl resumed>) = 0 executing program [pid 7105] set_robust_list(0x55557eba4660, 24 [pid 7104] chdir("./250" [pid 7103] setpgid(0, 0 [pid 7101] <... symlink resumed>) = 0 [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7105 [pid 7104] <... chdir resumed>) = 0 [pid 7103] <... setpgid resumed>) = 0 [pid 7101] write(1, "executing program\n", 18 [pid 7103] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7101] <... write resumed>) = 18 [pid 7103] <... openat resumed>) = 3 [pid 7102] close(3) = 0 [pid 7102] close(4) = 0 [pid 7102] mkdir("./file0", 0777 [pid 7101] memfd_create("syzkaller", 0 [pid 7103] write(3, "1000", 4) = 4 [pid 7102] <... mkdir resumed>) = 0 [pid 7103] close(3 [pid 7101] <... memfd_create resumed>) = 3 [pid 7105] <... set_robust_list resumed>) = 0 [pid 7104] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7103] <... close resumed>) = 0 [pid 7102] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7101] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7105] chdir("./249" [pid 7104] <... prctl resumed>) = 0 [pid 7103] symlink("/dev/binderfs", "./binderfs" [pid 7101] <... mmap resumed>) = 0x7f957a000000 [pid 7103] <... symlink resumed>) = 0 [pid 7104] setpgid(0, 0 [pid 7101] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536executing program [pid 7102] <... mount resumed>) = 0 [pid 7105] <... chdir resumed>) = 0 [pid 7104] <... setpgid resumed>) = 0 [pid 7103] write(1, "executing program\n", 18 [pid 7101] <... write resumed>) = 65536 [pid 7103] <... write resumed>) = 18 [pid 7104] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7103] memfd_create("syzkaller", 0 [pid 7101] munmap(0x7f957a000000, 138412032 [pid 7105] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7103] <... memfd_create resumed>) = 3 [pid 7102] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7101] <... munmap resumed>) = 0 [pid 7105] <... prctl resumed>) = 0 [pid 7103] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7105] setpgid(0, 0 [pid 7103] <... mmap resumed>) = 0x7f957a000000 [pid 7102] <... openat resumed>) = 3 [pid 7102] chdir("./file0") = 0 [pid 7102] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7105] <... setpgid resumed>) = 0 [pid 7104] <... openat resumed>) = 3 [pid 7103] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7102] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7102] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7105] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7104] write(3, "1000", 4 [pid 7103] <... write resumed>) = 65536 [pid 7101] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7104] <... write resumed>) = 4 [pid 7105] <... openat resumed>) = 3 [pid 7104] close(3) = 0 [pid 7101] <... openat resumed>) = 4 [pid 7103] munmap(0x7f957a000000, 138412032 [ 211.319645][ T7102] loop0: detected capacity change from 0 to 128 [ 211.355859][ T7102] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [pid 7105] write(3, "1000", 4) = 4 [pid 7104] symlink("/dev/binderfs", "./binderfs" [pid 7103] <... munmap resumed>) = 0 [pid 7102] <... renameat2 resumed>) = 0 [pid 7101] ioctl(4, LOOP_SET_FD, 3 [pid 7102] sync( [pid 7105] close(3 [pid 7104] <... symlink resumed>) = 0 [pid 7103] openat(AT_FDCWD, "/dev/loop4", O_RDWRexecuting program executing program [pid 7105] <... close resumed>) = 0 [pid 7104] write(1, "executing program\n", 18 [pid 7103] <... openat resumed>) = 4 [pid 7105] symlink("/dev/binderfs", "./binderfs" [pid 7104] <... write resumed>) = 18 [pid 7103] ioctl(4, LOOP_SET_FD, 3 [pid 7105] <... symlink resumed>) = 0 [pid 7104] memfd_create("syzkaller", 0 [pid 7102] <... sync resumed>) = 0 [pid 7104] <... memfd_create resumed>) = 3 [pid 7102] exit_group(0 [pid 7105] write(1, "executing program\n", 18 [pid 7102] <... exit_group resumed>) = ? [pid 7105] <... write resumed>) = 18 [pid 7104] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7105] memfd_create("syzkaller", 0 [pid 7104] <... mmap resumed>) = 0x7f957a000000 [pid 7102] +++ exited with 0 +++ [pid 7105] <... memfd_create resumed>) = 3 [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7102, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 7105] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7104] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7105] <... mmap resumed>) = 0x7f957a000000 [pid 7104] <... write resumed>) = 65536 [pid 5823] <... restart_syscall resumed>) = 0 [pid 5823] umount2("./253", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7105] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7104] munmap(0x7f957a000000, 138412032 [pid 7101] <... ioctl resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./253", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7105] <... write resumed>) = 65536 [pid 7104] <... munmap resumed>) = 0 [pid 7101] close(3 [pid 5823] <... openat resumed>) = 3 [pid 7105] munmap(0x7f957a000000, 138412032 [pid 7104] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7101] <... close resumed>) = 0 [pid 5823] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7105] <... munmap resumed>) = 0 [pid 7104] <... openat resumed>) = 4 [pid 5823] getdents64(3, [pid 7101] close(4 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 7101] <... close resumed>) = 0 [ 211.399674][ T7101] loop3: detected capacity change from 0 to 128 [ 211.411109][ T7103] loop4: detected capacity change from 0 to 128 [pid 5823] umount2("./253/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7105] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7104] ioctl(4, LOOP_SET_FD, 3 [pid 7103] <... ioctl resumed>) = 0 [pid 7101] mkdir("./file0", 0777 [pid 7105] <... openat resumed>) = 4 [pid 7103] close(3 [pid 7101] <... mkdir resumed>) = 0 [pid 5823] <... umount2 resumed>) = 0 [pid 7105] ioctl(4, LOOP_SET_FD, 3 [pid 7103] <... close resumed>) = 0 [pid 7103] close(4 [pid 5823] umount2("./253/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7103] <... close resumed>) = 0 [pid 7103] mkdir("./file0", 0777 [pid 7101] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./253/file0", [pid 7103] <... mkdir resumed>) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] umount2("./253/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./253/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5823] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(4, [pid 7103] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] close(4) = 0 [pid 5823] rmdir("./253/file0") = 0 [pid 7104] <... ioctl resumed>) = 0 [pid 5823] umount2("./253/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./253/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./253/binderfs" [pid 7104] close(3 [pid 5823] <... unlink resumed>) = 0 [pid 7104] <... close resumed>) = 0 [ 211.442827][ T7104] loop1: detected capacity change from 0 to 128 [ 211.460911][ T7105] loop2: detected capacity change from 0 to 128 [ 211.475119][ T7101] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [pid 7105] <... ioctl resumed>) = 0 [pid 7104] close(4 [pid 5823] getdents64(3, [pid 7104] <... close resumed>) = 0 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] close(3) = 0 [pid 5823] rmdir("./253") = 0 [pid 5823] mkdir("./254", 0777 [pid 7105] close(3 [pid 7104] mkdir("./file0", 0777 [pid 5823] <... mkdir resumed>) = 0 [pid 7104] <... mkdir resumed>) = 0 [pid 7105] <... close resumed>) = 0 [pid 7105] close(4 [pid 7104] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7105] <... close resumed>) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7105] mkdir("./file0", 0777) = 0 [pid 7105] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5823] <... openat resumed>) = 3 [pid 5823] ioctl(3, LOOP_CLR_FD) = 0 [ 211.491676][ T7103] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 211.518482][ T7104] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [pid 5823] close(3) = 0 [pid 7101] <... mount resumed>) = 0 [pid 7101] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7101] chdir("./file0" [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7101] <... chdir resumed>) = 0 [pid 7101] openat(AT_FDCWD, "/dev/loop3", O_RDWR./strace-static-x86_64: Process 7106 attached ) = -1 EBUSY (Device or resource busy) [pid 7104] <... mount resumed>) = 0 [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7106 [pid 7104] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7103] <... mount resumed>) = 0 [pid 7101] openat(AT_FDCWD, ".", O_RDONLY [pid 7104] <... openat resumed>) = 3 [pid 7106] set_robust_list(0x55557eba4660, 24 [pid 7105] <... mount resumed>) = 0 [pid 7104] chdir("./file0" [pid 7106] <... set_robust_list resumed>) = 0 [pid 7106] chdir("./254" [pid 7104] <... chdir resumed>) = 0 [pid 7101] <... openat resumed>) = 4 [pid 7105] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7104] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7103] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7106] <... chdir resumed>) = 0 [pid 7105] <... openat resumed>) = 3 [pid 7106] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7104] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7105] chdir("./file0" [pid 7106] <... prctl resumed>) = 0 [pid 7103] <... openat resumed>) = 3 [pid 7105] <... chdir resumed>) = 0 [pid 7104] openat(AT_FDCWD, ".", O_RDONLY [pid 7103] chdir("./file0" [pid 7105] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7106] setpgid(0, 0 [pid 7104] <... openat resumed>) = 4 [pid 7106] <... setpgid resumed>) = 0 [pid 7105] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7104] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7105] openat(AT_FDCWD, ".", O_RDONLY [pid 7103] <... chdir resumed>) = 0 [pid 7106] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7105] <... openat resumed>) = 4 [pid 7103] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7106] write(3, "1000", 4 [pid 7105] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7104] <... renameat2 resumed>) = 0 [pid 7103] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7101] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7106] <... write resumed>) = 4 [pid 7103] openat(AT_FDCWD, ".", O_RDONLY [pid 7106] close(3) = 0 [pid 7103] <... openat resumed>) = 4 [pid 7106] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 7104] sync( [pid 7103] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7106] write(1, "executing program\n", 18) = 18 [ 211.539964][ T7105] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [pid 7106] memfd_create("syzkaller", 0) = 3 [pid 7105] <... renameat2 resumed>) = 0 [pid 7103] <... renameat2 resumed>) = 0 [pid 7106] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7106] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7105] sync( [pid 7103] sync( [pid 7101] <... renameat2 resumed>) = 0 [pid 7101] sync( [pid 7106] <... write resumed>) = 65536 [pid 7106] munmap(0x7f957a000000, 138412032) = 0 [pid 7106] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7106] ioctl(4, LOOP_SET_FD, 3 [pid 7105] <... sync resumed>) = 0 [pid 7104] <... sync resumed>) = 0 [pid 7103] <... sync resumed>) = 0 [pid 7101] <... sync resumed>) = 0 [pid 7105] exit_group(0 [pid 7103] exit_group(0) = ? [pid 7103] +++ exited with 0 +++ [pid 7105] <... exit_group resumed>) = ? [pid 7104] exit_group(0 [pid 7101] exit_group(0 [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7103, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7105] +++ exited with 0 +++ [pid 7104] <... exit_group resumed>) = ? [pid 7101] <... exit_group resumed>) = ? [pid 7101] +++ exited with 0 +++ [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7105, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5825] restart_syscall(<... resuming interrupted clone ...> [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7101, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5825] <... restart_syscall resumed>) = 0 [pid 7104] +++ exited with 0 +++ [pid 5826] restart_syscall(<... resuming interrupted clone ...> [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7104, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5825] umount2("./249", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 7106] <... ioctl resumed>) = 0 [pid 5825] openat(AT_FDCWD, "./249", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7106] close(3) = 0 [pid 5826] <... restart_syscall resumed>) = 0 [pid 5825] <... openat resumed>) = 3 [pid 5824] <... restart_syscall resumed>) = 0 [pid 5825] newfstatat(3, "", [pid 5826] umount2("./254", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] umount2("./244", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./250", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] getdents64(3, [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 211.629800][ T7106] loop0: detected capacity change from 0 to 128 [pid 7106] close(4 [pid 5827] openat(AT_FDCWD, "./244", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] openat(AT_FDCWD, "./254", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] openat(AT_FDCWD, "./250", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7106] <... close resumed>) = 0 [pid 5827] <... openat resumed>) = 3 [pid 7106] mkdir("./file0", 0777 [pid 5827] newfstatat(3, "", [pid 5826] <... openat resumed>) = 3 [pid 5825] umount2("./249/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... openat resumed>) = 3 [pid 5826] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7106] <... mkdir resumed>) = 0 [pid 5826] getdents64(3, [pid 5824] newfstatat(3, "", [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5827] getdents64(3, [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] umount2("./254/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] getdents64(3, [pid 5827] umount2("./244/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] umount2("./250/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7106] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5827] <... umount2 resumed>) = 0 [pid 5824] <... umount2 resumed>) = 0 [pid 5827] umount2("./244/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] newfstatat(AT_FDCWD, "./244/file0", [pid 5824] umount2("./250/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./250/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] umount2("./250/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./250/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5824] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5826] <... umount2 resumed>) = 0 [pid 5824] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] close(4 [pid 5826] umount2("./254/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... close resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] rmdir("./250/file0" [pid 5826] newfstatat(AT_FDCWD, "./254/file0", [pid 5824] <... rmdir resumed>) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] umount2("./250/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] umount2("./254/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./250/binderfs", [pid 5826] openat(AT_FDCWD, "./254/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] <... openat resumed>) = 4 [pid 5824] unlink("./250/binderfs" [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] umount2("./244/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] newfstatat(4, "", [pid 5825] <... umount2 resumed>) = 0 [pid 5824] <... unlink resumed>) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] umount2("./249/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] getdents64(3, [pid 5826] getdents64(4, [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5826] getdents64(4, [pid 5824] close(3 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] <... close resumed>) = 0 [pid 5826] close(4 [pid 5824] rmdir("./250" [pid 5827] openat(AT_FDCWD, "./244/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./249/file0", [pid 5827] <... openat resumed>) = 4 [pid 5826] <... close resumed>) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 5827] newfstatat(4, "", [pid 5825] umount2("./249/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] rmdir("./254/file0" [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] getdents64(4, [pid 5826] <... rmdir resumed>) = 0 [pid 5825] openat(AT_FDCWD, "./249/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] mkdir("./251", 0777 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5826] umount2("./254/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... openat resumed>) = 4 [pid 5824] <... mkdir resumed>) = 0 [pid 5827] getdents64(4, [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5826] newfstatat(AT_FDCWD, "./254/binderfs", [pid 5825] newfstatat(4, "", [pid 5827] close(4 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] <... close resumed>) = 0 [pid 5826] unlink("./254/binderfs" [pid 5825] getdents64(4, [pid 5827] rmdir("./244/file0" [pid 5826] <... unlink resumed>) = 0 [pid 5826] getdents64(3, [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5827] <... rmdir resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5825] getdents64(4, [pid 5824] <... openat resumed>) = 3 [pid 7106] <... mount resumed>) = 0 [pid 5827] umount2("./244/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] close(3 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [ 211.709084][ T7106] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [pid 7106] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... close resumed>) = 0 [pid 5825] close(4 [pid 5824] ioctl(3, LOOP_CLR_FD [pid 7106] <... openat resumed>) = 3 [pid 5827] newfstatat(AT_FDCWD, "./244/binderfs", [pid 5825] <... close resumed>) = 0 [pid 7106] chdir("./file0" [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] rmdir("./254" [pid 5825] rmdir("./249/file0" [pid 5824] <... ioctl resumed>) = 0 [pid 7106] <... chdir resumed>) = 0 [pid 5827] unlink("./244/binderfs" [pid 5825] <... rmdir resumed>) = 0 [pid 7106] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5827] <... unlink resumed>) = 0 [pid 5826] <... rmdir resumed>) = 0 [pid 5825] umount2("./249/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] close(3 [pid 7106] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5827] getdents64(3, [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7106] openat(AT_FDCWD, ".", O_RDONLY [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5825] newfstatat(AT_FDCWD, "./249/binderfs", [pid 7106] <... openat resumed>) = 4 [pid 5827] close(3 [pid 5824] <... close resumed>) = 0 [pid 5827] <... close resumed>) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] rmdir("./244" [pid 5825] unlink("./249/binderfs" [pid 7106] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5827] <... rmdir resumed>) = 0 [pid 5826] mkdir("./255", 0777 [pid 5825] <... unlink resumed>) = 0 [pid 5827] mkdir("./245", 0777 [pid 5826] <... mkdir resumed>) = 0 [pid 5827] <... mkdir resumed>) = 0 [pid 5825] getdents64(3, [pid 7106] <... renameat2 resumed>) = 0 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5825] close(3) = 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5825] rmdir("./249"./strace-static-x86_64: Process 7107 attached [pid 5827] <... openat resumed>) = 3 [pid 5826] <... openat resumed>) = 3 [pid 7106] sync( [pid 7107] set_robust_list(0x55557eba4660, 24 [pid 5825] <... rmdir resumed>) = 0 [pid 5827] ioctl(3, LOOP_CLR_FD [pid 7107] <... set_robust_list resumed>) = 0 [pid 5826] ioctl(3, LOOP_CLR_FD [pid 5827] <... ioctl resumed>) = 0 [pid 5826] <... ioctl resumed>) = 0 [pid 5827] close(3 [pid 5826] close(3 [pid 7107] chdir("./251" [pid 5827] <... close resumed>) = 0 [pid 7107] <... chdir resumed>) = 0 [pid 5826] <... close resumed>) = 0 [pid 5825] mkdir("./250", 0777 [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7107 [pid 7107] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5825] <... mkdir resumed>) = 0 [pid 7107] <... prctl resumed>) = 0 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7107] setpgid(0, 0 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5825] <... openat resumed>) = 3 [pid 7107] <... setpgid resumed>) = 0 [pid 7107] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5825] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 7108 attached ) = 0 [pid 5825] close(3) = 0 [pid 7108] set_robust_list(0x55557eba4660, 24 [pid 7107] <... openat resumed>) = 3 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7108 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7109 attached [pid 7108] <... set_robust_list resumed>) = 0 [pid 7107] write(3, "1000", 4 [pid 7109] set_robust_list(0x55557eba4660, 24) = 0 [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7109 [pid 7109] chdir("./245" [pid 7107] <... write resumed>) = 4 [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7110 ./strace-static-x86_64: Process 7110 attached [pid 7108] chdir("./255" [pid 7107] close(3 [pid 7108] <... chdir resumed>) = 0 [pid 7107] <... close resumed>) = 0 [pid 7109] <... chdir resumed>) = 0 [pid 7109] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7108] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7107] symlink("/dev/binderfs", "./binderfs" [pid 7109] <... prctl resumed>) = 0 [pid 7108] <... prctl resumed>) = 0 [pid 7107] <... symlink resumed>) = 0 [pid 7110] set_robust_list(0x55557eba4660, 24 [pid 7109] setpgid(0, 0 [pid 7110] <... set_robust_list resumed>) = 0 [pid 7108] setpgid(0, 0 [pid 7107] write(1, "executing program\n", 18executing program [pid 7109] <... setpgid resumed>) = 0 [pid 7110] chdir("./250" [pid 7109] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7108] <... setpgid resumed>) = 0 [pid 7107] <... write resumed>) = 18 [pid 7110] <... chdir resumed>) = 0 [pid 7109] <... openat resumed>) = 3 [pid 7110] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7109] write(3, "1000", 4 [pid 7108] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7107] memfd_create("syzkaller", 0 [pid 7110] <... prctl resumed>) = 0 [pid 7109] <... write resumed>) = 4 [pid 7110] setpgid(0, 0 [pid 7109] close(3) = 0 [pid 7110] <... setpgid resumed>) = 0 [pid 7108] <... openat resumed>) = 3 [pid 7110] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7109] symlink("/dev/binderfs", "./binderfs" [pid 7108] write(3, "1000", 4 [pid 7107] <... memfd_create resumed>) = 3 [pid 7110] <... openat resumed>) = 3 [pid 7108] <... write resumed>) = 4 [pid 7107] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7110] write(3, "1000", 4 [pid 7109] <... symlink resumed>) = 0 [pid 7108] close(3 [pid 7107] <... mmap resumed>) = 0x7f957a000000 [pid 7106] <... sync resumed>) = 0 [pid 7110] <... write resumed>) = 4 [pid 7108] <... close resumed>) = 0 executing program [pid 7109] write(1, "executing program\n", 18) = 18 [pid 7110] close(3 [pid 7109] memfd_create("syzkaller", 0 [pid 7107] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7108] symlink("/dev/binderfs", "./binderfs" [pid 7106] exit_group(0 [pid 7110] <... close resumed>) = 0 [pid 7109] <... memfd_create resumed>) = 3 [pid 7108] <... symlink resumed>) = 0 [pid 7110] symlink("/dev/binderfs", "./binderfs" [pid 7106] <... exit_group resumed>) = ? [pid 7110] <... symlink resumed>) = 0 [pid 7109] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7109] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7110] write(1, "executing program\n", 18 [pid 7108] write(1, "executing program\n", 18executing program ) = 18 [pid 7109] <... write resumed>) = 65536 [pid 7108] memfd_create("syzkaller", 0executing program [pid 7110] <... write resumed>) = 18 [pid 7108] <... memfd_create resumed>) = 3 [pid 7109] munmap(0x7f957a000000, 138412032) = 0 [pid 7106] +++ exited with 0 +++ [pid 7108] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7106, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7109] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 7109] <... openat resumed>) = 4 [pid 7107] <... write resumed>) = 65536 [pid 7109] ioctl(4, LOOP_SET_FD, 3 [pid 7110] memfd_create("syzkaller", 0 [pid 7108] <... mmap resumed>) = 0x7f957a000000 [pid 7107] munmap(0x7f957a000000, 138412032 [pid 5823] <... restart_syscall resumed>) = 0 [pid 7110] <... memfd_create resumed>) = 3 [pid 7108] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7107] <... munmap resumed>) = 0 [pid 7110] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7108] <... write resumed>) = 65536 [pid 7107] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5823] umount2("./254", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7107] <... openat resumed>) = 4 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7107] ioctl(4, LOOP_SET_FD, 3 [pid 7110] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5823] openat(AT_FDCWD, "./254", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7109] <... ioctl resumed>) = 0 [pid 7109] close(3 [pid 7110] <... write resumed>) = 65536 [pid 7108] munmap(0x7f957a000000, 138412032 [pid 5823] <... openat resumed>) = 3 [pid 7110] munmap(0x7f957a000000, 138412032 [pid 7108] <... munmap resumed>) = 0 [pid 5823] newfstatat(3, "", [pid 7110] <... munmap resumed>) = 0 [pid 7108] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7107] <... ioctl resumed>) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7108] <... openat resumed>) = 4 [pid 7110] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7108] ioctl(4, LOOP_SET_FD, 3 [pid 7107] close(3 [pid 5823] getdents64(3, [pid 7109] <... close resumed>) = 0 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 7109] close(4) = 0 [pid 7109] mkdir("./file0", 0777) = 0 [pid 7109] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7110] <... openat resumed>) = 4 [pid 7107] <... close resumed>) = 0 [pid 5823] umount2("./254/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7110] ioctl(4, LOOP_SET_FD, 3 [pid 7107] close(4) = 0 [ 211.903349][ T7109] loop4: detected capacity change from 0 to 128 [ 211.912510][ T7107] loop1: detected capacity change from 0 to 128 [ 211.936870][ T7108] loop3: detected capacity change from 0 to 128 [pid 7110] <... ioctl resumed>) = 0 [pid 7108] <... ioctl resumed>) = 0 [pid 7107] mkdir("./file0", 0777 [pid 7110] close(3 [pid 7108] close(3) = 0 [pid 7110] <... close resumed>) = 0 [pid 7107] <... mkdir resumed>) = 0 [pid 7110] close(4 [pid 7108] close(4 [pid 7107] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7110] <... close resumed>) = 0 [pid 7108] <... close resumed>) = 0 [pid 7108] mkdir("./file0", 0777) = 0 [pid 7110] mkdir("./file0", 0777 [pid 7108] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5823] <... umount2 resumed>) = 0 [ 211.949650][ T7110] loop2: detected capacity change from 0 to 128 [ 211.956760][ T7109] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 211.990498][ T7107] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [pid 7110] <... mkdir resumed>) = 0 [pid 5823] umount2("./254/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7110] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5823] newfstatat(AT_FDCWD, "./254/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] umount2("./254/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7109] <... mount resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7109] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5823] openat(AT_FDCWD, "./254/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7109] <... openat resumed>) = 3 [pid 5823] <... openat resumed>) = 4 [pid 5823] newfstatat(4, "", [pid 7109] chdir("./file0") = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7109] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5823] getdents64(4, [pid 7109] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 7109] openat(AT_FDCWD, ".", O_RDONLY [pid 5823] getdents64(4, [pid 7109] <... openat resumed>) = 4 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 7109] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5823] close(4) = 0 [pid 5823] rmdir("./254/file0") = 0 [pid 7109] <... renameat2 resumed>) = 0 [pid 5823] umount2("./254/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [ 212.006611][ T7108] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 212.045444][ T7110] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [pid 7109] sync( [pid 7107] <... mount resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7108] <... mount resumed>) = 0 [pid 5823] newfstatat(AT_FDCWD, "./254/binderfs", [pid 7107] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7110] <... mount resumed>) = 0 [pid 7108] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7107] chdir("./file0" [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7110] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7108] <... openat resumed>) = 3 [pid 7107] <... chdir resumed>) = 0 [pid 7110] <... openat resumed>) = 3 [pid 7108] chdir("./file0" [pid 7107] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5823] unlink("./254/binderfs" [pid 7110] chdir("./file0") = 0 [pid 7110] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7108] <... chdir resumed>) = 0 [pid 7107] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5823] <... unlink resumed>) = 0 [pid 7110] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7108] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7107] openat(AT_FDCWD, ".", O_RDONLY [pid 5823] getdents64(3, [pid 7110] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7107] <... openat resumed>) = 4 [pid 7108] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7110] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7107] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7108] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7107] <... renameat2 resumed>) = 0 [pid 7108] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7107] sync( [pid 7108] <... renameat2 resumed>) = 0 [pid 7110] <... renameat2 resumed>) = 0 [pid 7108] sync( [pid 7110] sync( [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] close(3) = 0 [pid 5823] rmdir("./254") = 0 [pid 5823] mkdir("./255", 0777 [pid 7109] <... sync resumed>) = 0 [pid 7109] exit_group(0) = ? [pid 7109] +++ exited with 0 +++ [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7109, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5827] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5827] umount2("./245", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] openat(AT_FDCWD, "./245", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5827] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5827] umount2("./245/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... mkdir resumed>) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5823] ioctl(3, LOOP_CLR_FD) = 0 [pid 5823] close(3) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7110] <... sync resumed>) = 0 [pid 7108] <... sync resumed>) = 0 [pid 7107] <... sync resumed>) = 0 ./strace-static-x86_64: Process 7111 attached [pid 7110] exit_group(0 [pid 7108] exit_group(0 [pid 7107] exit_group(0 [pid 7111] set_robust_list(0x55557eba4660, 24 [pid 7110] <... exit_group resumed>) = ? [pid 7108] <... exit_group resumed>) = ? [pid 7107] <... exit_group resumed>) = ? [pid 5827] <... umount2 resumed>) = 0 [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7111 [pid 5827] umount2("./245/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] newfstatat(AT_FDCWD, "./245/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7110] +++ exited with 0 +++ [pid 5827] umount2("./245/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] openat(AT_FDCWD, "./245/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7110, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7107] +++ exited with 0 +++ [pid 5827] <... openat resumed>) = 4 [pid 5825] restart_syscall(<... resuming interrupted clone ...> [pid 5827] newfstatat(4, "", [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7107, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 5827] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5827] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 7108] +++ exited with 0 +++ [pid 5827] close(4 [pid 7111] <... set_robust_list resumed>) = 0 [pid 5827] <... close resumed>) = 0 [pid 5827] rmdir("./245/file0" [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7108, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5825] <... restart_syscall resumed>) = 0 [pid 5824] <... restart_syscall resumed>) = 0 [pid 7111] chdir("./255" [pid 5827] <... rmdir resumed>) = 0 [pid 5826] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5825] umount2("./250", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./251", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7111] <... chdir resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] umount2("./255", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] openat(AT_FDCWD, "./250", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... openat resumed>) = 3 [pid 5827] umount2("./245/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] openat(AT_FDCWD, "./255", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] newfstatat(3, "", [pid 5824] openat(AT_FDCWD, "./251", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7111] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... openat resumed>) = 3 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] <... openat resumed>) = 3 [pid 5827] newfstatat(AT_FDCWD, "./245/binderfs", [pid 5826] newfstatat(3, "", [pid 5825] getdents64(3, [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] newfstatat(3, "", [pid 7111] <... prctl resumed>) = 0 [pid 5827] unlink("./245/binderfs" [pid 5826] getdents64(3, [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7111] setpgid(0, 0 [pid 5827] <... unlink resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5827] getdents64(3, [pid 5826] umount2("./255/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./250/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] getdents64(3, [pid 7111] <... setpgid resumed>) = 0 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5827] close(3 [pid 5824] umount2("./251/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7111] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5827] <... close resumed>) = 0 [pid 7111] write(3, "1000", 4) = 4 [pid 5827] rmdir("./245" [pid 7111] close(3) = 0 [pid 5827] <... rmdir resumed>) = 0 [pid 7111] symlink("/dev/binderfs", "./binderfs" [pid 5827] mkdir("./246", 0777 [pid 7111] <... symlink resumed>) = 0 [pid 5827] <... mkdir resumed>) = 0 executing program [pid 7111] write(1, "executing program\n", 18) = 18 [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 7111] memfd_create("syzkaller", 0 [pid 5827] ioctl(3, LOOP_CLR_FD) = 0 [pid 5827] close(3 [pid 7111] <... memfd_create resumed>) = 3 [pid 5827] <... close resumed>) = 0 [pid 7111] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5825] <... umount2 resumed>) = 0 [pid 7111] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5825] umount2("./250/file0", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7112 attached [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7112 [pid 7112] set_robust_list(0x55557eba4660, 24) = 0 [pid 7112] chdir("./246") = 0 [pid 7111] <... write resumed>) = 65536 [pid 5826] <... umount2 resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... umount2 resumed>) = 0 [pid 7112] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7111] munmap(0x7f957a000000, 138412032 [pid 5826] umount2("./255/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] newfstatat(AT_FDCWD, "./250/file0", [pid 7112] <... prctl resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7112] setpgid(0, 0 [pid 7111] <... munmap resumed>) = 0 [pid 5826] newfstatat(AT_FDCWD, "./255/file0", [pid 5825] umount2("./250/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7112] <... setpgid resumed>) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7112] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7111] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5826] umount2("./255/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] openat(AT_FDCWD, "./250/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] umount2("./251/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7112] <... openat resumed>) = 3 [pid 7111] <... openat resumed>) = 4 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... openat resumed>) = 4 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./251/file0", [pid 5825] newfstatat(4, "", [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] openat(AT_FDCWD, "./255/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7112] write(3, "1000", 4 [pid 5826] <... openat resumed>) = 4 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7112] <... write resumed>) = 4 [pid 5824] umount2("./251/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7112] close(3 [pid 7111] ioctl(4, LOOP_SET_FD, 3 [pid 5825] getdents64(4, [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7112] <... close resumed>) = 0 [pid 5824] openat(AT_FDCWD, "./251/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7112] symlink("/dev/binderfs", "./binderfs" [pid 5824] <... openat resumed>) = 4 executing program [pid 7112] <... symlink resumed>) = 0 [pid 5824] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7112] write(1, "executing program\n", 18 [pid 5824] getdents64(4, [pid 7112] <... write resumed>) = 18 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 7112] memfd_create("syzkaller", 0 [pid 5824] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] close(4 [pid 7112] <... memfd_create resumed>) = 3 [pid 5824] <... close resumed>) = 0 [pid 5824] rmdir("./251/file0") = 0 [pid 7112] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 5824] umount2("./251/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7112] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./251/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./251/binderfs") = 0 [pid 5824] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7112] <... write resumed>) = 65536 [pid 5826] newfstatat(4, "", [pid 5825] getdents64(4, [pid 5824] close(3) = 0 [pid 5824] rmdir("./251" [pid 7112] munmap(0x7f957a000000, 138412032 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 5826] getdents64(4, [pid 5825] close(4 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] <... close resumed>) = 0 [pid 7112] <... munmap resumed>) = 0 [pid 5826] getdents64(4, [pid 5825] rmdir("./250/file0" [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 7112] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5824] mkdir("./252", 0777 [pid 7112] <... openat resumed>) = 4 [pid 5825] <... rmdir resumed>) = 0 [pid 5824] <... mkdir resumed>) = 0 [pid 7112] ioctl(4, LOOP_SET_FD, 3 [pid 5826] close(4 [pid 5825] umount2("./250/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7111] <... ioctl resumed>) = 0 [pid 5826] <... close resumed>) = 0 [pid 5825] newfstatat(AT_FDCWD, "./250/binderfs", [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7111] close(3 [pid 5826] rmdir("./255/file0" [pid 7111] <... close resumed>) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... openat resumed>) = 3 [pid 7111] close(4 [pid 5826] <... rmdir resumed>) = 0 [pid 5825] unlink("./250/binderfs" [pid 5824] ioctl(3, LOOP_CLR_FD [pid 5826] umount2("./255/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7111] <... close resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... unlink resumed>) = 0 [pid 5824] <... ioctl resumed>) = 0 [pid 7111] mkdir("./file0", 0777 [pid 5826] newfstatat(AT_FDCWD, "./255/binderfs", [pid 5825] getdents64(3, [pid 7111] <... mkdir resumed>) = 0 [pid 5824] close(3 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7111] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7112] <... ioctl resumed>) = 0 [pid 5825] close(3 [pid 5824] <... close resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 7112] close(3 [pid 5826] unlink("./255/binderfs" [pid 5825] rmdir("./250" [pid 7112] <... close resumed>) = 0 [pid 5825] <... rmdir resumed>) = 0 [ 212.261424][ T7111] loop0: detected capacity change from 0 to 128 [ 212.285514][ T7112] loop4: detected capacity change from 0 to 128 [pid 7112] close(4 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557eba4650) = 7113 ./strace-static-x86_64: Process 7113 attached [pid 7113] set_robust_list(0x55557eba4660, 24) = 0 [pid 7113] chdir("./252" [pid 7112] <... close resumed>) = 0 [pid 7113] <... chdir resumed>) = 0 [pid 7112] mkdir("./file0", 0777 [pid 7113] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7112] <... mkdir resumed>) = 0 [pid 5826] <... unlink resumed>) = 0 [pid 5825] mkdir("./251", 0777 [pid 7113] <... prctl resumed>) = 0 [pid 7113] setpgid(0, 0) = 0 [pid 7113] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7112] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5826] getdents64(3, [pid 5825] <... mkdir resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5826] close(3 [pid 5825] <... openat resumed>) = 3 [pid 7113] write(3, "1000", 4) = 4 [pid 7113] close(3) = 0 [pid 7113] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 7113] write(1, "executing program\n", 18) = 18 [pid 7113] memfd_create("syzkaller", 0) = 3 [pid 7113] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7113] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5826] <... close resumed>) = 0 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 5826] rmdir("./255" [pid 5825] <... ioctl resumed>) = 0 [pid 7113] <... write resumed>) = 65536 [pid 5826] <... rmdir resumed>) = 0 [pid 5825] close(3 [pid 7113] munmap(0x7f957a000000, 138412032) = 0 [pid 5825] <... close resumed>) = 0 [pid 7113] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7111] <... mount resumed>) = 0 [pid 5826] mkdir("./256", 0777 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7113] <... openat resumed>) = 4 [ 212.318928][ T7111] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 212.340858][ T7112] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [pid 7113] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 7114 attached [pid 7111] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5826] <... mkdir resumed>) = 0 [pid 7114] set_robust_list(0x55557eba4660, 24 [pid 7111] <... openat resumed>) = 3 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7112] <... mount resumed>) = 0 [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7114 [pid 7114] <... set_robust_list resumed>) = 0 [pid 7111] chdir("./file0" [pid 7114] chdir("./251" [pid 7112] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7111] <... chdir resumed>) = 0 [pid 5826] <... openat resumed>) = 3 [pid 7114] <... chdir resumed>) = 0 [pid 7114] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7112] <... openat resumed>) = 3 [pid 7111] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5826] ioctl(3, LOOP_CLR_FD [pid 7114] <... prctl resumed>) = 0 [pid 7112] chdir("./file0" [pid 7114] setpgid(0, 0 [pid 7112] <... chdir resumed>) = 0 [pid 7111] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5826] <... ioctl resumed>) = 0 [pid 7114] <... setpgid resumed>) = 0 [pid 7112] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7111] openat(AT_FDCWD, ".", O_RDONLY [pid 5826] close(3 [pid 7113] <... ioctl resumed>) = 0 [pid 7114] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7112] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7111] <... openat resumed>) = 4 [pid 5826] <... close resumed>) = 0 [pid 7112] openat(AT_FDCWD, ".", O_RDONLY [pid 7114] <... openat resumed>) = 3 [pid 7111] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7112] <... openat resumed>) = 4 [pid 7114] write(3, "1000", 4 [pid 7113] close(3 [pid 7112] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7111] <... renameat2 resumed>) = 0 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7114] <... write resumed>) = 4 [pid 7114] close(3 [pid 7113] <... close resumed>) = 0 [pid 7114] <... close resumed>) = 0 [pid 7113] close(4 [pid 7114] symlink("/dev/binderfs", "./binderfs" [pid 7113] <... close resumed>) = 0 [pid 7113] mkdir("./file0", 0777./strace-static-x86_64: Process 7115 attached [pid 7114] <... symlink resumed>) = 0 [pid 7113] <... mkdir resumed>) = 0 [pid 7111] sync( [pid 7114] write(1, "executing program\n", 18executing program [pid 7115] set_robust_list(0x55557eba4660, 24 [pid 7114] <... write resumed>) = 18 [pid 7114] memfd_create("syzkaller", 0 [pid 7115] <... set_robust_list resumed>) = 0 [pid 7114] <... memfd_create resumed>) = 3 [pid 7115] chdir("./256" [pid 7113] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7115] <... chdir resumed>) = 0 [pid 7114] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7115] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7114] <... mmap resumed>) = 0x7f957a000000 [pid 7112] <... renameat2 resumed>) = 0 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7115 [pid 7114] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7115] <... prctl resumed>) = 0 [pid 7115] setpgid(0, 0 [pid 7112] sync( [pid 7115] <... setpgid resumed>) = 0 [pid 7114] <... write resumed>) = 65536 [pid 7115] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7114] munmap(0x7f957a000000, 138412032 [pid 7115] <... openat resumed>) = 3 [pid 7114] <... munmap resumed>) = 0 [pid 7115] write(3, "1000", 4 [pid 7114] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7115] <... write resumed>) = 4 [pid 7115] close(3 [pid 7114] <... openat resumed>) = 4 [pid 7115] <... close resumed>) = 0 [pid 7114] ioctl(4, LOOP_SET_FD, 3 [ 212.376730][ T7113] loop1: detected capacity change from 0 to 128 [pid 7115] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 7115] write(1, "executing program\n", 18) = 18 [pid 7114] <... ioctl resumed>) = 0 [pid 7115] memfd_create("syzkaller", 0 [pid 7114] close(3 [pid 7115] <... memfd_create resumed>) = 3 [pid 7114] <... close resumed>) = 0 [pid 7115] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7114] close(4 [pid 7115] <... mmap resumed>) = 0x7f957a000000 [pid 7114] <... close resumed>) = 0 [pid 7115] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7114] mkdir("./file0", 0777) = 0 [pid 7115] <... write resumed>) = 65536 [pid 7114] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7115] munmap(0x7f957a000000, 138412032) = 0 [pid 7115] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 212.442098][ T7114] loop2: detected capacity change from 0 to 128 [ 212.451534][ T7113] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [pid 7115] ioctl(4, LOOP_SET_FD, 3 [pid 7113] <... mount resumed>) = 0 [pid 7113] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7113] chdir("./file0") = 0 [pid 7113] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7113] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7115] <... ioctl resumed>) = 0 [pid 7113] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7115] close(3 [pid 7113] <... renameat2 resumed>) = 0 [pid 7115] <... close resumed>) = 0 [pid 7115] close(4 [pid 7113] sync( [pid 7115] <... close resumed>) = 0 [pid 7115] mkdir("./file0", 0777) = 0 [ 212.499642][ T7115] loop3: detected capacity change from 0 to 128 [ 212.508077][ T7114] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [pid 7115] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7114] <... mount resumed>) = 0 [pid 7114] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7114] chdir("./file0") = 0 [pid 7114] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7114] openat(AT_FDCWD, ".", O_RDONLY) = 4 [ 212.551616][ T7115] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [pid 7114] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = 0 [pid 7114] sync( [pid 7115] <... mount resumed>) = 0 [pid 7115] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7115] chdir("./file0") = 0 [pid 7115] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7115] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7115] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = 0 [pid 7115] sync() = 0 [pid 7114] <... sync resumed>) = 0 [pid 7113] <... sync resumed>) = 0 [pid 7112] <... sync resumed>) = 0 [pid 7111] <... sync resumed>) = 0 [pid 7115] exit_group(0 [pid 7113] exit_group(0 [pid 7112] exit_group(0 [pid 7111] exit_group(0 [pid 7115] <... exit_group resumed>) = ? [pid 7114] exit_group(0 [pid 7113] <... exit_group resumed>) = ? [pid 7112] <... exit_group resumed>) = ? [pid 7111] <... exit_group resumed>) = ? [pid 7115] +++ exited with 0 +++ [pid 7114] <... exit_group resumed>) = ? [pid 7113] +++ exited with 0 +++ [pid 7112] +++ exited with 0 +++ [pid 7111] +++ exited with 0 +++ [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7115, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7113, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7111, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7112, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5826] restart_syscall(<... resuming interrupted clone ...> [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 5827] restart_syscall(<... resuming interrupted clone ...> [pid 7114] +++ exited with 0 +++ [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7114, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5825] restart_syscall(<... resuming interrupted clone ...> [pid 5826] <... restart_syscall resumed>) = 0 [pid 5825] <... restart_syscall resumed>) = 0 [pid 5824] <... restart_syscall resumed>) = 0 [pid 5823] <... restart_syscall resumed>) = 0 [pid 5827] <... restart_syscall resumed>) = 0 [pid 5826] umount2("./256", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./251", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./252", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] umount2("./255", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] umount2("./246", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./256", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] openat(AT_FDCWD, "./251", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] openat(AT_FDCWD, "./246", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] <... openat resumed>) = 3 [pid 5825] <... openat resumed>) = 3 [pid 5824] openat(AT_FDCWD, "./252", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] openat(AT_FDCWD, "./255", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] <... openat resumed>) = 3 [pid 5826] newfstatat(3, "", [pid 5825] newfstatat(3, "", [pid 5824] <... openat resumed>) = 3 [pid 5823] <... openat resumed>) = 3 [pid 5827] newfstatat(3, "", [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] newfstatat(3, "", [pid 5823] newfstatat(3, "", [pid 5826] getdents64(3, [pid 5825] getdents64(3, [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] getdents64(3, [pid 5823] getdents64(3, [pid 5825] umount2("./251/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] umount2("./252/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] umount2("./255/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] getdents64(3, [pid 5826] umount2("./256/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5827] umount2("./246/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... umount2 resumed>) = 0 [pid 5825] umount2("./251/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./251/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... umount2 resumed>) = 0 [pid 5825] umount2("./251/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./251/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5826] <... umount2 resumed>) = 0 [pid 5825] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] umount2("./256/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... umount2 resumed>) = 0 [pid 5825] getdents64(4, [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5826] newfstatat(AT_FDCWD, "./256/file0", [pid 5825] getdents64(4, [pid 5823] umount2("./255/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] umount2("./256/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] close(4 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... close resumed>) = 0 [pid 5824] umount2("./252/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] newfstatat(AT_FDCWD, "./255/file0", [pid 5826] openat(AT_FDCWD, "./256/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] rmdir("./251/file0" [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] <... openat resumed>) = 4 [pid 5825] <... rmdir resumed>) = 0 [pid 5824] newfstatat(AT_FDCWD, "./252/file0", [pid 5823] umount2("./255/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] newfstatat(4, "", [pid 5825] umount2("./251/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./255/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] newfstatat(AT_FDCWD, "./251/binderfs", [pid 5824] umount2("./252/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... openat resumed>) = 4 [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] unlink("./251/binderfs" [pid 5823] newfstatat(4, "", [pid 5824] openat(AT_FDCWD, "./252/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] <... unlink resumed>) = 0 [pid 5825] getdents64(3, [pid 5824] <... openat resumed>) = 4 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] <... umount2 resumed>) = 0 [pid 5824] newfstatat(4, "", [pid 5823] getdents64(4, [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] close(3 [pid 5827] umount2("./246/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... close resumed>) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] getdents64(4, [pid 5823] getdents64(4, [pid 5827] newfstatat(AT_FDCWD, "./246/file0", [pid 5826] getdents64(4, [pid 5825] rmdir("./251" [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] getdents64(4, [pid 5823] close(4 [pid 5827] umount2("./246/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5825] <... rmdir resumed>) = 0 [pid 5824] close(4 [pid 5823] <... close resumed>) = 0 [pid 5827] openat(AT_FDCWD, "./246/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] close(4 [pid 5824] <... close resumed>) = 0 [pid 5823] rmdir("./255/file0" [pid 5826] <... close resumed>) = 0 [pid 5825] mkdir("./252", 0777 [pid 5824] rmdir("./252/file0" [pid 5823] <... rmdir resumed>) = 0 [pid 5827] <... openat resumed>) = 4 [pid 5826] rmdir("./256/file0" [pid 5825] <... mkdir resumed>) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 5827] newfstatat(4, "", [pid 5826] <... rmdir resumed>) = 0 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5824] umount2("./252/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] umount2("./255/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./252/binderfs", [pid 5827] getdents64(4, [pid 5823] newfstatat(AT_FDCWD, "./255/binderfs", [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5826] umount2("./256/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... openat resumed>) = 3 [pid 5824] unlink("./252/binderfs" [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] getdents64(4, [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5826] newfstatat(AT_FDCWD, "./256/binderfs", [pid 5825] ioctl(3, LOOP_CLR_FD [pid 5824] <... unlink resumed>) = 0 [pid 5823] unlink("./255/binderfs" [pid 5827] close(4 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... ioctl resumed>) = 0 [pid 5824] getdents64(3, [pid 5825] close(3) = 0 [pid 5827] <... close resumed>) = 0 [pid 5826] unlink("./256/binderfs" [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5827] rmdir("./246/file0" [pid 5826] <... unlink resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] <... unlink resumed>) = 0 [pid 5826] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] close(3) = 0 [pid 5827] <... rmdir resumed>) = 0 [pid 5824] close(3 [pid 5823] getdents64(3, [pid 5827] umount2("./246/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] rmdir("./256" [pid 5824] <... close resumed>) = 0 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] rmdir("./252" [pid 5823] close(3 [pid 5827] newfstatat(AT_FDCWD, "./246/binderfs", [pid 5826] <... rmdir resumed>) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] mkdir("./257", 0777 [pid 5827] unlink("./246/binderfs" [pid 5824] mkdir("./253", 0777 [pid 5823] <... close resumed>) = 0 ./strace-static-x86_64: Process 7116 attached [pid 5827] <... unlink resumed>) = 0 [pid 5826] <... mkdir resumed>) = 0 [pid 5824] <... mkdir resumed>) = 0 [pid 5823] rmdir("./255" [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7116 [pid 7116] set_robust_list(0x55557eba4660, 24 [pid 5827] getdents64(3, [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5823] <... rmdir resumed>) = 0 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7116] <... set_robust_list resumed>) = 0 [pid 5824] <... openat resumed>) = 3 [pid 5827] close(3 [pid 5823] mkdir("./256", 0777 [pid 5824] ioctl(3, LOOP_CLR_FD [pid 7116] chdir("./252" [pid 5827] <... close resumed>) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5824] <... ioctl resumed>) = 0 [pid 5823] <... mkdir resumed>) = 0 [pid 5827] rmdir("./246" [pid 5824] close(3 [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5827] <... rmdir resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 5823] <... openat resumed>) = 3 [pid 5823] ioctl(3, LOOP_CLR_FD) = 0 [pid 5826] <... openat resumed>) = 3 [pid 5823] close(3 [pid 7116] <... chdir resumed>) = 0 [pid 5827] mkdir("./247", 0777 [pid 5826] ioctl(3, LOOP_CLR_FD [pid 5823] <... close resumed>) = 0 [pid 5827] <... mkdir resumed>) = 0 [pid 5826] <... ioctl resumed>) = 0 [pid 5826] close(3) = 0 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7117 attached [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7116] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5827] <... openat resumed>) = 3 [pid 7117] set_robust_list(0x55557eba4660, 24 [pid 5827] ioctl(3, LOOP_CLR_FD [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7119 attached [pid 5827] <... ioctl resumed>) = 0 [pid 7117] <... set_robust_list resumed>) = 0 [pid 5827] close(3 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7117 [pid 7119] set_robust_list(0x55557eba4660, 24 [pid 7117] chdir("./257" [pid 7116] <... prctl resumed>) = 0 [pid 5827] <... close resumed>) = 0 [pid 7119] <... set_robust_list resumed>) = 0 [pid 7117] <... chdir resumed>) = 0 [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7118 ./strace-static-x86_64: Process 7118 attached [pid 7119] chdir("./256" [pid 7117] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7116] setpgid(0, 0) = 0 [pid 7119] <... chdir resumed>) = 0 [pid 7118] set_robust_list(0x55557eba4660, 24 [pid 7117] <... prctl resumed>) = 0 [pid 7116] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7119] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7117] setpgid(0, 0 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7119] <... prctl resumed>) = 0 [pid 7118] <... set_robust_list resumed>) = 0 [pid 7117] <... setpgid resumed>) = 0 [pid 7116] <... openat resumed>) = 3 [pid 7118] chdir("./253" [pid 7117] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7116] write(3, "1000", 4 [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7119 [pid 7116] <... write resumed>) = 4 [pid 7116] close(3 [pid 7118] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 7120 attached [pid 7119] setpgid(0, 0 [pid 7118] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7117] <... openat resumed>) = 3 [pid 7116] <... close resumed>) = 0 [pid 7120] set_robust_list(0x55557eba4660, 24 [pid 7119] <... setpgid resumed>) = 0 [pid 7117] write(3, "1000", 4 [pid 7116] symlink("/dev/binderfs", "./binderfs" [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7120 [pid 7120] <... set_robust_list resumed>) = 0 [pid 7119] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXECexecuting program [pid 7120] chdir("./247" [pid 7119] <... openat resumed>) = 3 [pid 7118] <... prctl resumed>) = 0 [pid 7116] <... symlink resumed>) = 0 [pid 7118] setpgid(0, 0 [pid 7116] write(1, "executing program\n", 18 [pid 7118] <... setpgid resumed>) = 0 [pid 7117] <... write resumed>) = 4 [pid 7116] <... write resumed>) = 18 [pid 7119] write(3, "1000", 4 [pid 7117] close(3 [pid 7116] memfd_create("syzkaller", 0 [pid 7120] <... chdir resumed>) = 0 [pid 7119] <... write resumed>) = 4 [pid 7120] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7119] close(3 [pid 7117] <... close resumed>) = 0 [pid 7120] <... prctl resumed>) = 0 [pid 7119] <... close resumed>) = 0 [pid 7117] symlink("/dev/binderfs", "./binderfs" [pid 7120] setpgid(0, 0 [pid 7119] symlink("/dev/binderfs", "./binderfs"executing program executing program [pid 7117] <... symlink resumed>) = 0 [pid 7116] <... memfd_create resumed>) = 3 [pid 7120] <... setpgid resumed>) = 0 [pid 7119] <... symlink resumed>) = 0 [pid 7117] write(1, "executing program\n", 18 [pid 7116] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7120] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7118] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7120] <... openat resumed>) = 3 [pid 7116] <... mmap resumed>) = 0x7f957a000000 [pid 7119] write(1, "executing program\n", 18 [pid 7117] <... write resumed>) = 18 [pid 7119] <... write resumed>) = 18 [pid 7119] memfd_create("syzkaller", 0 [pid 7118] <... openat resumed>) = 3 [pid 7117] memfd_create("syzkaller", 0 [pid 7118] write(3, "1000", 4 [pid 7116] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7120] write(3, "1000", 4) = 4 [pid 7120] close(3 [pid 7119] <... memfd_create resumed>) = 3 [pid 7120] <... close resumed>) = 0 [pid 7118] <... write resumed>) = 4 [pid 7116] <... write resumed>) = 65536 [pid 7120] symlink("/dev/binderfs", "./binderfs" [pid 7119] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7117] <... memfd_create resumed>) = 3 [pid 7120] <... symlink resumed>) = 0 [pid 7118] close(3 [pid 7116] munmap(0x7f957a000000, 138412032 [pid 7118] <... close resumed>) = 0 [pid 7118] symlink("/dev/binderfs", "./binderfs" [pid 7116] <... munmap resumed>) = 0 [pid 7119] <... mmap resumed>) = 0x7f957a000000 [pid 7117] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7119] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7118] <... symlink resumed>) = 0 [pid 7117] <... mmap resumed>) = 0x7f957a000000 [pid 7116] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7120] write(1, "executing program\n", 18executing program ) = 18 [pid 7117] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7116] <... openat resumed>) = 4 [pid 7120] memfd_create("syzkaller", 0 [pid 7119] <... write resumed>) = 65536 [pid 7118] write(1, "executing program\n", 18 [pid 7120] <... memfd_create resumed>) = 3 [pid 7120] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7116] ioctl(4, LOOP_SET_FD, 3executing program [pid 7120] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7119] munmap(0x7f957a000000, 138412032 [pid 7118] <... write resumed>) = 18 [pid 7117] <... write resumed>) = 65536 [pid 7116] <... ioctl resumed>) = 0 [pid 7119] <... munmap resumed>) = 0 [pid 7118] memfd_create("syzkaller", 0 [pid 7116] close(3 [pid 7118] <... memfd_create resumed>) = 3 [pid 7116] <... close resumed>) = 0 [pid 7118] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7116] close(4) = 0 [pid 7117] munmap(0x7f957a000000, 138412032) = 0 [pid 7116] mkdir("./file0", 0777 [pid 7120] <... write resumed>) = 65536 [pid 7119] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7118] <... mmap resumed>) = 0x7f957a000000 [pid 7117] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7116] <... mkdir resumed>) = 0 [pid 7118] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7116] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7119] <... openat resumed>) = 4 [pid 7119] ioctl(4, LOOP_SET_FD, 3 [pid 7117] <... openat resumed>) = 4 [pid 7120] munmap(0x7f957a000000, 138412032 [pid 7119] <... ioctl resumed>) = 0 [pid 7118] <... write resumed>) = 65536 [pid 7117] ioctl(4, LOOP_SET_FD, 3 [pid 7120] <... munmap resumed>) = 0 [pid 7118] munmap(0x7f957a000000, 138412032) = 0 [ 212.860962][ T7116] loop2: detected capacity change from 0 to 128 [ 212.886460][ T7119] loop0: detected capacity change from 0 to 128 [ 212.888200][ T7116] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 212.893905][ T7117] loop3: detected capacity change from 0 to 128 [pid 7118] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7120] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7118] <... openat resumed>) = 4 [pid 7118] ioctl(4, LOOP_SET_FD, 3 [pid 7120] <... openat resumed>) = 4 [pid 7120] ioctl(4, LOOP_SET_FD, 3 [pid 7119] close(3 [pid 7118] <... ioctl resumed>) = 0 [pid 7119] <... close resumed>) = 0 [pid 7119] close(4) = 0 [pid 7119] mkdir("./file0", 0777) = 0 [pid 7119] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7120] <... ioctl resumed>) = 0 [pid 7118] close(3 [pid 7117] <... ioctl resumed>) = 0 [pid 7116] <... mount resumed>) = 0 [pid 7118] <... close resumed>) = 0 [pid 7116] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7120] close(3 [pid 7117] close(3) = 0 [pid 7120] <... close resumed>) = 0 [pid 7119] <... mount resumed>) = 0 [pid 7120] close(4 [pid 7118] close(4 [pid 7117] close(4 [pid 7116] <... openat resumed>) = 3 [pid 7120] <... close resumed>) = 0 [pid 7117] <... close resumed>) = 0 [pid 7120] mkdir("./file0", 0777 [pid 7118] <... close resumed>) = 0 [pid 7117] mkdir("./file0", 0777 [pid 7116] chdir("./file0" [pid 7120] <... mkdir resumed>) = 0 [pid 7118] mkdir("./file0", 0777 [pid 7116] <... chdir resumed>) = 0 [pid 7120] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7118] <... mkdir resumed>) = 0 [pid 7117] <... mkdir resumed>) = 0 [pid 7116] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7119] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7119] chdir("./file0") = 0 [pid 7119] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7118] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7116] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7119] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7117] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7116] openat(AT_FDCWD, ".", O_RDONLY [ 212.914819][ T7118] loop1: detected capacity change from 0 to 128 [ 212.923329][ T7120] loop4: detected capacity change from 0 to 128 [ 212.925791][ T7119] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [pid 7119] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7116] <... openat resumed>) = 4 [pid 7116] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7119] <... renameat2 resumed>) = 0 [pid 7119] sync( [pid 7116] <... renameat2 resumed>) = 0 [pid 7116] sync( [pid 7117] <... mount resumed>) = 0 [pid 7117] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7120] <... mount resumed>) = 0 [pid 7120] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7117] chdir("./file0" [pid 7120] <... openat resumed>) = 3 [pid 7117] <... chdir resumed>) = 0 [pid 7120] chdir("./file0" [pid 7117] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7120] <... chdir resumed>) = 0 [ 212.967717][ T7120] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 212.980224][ T7117] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 212.997480][ T7118] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [pid 7120] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7118] <... mount resumed>) = 0 [pid 7117] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7120] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7118] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7117] openat(AT_FDCWD, ".", O_RDONLY [pid 7118] <... openat resumed>) = 3 [pid 7118] chdir("./file0" [pid 7120] openat(AT_FDCWD, ".", O_RDONLY [pid 7118] <... chdir resumed>) = 0 [pid 7117] <... openat resumed>) = 4 [pid 7118] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7117] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7120] <... openat resumed>) = 4 [pid 7118] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7117] <... renameat2 resumed>) = 0 [pid 7118] openat(AT_FDCWD, ".", O_RDONLY [pid 7120] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7118] <... openat resumed>) = 4 [pid 7117] sync( [pid 7118] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7120] <... renameat2 resumed>) = 0 [pid 7118] <... renameat2 resumed>) = 0 [pid 7118] sync( [pid 7120] sync( [pid 7119] <... sync resumed>) = 0 [pid 7117] <... sync resumed>) = 0 [pid 7116] <... sync resumed>) = 0 [pid 7117] exit_group(0 [pid 7116] exit_group(0 [pid 7119] exit_group(0 [pid 7118] <... sync resumed>) = 0 [pid 7117] <... exit_group resumed>) = ? [pid 7116] <... exit_group resumed>) = ? [pid 7120] <... sync resumed>) = 0 [pid 7118] exit_group(0 [pid 7117] +++ exited with 0 +++ [pid 7119] <... exit_group resumed>) = ? [pid 7116] +++ exited with 0 +++ [pid 7120] exit_group(0 [pid 7119] +++ exited with 0 +++ [pid 7118] <... exit_group resumed>) = ? [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7116, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7117, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7119, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5823] umount2("./256", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./256", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 7118] +++ exited with 0 +++ [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7118, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 5823] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] umount2("./256/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7120] <... exit_group resumed>) = ? [pid 5823] <... umount2 resumed>) = 0 [pid 7120] +++ exited with 0 +++ [pid 5824] <... restart_syscall resumed>) = 0 [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7120, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5823] umount2("./256/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] umount2("./257", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./252", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./253", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] umount2("./247", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./257", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] openat(AT_FDCWD, "./252", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] openat(AT_FDCWD, "./253", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] <... openat resumed>) = 3 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... openat resumed>) = 3 [pid 5824] <... openat resumed>) = 3 [pid 5826] newfstatat(3, "", [pid 5825] newfstatat(3, "", [pid 5824] newfstatat(3, "", [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(3, [pid 5825] getdents64(3, [pid 5824] getdents64(3, [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5827] openat(AT_FDCWD, "./247", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] umount2("./257/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./252/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5827] <... openat resumed>) = 3 [pid 5824] umount2("./253/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] getdents64(3, [pid 5826] <... umount2 resumed>) = 0 [pid 5823] newfstatat(AT_FDCWD, "./256/file0", [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] umount2("./257/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] umount2("./256/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./256/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] umount2("./247/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... openat resumed>) = 4 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(4, "", [pid 5826] newfstatat(AT_FDCWD, "./257/file0", [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] getdents64(4, [pid 5826] umount2("./257/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] getdents64(4, [pid 5825] <... umount2 resumed>) = 0 [pid 5825] umount2("./252/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./252/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] umount2("./252/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./252/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5825] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] getdents64(4, [pid 5824] <... umount2 resumed>) = 0 [pid 5824] umount2("./253/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] newfstatat(AT_FDCWD, "./253/file0", [pid 5825] close(4 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... close resumed>) = 0 [pid 5824] umount2("./253/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] close(4 [pid 5825] rmdir("./252/file0" [pid 5826] openat(AT_FDCWD, "./257/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] openat(AT_FDCWD, "./253/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] <... close resumed>) = 0 [pid 5825] <... rmdir resumed>) = 0 [pid 5824] <... openat resumed>) = 4 [pid 5823] rmdir("./256/file0" [pid 5826] <... openat resumed>) = 4 [pid 5826] newfstatat(4, "", [pid 5824] newfstatat(4, "", [pid 5823] <... rmdir resumed>) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] umount2("./252/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] getdents64(4, [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5827] <... umount2 resumed>) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] newfstatat(AT_FDCWD, "./252/binderfs", [pid 5824] close(4 [pid 5823] umount2("./256/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] umount2("./247/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] getdents64(4, [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5827] newfstatat(AT_FDCWD, "./247/file0", [pid 5826] getdents64(4, [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] umount2("./247/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] newfstatat(AT_FDCWD, "./256/binderfs", [pid 5826] close(4 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] openat(AT_FDCWD, "./247/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] <... close resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] <... openat resumed>) = 4 [pid 5826] rmdir("./257/file0" [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] rmdir("./253/file0" [pid 5823] unlink("./256/binderfs" [pid 5827] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] <... rmdir resumed>) = 0 [pid 5825] unlink("./252/binderfs" [pid 5824] <... rmdir resumed>) = 0 [pid 5823] <... unlink resumed>) = 0 [pid 5827] getdents64(4, [pid 5826] umount2("./257/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... unlink resumed>) = 0 [pid 5824] umount2("./253/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] getdents64(3, [pid 5827] getdents64(4, [pid 5826] newfstatat(AT_FDCWD, "./257/binderfs", [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5827] close(4 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] getdents64(3, [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5827] <... close resumed>) = 0 [pid 5826] unlink("./257/binderfs" [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5827] rmdir("./247/file0" [pid 5825] close(3) = 0 [pid 5823] close(3 [pid 5825] rmdir("./252" [pid 5823] <... close resumed>) = 0 [pid 5825] <... rmdir resumed>) = 0 [pid 5824] newfstatat(AT_FDCWD, "./253/binderfs", [pid 5823] rmdir("./256" [pid 5826] <... unlink resumed>) = 0 [pid 5827] <... rmdir resumed>) = 0 [pid 5826] getdents64(3, [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... rmdir resumed>) = 0 [pid 5827] umount2("./247/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] close(3 [pid 5824] unlink("./253/binderfs" [pid 5823] mkdir("./257", 0777 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... close resumed>) = 0 [pid 5827] newfstatat(AT_FDCWD, "./247/binderfs", [pid 5826] rmdir("./257" [pid 5824] <... unlink resumed>) = 0 [pid 5823] <... mkdir resumed>) = 0 [pid 5824] getdents64(3, [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5826] <... rmdir resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] ioctl(3, LOOP_CLR_FD [pid 5825] mkdir("./253", 0777 [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] mkdir("./258", 0777 [pid 5824] close(3 [pid 5823] <... ioctl resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 5823] close(3 [pid 5825] <... mkdir resumed>) = 0 [pid 5824] rmdir("./253" [pid 5823] <... close resumed>) = 0 [pid 5827] unlink("./247/binderfs" [pid 5826] <... mkdir resumed>) = 0 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5824] <... rmdir resumed>) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5827] <... unlink resumed>) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5825] <... openat resumed>) = 3 [pid 5824] mkdir("./254", 0777./strace-static-x86_64: Process 7121 attached [pid 5827] getdents64(3, [pid 5826] <... openat resumed>) = 3 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 5824] <... mkdir resumed>) = 0 [pid 5825] <... ioctl resumed>) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5826] ioctl(3, LOOP_CLR_FD [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7121 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5825] close(3 [pid 5826] <... ioctl resumed>) = 0 [pid 7121] set_robust_list(0x55557eba4660, 24 [pid 5827] close(3 [pid 5826] close(3 [pid 5825] <... close resumed>) = 0 [pid 5824] <... openat resumed>) = 3 [pid 5824] ioctl(3, LOOP_CLR_FD) = 0 [pid 5824] close(3 [pid 5826] <... close resumed>) = 0 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5824] <... close resumed>) = 0 ./strace-static-x86_64: Process 7122 attached [pid 7121] <... set_robust_list resumed>) = 0 [pid 7122] set_robust_list(0x55557eba4660, 24 [pid 7121] chdir("./257" [pid 5827] <... close resumed>) = 0 [pid 5827] rmdir("./247") = 0 [pid 5827] mkdir("./248", 0777) = 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7124 attached [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7124] set_robust_list(0x55557eba4660, 24 [pid 5827] <... openat resumed>) = 3 [pid 7124] <... set_robust_list resumed>) = 0 [pid 5827] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 7123 attached [pid 7124] chdir("./254" [pid 7122] <... set_robust_list resumed>) = 0 [pid 7121] <... chdir resumed>) = 0 [pid 5827] <... ioctl resumed>) = 0 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7123 [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7122 [pid 7123] set_robust_list(0x55557eba4660, 24 [pid 7121] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5827] close(3 [pid 7122] chdir("./253" [pid 7121] <... prctl resumed>) = 0 [pid 5827] <... close resumed>) = 0 [pid 7123] <... set_robust_list resumed>) = 0 [pid 7122] <... chdir resumed>) = 0 [pid 7121] setpgid(0, 0 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7125 attached [pid 7124] <... chdir resumed>) = 0 [pid 7123] chdir("./258" [pid 7122] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7121] <... setpgid resumed>) = 0 [pid 7125] set_robust_list(0x55557eba4660, 24 [pid 7124] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7123] <... chdir resumed>) = 0 [pid 7122] <... prctl resumed>) = 0 [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7124 [pid 7125] <... set_robust_list resumed>) = 0 [pid 7124] <... prctl resumed>) = 0 [pid 7123] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7122] setpgid(0, 0 [pid 7121] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7125 [pid 7125] chdir("./248" [pid 7123] <... prctl resumed>) = 0 [pid 7122] <... setpgid resumed>) = 0 [pid 7124] setpgid(0, 0 [pid 7121] <... openat resumed>) = 3 [pid 7124] <... setpgid resumed>) = 0 [pid 7121] write(3, "1000", 4 [pid 7122] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7124] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7123] setpgid(0, 0 [pid 7121] <... write resumed>) = 4 [pid 7121] close(3 [pid 7122] <... openat resumed>) = 3 [pid 7123] <... setpgid resumed>) = 0 [pid 7122] write(3, "1000", 4 [pid 7121] <... close resumed>) = 0 [pid 7125] <... chdir resumed>) = 0 [pid 7125] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7124] <... openat resumed>) = 3 [pid 7123] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7122] <... write resumed>) = 4 [pid 7121] symlink("/dev/binderfs", "./binderfs" [pid 7125] <... prctl resumed>) = 0 [pid 7125] setpgid(0, 0 [pid 7124] write(3, "1000", 4 [pid 7125] <... setpgid resumed>) = 0 [pid 7124] <... write resumed>) = 4 [pid 7123] <... openat resumed>) = 3 [pid 7122] close(3 [pid 7121] <... symlink resumed>) = 0 [pid 7125] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7124] close(3 [pid 7125] <... openat resumed>) = 3 [pid 7124] <... close resumed>) = 0 executing program [pid 7123] write(3, "1000", 4 [pid 7122] <... close resumed>) = 0 [pid 7121] write(1, "executing program\n", 18 [pid 7124] symlink("/dev/binderfs", "./binderfs" [pid 7123] <... write resumed>) = 4 [pid 7122] symlink("/dev/binderfs", "./binderfs" [pid 7121] <... write resumed>) = 18 [pid 7125] write(3, "1000", 4 [pid 7124] <... symlink resumed>) = 0 [pid 7123] close(3 [pid 7125] <... write resumed>) = 4 [pid 7122] <... symlink resumed>) = 0 [pid 7121] memfd_create("syzkaller", 0 [pid 7125] close(3executing program [pid 7124] write(1, "executing program\n", 18executing program [pid 7123] <... close resumed>) = 0 [pid 7122] write(1, "executing program\n", 18 [pid 7121] <... memfd_create resumed>) = 3 [pid 7125] <... close resumed>) = 0 [pid 7124] <... write resumed>) = 18 [pid 7123] symlink("/dev/binderfs", "./binderfs" [pid 7122] <... write resumed>) = 18 [pid 7124] memfd_create("syzkaller", 0 [pid 7123] <... symlink resumed>) = 0 [pid 7125] symlink("/dev/binderfs", "./binderfs" [pid 7124] <... memfd_create resumed>) = 3 [pid 7122] memfd_create("syzkaller", 0 [pid 7121] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7125] <... symlink resumed>) = 0 [pid 7124] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7123] write(1, "executing program\n", 18 [pid 7122] <... memfd_create resumed>) = 3 [pid 7121] <... mmap resumed>) = 0x7f957a000000 executing program [pid 7125] write(1, "executing program\n", 18executing program [pid 7124] <... mmap resumed>) = 0x7f957a000000 [pid 7125] <... write resumed>) = 18 [pid 7124] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7123] <... write resumed>) = 18 [pid 7122] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7121] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7125] memfd_create("syzkaller", 0) = 3 [pid 7124] <... write resumed>) = 65536 [pid 7122] <... mmap resumed>) = 0x7f957a000000 [pid 7121] <... write resumed>) = 65536 [pid 7125] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7123] memfd_create("syzkaller", 0 [pid 7125] <... mmap resumed>) = 0x7f957a000000 [pid 7122] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7121] munmap(0x7f957a000000, 138412032 [pid 7123] <... memfd_create resumed>) = 3 [pid 7124] munmap(0x7f957a000000, 138412032) = 0 [pid 7121] <... munmap resumed>) = 0 [pid 7125] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7124] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7123] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7122] <... write resumed>) = 65536 [pid 7121] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7125] <... write resumed>) = 65536 [pid 7124] <... openat resumed>) = 4 [pid 7123] <... mmap resumed>) = 0x7f957a000000 [pid 7121] <... openat resumed>) = 4 [pid 7121] ioctl(4, LOOP_SET_FD, 3 [pid 7125] munmap(0x7f957a000000, 138412032 [pid 7124] ioctl(4, LOOP_SET_FD, 3 [pid 7123] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7122] munmap(0x7f957a000000, 138412032 [pid 7121] <... ioctl resumed>) = 0 [pid 7125] <... munmap resumed>) = 0 [pid 7123] <... write resumed>) = 65536 [pid 7122] <... munmap resumed>) = 0 [pid 7125] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 7125] ioctl(4, LOOP_SET_FD, 3 [pid 7122] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7123] munmap(0x7f957a000000, 138412032 [pid 7122] <... openat resumed>) = 4 [pid 7123] <... munmap resumed>) = 0 [pid 7122] ioctl(4, LOOP_SET_FD, 3 [pid 7125] <... ioctl resumed>) = 0 [pid 7125] close(3) = 0 [pid 7125] close(4 [pid 7123] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7125] <... close resumed>) = 0 [pid 7123] <... openat resumed>) = 4 [pid 7125] mkdir("./file0", 0777) = 0 [ 213.333103][ T7121] loop0: detected capacity change from 0 to 128 [ 213.333264][ T7124] loop1: detected capacity change from 0 to 128 [ 213.349496][ T7125] loop4: detected capacity change from 0 to 128 [ 213.368099][ T7122] loop2: detected capacity change from 0 to 128 [pid 7125] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7123] ioctl(4, LOOP_SET_FD, 3 [pid 7122] <... ioctl resumed>) = 0 [pid 7121] close(3 [pid 7124] <... ioctl resumed>) = 0 [pid 7121] <... close resumed>) = 0 [pid 7124] close(3) = 0 [pid 7124] close(4) = 0 [pid 7124] mkdir("./file0", 0777) = 0 [pid 7124] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7121] close(4) = 0 [pid 7122] close(3 [pid 7121] mkdir("./file0", 0777 [pid 7122] <... close resumed>) = 0 [pid 7121] <... mkdir resumed>) = 0 [pid 7122] close(4) = 0 [pid 7121] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7122] mkdir("./file0", 0777) = 0 [ 213.379179][ T7125] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 213.399875][ T7123] loop3: detected capacity change from 0 to 128 [pid 7122] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7123] <... ioctl resumed>) = 0 [pid 7123] close(3 [pid 7125] <... mount resumed>) = 0 [pid 7123] <... close resumed>) = 0 [pid 7123] close(4 [pid 7125] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7123] <... close resumed>) = 0 [pid 7123] mkdir("./file0", 0777 [pid 7125] <... openat resumed>) = 3 [pid 7123] <... mkdir resumed>) = 0 [pid 7125] chdir("./file0" [pid 7123] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7125] <... chdir resumed>) = 0 [pid 7125] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7125] openat(AT_FDCWD, ".", O_RDONLY) = 4 [ 213.429781][ T7124] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 213.430524][ T7122] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 213.454360][ T7121] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [pid 7125] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = 0 [pid 7124] <... mount resumed>) = 0 [pid 7122] <... mount resumed>) = 0 [pid 7124] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7122] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7124] <... openat resumed>) = 3 [pid 7122] <... openat resumed>) = 3 [pid 7125] sync( [pid 7124] chdir("./file0" [pid 7122] chdir("./file0" [pid 7124] <... chdir resumed>) = 0 [pid 7124] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7124] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7124] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7122] <... chdir resumed>) = 0 [pid 7122] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7124] <... renameat2 resumed>) = 0 [pid 7122] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7124] sync( [pid 7123] <... mount resumed>) = 0 [pid 7122] openat(AT_FDCWD, ".", O_RDONLY [pid 7123] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7122] <... openat resumed>) = 4 [pid 7123] <... openat resumed>) = 3 [pid 7122] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7121] <... mount resumed>) = 0 [pid 7122] <... renameat2 resumed>) = 0 [pid 7122] sync( [pid 7121] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7121] chdir("./file0") = 0 [pid 7121] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7121] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7121] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = 0 [pid 7123] chdir("./file0" [pid 7121] sync( [pid 7123] <... chdir resumed>) = 0 [ 213.496149][ T7123] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [pid 7123] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7125] <... sync resumed>) = 0 [pid 7124] <... sync resumed>) = 0 [pid 7122] <... sync resumed>) = 0 [pid 7121] <... sync resumed>) = 0 [pid 7125] exit_group(0 [pid 7124] exit_group(0 [pid 7122] exit_group(0 [pid 7121] exit_group(0 [pid 7125] <... exit_group resumed>) = ? [pid 7124] <... exit_group resumed>) = ? [pid 7123] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7122] <... exit_group resumed>) = ? [pid 7121] <... exit_group resumed>) = ? [pid 7125] +++ exited with 0 +++ [pid 7124] +++ exited with 0 +++ [pid 7123] openat(AT_FDCWD, ".", O_RDONLY [pid 7121] +++ exited with 0 +++ [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7124, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7125, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7121, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5827] restart_syscall(<... resuming interrupted clone ...> [pid 5823] umount2("./257", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7123] <... openat resumed>) = 4 [pid 7122] +++ exited with 0 +++ [pid 7123] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5827] <... restart_syscall resumed>) = 0 [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7122, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] restart_syscall(<... resuming interrupted clone ...> [pid 5823] openat(AT_FDCWD, "./257", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5827] umount2("./248", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] newfstatat(3, "", [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] openat(AT_FDCWD, "./248", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] <... restart_syscall resumed>) = 0 [pid 5824] umount2("./254", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] getdents64(3, [pid 5827] <... openat resumed>) = 3 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] newfstatat(3, "", [pid 5824] openat(AT_FDCWD, "./254", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] umount2("./253", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... openat resumed>) = 3 [pid 5823] umount2("./257/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] getdents64(3, [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(3, "", [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5825] openat(AT_FDCWD, "./253", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7123] <... renameat2 resumed>) = 0 [pid 5827] umount2("./248/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... openat resumed>) = 3 [pid 5824] getdents64(3, [pid 7123] sync( [pid 5825] newfstatat(3, "", [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] umount2("./254/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] getdents64(3, [pid 5823] <... umount2 resumed>) = 0 [pid 5823] umount2("./257/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./257/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] umount2("./257/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7123] <... sync resumed>) = 0 [pid 5825] umount2("./253/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7123] exit_group(0) = ? [pid 5823] openat(AT_FDCWD, "./257/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5823] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] getdents64(4, [pid 5827] <... umount2 resumed>) = 0 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5827] umount2("./248/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... umount2 resumed>) = 0 [pid 5824] <... umount2 resumed>) = 0 [pid 5823] close(4 [pid 5825] umount2("./253/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./254/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7123] +++ exited with 0 +++ [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... close resumed>) = 0 [pid 5827] newfstatat(AT_FDCWD, "./248/file0", [pid 5823] rmdir("./257/file0" [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7123, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5825] newfstatat(AT_FDCWD, "./253/file0", [pid 5824] newfstatat(AT_FDCWD, "./254/file0", [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] restart_syscall(<... resuming interrupted clone ...> [pid 5823] <... rmdir resumed>) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] umount2("./257/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] umount2("./248/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./253/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./254/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./257/binderfs", [pid 5827] openat(AT_FDCWD, "./248/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] openat(AT_FDCWD, "./253/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] openat(AT_FDCWD, "./254/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] <... openat resumed>) = 4 [pid 5823] unlink("./257/binderfs" [pid 5827] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] <... openat resumed>) = 4 [pid 5824] <... openat resumed>) = 4 [pid 5823] <... unlink resumed>) = 0 [pid 5827] getdents64(4, [pid 5825] newfstatat(4, "", [pid 5824] newfstatat(4, "", [pid 5823] getdents64(3, [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] getdents64(4, [pid 5825] getdents64(4, [pid 5824] getdents64(4, [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] close(3 [pid 5827] close(4 [pid 5825] getdents64(4, [pid 5824] getdents64(4, [pid 5827] <... close resumed>) = 0 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5827] rmdir("./248/file0" [pid 5825] close(4 [pid 5824] close(4 [pid 5823] <... close resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 5827] <... rmdir resumed>) = 0 [pid 5826] <... restart_syscall resumed>) = 0 [pid 5825] rmdir("./253/file0" [pid 5824] rmdir("./254/file0" [pid 5823] rmdir("./257" [pid 5827] umount2("./248/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... rmdir resumed>) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 5825] umount2("./253/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./254/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... rmdir resumed>) = 0 [pid 5827] newfstatat(AT_FDCWD, "./248/binderfs", [pid 5826] umount2("./258", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] newfstatat(AT_FDCWD, "./253/binderfs", [pid 5824] newfstatat(AT_FDCWD, "./254/binderfs", [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] mkdir("./258", 0777 [pid 5827] unlink("./248/binderfs" [pid 5826] openat(AT_FDCWD, "./258", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] <... unlink resumed>) = 0 [pid 5826] <... openat resumed>) = 3 [pid 5825] unlink("./253/binderfs" [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] getdents64(3, [pid 5826] newfstatat(3, "", [pid 5825] <... unlink resumed>) = 0 [pid 5824] unlink("./254/binderfs" [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(3, [pid 5824] <... unlink resumed>) = 0 [pid 5823] <... mkdir resumed>) = 0 [pid 5827] close(3 [pid 5826] getdents64(3, [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] getdents64(3, [pid 5827] <... close resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5825] close(3 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5827] rmdir("./248" [pid 5826] umount2("./258/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... close resumed>) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5825] rmdir("./253" [pid 5824] close(3 [pid 5823] <... openat resumed>) = 3 [pid 5827] <... rmdir resumed>) = 0 [pid 5825] <... rmdir resumed>) = 0 [pid 5823] ioctl(3, LOOP_CLR_FD [pid 5825] mkdir("./254", 0777 [pid 5824] <... close resumed>) = 0 [pid 5825] <... mkdir resumed>) = 0 [pid 5824] rmdir("./254") = 0 [pid 5824] mkdir("./255", 0777 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5824] <... mkdir resumed>) = 0 [pid 5825] <... openat resumed>) = 3 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 5823] <... ioctl resumed>) = 0 [pid 5825] <... ioctl resumed>) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5825] close(3 [pid 5824] <... openat resumed>) = 3 [pid 5825] <... close resumed>) = 0 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5824] ioctl(3, LOOP_CLR_FD) = 0 ./strace-static-x86_64: Process 7126 attached [pid 5827] mkdir("./249", 0777 [pid 5826] <... umount2 resumed>) = 0 [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7126 [pid 5824] close(3 [pid 5823] close(3 [pid 5826] umount2("./258/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... close resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... close resumed>) = 0 [pid 5826] newfstatat(AT_FDCWD, "./258/file0", [pid 7126] set_robust_list(0x55557eba4660, 24 [pid 5827] <... mkdir resumed>) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7127 attached [pid 7126] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 7128 attached [pid 7126] chdir("./254" [pid 5826] umount2("./258/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7128] set_robust_list(0x55557eba4660, 24 [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7128 [pid 7128] <... set_robust_list resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7127] set_robust_list(0x55557eba4660, 24 [pid 7126] <... chdir resumed>) = 0 [pid 5826] openat(AT_FDCWD, "./258/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7127 [pid 7128] chdir("./258" [pid 7127] <... set_robust_list resumed>) = 0 [pid 7126] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7127] chdir("./255" [pid 7126] <... prctl resumed>) = 0 [pid 7126] setpgid(0, 0) = 0 [pid 7128] <... chdir resumed>) = 0 [pid 7127] <... chdir resumed>) = 0 [pid 5826] <... openat resumed>) = 4 [pid 7128] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7127] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7127] setpgid(0, 0) = 0 [pid 7127] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7128] <... prctl resumed>) = 0 [pid 7127] <... openat resumed>) = 3 [pid 7126] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5826] newfstatat(4, "", [pid 7128] setpgid(0, 0 [pid 7126] <... openat resumed>) = 3 [pid 5827] <... openat resumed>) = 3 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7128] <... setpgid resumed>) = 0 [pid 5827] ioctl(3, LOOP_CLR_FD [pid 5826] getdents64(4, [pid 7128] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7127] write(3, "1000", 4 [pid 5827] <... ioctl resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 7127] <... write resumed>) = 4 [pid 7126] write(3, "1000", 4 [pid 7127] close(3 [pid 5827] close(3 [pid 5826] getdents64(4, [pid 7128] <... openat resumed>) = 3 [pid 7127] <... close resumed>) = 0 [pid 7126] <... write resumed>) = 4 [pid 7128] write(3, "1000", 4 [pid 7127] symlink("/dev/binderfs", "./binderfs" [pid 7126] close(3 [pid 5827] <... close resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 7128] <... write resumed>) = 4 [pid 7127] <... symlink resumed>) = 0 [pid 7126] <... close resumed>) = 0 [pid 7128] close(3 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5826] close(4 [pid 7128] <... close resumed>) = 0 executing program [pid 7128] symlink("/dev/binderfs", "./binderfs" [pid 7127] write(1, "executing program\n", 18 [pid 7126] symlink("/dev/binderfs", "./binderfs" [pid 5826] <... close resumed>) = 0 [pid 7127] <... write resumed>) = 18 [pid 7126] <... symlink resumed>) = 0 [pid 5826] rmdir("./258/file0" [pid 7128] <... symlink resumed>) = 0 [pid 7127] memfd_create("syzkaller", 0) = 3 [pid 7126] write(1, "executing program\n", 18executing program executing program [pid 7127] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7126] <... write resumed>) = 18 [pid 7128] write(1, "executing program\n", 18 [pid 7127] <... mmap resumed>) = 0x7f957a000000 [pid 7126] memfd_create("syzkaller", 0 [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7129 [pid 5826] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 7129 attached [pid 7128] <... write resumed>) = 18 [pid 7127] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5826] umount2("./258/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7129] set_robust_list(0x55557eba4660, 24 [pid 7128] memfd_create("syzkaller", 0 [pid 7126] <... memfd_create resumed>) = 3 [pid 7129] <... set_robust_list resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7128] <... memfd_create resumed>) = 3 [pid 5826] newfstatat(AT_FDCWD, "./258/binderfs", [pid 7129] chdir("./249" [pid 7127] <... write resumed>) = 65536 [pid 7126] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./258/binderfs" [pid 7129] <... chdir resumed>) = 0 [pid 7126] <... mmap resumed>) = 0x7f957a000000 [pid 7129] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5826] <... unlink resumed>) = 0 [pid 7129] <... prctl resumed>) = 0 [pid 5826] getdents64(3, [pid 7129] setpgid(0, 0 [pid 7127] munmap(0x7f957a000000, 138412032 [pid 7126] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7127] <... munmap resumed>) = 0 [pid 5826] close(3 [pid 7127] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7126] <... write resumed>) = 65536 [pid 5826] <... close resumed>) = 0 [pid 7129] <... setpgid resumed>) = 0 [pid 7128] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7127] <... openat resumed>) = 4 [pid 5826] rmdir("./258" [pid 7129] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7126] munmap(0x7f957a000000, 138412032 [pid 7127] ioctl(4, LOOP_SET_FD, 3 [pid 7126] <... munmap resumed>) = 0 [pid 5826] <... rmdir resumed>) = 0 [pid 7128] <... mmap resumed>) = 0x7f957a000000 [pid 7127] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 7126] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5826] mkdir("./259", 0777 [pid 7129] <... openat resumed>) = 3 [pid 7127] ioctl(4, LOOP_CLR_FD [pid 7126] <... openat resumed>) = 4 [pid 7128] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7127] <... ioctl resumed>) = 0 [pid 7126] ioctl(4, LOOP_SET_FD, 3 [pid 7129] write(3, "1000", 4 [pid 5826] <... mkdir resumed>) = 0 [pid 7129] <... write resumed>) = 4 [pid 7129] close(3 [pid 7128] <... write resumed>) = 65536 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7129] <... close resumed>) = 0 [pid 7128] munmap(0x7f957a000000, 138412032 [pid 7127] ioctl(4, LOOP_SET_FD, 3 [pid 7129] symlink("/dev/binderfs", "./binderfs" [pid 7127] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5826] <... openat resumed>) = 3 [pid 7128] <... munmap resumed>) = 0 [pid 7127] close(4 [pid 7129] <... symlink resumed>) = 0 [pid 7128] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7127] <... close resumed>) = 0 executing program [pid 5826] ioctl(3, LOOP_CLR_FD [pid 7129] write(1, "executing program\n", 18 [pid 7127] close(3 [pid 7129] <... write resumed>) = 18 [pid 7128] <... openat resumed>) = 4 [pid 7127] <... close resumed>) = 0 [pid 5826] <... ioctl resumed>) = 0 [pid 7129] memfd_create("syzkaller", 0 [pid 7128] ioctl(4, LOOP_SET_FD, 3 [pid 7127] openat(AT_FDCWD, ".", O_RDONLY [pid 7129] <... memfd_create resumed>) = 3 [pid 7129] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7128] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 7127] <... openat resumed>) = 3 [pid 5826] close(3 [pid 7127] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7129] <... mmap resumed>) = 0x7f957a000000 [pid 7128] ioctl(4, LOOP_CLR_FD [pid 7127] <... renameat2 resumed>) = -1 ENOENT (No such file or directory) [pid 7127] sync( [pid 7128] <... ioctl resumed>) = 0 [pid 7126] <... ioctl resumed>) = 0 [pid 7126] close(3 [pid 5826] <... close resumed>) = 0 [pid 7129] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7126] <... close resumed>) = 0 [pid 7128] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 7126] close(4) = 0 [pid 7126] mkdir("./file0", 0777 [pid 7128] close(4 [pid 7126] <... mkdir resumed>) = 0 [pid 7129] <... write resumed>) = 65536 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7129] munmap(0x7f957a000000, 138412032 [pid 7128] <... close resumed>) = 0 [pid 7128] close(3 [pid 7129] <... munmap resumed>) = 0 [pid 7126] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7128] <... close resumed>) = 0 [pid 7129] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7128] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 7129] <... openat resumed>) = 4 [pid 7128] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7129] ioctl(4, LOOP_SET_FD, 3 [pid 7128] <... renameat2 resumed>) = -1 ENOENT (No such file or directory) [pid 7128] sync( [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7130 ./strace-static-x86_64: Process 7130 attached [pid 7130] set_robust_list(0x55557eba4660, 24) = 0 [pid 7130] chdir("./259") = 0 [pid 7130] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7130] setpgid(0, 0) = 0 [pid 7130] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7130] write(3, "1000", 4) = 4 [pid 7130] close(3) = 0 [pid 7130] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 7130] write(1, "executing program\n", 18) = 18 [pid 7130] memfd_create("syzkaller", 0) = 3 [pid 7130] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7130] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 7129] <... ioctl resumed>) = 0 [pid 7129] close(3) = 0 [pid 7130] munmap(0x7f957a000000, 138412032 [pid 7129] close(4 [pid 7130] <... munmap resumed>) = 0 [pid 7129] <... close resumed>) = 0 [ 213.778992][ T7126] loop2: detected capacity change from 0 to 128 [ 213.810455][ T7126] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 213.821602][ T7129] loop4: detected capacity change from 0 to 128 [pid 7129] mkdir("./file0", 0777 [pid 7130] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7129] <... mkdir resumed>) = 0 [pid 7130] <... openat resumed>) = 4 [pid 7130] ioctl(4, LOOP_SET_FD, 3 [pid 7129] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7130] <... ioctl resumed>) = 0 [pid 7130] close(3) = 0 [pid 7130] close(4) = 0 [pid 7130] mkdir("./file0", 0777) = 0 [pid 7130] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7126] <... mount resumed>) = 0 [ 213.864657][ T7130] loop3: detected capacity change from 0 to 128 [ 213.873716][ T7129] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [pid 7126] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7126] chdir("./file0") = 0 [pid 7126] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7126] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7126] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7129] <... mount resumed>) = 0 [pid 7126] <... renameat2 resumed>) = 0 [pid 7126] sync( [pid 7129] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7129] chdir("./file0") = 0 [pid 7129] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7129] openat(AT_FDCWD, ".", O_RDONLY) = 4 [ 213.905490][ T7130] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [pid 7129] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = 0 [pid 7130] <... mount resumed>) = 0 [pid 7127] <... sync resumed>) = 0 [pid 7127] exit_group(0) = ? [pid 7127] +++ exited with 0 +++ [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7127, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5824] umount2("./255", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./255", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5824] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(3, [pid 7129] sync( [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 7128] <... sync resumed>) = 0 [pid 7126] <... sync resumed>) = 0 [pid 5824] umount2("./255/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7130] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5824] newfstatat(AT_FDCWD, "./255/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7130] <... openat resumed>) = 3 [pid 5824] unlink("./255/binderfs" [pid 7130] chdir("./file0" [pid 5824] <... unlink resumed>) = 0 [pid 7130] <... chdir resumed>) = 0 [pid 7128] exit_group(0 [pid 7126] exit_group(0) = ? [pid 7130] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7126] +++ exited with 0 +++ [pid 5824] getdents64(3, [pid 7130] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7128] <... exit_group resumed>) = ? [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7130] openat(AT_FDCWD, ".", O_RDONLY [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7126, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5824] close(3 [pid 7130] <... openat resumed>) = 4 [pid 5825] restart_syscall(<... resuming interrupted clone ...> [pid 5824] <... close resumed>) = 0 [pid 7130] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5824] rmdir("./255" [pid 5825] <... restart_syscall resumed>) = 0 [pid 7130] <... renameat2 resumed>) = 0 [pid 7128] +++ exited with 0 +++ [pid 5824] <... rmdir resumed>) = 0 [pid 5824] mkdir("./256", 0777 [pid 7129] <... sync resumed>) = 0 [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7128, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5825] umount2("./254", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... mkdir resumed>) = 0 [pid 5823] umount2("./258", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7129] exit_group(0 [pid 5825] openat(AT_FDCWD, "./254", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7129] <... exit_group resumed>) = ? [pid 5825] <... openat resumed>) = 3 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5823] openat(AT_FDCWD, "./258", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7130] sync( [pid 5825] newfstatat(3, "", [pid 5824] <... openat resumed>) = 3 [pid 7129] +++ exited with 0 +++ [pid 5823] <... openat resumed>) = 3 [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7129, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5823] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(3, [pid 5824] ioctl(3, LOOP_CLR_FD [pid 5823] getdents64(3, [pid 5824] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5824] close(3) = 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5827] umount2("./249", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] openat(AT_FDCWD, "./249", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7131 [pid 5827] <... openat resumed>) = 3 ./strace-static-x86_64: Process 7131 attached [pid 5827] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7131] set_robust_list(0x55557eba4660, 24 [pid 5827] getdents64(3, [pid 7131] <... set_robust_list resumed>) = 0 [pid 7131] chdir("./256" [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] umount2("./258/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7131] <... chdir resumed>) = 0 [pid 5827] umount2("./249/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7131] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5823] newfstatat(AT_FDCWD, "./258/binderfs", [pid 7131] setpgid(0, 0 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7131] <... setpgid resumed>) = 0 [pid 5825] umount2("./254/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] unlink("./258/binderfs" [pid 7131] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7131] write(3, "1000", 4) = 4 [pid 7131] close(3 [pid 5823] <... unlink resumed>) = 0 [pid 7131] <... close resumed>) = 0 [pid 5823] getdents64(3, [pid 7131] symlink("/dev/binderfs", "./binderfs" [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7131] <... symlink resumed>) = 0 [pid 5827] <... umount2 resumed>) = 0 [pid 5823] close(3executing program [pid 7131] write(1, "executing program\n", 18 [pid 5823] <... close resumed>) = 0 [pid 7131] <... write resumed>) = 18 [pid 5823] rmdir("./258" [pid 7131] memfd_create("syzkaller", 0 [pid 5827] umount2("./249/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... rmdir resumed>) = 0 [pid 7131] <... memfd_create resumed>) = 3 [pid 5823] mkdir("./259", 0777 [pid 7131] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7131] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... mkdir resumed>) = 0 [pid 7130] <... sync resumed>) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 7130] exit_group(0 [pid 5823] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5823] close(3 [pid 7131] <... write resumed>) = 65536 [pid 7130] <... exit_group resumed>) = ? [pid 5823] <... close resumed>) = 0 [pid 7130] +++ exited with 0 +++ [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7131] munmap(0x7f957a000000, 138412032./strace-static-x86_64: Process 7132 attached ) = 0 [pid 5827] newfstatat(AT_FDCWD, "./249/file0", [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7130, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] restart_syscall(<... resuming interrupted clone ...> [pid 5825] <... umount2 resumed>) = 0 [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7132 [pid 5827] umount2("./249/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... restart_syscall resumed>) = 0 [pid 5825] umount2("./254/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7132] set_robust_list(0x55557eba4660, 24 [pid 7131] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7132] <... set_robust_list resumed>) = 0 [pid 7131] <... openat resumed>) = 4 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] umount2("./259", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] newfstatat(AT_FDCWD, "./254/file0", [pid 5827] openat(AT_FDCWD, "./249/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7132] chdir("./259" [pid 7131] ioctl(4, LOOP_SET_FD, 3 [pid 7132] <... chdir resumed>) = 0 [pid 5827] <... openat resumed>) = 4 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] newfstatat(4, "", [pid 5826] openat(AT_FDCWD, "./259", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] umount2("./254/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7132] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] <... openat resumed>) = 3 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7132] <... prctl resumed>) = 0 [pid 5827] getdents64(4, [pid 5826] newfstatat(3, "", [pid 5825] openat(AT_FDCWD, "./254/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 7132] setpgid(0, 0 [pid 5827] getdents64(4, [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] <... openat resumed>) = 4 [pid 7132] <... setpgid resumed>) = 0 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5826] getdents64(3, [pid 5825] newfstatat(4, "", [pid 7132] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5827] close(4 [pid 7132] <... openat resumed>) = 3 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7132] write(3, "1000", 4 [pid 5827] <... close resumed>) = 0 [pid 5825] getdents64(4, [pid 5827] rmdir("./249/file0" [pid 7132] <... write resumed>) = 4 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 7132] close(3) = 0 [pid 7132] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5827] <... rmdir resumed>) = 0 [pid 5826] umount2("./259/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] getdents64(4, executing program [pid 7132] write(1, "executing program\n", 18 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 7132] <... write resumed>) = 18 [pid 5825] close(4 [pid 7132] memfd_create("syzkaller", 0 [pid 5827] umount2("./249/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... close resumed>) = 0 [pid 7132] <... memfd_create resumed>) = 3 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] rmdir("./254/file0" [pid 7132] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7131] <... ioctl resumed>) = 0 [pid 5827] newfstatat(AT_FDCWD, "./249/binderfs", [pid 5826] <... umount2 resumed>) = 0 [pid 5825] <... rmdir resumed>) = 0 [pid 7132] <... mmap resumed>) = 0x7f957a000000 [pid 7131] close(3 [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] umount2("./259/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./254/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7132] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7131] <... close resumed>) = 0 [pid 5827] unlink("./249/binderfs" [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7131] close(4) = 0 [pid 5827] <... unlink resumed>) = 0 [pid 5826] newfstatat(AT_FDCWD, "./259/file0", [pid 5825] newfstatat(AT_FDCWD, "./254/binderfs", [pid 7131] mkdir("./file0", 0777) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7132] <... write resumed>) = 65536 [pid 7131] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5827] getdents64(3, [pid 5825] unlink("./254/binderfs" [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] umount2("./259/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... unlink resumed>) = 0 [pid 5827] close(3 [pid 7132] munmap(0x7f957a000000, 138412032) = 0 [ 214.097531][ T7131] loop1: detected capacity change from 0 to 128 [pid 7132] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7132] ioctl(4, LOOP_SET_FD, 3 [pid 5827] <... close resumed>) = 0 [pid 5825] getdents64(3, [pid 5827] rmdir("./249" [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5827] <... rmdir resumed>) = 0 [pid 5826] openat(AT_FDCWD, "./259/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] close(3 [pid 5826] <... openat resumed>) = 4 [pid 5825] <... close resumed>) = 0 [pid 5826] newfstatat(4, "", [pid 5825] rmdir("./254" [pid 5827] mkdir("./250", 0777 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] <... rmdir resumed>) = 0 [pid 7132] <... ioctl resumed>) = 0 [pid 7132] close(3) = 0 [pid 7132] close(4 [pid 5826] getdents64(4, [pid 7132] <... close resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] mkdir("./255", 0777 [pid 5826] getdents64(4, [pid 7132] mkdir("./file0", 0777 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 7132] <... mkdir resumed>) = 0 [pid 5826] close(4 [pid 5825] <... mkdir resumed>) = 0 [pid 7132] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5826] <... close resumed>) = 0 [pid 5826] rmdir("./259/file0") = 0 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5826] umount2("./259/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] <... openat resumed>) = 3 [pid 5827] <... mkdir resumed>) = 0 [pid 5826] newfstatat(AT_FDCWD, "./259/binderfs", [ 214.142323][ T7132] loop0: detected capacity change from 0 to 128 [ 214.150597][ T7131] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... ioctl resumed>) = 0 [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5826] unlink("./259/binderfs" [pid 5825] close(3 [pid 5826] <... unlink resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 5827] <... openat resumed>) = 3 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5827] ioctl(3, LOOP_CLR_FD) = 0 [pid 7131] <... mount resumed>) = 0 [pid 5827] close(3 [pid 7131] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7131] chdir("./file0") = 0 ./strace-static-x86_64: Process 7133 attached [pid 7131] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5827] <... close resumed>) = 0 [pid 5826] getdents64(3, [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7133 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7131] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7131] openat(AT_FDCWD, ".", O_RDONLY./strace-static-x86_64: Process 7134 attached ) = 4 [pid 5826] close(3 [pid 7133] set_robust_list(0x55557eba4660, 24 [pid 7134] set_robust_list(0x55557eba4660, 24 [pid 7133] <... set_robust_list resumed>) = 0 [pid 7131] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5826] <... close resumed>) = 0 [pid 7134] <... set_robust_list resumed>) = 0 [pid 7134] chdir("./250" [pid 7133] chdir("./255" [pid 7131] <... renameat2 resumed>) = 0 [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7134 [pid 5826] rmdir("./259" [pid 7131] sync( [pid 5826] <... rmdir resumed>) = 0 [pid 7134] <... chdir resumed>) = 0 [pid 7133] <... chdir resumed>) = 0 [pid 7134] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7133] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5826] mkdir("./260", 0777 [pid 7134] setpgid(0, 0 [pid 7133] <... prctl resumed>) = 0 [pid 7134] <... setpgid resumed>) = 0 [pid 7133] setpgid(0, 0 [pid 5826] <... mkdir resumed>) = 0 [pid 7133] <... setpgid resumed>) = 0 [pid 7134] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7133] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7134] <... openat resumed>) = 3 [pid 7133] <... openat resumed>) = 3 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7134] write(3, "1000", 4 [pid 7133] write(3, "1000", 4 [pid 5826] <... openat resumed>) = 3 [pid 7134] <... write resumed>) = 4 [pid 7133] <... write resumed>) = 4 [pid 5826] ioctl(3, LOOP_CLR_FD [pid 7134] close(3 [pid 7133] close(3 [pid 5826] <... ioctl resumed>) = 0 [pid 7134] <... close resumed>) = 0 [pid 7133] <... close resumed>) = 0 [pid 5826] close(3 [pid 7134] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7133] symlink("/dev/binderfs", "./binderfs" [pid 5826] <... close resumed>) = 0 [pid 7134] write(1, "executing program\n", 18 [ 214.184639][ T7132] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDexecuting program [pid 7134] <... write resumed>) = 18 [pid 7133] <... symlink resumed>) = 0 [pid 7132] <... mount resumed>) = 0 executing program [pid 7134] memfd_create("syzkaller", 0 [pid 7133] write(1, "executing program\n", 18) = 18 [pid 7134] <... memfd_create resumed>) = 3 ./strace-static-x86_64: Process 7135 attached [pid 7134] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7133] memfd_create("syzkaller", 0 [pid 7132] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7131] <... sync resumed>) = 0 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7135 [pid 7134] <... mmap resumed>) = 0x7f957a000000 [pid 7133] <... memfd_create resumed>) = 3 [pid 7135] set_robust_list(0x55557eba4660, 24 [pid 7134] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7133] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7131] exit_group(0 [pid 7133] <... mmap resumed>) = 0x7f957a000000 [pid 7132] <... openat resumed>) = 3 [pid 7131] <... exit_group resumed>) = ? [pid 7135] <... set_robust_list resumed>) = 0 [pid 7134] <... write resumed>) = 65536 [pid 7135] chdir("./260" [pid 7134] munmap(0x7f957a000000, 138412032 [pid 7133] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7132] chdir("./file0" [pid 7135] <... chdir resumed>) = 0 [pid 7135] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7134] <... munmap resumed>) = 0 [pid 7132] <... chdir resumed>) = 0 [pid 7135] <... prctl resumed>) = 0 [pid 7135] setpgid(0, 0 [pid 7134] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7132] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7135] <... setpgid resumed>) = 0 [pid 7135] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7134] <... openat resumed>) = 4 [pid 7133] <... write resumed>) = 65536 [pid 7132] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7135] <... openat resumed>) = 3 [pid 7134] ioctl(4, LOOP_SET_FD, 3 [pid 7133] munmap(0x7f957a000000, 138412032 [pid 7132] openat(AT_FDCWD, ".", O_RDONLY [pid 7131] +++ exited with 0 +++ [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7131, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5824] umount2("./256", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7132] <... openat resumed>) = 4 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7132] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5824] openat(AT_FDCWD, "./256", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5824] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] umount2("./256/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7132] <... renameat2 resumed>) = 0 [pid 7132] sync( [pid 7135] write(3, "1000", 4 [pid 7133] <... munmap resumed>) = 0 [pid 5824] <... umount2 resumed>) = 0 [pid 7135] <... write resumed>) = 4 [pid 7133] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5824] umount2("./256/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./256/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] umount2("./256/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./256/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5824] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(4, [pid 7135] close(3 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 7135] <... close resumed>) = 0 [pid 5824] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] close(4) = 0 [pid 5824] rmdir("./256/file0" [pid 7132] <... sync resumed>) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 7135] symlink("/dev/binderfs", "./binderfs" [pid 7133] <... openat resumed>) = 4 [pid 7132] exit_group(0 [pid 5824] umount2("./256/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7132] <... exit_group resumed>) = ? [pid 5824] newfstatat(AT_FDCWD, "./256/binderfs", [pid 7135] <... symlink resumed>) = 0 [pid 7133] ioctl(4, LOOP_SET_FD, 3 [pid 7132] +++ exited with 0 +++ [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./256/binderfs" [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7132, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5824] <... unlink resumed>) = 0 [pid 5823] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5824] getdents64(3, executing program 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7135] write(1, "executing program\n", 18 [pid 7133] <... ioctl resumed>) = 0 [pid 7135] <... write resumed>) = 18 [pid 5823] umount2("./259", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7134] <... ioctl resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./259", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7135] memfd_create("syzkaller", 0 [pid 5823] <... openat resumed>) = 3 [pid 5823] newfstatat(3, "", [pid 7135] <... memfd_create resumed>) = 3 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7135] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5823] getdents64(3, [pid 7135] <... mmap resumed>) = 0x7f957a000000 [pid 7134] close(3 [pid 5824] close(3 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] <... close resumed>) = 0 [pid 5823] umount2("./259/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7135] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7134] <... close resumed>) = 0 [pid 5824] rmdir("./256" [pid 7134] close(4 [pid 5824] <... rmdir resumed>) = 0 [pid 7135] <... write resumed>) = 65536 [pid 7135] munmap(0x7f957a000000, 138412032 [pid 5824] mkdir("./257", 0777 [pid 7134] <... close resumed>) = 0 [pid 7134] mkdir("./file0", 0777 [pid 7135] <... munmap resumed>) = 0 [pid 5824] <... mkdir resumed>) = 0 [pid 7134] <... mkdir resumed>) = 0 [pid 7135] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7133] close(3 [pid 7134] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7135] <... openat resumed>) = 4 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7135] ioctl(4, LOOP_SET_FD, 3 [pid 7133] <... close resumed>) = 0 [pid 5824] <... openat resumed>) = 3 [ 214.286668][ T7134] loop4: detected capacity change from 0 to 128 [ 214.323624][ T7133] loop2: detected capacity change from 0 to 128 [pid 5824] ioctl(3, LOOP_CLR_FD) = 0 [pid 5824] close(3) = 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557eba4650) = 7136 [pid 7133] close(4) = 0 ./strace-static-x86_64: Process 7136 attached [pid 7133] mkdir("./file0", 0777 [pid 7136] set_robust_list(0x55557eba4660, 24 [pid 7133] <... mkdir resumed>) = 0 [pid 7136] <... set_robust_list resumed>) = 0 [pid 7133] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7136] chdir("./257") = 0 [pid 7136] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7135] <... ioctl resumed>) = 0 [pid 7136] <... prctl resumed>) = 0 [pid 7135] close(3 [pid 5823] <... umount2 resumed>) = 0 [pid 7136] setpgid(0, 0 [pid 7135] <... close resumed>) = 0 [pid 5823] umount2("./259/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7136] <... setpgid resumed>) = 0 [pid 7135] close(4 [pid 7136] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7135] <... close resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./259/file0", [pid 7136] <... openat resumed>) = 3 [pid 7135] mkdir("./file0", 0777 [pid 7136] write(3, "1000", 4 [pid 7135] <... mkdir resumed>) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7136] <... write resumed>) = 4 [pid 7135] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5823] umount2("./259/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./259/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5823] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [ 214.349301][ T7134] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 214.359476][ T7135] loop3: detected capacity change from 0 to 128 [ 214.384632][ T7133] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [pid 5823] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] close(4) = 0 [pid 5823] rmdir("./259/file0") = 0 [pid 7136] close(3 [pid 5823] umount2("./259/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./259/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./259/binderfs" [pid 7136] <... close resumed>) = 0 [pid 7134] <... mount resumed>) = 0 [pid 5823] <... unlink resumed>) = 0 [pid 7136] symlink("/dev/binderfs", "./binderfs" [pid 7134] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7136] <... symlink resumed>) = 0 [pid 7134] <... openat resumed>) = 3 [pid 7134] chdir("./file0" [pid 5823] getdents64(3, [pid 7136] write(1, "executing program\n", 18 [pid 7134] <... chdir resumed>) = 0 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] close(3) = 0 [pid 5823] rmdir("./259") = 0 executing program [pid 7136] <... write resumed>) = 18 [pid 7134] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7133] <... mount resumed>) = 0 [pid 5823] mkdir("./260", 0777 [pid 7136] memfd_create("syzkaller", 0 [pid 7134] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7133] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5823] <... mkdir resumed>) = 0 [pid 7136] <... memfd_create resumed>) = 3 [pid 7134] openat(AT_FDCWD, ".", O_RDONLY [pid 7133] <... openat resumed>) = 3 [pid 7136] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7134] <... openat resumed>) = 4 [pid 7133] chdir("./file0" [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7136] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7133] <... chdir resumed>) = 0 [pid 5823] <... openat resumed>) = 3 [pid 7133] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5823] ioctl(3, LOOP_CLR_FD [pid 7136] <... write resumed>) = 65536 [pid 7136] munmap(0x7f957a000000, 138412032 [pid 7134] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7133] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5823] <... ioctl resumed>) = 0 [pid 7133] openat(AT_FDCWD, ".", O_RDONLY [pid 5823] close(3 [pid 7136] <... munmap resumed>) = 0 [pid 5823] <... close resumed>) = 0 [pid 7136] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7133] <... openat resumed>) = 4 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7136] <... openat resumed>) = 4 [pid 7133] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7136] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 7137 attached [ 214.413340][ T7135] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [pid 7137] set_robust_list(0x55557eba4660, 24 [pid 7133] <... renameat2 resumed>) = 0 [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7137 [pid 7137] <... set_robust_list resumed>) = 0 [pid 7137] chdir("./260") = 0 [pid 7137] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7133] sync( [pid 7135] <... mount resumed>) = 0 [pid 7137] setpgid(0, 0) = 0 [pid 7135] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7137] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7135] <... openat resumed>) = 3 [pid 7135] chdir("./file0" [pid 7134] <... renameat2 resumed>) = 0 [pid 7135] <... chdir resumed>) = 0 [pid 7135] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7137] <... openat resumed>) = 3 [pid 7135] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7134] sync( [pid 7137] write(3, "1000", 4) = 4 [pid 7137] close(3) = 0 [pid 7135] openat(AT_FDCWD, ".", O_RDONLY [pid 7137] symlink("/dev/binderfs", "./binderfs" [pid 7135] <... openat resumed>) = 4 [pid 7137] <... symlink resumed>) = 0 [pid 7135] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0executing program [pid 7137] write(1, "executing program\n", 18) = 18 [pid 7137] memfd_create("syzkaller", 0) = 3 [pid 7137] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7137] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7135] <... renameat2 resumed>) = 0 [pid 7137] <... write resumed>) = 65536 [pid 7135] sync( [pid 7137] munmap(0x7f957a000000, 138412032) = 0 [pid 7136] <... ioctl resumed>) = 0 [pid 7133] <... sync resumed>) = 0 [pid 7137] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7136] close(3) = 0 [pid 7133] exit_group(0 [pid 7137] <... openat resumed>) = 4 [pid 7137] ioctl(4, LOOP_SET_FD, 3 [pid 7136] close(4 [pid 7135] <... sync resumed>) = 0 [pid 7134] <... sync resumed>) = 0 [pid 7133] <... exit_group resumed>) = ? [pid 7136] <... close resumed>) = 0 [ 214.464168][ T7136] loop1: detected capacity change from 0 to 128 [pid 7135] exit_group(0 [pid 7137] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 7137] ioctl(4, LOOP_CLR_FD) = 0 [pid 7136] mkdir("./file0", 0777 [pid 7135] <... exit_group resumed>) = ? [pid 7134] exit_group(0 [pid 7133] +++ exited with 0 +++ [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7133, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5825] restart_syscall(<... resuming interrupted clone ...> [pid 7136] <... mkdir resumed>) = 0 [pid 7134] <... exit_group resumed>) = ? [pid 7137] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 7137] close(4) = 0 [pid 7137] close(3) = 0 [pid 7135] +++ exited with 0 +++ [pid 7137] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7135, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 7137] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5826] restart_syscall(<... resuming interrupted clone ...> [pid 5825] <... restart_syscall resumed>) = 0 [pid 7137] <... renameat2 resumed>) = -1 ENOENT (No such file or directory) [pid 7136] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7134] +++ exited with 0 +++ [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7134, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5826] <... restart_syscall resumed>) = 0 [pid 5825] umount2("./255", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7137] sync( [pid 5825] openat(AT_FDCWD, "./255", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] umount2("./250", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] umount2("./260", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... openat resumed>) = 3 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(3, "", [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] openat(AT_FDCWD, "./250", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] getdents64(3, [pid 5827] <... openat resumed>) = 3 [pid 5826] openat(AT_FDCWD, "./260", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5826] <... openat resumed>) = 3 [pid 5825] umount2("./255/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] newfstatat(3, "", [pid 5826] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(3, [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5827] getdents64(3, [pid 5826] umount2("./260/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5827] umount2("./250/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... umount2 resumed>) = 0 [pid 5825] umount2("./255/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... umount2 resumed>) = 0 [pid 5826] <... umount2 resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] umount2("./250/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] umount2("./260/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] newfstatat(AT_FDCWD, "./255/file0", [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] newfstatat(AT_FDCWD, "./250/file0", [pid 5826] newfstatat(AT_FDCWD, "./260/file0", [pid 5825] umount2("./255/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] umount2("./250/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] umount2("./260/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] openat(AT_FDCWD, "./255/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... openat resumed>) = 4 [pid 5827] openat(AT_FDCWD, "./250/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] openat(AT_FDCWD, "./260/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] newfstatat(4, "", [pid 5827] <... openat resumed>) = 4 [pid 5826] <... openat resumed>) = 4 [pid 5827] newfstatat(4, "", [pid 5826] newfstatat(4, "", [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] getdents64(4, [pid 5826] getdents64(4, [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] getdents64(4, [pid 5827] getdents64(4, [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5826] getdents64(4, [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5827] close(4 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5825] getdents64(4, [pid 5827] <... close resumed>) = 0 [pid 5826] close(4 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5827] rmdir("./250/file0" [pid 5826] <... close resumed>) = 0 [pid 5825] close(4 [pid 5827] <... rmdir resumed>) = 0 [pid 5827] umount2("./250/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] rmdir("./260/file0" [pid 5825] <... close resumed>) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... rmdir resumed>) = 0 [pid 5825] rmdir("./255/file0" [pid 5827] newfstatat(AT_FDCWD, "./250/binderfs", [pid 5825] <... rmdir resumed>) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] unlink("./250/binderfs" [pid 5825] umount2("./255/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... unlink resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] getdents64(3, [pid 5826] umount2("./260/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./255/binderfs", [pid 5827] close(3 [pid 5826] newfstatat(AT_FDCWD, "./260/binderfs", [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] <... close resumed>) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] rmdir("./250" [pid 5826] unlink("./260/binderfs" [pid 5825] unlink("./255/binderfs" [pid 5827] <... rmdir resumed>) = 0 [pid 5826] <... unlink resumed>) = 0 [pid 5825] <... unlink resumed>) = 0 [pid 7136] <... mount resumed>) = 0 [pid 5827] mkdir("./251", 0777 [pid 5826] getdents64(3, [pid 5825] getdents64(3, [pid 5827] <... mkdir resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [ 214.558986][ T7136] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [pid 5826] close(3 [pid 5825] close(3 [pid 5826] <... close resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 5826] rmdir("./260" [pid 5825] rmdir("./255" [pid 7136] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 7136] <... openat resumed>) = 3 [pid 5825] <... rmdir resumed>) = 0 [pid 5827] ioctl(3, LOOP_CLR_FD [pid 7136] chdir("./file0" [pid 5827] <... ioctl resumed>) = 0 [pid 5826] <... rmdir resumed>) = 0 [pid 5827] close(3 [pid 5826] mkdir("./261", 0777 [pid 7136] <... chdir resumed>) = 0 [pid 7136] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5827] <... close resumed>) = 0 [pid 5826] <... mkdir resumed>) = 0 [pid 5825] mkdir("./256", 0777 [pid 7136] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7136] openat(AT_FDCWD, ".", O_RDONLY [pid 7137] <... sync resumed>) = 0 [pid 7136] <... openat resumed>) = 4 [pid 5825] <... mkdir resumed>) = 0 [pid 7137] exit_group(0 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7137] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 7138 attached [pid 7137] +++ exited with 0 +++ [pid 5826] <... openat resumed>) = 3 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5826] ioctl(3, LOOP_CLR_FD [pid 5825] <... openat resumed>) = 3 [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7137, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5826] <... ioctl resumed>) = 0 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 5826] close(3 [pid 5825] <... ioctl resumed>) = 0 [pid 7136] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5826] <... close resumed>) = 0 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5825] close(3 [pid 7138] set_robust_list(0x55557eba4660, 24 [pid 7136] <... renameat2 resumed>) = 0 [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7138 [pid 5825] <... close resumed>) = 0 [pid 5823] <... restart_syscall resumed>) = 0 [pid 7138] <... set_robust_list resumed>) = 0 [pid 7138] chdir("./251") = 0 [pid 7136] sync( [pid 5823] umount2("./260", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7138] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7139 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7138] <... prctl resumed>) = 0 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5823] openat(AT_FDCWD, "./260", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7138] setpgid(0, 0 [pid 5823] <... openat resumed>) = 3 [pid 5823] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 7139 attached [pid 5823] getdents64(3, [pid 7139] set_robust_list(0x55557eba4660, 24 [pid 7138] <... setpgid resumed>) = 0 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 7139] <... set_robust_list resumed>) = 0 [pid 7139] chdir("./261" [pid 7138] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5823] umount2("./260/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7139] <... chdir resumed>) = 0 [pid 7138] <... openat resumed>) = 3 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7138] write(3, "1000", 4 [pid 5823] newfstatat(AT_FDCWD, "./260/binderfs", [pid 7139] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7138] <... write resumed>) = 4 [pid 7136] <... sync resumed>) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 7140 attached [pid 7139] <... prctl resumed>) = 0 [pid 7138] close(3 [pid 5823] unlink("./260/binderfs" [pid 7139] setpgid(0, 0 [pid 7138] <... close resumed>) = 0 [pid 7136] exit_group(0 [pid 5823] <... unlink resumed>) = 0 [pid 7139] <... setpgid resumed>) = 0 [pid 7138] symlink("/dev/binderfs", "./binderfs" [pid 7136] <... exit_group resumed>) = ? [pid 7139] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5823] getdents64(3, [pid 7140] set_robust_list(0x55557eba4660, 24 [pid 7138] <... symlink resumed>) = 0 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7140] <... set_robust_list resumed>) = 0 executing program [pid 7138] write(1, "executing program\n", 18 [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7140 [pid 7140] chdir("./256" [pid 7139] <... openat resumed>) = 3 [pid 7138] <... write resumed>) = 18 [pid 7136] +++ exited with 0 +++ [pid 5823] close(3 [pid 7140] <... chdir resumed>) = 0 [pid 7138] memfd_create("syzkaller", 0 [pid 5823] <... close resumed>) = 0 [pid 7140] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7138] <... memfd_create resumed>) = 3 [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7136, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5823] rmdir("./260" [pid 7140] <... prctl resumed>) = 0 [pid 7138] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 5823] <... rmdir resumed>) = 0 [pid 7140] setpgid(0, 0 [pid 7138] <... mmap resumed>) = 0x7f957a000000 [pid 7140] <... setpgid resumed>) = 0 [pid 7138] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5823] mkdir("./261", 0777 [pid 7140] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5823] <... mkdir resumed>) = 0 [pid 7140] write(3, "1000", 4 [pid 7139] write(3, "1000", 4 [pid 5824] <... restart_syscall resumed>) = 0 [pid 7140] <... write resumed>) = 4 [pid 7139] <... write resumed>) = 4 [pid 7138] <... write resumed>) = 65536 [pid 7139] close(3) = 0 [pid 7138] munmap(0x7f957a000000, 138412032 [pid 7139] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7138] <... munmap resumed>) = 0 executing program [pid 7139] write(1, "executing program\n", 18 [pid 5824] umount2("./257", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7140] close(3 [pid 7139] <... write resumed>) = 18 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7140] <... close resumed>) = 0 [pid 7138] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5824] openat(AT_FDCWD, "./257", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] <... openat resumed>) = 3 [pid 7140] symlink("/dev/binderfs", "./binderfs" [pid 7139] memfd_create("syzkaller", 0 [pid 7138] <... openat resumed>) = 4 [pid 5824] <... openat resumed>) = 3 [pid 5823] ioctl(3, LOOP_CLR_FDexecuting program [pid 7140] <... symlink resumed>) = 0 [pid 7139] <... memfd_create resumed>) = 3 [pid 7138] ioctl(4, LOOP_SET_FD, 3 [pid 5824] newfstatat(3, "", [pid 5823] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7140] write(1, "executing program\n", 18 [pid 7139] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7138] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] close(3 [pid 7140] <... write resumed>) = 18 [pid 7138] ioctl(4, LOOP_CLR_FD [pid 5824] getdents64(3, [pid 5823] <... close resumed>) = 0 [pid 7140] memfd_create("syzkaller", 0 [pid 7139] <... mmap resumed>) = 0x7f957a000000 [pid 7138] <... ioctl resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7139] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5824] umount2("./257/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7140] <... memfd_create resumed>) = 3 [pid 7140] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7140] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7138] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7141 [pid 7138] close(4) = 0 ./strace-static-x86_64: Process 7141 attached [pid 7140] <... write resumed>) = 65536 [pid 7138] close(3 [pid 7141] set_robust_list(0x55557eba4660, 24 [pid 7140] munmap(0x7f957a000000, 138412032 [pid 7139] <... write resumed>) = 65536 [pid 7138] <... close resumed>) = 0 [pid 7140] <... munmap resumed>) = 0 [pid 7138] openat(AT_FDCWD, ".", O_RDONLY [pid 7140] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7138] <... openat resumed>) = 3 [pid 7140] <... openat resumed>) = 4 [pid 7138] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7140] ioctl(4, LOOP_SET_FD, 3 [pid 7138] <... renameat2 resumed>) = -1 ENOENT (No such file or directory) [pid 7141] <... set_robust_list resumed>) = 0 [pid 7139] munmap(0x7f957a000000, 138412032 [pid 7141] chdir("./261" [pid 7139] <... munmap resumed>) = 0 [pid 7139] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7138] sync( [pid 7139] <... openat resumed>) = 4 [pid 7139] ioctl(4, LOOP_SET_FD, 3 [pid 5824] <... umount2 resumed>) = 0 [pid 7140] <... ioctl resumed>) = 0 [pid 7140] close(3) = 0 [pid 7140] close(4) = 0 [pid 7141] <... chdir resumed>) = 0 [pid 7140] mkdir("./file0", 0777 [pid 7141] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5824] umount2("./257/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7141] <... prctl resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7141] setpgid(0, 0) = 0 [pid 7141] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5824] newfstatat(AT_FDCWD, "./257/file0", [pid 7141] <... openat resumed>) = 3 [pid 7141] write(3, "1000", 4 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7141] <... write resumed>) = 4 [pid 7141] close(3 [pid 5824] umount2("./257/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7141] <... close resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7141] symlink("/dev/binderfs", "./binderfs" [pid 7139] <... ioctl resumed>) = 0 [pid 7139] close(3 [pid 5824] openat(AT_FDCWD, "./257/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7139] <... close resumed>) = 0 [pid 7139] close(4 [pid 5824] <... openat resumed>) = 4 [pid 7139] <... close resumed>) = 0 [pid 5824] newfstatat(4, "", [pid 7139] mkdir("./file0", 0777 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7141] <... symlink resumed>) = 0 [pid 7140] <... mkdir resumed>) = 0 [pid 7141] write(1, "executing program\n", 18executing program [pid 7140] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7139] <... mkdir resumed>) = 0 [pid 7141] <... write resumed>) = 18 [pid 7139] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5824] getdents64(4, [pid 7141] memfd_create("syzkaller", 0 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [ 214.728929][ T7140] loop2: detected capacity change from 0 to 128 [ 214.752644][ T7139] loop3: detected capacity change from 0 to 128 [pid 7141] <... memfd_create resumed>) = 3 [pid 5824] getdents64(4, [pid 7141] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 7141] <... mmap resumed>) = 0x7f957a000000 [pid 5824] close(4 [pid 7141] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5824] <... close resumed>) = 0 [pid 7140] <... mount resumed>) = 0 [pid 7141] <... write resumed>) = 65536 [pid 5824] rmdir("./257/file0" [pid 7141] munmap(0x7f957a000000, 138412032 [pid 7140] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5824] <... rmdir resumed>) = 0 [pid 7141] <... munmap resumed>) = 0 [pid 7140] <... openat resumed>) = 3 [pid 5824] umount2("./257/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7141] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7140] chdir("./file0" [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7141] <... openat resumed>) = 4 [pid 7140] <... chdir resumed>) = 0 [ 214.778912][ T7140] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 214.791278][ T7139] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [pid 5824] newfstatat(AT_FDCWD, "./257/binderfs", [pid 7141] ioctl(4, LOOP_SET_FD, 3 [pid 7140] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7140] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7139] <... mount resumed>) = 0 [pid 7140] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7139] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7140] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7139] <... openat resumed>) = 3 [pid 7139] chdir("./file0") = 0 [pid 7139] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7139] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 5824] unlink("./257/binderfs" [pid 7138] <... sync resumed>) = 0 [pid 7139] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7138] exit_group(0 [pid 5824] <... unlink resumed>) = 0 [pid 5824] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] close(3 [pid 7138] <... exit_group resumed>) = ? [pid 5824] <... close resumed>) = 0 [pid 5824] rmdir("./257") = 0 [pid 5824] mkdir("./258", 0777 [pid 7138] +++ exited with 0 +++ [pid 5824] <... mkdir resumed>) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7138, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5824] <... openat resumed>) = 3 [pid 7139] <... renameat2 resumed>) = 0 [pid 5824] ioctl(3, LOOP_CLR_FD [pid 7140] <... renameat2 resumed>) = 0 [pid 5824] <... ioctl resumed>) = 0 [pid 5827] umount2("./251", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] close(3 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... close resumed>) = 0 [pid 5827] openat(AT_FDCWD, "./251", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7140] sync( [pid 7139] sync( [pid 5827] <... openat resumed>) = 3 [pid 5827] newfstatat(3, "", [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7142 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 7142 attached [pid 5827] getdents64(3, [pid 7142] set_robust_list(0x55557eba4660, 24 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 7142] <... set_robust_list resumed>) = 0 [pid 5827] umount2("./251/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7142] chdir("./258" [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7142] <... chdir resumed>) = 0 [pid 5827] newfstatat(AT_FDCWD, "./251/binderfs", [pid 7142] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] unlink("./251/binderfs") = 0 [pid 5827] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5827] close(3) = 0 [pid 5827] rmdir("./251") = 0 [pid 7142] <... prctl resumed>) = 0 [pid 7142] setpgid(0, 0) = 0 [pid 7142] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5827] mkdir("./252", 0777 [pid 7142] <... openat resumed>) = 3 [pid 5827] <... mkdir resumed>) = 0 [pid 7142] write(3, "1000", 4 [pid 7141] <... ioctl resumed>) = 0 [pid 7140] <... sync resumed>) = 0 [pid 7139] <... sync resumed>) = 0 [pid 7142] <... write resumed>) = 4 [pid 7141] close(3 [pid 7142] close(3 [pid 7141] <... close resumed>) = 0 [pid 7142] <... close resumed>) = 0 [pid 7141] close(4 [pid 7142] symlink("/dev/binderfs", "./binderfs" [pid 7141] <... close resumed>) = 0 [pid 7142] <... symlink resumed>) = 0 [ 214.827880][ T7141] loop0: detected capacity change from 0 to 128 [pid 7141] mkdir("./file0", 0777 [pid 7140] exit_group(0 [pid 7139] exit_group(0 [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWRexecuting program [pid 7142] write(1, "executing program\n", 18 [pid 7141] <... mkdir resumed>) = 0 [pid 7140] <... exit_group resumed>) = ? [pid 7139] <... exit_group resumed>) = ? [pid 5827] <... openat resumed>) = 3 [pid 5827] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 7142] <... write resumed>) = 18 [pid 7139] +++ exited with 0 +++ [pid 5827] close(3) = 0 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557eba4650) = 7143 [pid 7140] +++ exited with 0 +++ [pid 7141] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, ""./strace-static-x86_64: Process 7143 attached [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7140, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7143] set_robust_list(0x55557eba4660, 24 [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7139, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7143] <... set_robust_list resumed>) = 0 [pid 7143] chdir("./252") = 0 [pid 7143] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7142] memfd_create("syzkaller", 0 [pid 5825] umount2("./256", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] umount2("./261", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] openat(AT_FDCWD, "./256", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7142] <... memfd_create resumed>) = 3 [pid 7142] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... openat resumed>) = 3 [pid 7142] <... mmap resumed>) = 0x7f957a000000 [pid 5826] openat(AT_FDCWD, "./261", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] newfstatat(3, "", [pid 7142] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5826] <... openat resumed>) = 3 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] newfstatat(3, "", [pid 7143] <... prctl resumed>) = 0 [pid 5825] getdents64(3, [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7143] setpgid(0, 0 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5826] getdents64(3, [pid 5825] umount2("./256/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 7143] <... setpgid resumed>) = 0 [pid 7143] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5826] umount2("./261/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... umount2 resumed>) = 0 [pid 7142] <... write resumed>) = 65536 [pid 5825] umount2("./256/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7143] <... openat resumed>) = 3 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7143] write(3, "1000", 4 [pid 5825] newfstatat(AT_FDCWD, "./256/file0", [pid 7143] <... write resumed>) = 4 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7143] close(3 [pid 7142] munmap(0x7f957a000000, 138412032 [pid 5825] umount2("./256/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7143] <... close resumed>) = 0 [pid 7142] <... munmap resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7143] symlink("/dev/binderfs", "./binderfs" [pid 7142] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7143] <... symlink resumed>) = 0 [pid 7142] <... openat resumed>) = 4 [pid 7143] write(1, "executing program\n", 18 [pid 7142] ioctl(4, LOOP_SET_FD, 3executing program [pid 7143] <... write resumed>) = 18 [pid 7141] <... mount resumed>) = 0 [pid 5826] <... umount2 resumed>) = 0 [pid 5825] openat(AT_FDCWD, "./256/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7143] memfd_create("syzkaller", 0 [pid 7142] <... ioctl resumed>) = 0 [pid 7141] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5826] umount2("./261/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... openat resumed>) = 4 [pid 7143] <... memfd_create resumed>) = 3 [pid 7143] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7143] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7142] close(3 [pid 7141] <... openat resumed>) = 3 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(4, "", [pid 7143] <... write resumed>) = 65536 [pid 5826] newfstatat(AT_FDCWD, "./261/file0", [pid 7143] munmap(0x7f957a000000, 138412032 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7143] <... munmap resumed>) = 0 [pid 7142] <... close resumed>) = 0 [pid 7141] chdir("./file0" [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] getdents64(4, [pid 7143] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7142] close(4 [pid 7141] <... chdir resumed>) = 0 [pid 5826] umount2("./261/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7143] <... openat resumed>) = 4 [pid 7142] <... close resumed>) = 0 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 7141] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] getdents64(4, [pid 5826] openat(AT_FDCWD, "./261/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 7143] ioctl(4, LOOP_SET_FD, 3 [pid 7142] mkdir("./file0", 0777 [pid 7141] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5826] <... openat resumed>) = 4 [ 214.902963][ T7141] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 214.930196][ T7142] loop1: detected capacity change from 0 to 128 [pid 5825] close(4 [pid 5826] newfstatat(4, "", [pid 7142] <... mkdir resumed>) = 0 [pid 7141] openat(AT_FDCWD, ".", O_RDONLY [pid 5825] <... close resumed>) = 0 [pid 7142] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7141] <... openat resumed>) = 4 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] rmdir("./256/file0" [pid 7141] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5826] getdents64(4, [pid 5825] <... rmdir resumed>) = 0 [pid 5825] umount2("./256/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5826] getdents64(4, [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5825] newfstatat(AT_FDCWD, "./256/binderfs", [pid 5826] close(4 [pid 7141] <... renameat2 resumed>) = 0 [pid 7141] sync( [pid 5826] <... close resumed>) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7143] <... ioctl resumed>) = 0 [pid 5826] rmdir("./261/file0" [pid 5825] unlink("./256/binderfs" [pid 5826] <... rmdir resumed>) = 0 [pid 7143] close(3 [pid 5826] umount2("./261/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... unlink resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] getdents64(3, [pid 5826] newfstatat(AT_FDCWD, "./261/binderfs", [pid 7143] <... close resumed>) = 0 [pid 7143] close(4 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7143] <... close resumed>) = 0 [pid 7143] mkdir("./file0", 0777 [pid 5826] unlink("./261/binderfs" [pid 5825] close(3 [pid 7143] <... mkdir resumed>) = 0 [pid 5826] <... unlink resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 5826] getdents64(3, [ 214.950428][ T7143] loop4: detected capacity change from 0 to 128 [ 214.968021][ T7142] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [pid 5825] rmdir("./256" [pid 7143] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5825] <... rmdir resumed>) = 0 [pid 5826] close(3 [pid 5825] mkdir("./257", 0777 [pid 5826] <... close resumed>) = 0 [pid 5825] <... mkdir resumed>) = 0 [pid 5826] rmdir("./261" [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 7142] <... mount resumed>) = 0 [pid 5826] <... rmdir resumed>) = 0 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 7142] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5825] <... ioctl resumed>) = 0 [pid 7142] chdir("./file0" [pid 5826] mkdir("./262", 0777 [pid 5825] close(3 [pid 7142] <... chdir resumed>) = 0 [pid 7142] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5825] <... close resumed>) = 0 [pid 7142] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5826] <... mkdir resumed>) = 0 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7142] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7142] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0./strace-static-x86_64: Process 7144 attached [pid 7144] set_robust_list(0x55557eba4660, 24) = 0 [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7144 [pid 7144] chdir("./257") = 0 [pid 7142] <... renameat2 resumed>) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7144] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7142] sync( [pid 5826] <... openat resumed>) = 3 [pid 7144] <... prctl resumed>) = 0 [pid 7144] setpgid(0, 0) = 0 [pid 5826] ioctl(3, LOOP_CLR_FD [pid 7144] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5826] <... ioctl resumed>) = 0 [pid 7144] <... openat resumed>) = 3 [pid 5826] close(3) = 0 [pid 7144] write(3, "1000", 4 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7144] <... write resumed>) = 4 ./strace-static-x86_64: Process 7145 attached [ 215.026743][ T7143] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [pid 7144] close(3) = 0 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7145 [pid 7144] symlink("/dev/binderfs", "./binderfs" [pid 7145] set_robust_list(0x55557eba4660, 24 [pid 7144] <... symlink resumed>) = 0 executing program [pid 7145] <... set_robust_list resumed>) = 0 [pid 7144] write(1, "executing program\n", 18) = 18 [pid 7145] chdir("./262" [pid 7143] <... mount resumed>) = 0 [pid 7144] memfd_create("syzkaller", 0 [pid 7143] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7144] <... memfd_create resumed>) = 3 [pid 7143] <... openat resumed>) = 3 [pid 7145] <... chdir resumed>) = 0 [pid 7144] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7145] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7143] chdir("./file0" [pid 7145] <... prctl resumed>) = 0 [pid 7144] <... mmap resumed>) = 0x7f957a000000 [pid 7145] setpgid(0, 0 [pid 7143] <... chdir resumed>) = 0 [pid 7143] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7145] <... setpgid resumed>) = 0 [pid 7144] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7143] openat(AT_FDCWD, ".", O_RDONLY [pid 7145] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7144] <... write resumed>) = 65536 [pid 7145] write(3, "1000", 4 [pid 7144] munmap(0x7f957a000000, 138412032 [pid 7145] <... write resumed>) = 4 [pid 7144] <... munmap resumed>) = 0 [pid 7145] close(3executing program ) = 0 [pid 7144] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7145] symlink("/dev/binderfs", "./binderfs" [pid 7143] <... openat resumed>) = 4 [pid 7143] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7145] <... symlink resumed>) = 0 [pid 7144] <... openat resumed>) = 4 [pid 7145] write(1, "executing program\n", 18) = 18 [pid 7144] ioctl(4, LOOP_SET_FD, 3 [pid 7145] memfd_create("syzkaller", 0) = 3 [pid 7141] <... sync resumed>) = 0 [pid 7142] <... sync resumed>) = 0 [pid 7141] exit_group(0 [pid 7145] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7144] <... ioctl resumed>) = 0 [pid 7143] <... renameat2 resumed>) = 0 [pid 7142] exit_group(0 [pid 7141] <... exit_group resumed>) = ? [pid 7142] <... exit_group resumed>) = ? [pid 7145] <... mmap resumed>) = 0x7f957a000000 [pid 7144] close(3 [pid 7142] +++ exited with 0 +++ [pid 7145] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7144] <... close resumed>) = 0 [pid 7145] <... write resumed>) = 65536 [pid 7144] close(4 [pid 7141] +++ exited with 0 +++ [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7142, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7144] <... close resumed>) = 0 [pid 7143] sync( [pid 5824] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7141, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7145] munmap(0x7f957a000000, 138412032 [pid 7144] mkdir("./file0", 0777 [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 7145] <... munmap resumed>) = 0 [pid 7144] <... mkdir resumed>) = 0 [pid 5824] umount2("./258", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7145] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 215.122316][ T7144] loop2: detected capacity change from 0 to 128 [pid 7145] <... openat resumed>) = 4 [pid 7144] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5824] openat(AT_FDCWD, "./258", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] <... restart_syscall resumed>) = 0 [pid 7145] ioctl(4, LOOP_SET_FD, 3 [pid 5824] <... openat resumed>) = 3 [pid 5824] newfstatat(3, "", [pid 5823] umount2("./261", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7143] <... sync resumed>) = 0 [pid 5823] openat(AT_FDCWD, "./261", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] getdents64(3, [pid 7143] exit_group(0) = ? [pid 5823] <... openat resumed>) = 3 [pid 7143] +++ exited with 0 +++ [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] newfstatat(3, "", [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7143, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5824] umount2("./258/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] umount2("./261/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7145] <... ioctl resumed>) = 0 [pid 7145] close(3) = 0 [pid 7145] close(4) = 0 [pid 5827] umount2("./252", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7145] mkdir("./file0", 0777 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7145] <... mkdir resumed>) = 0 [pid 5827] openat(AT_FDCWD, "./252", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7145] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7144] <... mount resumed>) = 0 [pid 5827] <... openat resumed>) = 3 [pid 5824] <... umount2 resumed>) = 0 [pid 5827] newfstatat(3, "", [pid 5824] umount2("./258/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./258/file0", [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 215.181218][ T7145] loop3: detected capacity change from 0 to 128 [ 215.197007][ T7144] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [pid 7144] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5827] getdents64(3, [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] umount2("./258/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] openat(AT_FDCWD, "./258/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7144] <... openat resumed>) = 3 [pid 5824] <... openat resumed>) = 4 [pid 7144] chdir("./file0" [pid 5827] umount2("./252/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... umount2 resumed>) = 0 [pid 5824] getdents64(4, [pid 7144] <... chdir resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] umount2("./261/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] getdents64(4, [pid 7144] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] close(4 [pid 5823] newfstatat(AT_FDCWD, "./261/file0", [pid 7144] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... close resumed>) = 0 [pid 5823] umount2("./261/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] rmdir("./258/file0" [pid 7144] openat(AT_FDCWD, ".", O_RDONLY [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... rmdir resumed>) = 0 [pid 5823] openat(AT_FDCWD, "./261/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7144] <... openat resumed>) = 4 [pid 5823] <... openat resumed>) = 4 [pid 7144] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7145] <... mount resumed>) = 0 [pid 5827] <... umount2 resumed>) = 0 [pid 5824] umount2("./258/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] newfstatat(4, "", [pid 5827] umount2("./252/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7145] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] newfstatat(AT_FDCWD, "./258/binderfs", [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] getdents64(4, [pid 7145] <... openat resumed>) = 3 [pid 7144] <... renameat2 resumed>) = 0 [pid 5827] newfstatat(AT_FDCWD, "./252/file0", [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 7145] chdir("./file0" [pid 7144] sync( [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./258/binderfs" [pid 5823] getdents64(4, [pid 7145] <... chdir resumed>) = 0 [pid 5827] umount2("./252/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... unlink resumed>) = 0 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] getdents64(3, [pid 5823] close(4 [pid 7145] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] <... close resumed>) = 0 [ 215.238884][ T7145] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [pid 7145] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5827] openat(AT_FDCWD, "./252/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] close(3 [pid 5823] rmdir("./261/file0" [pid 5824] <... close resumed>) = 0 [pid 5823] <... rmdir resumed>) = 0 [pid 7145] openat(AT_FDCWD, ".", O_RDONLY [pid 5827] <... openat resumed>) = 4 [pid 5824] rmdir("./258" [pid 5823] umount2("./261/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] newfstatat(4, "", [pid 7145] <... openat resumed>) = 4 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7145] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5824] <... rmdir resumed>) = 0 [pid 5823] newfstatat(AT_FDCWD, "./261/binderfs", [pid 5827] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7145] <... renameat2 resumed>) = 0 [pid 5827] getdents64(4, [pid 5824] mkdir("./259", 0777 [pid 5823] unlink("./261/binderfs" [pid 7145] sync( [pid 7144] <... sync resumed>) = 0 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] <... mkdir resumed>) = 0 [pid 7144] exit_group(0 [pid 5827] close(4 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5823] <... unlink resumed>) = 0 [pid 5827] <... close resumed>) = 0 [pid 5824] <... openat resumed>) = 3 [pid 5823] getdents64(3, [pid 5824] ioctl(3, LOOP_CLR_FD [pid 7144] <... exit_group resumed>) = ? [pid 5827] rmdir("./252/file0" [pid 5824] <... ioctl resumed>) = 0 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5827] <... rmdir resumed>) = 0 [pid 5824] close(3 [pid 5823] close(3 [pid 7144] +++ exited with 0 +++ [pid 5823] <... close resumed>) = 0 [pid 5827] umount2("./252/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7144, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5824] <... close resumed>) = 0 [pid 5823] rmdir("./261" [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] restart_syscall(<... resuming interrupted clone ...> [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5823] <... rmdir resumed>) = 0 [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7146 ./strace-static-x86_64: Process 7146 attached [pid 5827] newfstatat(AT_FDCWD, "./252/binderfs", [pid 7146] set_robust_list(0x55557eba4660, 24 [pid 7145] <... sync resumed>) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... restart_syscall resumed>) = 0 [pid 5823] mkdir("./262", 0777 [pid 5827] unlink("./252/binderfs" [pid 7146] <... set_robust_list resumed>) = 0 [pid 5827] <... unlink resumed>) = 0 [pid 5823] <... mkdir resumed>) = 0 [pid 5825] umount2("./257", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7146] chdir("./259" [pid 5827] getdents64(3, [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... openat resumed>) = 3 [pid 7146] <... chdir resumed>) = 0 [pid 5825] openat(AT_FDCWD, "./257", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7146] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] ioctl(3, LOOP_CLR_FD [pid 7146] <... prctl resumed>) = 0 [pid 7145] exit_group(0 [pid 5827] close(3 [pid 5825] <... openat resumed>) = 3 [pid 5823] <... ioctl resumed>) = 0 [pid 7145] <... exit_group resumed>) = ? [pid 5825] newfstatat(3, "", [pid 5823] close(3 [pid 5827] <... close resumed>) = 0 [pid 7146] setpgid(0, 0) = 0 [pid 5827] rmdir("./252" [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7146] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5827] <... rmdir resumed>) = 0 [pid 5825] getdents64(3, [pid 5823] <... close resumed>) = 0 [pid 7146] <... openat resumed>) = 3 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7145] +++ exited with 0 +++ [pid 7146] write(3, "1000", 4 [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7145, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5825] umount2("./257/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] mkdir("./253", 0777./strace-static-x86_64: Process 7147 attached ) = 0 [pid 7146] <... write resumed>) = 4 [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7147 [pid 7146] close(3 [pid 7147] set_robust_list(0x55557eba4660, 24 [pid 7146] <... close resumed>) = 0 [pid 7147] <... set_robust_list resumed>) = 0 [pid 7147] chdir("./262" [pid 7146] symlink("/dev/binderfs", "./binderfs" [pid 5827] <... openat resumed>) = 3 [pid 7146] <... symlink resumed>) = 0 [pid 5827] ioctl(3, LOOP_CLR_FD [pid 5826] umount2("./262", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7146] write(1, "executing program\n", 18 executing program [pid 5827] <... ioctl resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./262", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] close(3 [pid 7147] <... chdir resumed>) = 0 [pid 5826] <... openat resumed>) = 3 [pid 5827] <... close resumed>) = 0 [pid 7146] <... write resumed>) = 18 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5826] newfstatat(3, "", [pid 7147] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7147] setpgid(0, 0) = 0 [pid 7146] memfd_create("syzkaller", 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7147] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7146] <... memfd_create resumed>) = 3 [pid 5826] getdents64(3, [pid 7147] <... openat resumed>) = 3 [pid 7146] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 7147] write(3, "1000", 4 [pid 7146] <... mmap resumed>) = 0x7f957a000000 [pid 5826] umount2("./262/file0", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7148 attached [pid 7146] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7147] <... write resumed>) = 4 [pid 7147] close(3) = 0 [pid 7147] symlink("/dev/binderfs", "./binderfs" [pid 7148] set_robust_list(0x55557eba4660, 24 [pid 7147] <... symlink resumed>) = 0 executing program [pid 7146] <... write resumed>) = 65536 [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7148 [pid 7147] write(1, "executing program\n", 18) = 18 [pid 7148] <... set_robust_list resumed>) = 0 [pid 7147] memfd_create("syzkaller", 0 [pid 7146] munmap(0x7f957a000000, 138412032 [pid 7147] <... memfd_create resumed>) = 3 [pid 7148] chdir("./253" [pid 7147] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7148] <... chdir resumed>) = 0 [pid 7147] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7146] <... munmap resumed>) = 0 [pid 7148] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7146] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7148] <... prctl resumed>) = 0 [pid 7148] setpgid(0, 0 [pid 7147] <... write resumed>) = 65536 [pid 7146] <... openat resumed>) = 4 [pid 7148] <... setpgid resumed>) = 0 [pid 7146] ioctl(4, LOOP_SET_FD, 3 [pid 7147] munmap(0x7f957a000000, 138412032 [pid 7148] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7147] <... munmap resumed>) = 0 [pid 7147] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7147] ioctl(4, LOOP_SET_FD, 3 [pid 7148] <... openat resumed>) = 3 [pid 7148] write(3, "1000", 4 [pid 7146] <... ioctl resumed>) = 0 [pid 7148] <... write resumed>) = 4 [pid 7148] close(3) = 0 [pid 7148] symlink("/dev/binderfs", "./binderfs" [pid 7146] close(3) = 0 [pid 7146] close(4 [pid 5825] <... umount2 resumed>) = 0 [pid 7148] <... symlink resumed>) = 0 [pid 7146] <... close resumed>) = 0 [pid 5825] umount2("./257/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./257/file0", executing program [pid 7148] write(1, "executing program\n", 18 [pid 7146] mkdir("./file0", 0777 [pid 7148] <... write resumed>) = 18 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] umount2("./257/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7146] <... mkdir resumed>) = 0 [pid 7146] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5825] openat(AT_FDCWD, "./257/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 7148] memfd_create("syzkaller", 0 [pid 5825] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 7148] <... memfd_create resumed>) = 3 [pid 5826] <... umount2 resumed>) = 0 [pid 7148] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7147] <... ioctl resumed>) = 0 [pid 5826] umount2("./262/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./262/file0", [pid 7148] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] umount2("./262/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./262/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] getdents64(4, [pid 7147] close(3 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 7147] <... close resumed>) = 0 [pid 5825] close(4) = 0 [pid 7147] close(4 [pid 5826] <... openat resumed>) = 4 [ 215.413797][ T7146] loop1: detected capacity change from 0 to 128 [ 215.422117][ T7147] loop0: detected capacity change from 0 to 128 [pid 5825] rmdir("./257/file0" [pid 7147] <... close resumed>) = 0 [pid 5826] newfstatat(4, "", [pid 5825] <... rmdir resumed>) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] umount2("./257/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] getdents64(4, [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] newfstatat(AT_FDCWD, "./257/binderfs", [pid 7147] mkdir("./file0", 0777 [pid 5826] getdents64(4, [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7147] <... mkdir resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5825] unlink("./257/binderfs" [pid 5826] close(4 [pid 5825] <... unlink resumed>) = 0 [pid 5826] <... close resumed>) = 0 [pid 5825] getdents64(3, [pid 7147] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5826] rmdir("./262/file0" [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] <... rmdir resumed>) = 0 [pid 5825] close(3) = 0 [pid 5826] umount2("./262/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] rmdir("./257" [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... rmdir resumed>) = 0 [pid 5826] newfstatat(AT_FDCWD, "./262/binderfs", [pid 5825] mkdir("./258", 0777 [pid 7148] <... write resumed>) = 65536 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... mkdir resumed>) = 0 [pid 5826] unlink("./262/binderfs" [pid 7148] munmap(0x7f957a000000, 138412032 [pid 5826] <... unlink resumed>) = 0 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7148] <... munmap resumed>) = 0 [pid 7148] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7146] <... mount resumed>) = 0 [pid 5825] <... openat resumed>) = 3 [pid 7146] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5825] ioctl(3, LOOP_CLR_FD [pid 7148] <... openat resumed>) = 4 [pid 5825] <... ioctl resumed>) = 0 [pid 7146] <... openat resumed>) = 3 [pid 7148] ioctl(4, LOOP_SET_FD, 3 [pid 7146] chdir("./file0" [pid 5825] close(3 [pid 7146] <... chdir resumed>) = 0 [pid 7148] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 7146] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5826] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5825] <... close resumed>) = 0 [pid 5826] close(3 [pid 7148] ioctl(4, LOOP_CLR_FD [pid 7146] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5826] <... close resumed>) = 0 [pid 7146] openat(AT_FDCWD, ".", O_RDONLY [pid 7148] <... ioctl resumed>) = 0 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7146] <... openat resumed>) = 4 [pid 7146] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5826] rmdir("./262" [pid 7148] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 7149 attached ) = -1 EBUSY (Device or resource busy) [pid 7146] <... renameat2 resumed>) = 0 [pid 5826] <... rmdir resumed>) = 0 [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7149 [pid 5826] mkdir("./263", 0777) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5826] ioctl(3, LOOP_CLR_FD) = 0 [pid 7148] close(4 [pid 7146] sync( [pid 5826] close(3 [pid 7148] <... close resumed>) = 0 [pid 5826] <... close resumed>) = 0 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7150 attached [ 215.471291][ T7146] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 215.484346][ T7147] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [pid 7149] set_robust_list(0x55557eba4660, 24 [pid 7148] close(3 [pid 7150] set_robust_list(0x55557eba4660, 24 [pid 7149] <... set_robust_list resumed>) = 0 [pid 7148] <... close resumed>) = 0 [pid 7150] <... set_robust_list resumed>) = 0 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7150 [pid 7149] chdir("./258" [pid 7150] chdir("./263" [pid 7148] openat(AT_FDCWD, ".", O_RDONLY [pid 7150] <... chdir resumed>) = 0 [pid 7150] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7148] <... openat resumed>) = 3 [pid 7150] <... prctl resumed>) = 0 [pid 7150] setpgid(0, 0) = 0 [pid 7150] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7149] <... chdir resumed>) = 0 [pid 7150] <... openat resumed>) = 3 [pid 7147] <... mount resumed>) = 0 [pid 7150] write(3, "1000", 4 [pid 7147] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7150] <... write resumed>) = 4 [pid 7147] <... openat resumed>) = 3 [pid 7150] close(3 [pid 7147] chdir("./file0" [pid 7150] <... close resumed>) = 0 [pid 7147] <... chdir resumed>) = 0 [pid 7150] symlink("/dev/binderfs", "./binderfs" [pid 7147] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7150] <... symlink resumed>) = 0 [pid 7147] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7147] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7147] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0executing program [pid 7150] write(1, "executing program\n", 18 [pid 7149] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7148] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7150] <... write resumed>) = 18 [pid 7149] <... prctl resumed>) = 0 [pid 7148] <... renameat2 resumed>) = -1 ENOENT (No such file or directory) [pid 7147] <... renameat2 resumed>) = 0 [pid 7149] setpgid(0, 0 [pid 7148] sync( [pid 7149] <... setpgid resumed>) = 0 [pid 7150] memfd_create("syzkaller", 0 [pid 7149] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7147] sync( [pid 7150] <... memfd_create resumed>) = 3 [pid 7150] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7150] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7149] <... openat resumed>) = 3 [pid 7150] <... write resumed>) = 65536 [pid 7149] write(3, "1000", 4 [pid 7148] <... sync resumed>) = 0 [pid 7147] <... sync resumed>) = 0 [pid 7146] <... sync resumed>) = 0 [pid 7149] <... write resumed>) = 4 [pid 7148] exit_group(0 [pid 7147] exit_group(0 [pid 7149] close(3 [pid 7147] <... exit_group resumed>) = ? [pid 7150] munmap(0x7f957a000000, 138412032 [pid 7149] <... close resumed>) = 0 [pid 7148] <... exit_group resumed>) = ? [pid 7147] +++ exited with 0 +++ [pid 7146] exit_group(0 [pid 7149] symlink("/dev/binderfs", "./binderfs" [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7147, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7150] <... munmap resumed>) = 0 [pid 7149] <... symlink resumed>) = 0 [pid 7150] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 7150] ioctl(4, LOOP_SET_FD, 3executing program [pid 7149] write(1, "executing program\n", 18 [pid 7148] +++ exited with 0 +++ [pid 7146] <... exit_group resumed>) = ? [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7148, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5823] umount2("./262", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7149] <... write resumed>) = 18 [pid 7149] memfd_create("syzkaller", 0 [pid 7146] +++ exited with 0 +++ [pid 5827] restart_syscall(<... resuming interrupted clone ...> [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7149] <... memfd_create resumed>) = 3 [pid 5823] openat(AT_FDCWD, "./262", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7146, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 7149] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5823] <... openat resumed>) = 3 [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 7149] <... mmap resumed>) = 0x7f957a000000 [pid 5823] newfstatat(3, "", [pid 7149] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7150] <... ioctl resumed>) = 0 [pid 7149] <... write resumed>) = 65536 [pid 5827] <... restart_syscall resumed>) = 0 [pid 5824] <... restart_syscall resumed>) = 0 [pid 5823] getdents64(3, [pid 7150] close(3) = 0 [pid 7150] close(4 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 7150] <... close resumed>) = 0 [pid 7149] munmap(0x7f957a000000, 138412032 [pid 7150] mkdir("./file0", 0777 [pid 5823] umount2("./262/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7150] <... mkdir resumed>) = 0 [pid 7149] <... munmap resumed>) = 0 [pid 5824] umount2("./259", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7150] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5827] umount2("./253", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7149] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... umount2 resumed>) = 0 [pid 7149] <... openat resumed>) = 4 [pid 5827] openat(AT_FDCWD, "./253", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] openat(AT_FDCWD, "./259", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] umount2("./262/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] <... openat resumed>) = 3 [pid 5827] <... openat resumed>) = 3 [pid 5823] newfstatat(AT_FDCWD, "./262/file0", [pid 5824] newfstatat(3, "", [pid 7149] ioctl(4, LOOP_SET_FD, 3 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 215.589632][ T7150] loop3: detected capacity change from 0 to 128 [ 215.621534][ T7150] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [pid 5823] umount2("./262/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./262/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5823] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] close(4) = 0 [pid 5823] rmdir("./262/file0") = 0 [pid 5823] umount2("./262/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./262/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./262/binderfs") = 0 [pid 5823] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] close(3) = 0 [pid 5823] rmdir("./262") = 0 [pid 5823] mkdir("./263", 0777 [pid 7149] <... ioctl resumed>) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... mkdir resumed>) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5827] newfstatat(3, "", [pid 5824] getdents64(3, [pid 5823] <... openat resumed>) = 3 [pid 5823] ioctl(3, LOOP_CLR_FD) = 0 [pid 5823] close(3) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7151 attached [pid 7149] close(3 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 7149] <... close resumed>) = 0 [pid 5827] getdents64(3, [pid 5824] umount2("./259/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7149] close(4 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 5827] umount2("./253/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7149] <... close resumed>) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7149] mkdir("./file0", 0777 [pid 5827] newfstatat(AT_FDCWD, "./253/binderfs", [pid 7151] set_robust_list(0x55557eba4660, 24 [pid 7150] <... mount resumed>) = 0 [pid 7149] <... mkdir resumed>) = 0 [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7151 [pid 7149] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7151] <... set_robust_list resumed>) = 0 [pid 7150] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7151] chdir("./263" [pid 7150] <... openat resumed>) = 3 [pid 5827] unlink("./253/binderfs" [pid 7151] <... chdir resumed>) = 0 [pid 7150] chdir("./file0" [pid 7151] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7150] <... chdir resumed>) = 0 [pid 7151] <... prctl resumed>) = 0 [pid 7150] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7151] setpgid(0, 0) = 0 [pid 7150] openat(AT_FDCWD, ".", O_RDONLY [pid 7151] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7150] <... openat resumed>) = 4 [pid 7151] <... openat resumed>) = 3 [pid 7150] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = 0 [pid 7150] sync( [pid 7151] write(3, "1000", 4) = 4 [pid 7151] close(3) = 0 [pid 7151] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5827] <... unlink resumed>) = 0 [pid 7151] write(1, "executing program\n", 18 [pid 5827] getdents64(3, executing program 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7151] <... write resumed>) = 18 [pid 7151] memfd_create("syzkaller", 0) = 3 [pid 5827] close(3 [pid 7151] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 5827] <... close resumed>) = 0 [pid 5824] <... umount2 resumed>) = 0 [pid 7151] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5827] rmdir("./253" [pid 5824] umount2("./259/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7151] <... write resumed>) = 65536 [pid 7151] munmap(0x7f957a000000, 138412032) = 0 [pid 7151] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5827] <... rmdir resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7151] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 7151] ioctl(4, LOOP_CLR_FD [pid 5824] newfstatat(AT_FDCWD, "./259/file0", [pid 5827] mkdir("./254", 0777 [pid 7151] <... ioctl resumed>) = 0 [pid 5827] <... mkdir resumed>) = 0 [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] <... openat resumed>) = 3 [pid 7151] ioctl(4, LOOP_SET_FD, 3 [pid 5827] ioctl(3, LOOP_CLR_FD [pid 5824] umount2("./259/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7151] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 7151] close(4) = 0 [pid 5827] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7151] close(3) = 0 [pid 5827] close(3 [pid 5824] openat(AT_FDCWD, "./259/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7151] openat(AT_FDCWD, ".", O_RDONLY [pid 5827] <... close resumed>) = 0 [pid 5824] <... openat resumed>) = 4 [pid 7151] <... openat resumed>) = 3 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7151] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = -1 ENOENT (No such file or directory) [pid 7151] sync(./strace-static-x86_64: Process 7152 attached [pid 5824] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7152 [pid 7152] set_robust_list(0x55557eba4660, 24 [ 215.654949][ T7149] loop2: detected capacity change from 0 to 128 [ 215.680668][ T7149] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [pid 5824] getdents64(4, [pid 7152] <... set_robust_list resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] getdents64(4, [pid 7152] chdir("./254" [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 7152] <... chdir resumed>) = 0 [pid 5824] close(4) = 0 [pid 5824] rmdir("./259/file0" [pid 7152] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 5824] umount2("./259/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7152] setpgid(0, 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./259/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./259/binderfs" [pid 7152] <... setpgid resumed>) = 0 [pid 5824] <... unlink resumed>) = 0 [pid 7152] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5824] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] close(3) = 0 [pid 5824] rmdir("./259") = 0 [pid 5824] mkdir("./260", 0777) = 0 [pid 7152] <... openat resumed>) = 3 [pid 7149] <... mount resumed>) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7152] write(3, "1000", 4 [pid 7149] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5824] <... openat resumed>) = 3 [pid 7152] <... write resumed>) = 4 [pid 5824] ioctl(3, LOOP_CLR_FD [pid 7152] close(3 [pid 7149] <... openat resumed>) = 3 [pid 5824] <... ioctl resumed>) = 0 [pid 7152] <... close resumed>) = 0 [pid 7149] chdir("./file0" [pid 5824] close(3 [pid 7152] symlink("/dev/binderfs", "./binderfs" [pid 7149] <... chdir resumed>) = 0 [pid 7149] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7152] <... symlink resumed>) = 0 [pid 7151] <... sync resumed>) = 0 [pid 7150] <... sync resumed>) = 0 [pid 7149] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5824] <... close resumed>) = 0 [pid 7149] openat(AT_FDCWD, ".", O_RDONLY [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7151] exit_group(0 [pid 7150] exit_group(0 [pid 7151] <... exit_group resumed>) = ? [pid 7150] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 7153 attached [pid 7150] +++ exited with 0 +++ [pid 7152] write(1, "executing program\n", 18 [pid 7149] <... openat resumed>) = 4 [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7150, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- executing program [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7153 [pid 7153] set_robust_list(0x55557eba4660, 24 [pid 7152] <... write resumed>) = 18 [pid 7151] +++ exited with 0 +++ [pid 7149] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7153] <... set_robust_list resumed>) = 0 [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7151, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5826] umount2("./263", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7153] chdir("./260" [pid 7152] memfd_create("syzkaller", 0 [pid 7149] <... renameat2 resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7153] <... chdir resumed>) = 0 [pid 7153] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7152] <... memfd_create resumed>) = 3 [pid 5826] openat(AT_FDCWD, "./263", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7153] setpgid(0, 0 [pid 7152] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7149] sync( [pid 7153] <... setpgid resumed>) = 0 [pid 7153] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5826] <... openat resumed>) = 3 [pid 7152] <... mmap resumed>) = 0x7f957a000000 [pid 5826] newfstatat(3, "", [pid 7153] <... openat resumed>) = 3 [pid 7152] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7153] write(3, "1000", 4 [pid 5826] getdents64(3, [pid 5823] umount2("./263", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7153] <... write resumed>) = 4 [pid 7152] <... write resumed>) = 65536 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7153] close(3) = 0 [pid 7152] munmap(0x7f957a000000, 138412032 [pid 5826] umount2("./263/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] openat(AT_FDCWD, "./263", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7153] symlink("/dev/binderfs", "./binderfs" [pid 7152] <... munmap resumed>) = 0 [pid 5826] <... umount2 resumed>) = 0 [pid 5823] <... openat resumed>) = 3 [pid 5826] umount2("./263/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] newfstatat(3, "", [pid 7153] <... symlink resumed>) = 0 [pid 7152] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] newfstatat(AT_FDCWD, "./263/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] getdents64(3, [pid 5826] umount2("./263/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] umount2("./263/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7152] <... openat resumed>) = 4 [pid 5826] openat(AT_FDCWD, "./263/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7152] ioctl(4, LOOP_SET_FD, 3 [pid 5826] <... openat resumed>) = 4 [pid 5823] newfstatat(AT_FDCWD, "./263/binderfs", [pid 5826] newfstatat(4, "", [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] unlink("./263/binderfs" [pid 5826] getdents64(4, [pid 5823] <... unlink resumed>) = 0 [pid 7149] <... sync resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] getdents64(3, [pid 7149] exit_group(0 [pid 5826] getdents64(4, [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7149] <... exit_group resumed>) = ? [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] close(3 [pid 5826] close(4 [pid 5823] <... close resumed>) = 0 [pid 5826] <... close resumed>) = 0 [pid 5823] rmdir("./263" [pid 5826] rmdir("./263/file0"executing program [pid 5823] <... rmdir resumed>) = 0 [pid 7153] write(1, "executing program\n", 18 [pid 5826] <... rmdir resumed>) = 0 [pid 5823] mkdir("./264", 0777 [pid 7153] <... write resumed>) = 18 [pid 7153] memfd_create("syzkaller", 0 [pid 5826] umount2("./263/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... mkdir resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./263/binderfs", [pid 7153] <... memfd_create resumed>) = 3 [pid 7149] +++ exited with 0 +++ [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7153] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7149, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5825] restart_syscall(<... resuming interrupted clone ...> [pid 5823] <... openat resumed>) = 3 [pid 5826] unlink("./263/binderfs" [pid 5825] <... restart_syscall resumed>) = 0 [pid 5823] ioctl(3, LOOP_CLR_FD [pid 5826] <... unlink resumed>) = 0 [pid 5823] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5826] getdents64(3, [pid 5823] close(3 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5825] umount2("./258", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... close resumed>) = 0 [pid 7153] <... mmap resumed>) = 0x7f957a000000 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7153] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5826] close(3 [pid 5825] openat(AT_FDCWD, "./258", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 7154 attached [pid 7153] <... write resumed>) = 65536 [pid 5826] <... close resumed>) = 0 [pid 5825] <... openat resumed>) = 3 [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7154 [pid 7153] munmap(0x7f957a000000, 138412032 [pid 5825] newfstatat(3, "", [pid 5826] rmdir("./263" [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] <... rmdir resumed>) = 0 [pid 5825] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 7154] set_robust_list(0x55557eba4660, 24 [pid 5825] umount2("./258/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7154] <... set_robust_list resumed>) = 0 [pid 5826] mkdir("./264", 0777 [pid 7153] <... munmap resumed>) = 0 [pid 7152] <... ioctl resumed>) = 0 [pid 5826] <... mkdir resumed>) = 0 [pid 7154] chdir("./264") = 0 [pid 7154] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7154] setpgid(0, 0) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7154] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5826] <... openat resumed>) = 3 [pid 5826] ioctl(3, LOOP_CLR_FD [pid 7154] <... openat resumed>) = 3 [pid 5826] <... ioctl resumed>) = 0 [pid 7153] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7152] close(3 [pid 5825] <... umount2 resumed>) = 0 [pid 5825] umount2("./258/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 215.830281][ T7152] loop4: detected capacity change from 0 to 128 [pid 5825] newfstatat(AT_FDCWD, "./258/file0", [pid 7153] <... openat resumed>) = 4 [pid 7152] <... close resumed>) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7153] ioctl(4, LOOP_SET_FD, 3 [pid 7152] close(4 [pid 5825] umount2("./258/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7154] write(3, "1000", 4 [pid 7152] <... close resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] close(3 [pid 5825] openat(AT_FDCWD, "./258/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] <... close resumed>) = 0 [pid 5825] <... openat resumed>) = 4 [pid 7154] <... write resumed>) = 4 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5825] newfstatat(4, "", [pid 7154] close(3 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 7154] <... close resumed>) = 0 [pid 5825] close(4./strace-static-x86_64: Process 7155 attached [pid 7154] symlink("/dev/binderfs", "./binderfs" [pid 5825] <... close resumed>) = 0 [pid 7154] <... symlink resumed>) = 0 [pid 7153] <... ioctl resumed>) = 0 [pid 7152] mkdir("./file0", 0777 [pid 5825] rmdir("./258/file0" [pid 7155] set_robust_list(0x55557eba4660, 24 [pid 7154] write(1, "executing program\n", 18 [pid 7153] close(3 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7155 [pid 5825] <... rmdir resumed>) = 0 executing program [pid 7153] <... close resumed>) = 0 [pid 7154] <... write resumed>) = 18 [pid 5825] umount2("./258/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7155] <... set_robust_list resumed>) = 0 [pid 7154] memfd_create("syzkaller", 0 [pid 7153] close(4 [pid 7152] <... mkdir resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7155] chdir("./264") = 0 [pid 7153] <... close resumed>) = 0 [pid 7155] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7154] <... memfd_create resumed>) = 3 [pid 5825] newfstatat(AT_FDCWD, "./258/binderfs", executing program [pid 7155] setpgid(0, 0 [pid 7154] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7153] mkdir("./file0", 0777 [pid 7152] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7155] <... setpgid resumed>) = 0 [pid 7154] <... mmap resumed>) = 0x7f957a000000 [pid 5825] unlink("./258/binderfs" [pid 7154] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7153] <... mkdir resumed>) = 0 [pid 5825] <... unlink resumed>) = 0 [pid 7155] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7153] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7155] <... openat resumed>) = 3 [pid 5825] getdents64(3, [pid 7155] write(3, "1000", 4 [pid 7154] <... write resumed>) = 65536 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7155] <... write resumed>) = 4 [pid 7155] close(3 [pid 7154] munmap(0x7f957a000000, 138412032 [pid 7155] <... close resumed>) = 0 [pid 5825] close(3 [pid 7155] symlink("/dev/binderfs", "./binderfs" [pid 7154] <... munmap resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 7155] <... symlink resumed>) = 0 [pid 7154] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5825] rmdir("./258" [pid 7155] write(1, "executing program\n", 18 [pid 7154] <... openat resumed>) = 4 [pid 5825] <... rmdir resumed>) = 0 [pid 7155] <... write resumed>) = 18 [pid 7154] ioctl(4, LOOP_SET_FD, 3 [ 215.894334][ T7153] loop1: detected capacity change from 0 to 128 [ 215.919260][ T7152] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 215.928646][ T7154] loop0: detected capacity change from 0 to 128 [pid 7155] memfd_create("syzkaller", 0 [pid 5825] mkdir("./259", 0777) = 0 [pid 7155] <... memfd_create resumed>) = 3 [pid 7155] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5825] ioctl(3, LOOP_CLR_FD) = 0 [pid 7155] <... mmap resumed>) = 0x7f957a000000 [pid 5825] close(3) = 0 [pid 7155] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7155] <... write resumed>) = 65536 [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7156 [pid 7155] munmap(0x7f957a000000, 138412032./strace-static-x86_64: Process 7156 attached ) = 0 [pid 7155] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 7155] ioctl(4, LOOP_SET_FD, 3 [pid 7156] set_robust_list(0x55557eba4660, 24 [pid 7155] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 7156] <... set_robust_list resumed>) = 0 [pid 7155] ioctl(4, LOOP_CLR_FD [pid 7156] chdir("./259" [pid 7155] <... ioctl resumed>) = 0 [pid 7155] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 7155] close(4) = 0 [pid 7155] close(3) = 0 [pid 7156] <... chdir resumed>) = 0 [pid 7156] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7155] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 7155] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7154] <... ioctl resumed>) = 0 [pid 7156] setpgid(0, 0 [pid 7155] <... renameat2 resumed>) = -1 ENOENT (No such file or directory) [pid 7156] <... setpgid resumed>) = 0 [pid 7155] sync( [pid 7156] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7154] close(3) = 0 [pid 7154] close(4 [pid 7156] <... openat resumed>) = 3 [pid 7154] <... close resumed>) = 0 [pid 7154] mkdir("./file0", 0777 [pid 7156] write(3, "1000", 4 [pid 7154] <... mkdir resumed>) = 0 [pid 7156] <... write resumed>) = 4 [pid 7156] close(3) = 0 [pid 7156] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7154] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7156] write(1, "executing program\n", 18executing program ) = 18 [pid 7156] memfd_create("syzkaller", 0) = 3 [pid 7156] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7156] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [ 215.943401][ T7153] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [pid 7152] <... mount resumed>) = 0 [pid 7156] munmap(0x7f957a000000, 138412032 [pid 7152] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7156] <... munmap resumed>) = 0 [pid 7152] <... openat resumed>) = 3 [pid 7152] chdir("./file0" [pid 7156] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7152] <... chdir resumed>) = 0 [pid 7156] <... openat resumed>) = 4 [pid 7152] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7156] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 7152] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7156] ioctl(4, LOOP_CLR_FD [pid 7152] openat(AT_FDCWD, ".", O_RDONLY [pid 7156] <... ioctl resumed>) = 0 [pid 7153] <... mount resumed>) = 0 [pid 7152] <... openat resumed>) = 4 [pid 7156] ioctl(4, LOOP_SET_FD, 3 [pid 7152] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7156] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 7156] close(4) = 0 [pid 7153] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7152] <... renameat2 resumed>) = 0 [pid 7156] close(3) = 0 [pid 7153] <... openat resumed>) = 3 [pid 7152] sync( [pid 7156] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 7156] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = -1 ENOENT (No such file or directory) [pid 7156] sync( [pid 7153] chdir("./file0") = 0 [ 215.987064][ T7154] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [pid 7153] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7153] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7153] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7154] <... mount resumed>) = 0 [pid 7154] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7154] chdir("./file0") = 0 [pid 7154] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7154] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7156] <... sync resumed>) = 0 [pid 7155] <... sync resumed>) = 0 [pid 7156] exit_group(0 [pid 7155] exit_group(0 [pid 7153] <... renameat2 resumed>) = 0 [pid 7156] <... exit_group resumed>) = ? [pid 7155] <... exit_group resumed>) = ? [pid 7156] +++ exited with 0 +++ [pid 7155] +++ exited with 0 +++ [pid 7153] sync( [pid 7152] <... sync resumed>) = 0 [pid 7152] exit_group(0) = ? [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7155, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7156, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 7152] +++ exited with 0 +++ [pid 5826] restart_syscall(<... resuming interrupted clone ...> [pid 5825] restart_syscall(<... resuming interrupted clone ...> [pid 7153] <... sync resumed>) = 0 [pid 5825] <... restart_syscall resumed>) = 0 [pid 7154] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7153] exit_group(0 [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7152, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5826] <... restart_syscall resumed>) = 0 [pid 5827] umount2("./254", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7153] <... exit_group resumed>) = ? [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] openat(AT_FDCWD, "./254", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] umount2("./264", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./259", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... openat resumed>) = 3 [pid 5826] openat(AT_FDCWD, "./264", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] openat(AT_FDCWD, "./259", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] newfstatat(3, "", [pid 5826] <... openat resumed>) = 3 [pid 5825] <... openat resumed>) = 3 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] newfstatat(3, "", [pid 5825] newfstatat(3, "", [pid 5827] getdents64(3, [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7154] <... renameat2 resumed>) = 0 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5826] getdents64(3, [pid 5825] getdents64(3, [pid 5827] umount2("./254/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 7154] sync( [pid 7153] +++ exited with 0 +++ [pid 5826] umount2("./264/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./259/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./264/binderfs", [pid 5825] newfstatat(AT_FDCWD, "./259/binderfs", [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7153, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 5826] unlink("./264/binderfs" [pid 5825] unlink("./259/binderfs" [pid 5824] <... restart_syscall resumed>) = 0 [pid 5827] <... umount2 resumed>) = 0 [pid 5826] <... unlink resumed>) = 0 [pid 5825] <... unlink resumed>) = 0 [pid 5826] getdents64(3, [pid 5825] getdents64(3, [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] umount2("./260", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] close(3 [pid 5825] close(3 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7154] <... sync resumed>) = 0 [pid 5827] umount2("./254/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... close resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 7154] exit_group(0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] rmdir("./264" [pid 5825] rmdir("./259" [pid 7154] <... exit_group resumed>) = ? [pid 5827] newfstatat(AT_FDCWD, "./254/file0", [pid 5826] <... rmdir resumed>) = 0 [pid 5825] <... rmdir resumed>) = 0 [pid 7154] +++ exited with 0 +++ [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] umount2("./254/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] mkdir("./265", 0777 [pid 5825] mkdir("./260", 0777 [pid 5824] openat(AT_FDCWD, "./260", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7154, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 5824] <... openat resumed>) = 3 [pid 5825] <... mkdir resumed>) = 0 [pid 5823] <... restart_syscall resumed>) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... mkdir resumed>) = 0 [pid 5824] newfstatat(3, "", [pid 5823] umount2("./264", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] getdents64(3, [pid 5823] openat(AT_FDCWD, "./264", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] <... openat resumed>) = 3 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5824] umount2("./260/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] newfstatat(3, "", [pid 5827] openat(AT_FDCWD, "./254/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5826] <... openat resumed>) = 3 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] newfstatat(4, "", [pid 5826] ioctl(3, LOOP_CLR_FD [pid 5825] <... openat resumed>) = 3 [pid 5823] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5825] ioctl(3, LOOP_CLR_FD [pid 5823] umount2("./264/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5826] close(3 [pid 5825] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5827] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5826] <... close resumed>) = 0 [pid 5825] close(3 [pid 5827] close(4 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5825] <... close resumed>) = 0 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7157 attached [pid 5827] <... close resumed>) = 0 ./strace-static-x86_64: Process 7158 attached [pid 5827] rmdir("./254/file0" [pid 7157] set_robust_list(0x55557eba4660, 24 [pid 5827] <... rmdir resumed>) = 0 [pid 5827] umount2("./254/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7157] <... set_robust_list resumed>) = 0 [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7157 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7158 [pid 7158] set_robust_list(0x55557eba4660, 24 [pid 7157] chdir("./260" [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7158] <... set_robust_list resumed>) = 0 [pid 7157] <... chdir resumed>) = 0 [pid 5827] newfstatat(AT_FDCWD, "./254/binderfs", [pid 7157] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7157] <... prctl resumed>) = 0 [pid 5827] unlink("./254/binderfs" [pid 7158] chdir("./265" [pid 7157] setpgid(0, 0 [pid 7158] <... chdir resumed>) = 0 [pid 7158] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7158] setpgid(0, 0 [pid 7157] <... setpgid resumed>) = 0 [pid 5827] <... unlink resumed>) = 0 [pid 7158] <... setpgid resumed>) = 0 [pid 7158] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7157] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5827] getdents64(3, [pid 7158] <... openat resumed>) = 3 [pid 5824] <... umount2 resumed>) = 0 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7158] write(3, "1000", 4 [pid 7157] <... openat resumed>) = 3 [pid 5827] close(3 [pid 7157] write(3, "1000", 4 [pid 7158] <... write resumed>) = 4 [pid 7158] close(3) = 0 [pid 7158] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 7157] <... write resumed>) = 4 [pid 5827] <... close resumed>) = 0 [pid 5824] umount2("./260/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7157] close(3 [pid 5827] rmdir("./254" [pid 7158] write(1, "executing program\n", 18) = 18 [pid 7158] memfd_create("syzkaller", 0 [pid 5827] <... rmdir resumed>) = 0 [pid 7157] <... close resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7157] symlink("/dev/binderfs", "./binderfs" [pid 5827] mkdir("./255", 0777 [pid 5824] newfstatat(AT_FDCWD, "./260/file0", [pid 7158] <... memfd_create resumed>) = 3 [pid 7157] <... symlink resumed>) = 0 [pid 5827] <... mkdir resumed>) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 executing program [pid 7157] write(1, "executing program\n", 18 [pid 7158] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5824] umount2("./260/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7157] <... write resumed>) = 18 [pid 5827] <... openat resumed>) = 3 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7158] <... mmap resumed>) = 0x7f957a000000 [pid 7157] memfd_create("syzkaller", 0 [pid 5827] ioctl(3, LOOP_CLR_FD [pid 5824] openat(AT_FDCWD, "./260/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7158] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7157] <... memfd_create resumed>) = 3 [pid 5827] <... ioctl resumed>) = 0 [pid 5824] <... openat resumed>) = 4 [pid 7157] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5824] newfstatat(4, "", [pid 5827] close(3) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7158] <... write resumed>) = 65536 [pid 5824] getdents64(4, [pid 7158] munmap(0x7f957a000000, 138412032 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 7158] <... munmap resumed>) = 0 [pid 7157] <... mmap resumed>) = 0x7f957a000000 [pid 5824] getdents64(4, [pid 5823] <... umount2 resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] umount2("./264/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] close(4 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7158] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7157] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5824] <... close resumed>) = 0 [pid 5823] newfstatat(AT_FDCWD, "./264/file0", [pid 5824] rmdir("./260/file0" [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 7159 attached [pid 5824] <... rmdir resumed>) = 0 [pid 5823] umount2("./264/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./260/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7158] <... openat resumed>) = 4 [pid 7158] ioctl(4, LOOP_SET_FD, 3 [pid 7159] set_robust_list(0x55557eba4660, 24 [pid 7158] <... ioctl resumed>) = 0 [pid 7157] <... write resumed>) = 65536 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7159 [pid 5824] newfstatat(AT_FDCWD, "./260/binderfs", [pid 7159] <... set_robust_list resumed>) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] openat(AT_FDCWD, "./264/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] unlink("./260/binderfs" [pid 7159] chdir("./255") = 0 [pid 5824] <... unlink resumed>) = 0 [pid 5824] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] close(3) = 0 [pid 5823] <... openat resumed>) = 4 [pid 5824] rmdir("./260" [pid 7159] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7157] munmap(0x7f957a000000, 138412032 [pid 5824] <... rmdir resumed>) = 0 [pid 7159] <... prctl resumed>) = 0 [pid 7159] setpgid(0, 0 [pid 7157] <... munmap resumed>) = 0 [pid 5823] newfstatat(4, "", [pid 7159] <... setpgid resumed>) = 0 [pid 7157] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] mkdir("./261", 0777 [pid 5823] getdents64(4, [pid 7159] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7157] <... openat resumed>) = 4 [pid 5824] <... mkdir resumed>) = 0 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 7157] ioctl(4, LOOP_SET_FD, 3 [pid 5823] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 7159] <... openat resumed>) = 3 [pid 5823] close(4) = 0 [pid 5823] rmdir("./264/file0") = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5823] umount2("./264/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7159] write(3, "1000", 4 [pid 5824] ioctl(3, LOOP_CLR_FD [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7158] close(3 [pid 5824] <... ioctl resumed>) = 0 [pid 5823] newfstatat(AT_FDCWD, "./264/binderfs", [pid 7158] <... close resumed>) = 0 [pid 5824] close(3 [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7158] close(4 [pid 5824] <... close resumed>) = 0 [pid 5823] unlink("./264/binderfs" [pid 7159] <... write resumed>) = 4 [pid 7158] <... close resumed>) = 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5823] <... unlink resumed>) = 0 [pid 7159] close(3 [pid 7158] mkdir("./file0", 0777 [pid 5823] getdents64(3, [pid 7159] <... close resumed>) = 0 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 executing program ./strace-static-x86_64: Process 7160 attached [pid 7159] symlink("/dev/binderfs", "./binderfs" [pid 7158] <... mkdir resumed>) = 0 [pid 5823] close(3) = 0 [pid 7159] <... symlink resumed>) = 0 [pid 5823] rmdir("./264" [pid 7158] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5823] <... rmdir resumed>) = 0 [pid 7160] set_robust_list(0x55557eba4660, 24 [pid 7159] write(1, "executing program\n", 18 [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7160 [pid 7159] <... write resumed>) = 18 [pid 7160] <... set_robust_list resumed>) = 0 [pid 5823] mkdir("./265", 0777 [pid 7159] memfd_create("syzkaller", 0 [pid 7160] chdir("./261" [pid 5823] <... mkdir resumed>) = 0 [pid 7160] <... chdir resumed>) = 0 [pid 7160] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7159] <... memfd_create resumed>) = 3 [pid 7160] setpgid(0, 0 [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7160] <... setpgid resumed>) = 0 [pid 5823] <... openat resumed>) = 3 [pid 7160] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5823] ioctl(3, LOOP_CLR_FD) = 0 [pid 7160] <... openat resumed>) = 3 [pid 7159] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5823] close(3 [pid 7159] <... mmap resumed>) = 0x7f957a000000 [pid 5823] <... close resumed>) = 0 [pid 7160] write(3, "1000", 4 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7159] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7160] <... write resumed>) = 4 [pid 7160] close(3) = 0 [ 216.265369][ T7158] loop3: detected capacity change from 0 to 128 [ 216.282157][ T7157] loop2: detected capacity change from 0 to 128 [pid 7160] symlink("/dev/binderfs", "./binderfs" [pid 7159] <... write resumed>) = 65536 [pid 7157] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 7161 attached [pid 7160] <... symlink resumed>) = 0 [pid 7159] munmap(0x7f957a000000, 138412032 [ 216.318121][ T7158] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [pid 7157] close(3executing program [pid 7161] set_robust_list(0x55557eba4660, 24 [pid 7160] write(1, "executing program\n", 18 [pid 7159] <... munmap resumed>) = 0 [pid 7157] <... close resumed>) = 0 [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7161 [pid 7161] <... set_robust_list resumed>) = 0 [pid 7160] <... write resumed>) = 18 [pid 7159] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7157] close(4 [pid 7161] chdir("./265" [pid 7160] memfd_create("syzkaller", 0 [pid 7159] <... openat resumed>) = 4 [pid 7157] <... close resumed>) = 0 [pid 7161] <... chdir resumed>) = 0 [pid 7160] <... memfd_create resumed>) = 3 [pid 7159] ioctl(4, LOOP_SET_FD, 3 [pid 7157] mkdir("./file0", 0777 [pid 7160] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7160] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 7160] munmap(0x7f957a000000, 138412032) = 0 [pid 7160] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 7157] <... mkdir resumed>) = 0 [pid 7160] ioctl(4, LOOP_SET_FD, 3 [pid 7157] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7161] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7160] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 7161] <... prctl resumed>) = 0 [pid 7160] ioctl(4, LOOP_CLR_FD [pid 7161] setpgid(0, 0 [pid 7160] <... ioctl resumed>) = 0 [pid 7161] <... setpgid resumed>) = 0 [pid 7160] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 7160] close(4) = 0 [pid 7160] close(3) = 0 [pid 7160] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 7160] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = -1 ENOENT (No such file or directory) [pid 7161] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7158] <... mount resumed>) = 0 [pid 7161] write(3, "1000", 4 [pid 7160] sync( [pid 7159] <... ioctl resumed>) = 0 [pid 7158] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7161] <... write resumed>) = 4 [pid 7159] close(3 [pid 7158] <... openat resumed>) = 3 [pid 7161] close(3 [pid 7159] <... close resumed>) = 0 [pid 7158] chdir("./file0") = 0 [pid 7161] <... close resumed>) = 0 [pid 7159] close(4 [pid 7158] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [ 216.358927][ T7159] loop4: detected capacity change from 0 to 128 [ 216.374133][ T7157] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [pid 7158] openat(AT_FDCWD, ".", O_RDONLY [pid 7161] symlink("/dev/binderfs", "./binderfs" [pid 7159] <... close resumed>) = 0 [pid 7158] <... openat resumed>) = 4 [pid 7161] <... symlink resumed>) = 0 executing program [pid 7159] mkdir("./file0", 0777 [pid 7158] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7159] <... mkdir resumed>) = 0 [pid 7161] write(1, "executing program\n", 18) = 18 [pid 7159] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7161] memfd_create("syzkaller", 0 [pid 7158] <... renameat2 resumed>) = 0 [pid 7157] <... mount resumed>) = 0 [pid 7161] <... memfd_create resumed>) = 3 [pid 7158] sync( [pid 7157] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7161] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7157] <... openat resumed>) = 3 [pid 7161] <... mmap resumed>) = 0x7f957a000000 [pid 7157] chdir("./file0") = 0 [pid 7161] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7159] <... mount resumed>) = 0 [pid 7157] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7161] <... write resumed>) = 65536 [pid 7159] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7157] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7157] openat(AT_FDCWD, ".", O_RDONLY [pid 7159] <... openat resumed>) = 3 [pid 7160] <... sync resumed>) = 0 [pid 7158] <... sync resumed>) = 0 [pid 7160] exit_group(0 [pid 7159] chdir("./file0" [pid 7158] exit_group(0 [pid 7157] <... openat resumed>) = 4 [pid 7161] munmap(0x7f957a000000, 138412032 [pid 7160] <... exit_group resumed>) = ? [pid 7159] <... chdir resumed>) = 0 [pid 7158] <... exit_group resumed>) = ? [ 216.427262][ T7159] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [pid 7157] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7161] <... munmap resumed>) = 0 [pid 7159] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7158] +++ exited with 0 +++ [pid 7159] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7158, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 7159] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7159] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5826] umount2("./265", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./265", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7157] <... renameat2 resumed>) = 0 [pid 5826] <... openat resumed>) = 3 [pid 5826] newfstatat(3, "", [pid 7160] +++ exited with 0 +++ [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7161] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7159] <... renameat2 resumed>) = 0 [pid 7157] sync( [pid 5826] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7160, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5826] umount2("./265/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 7161] <... openat resumed>) = 4 [pid 7159] sync( [pid 5824] <... restart_syscall resumed>) = 0 [pid 7161] ioctl(4, LOOP_SET_FD, 3 [pid 5824] umount2("./261", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./261", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5824] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(3, 0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 5824] umount2("./261/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./261/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./261/binderfs") = 0 [pid 5824] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] close(3) = 0 [pid 5824] rmdir("./261") = 0 [pid 5824] mkdir("./262", 0777 [pid 5826] <... umount2 resumed>) = 0 [pid 5824] <... mkdir resumed>) = 0 [pid 5826] umount2("./265/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./265/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] umount2("./265/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... openat resumed>) = 3 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./265/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7157] <... sync resumed>) = 0 [pid 5826] <... openat resumed>) = 4 [pid 5824] ioctl(3, LOOP_CLR_FD [pid 7157] exit_group(0 [pid 5826] newfstatat(4, "", [pid 5824] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] close(3 [pid 5826] getdents64(4, [pid 7157] <... exit_group resumed>) = ? [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 7159] <... sync resumed>) = 0 [pid 7157] +++ exited with 0 +++ [pid 5826] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 7161] <... ioctl resumed>) = 0 [pid 7159] exit_group(0 [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7157, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5824] <... close resumed>) = 0 [pid 7161] close(3 [pid 7159] <... exit_group resumed>) = ? [pid 7161] <... close resumed>) = 0 [pid 7159] +++ exited with 0 +++ [pid 5826] close(4 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7161] close(4 [pid 5826] <... close resumed>) = 0 [ 216.500711][ T7161] loop0: detected capacity change from 0 to 128 ./strace-static-x86_64: Process 7162 attached [pid 7161] <... close resumed>) = 0 [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7159, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5826] rmdir("./265/file0" [pid 5825] umount2("./260", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7162 [pid 7162] set_robust_list(0x55557eba4660, 24 [pid 7161] mkdir("./file0", 0777 [pid 7162] <... set_robust_list resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./260", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7162] chdir("./262" [pid 7161] <... mkdir resumed>) = 0 [pid 5827] restart_syscall(<... resuming interrupted clone ...> [pid 5826] <... rmdir resumed>) = 0 [pid 5825] <... openat resumed>) = 3 [pid 7162] <... chdir resumed>) = 0 [pid 5826] umount2("./265/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] newfstatat(3, "", [pid 7162] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7161] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5827] <... restart_syscall resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] umount2("./255", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] openat(AT_FDCWD, "./255", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5827] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5827] umount2("./255/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7162] setpgid(0, 0 [pid 5826] newfstatat(AT_FDCWD, "./265/binderfs", [pid 5825] getdents64(3, [pid 7162] <... setpgid resumed>) = 0 [pid 7162] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5827] <... umount2 resumed>) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 7162] <... openat resumed>) = 3 [pid 5827] umount2("./255/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] unlink("./265/binderfs" [pid 5825] umount2("./260/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7162] write(3, "1000", 4 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... unlink resumed>) = 0 [pid 5827] newfstatat(AT_FDCWD, "./255/file0", [pid 5825] <... umount2 resumed>) = 0 [pid 5826] getdents64(3, [pid 7162] <... write resumed>) = 4 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5825] umount2("./260/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7162] close(3 [pid 5827] umount2("./255/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] close(3 [pid 7162] <... close resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] openat(AT_FDCWD, "./255/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] <... close resumed>) = 0 [pid 5825] newfstatat(AT_FDCWD, "./260/file0", [pid 7162] symlink("/dev/binderfs", "./binderfs" [pid 5826] rmdir("./265" [pid 5827] <... openat resumed>) = 4 [pid 7162] <... symlink resumed>) = 0 [pid 5826] <... rmdir resumed>) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 executing program [pid 7162] write(1, "executing program\n", 18 [pid 5827] newfstatat(4, "", [pid 5826] mkdir("./266", 0777 [pid 7162] <... write resumed>) = 18 [pid 5825] umount2("./260/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7162] memfd_create("syzkaller", 0 [pid 5827] getdents64(4, [pid 5826] <... mkdir resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7162] <... memfd_create resumed>) = 3 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5825] openat(AT_FDCWD, "./260/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7162] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5827] getdents64(4, [pid 5826] <... openat resumed>) = 3 [pid 5825] <... openat resumed>) = 4 [pid 7162] <... mmap resumed>) = 0x7f957a000000 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5826] ioctl(3, LOOP_CLR_FD [pid 5825] newfstatat(4, "", [pid 7162] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5827] close(4 [pid 5826] <... ioctl resumed>) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7162] <... write resumed>) = 65536 [pid 5827] <... close resumed>) = 0 [pid 5826] close(3 [pid 5825] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5826] <... close resumed>) = 0 [pid 5827] rmdir("./255/file0") = 0 [pid 7162] munmap(0x7f957a000000, 138412032 [pid 5827] umount2("./255/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5825] close(4 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... close resumed>) = 0 [pid 7162] <... munmap resumed>) = 0 [pid 5825] rmdir("./260/file0" [pid 5827] newfstatat(AT_FDCWD, "./255/binderfs", [pid 7161] <... mount resumed>) = 0 [pid 7161] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5825] <... rmdir resumed>) = 0 [pid 7161] chdir("./file0" [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] umount2("./260/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7161] <... chdir resumed>) = 0 [pid 7161] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7161] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7161] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] unlink("./255/binderfs" [pid 7162] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5825] newfstatat(AT_FDCWD, "./260/binderfs", [pid 7162] <... openat resumed>) = 4 [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] <... unlink resumed>) = 0 [pid 5825] unlink("./260/binderfs" [ 216.619710][ T7161] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [pid 7162] ioctl(4, LOOP_SET_FD, 3 [pid 5825] <... unlink resumed>) = 0 [pid 7161] <... renameat2 resumed>) = 0 [pid 5827] getdents64(3, [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5825] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7161] sync(./strace-static-x86_64: Process 7163 attached [pid 7162] <... ioctl resumed>) = 0 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7163 [pid 5825] close(3 [pid 7163] set_robust_list(0x55557eba4660, 24 [pid 5827] close(3 [pid 5825] <... close resumed>) = 0 [pid 5825] rmdir("./260" [pid 5827] <... close resumed>) = 0 [pid 7163] <... set_robust_list resumed>) = 0 [pid 7163] chdir("./266") = 0 [pid 7163] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5825] <... rmdir resumed>) = 0 [pid 5827] rmdir("./255" [pid 7163] <... prctl resumed>) = 0 [pid 7161] <... sync resumed>) = 0 [pid 7163] setpgid(0, 0 [pid 7161] exit_group(0 [pid 7163] <... setpgid resumed>) = 0 [pid 7162] close(3 [pid 5827] <... rmdir resumed>) = 0 [pid 5825] mkdir("./261", 0777 [pid 7162] <... close resumed>) = 0 [pid 7163] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7162] close(4 [pid 7163] <... openat resumed>) = 3 [pid 7161] <... exit_group resumed>) = ? [pid 7162] <... close resumed>) = 0 [pid 7161] +++ exited with 0 +++ [pid 5827] mkdir("./256", 0777 [pid 5825] <... mkdir resumed>) = 0 [pid 7162] mkdir("./file0", 0777 [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7161, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7163] write(3, "1000", 4 [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 7163] <... write resumed>) = 4 [pid 7162] <... mkdir resumed>) = 0 [pid 7163] close(3 [pid 5827] <... mkdir resumed>) = 0 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7163] <... close resumed>) = 0 [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5825] <... openat resumed>) = 3 [pid 7163] symlink("/dev/binderfs", "./binderfs" [pid 5827] <... openat resumed>) = 3 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 7162] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5827] ioctl(3, LOOP_CLR_FD [pid 5825] <... ioctl resumed>) = 0 executing program [pid 7163] <... symlink resumed>) = 0 [pid 5827] <... ioctl resumed>) = 0 [pid 5825] close(3 [pid 5823] <... restart_syscall resumed>) = 0 [pid 7163] write(1, "executing program\n", 18) = 18 [pid 5823] umount2("./265", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... close resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] close(3 [pid 5823] openat(AT_FDCWD, "./265", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7163] memfd_create("syzkaller", 0 [pid 5823] <... openat resumed>) = 3 [pid 7163] <... memfd_create resumed>) = 3 [pid 7163] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5823] newfstatat(3, "", [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7163] <... mmap resumed>) = 0x7f957a000000 [pid 5823] getdents64(3, ./strace-static-x86_64: Process 7164 attached [pid 7163] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5827] <... close resumed>) = 0 [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7164 [ 216.676876][ T7162] loop1: detected capacity change from 0 to 128 [pid 5823] umount2("./265/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7164] set_robust_list(0x55557eba4660, 24 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7164] <... set_robust_list resumed>) = 0 [pid 7163] <... write resumed>) = 65536 [pid 7164] chdir("./261") = 0 [pid 7164] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7163] munmap(0x7f957a000000, 138412032./strace-static-x86_64: Process 7165 attached [pid 7164] <... prctl resumed>) = 0 [pid 7163] <... munmap resumed>) = 0 [pid 7164] setpgid(0, 0 [pid 7163] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7164] <... setpgid resumed>) = 0 [pid 7163] <... openat resumed>) = 4 [pid 5823] <... umount2 resumed>) = 0 [pid 7164] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7163] ioctl(4, LOOP_SET_FD, 3 [pid 7165] set_robust_list(0x55557eba4660, 24 [pid 7164] <... openat resumed>) = 3 [pid 5823] umount2("./265/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7165 [pid 7165] <... set_robust_list resumed>) = 0 [pid 7164] write(3, "1000", 4 [pid 7165] chdir("./256" [pid 7164] <... write resumed>) = 4 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7165] <... chdir resumed>) = 0 [pid 7164] close(3 [pid 5823] newfstatat(AT_FDCWD, "./265/file0", [pid 7165] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7164] <... close resumed>) = 0 [pid 7165] <... prctl resumed>) = 0 [pid 7164] symlink("/dev/binderfs", "./binderfs" [pid 7165] setpgid(0, 0 [pid 7164] <... symlink resumed>) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7165] <... setpgid resumed>) = 0 [pid 7164] write(1, "executing program\n", 18 [pid 5823] umount2("./265/file0", MNT_FORCE|UMOUNT_NOFOLLOWexecuting program [pid 7165] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7164] <... write resumed>) = 18 [pid 7165] <... openat resumed>) = 3 [pid 7164] memfd_create("syzkaller", 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7164] <... memfd_create resumed>) = 3 [pid 5823] openat(AT_FDCWD, "./265/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7165] write(3, "1000", 4 [pid 7164] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5823] <... openat resumed>) = 4 [pid 7165] <... write resumed>) = 4 [pid 7164] <... mmap resumed>) = 0x7f957a000000 [pid 5823] newfstatat(4, "", [pid 7165] close(3 [pid 7164] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7165] <... close resumed>) = 0 [pid 7164] <... write resumed>) = 65536 [pid 5823] getdents64(4, [pid 7165] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] close(4) = 0 [pid 5823] rmdir("./265/file0" [pid 7164] munmap(0x7f957a000000, 138412032 [pid 5823] <... rmdir resumed>) = 0 [pid 7164] <... munmap resumed>) = 0 [pid 5823] umount2("./265/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7164] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) executing program [pid 7165] write(1, "executing program\n", 18 [pid 7164] <... openat resumed>) = 4 [pid 5823] newfstatat(AT_FDCWD, "./265/binderfs", [pid 7165] <... write resumed>) = 18 [pid 7164] ioctl(4, LOOP_SET_FD, 3 [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7165] memfd_create("syzkaller", 0 [pid 5823] unlink("./265/binderfs" [pid 7165] <... memfd_create resumed>) = 3 [pid 7163] <... ioctl resumed>) = 0 [ 216.748822][ T7162] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 216.749943][ T7163] loop3: detected capacity change from 0 to 128 [pid 5823] <... unlink resumed>) = 0 [pid 7165] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7163] close(3 [pid 7165] <... mmap resumed>) = 0x7f957a000000 [pid 5823] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7163] <... close resumed>) = 0 [pid 5823] close(3 [pid 7165] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7163] close(4 [pid 5823] <... close resumed>) = 0 [pid 7164] <... ioctl resumed>) = 0 [pid 7163] <... close resumed>) = 0 [pid 5823] rmdir("./265" [pid 7163] mkdir("./file0", 0777 [pid 7165] <... write resumed>) = 65536 [pid 7163] <... mkdir resumed>) = 0 [pid 5823] <... rmdir resumed>) = 0 [pid 7165] munmap(0x7f957a000000, 138412032) = 0 [pid 5823] mkdir("./266", 0777 [pid 7165] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7163] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5823] <... mkdir resumed>) = 0 [pid 7164] close(3 [pid 7162] <... mount resumed>) = 0 [pid 7162] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7164] <... close resumed>) = 0 [pid 7164] close(4 [pid 7165] <... openat resumed>) = 4 [pid 7164] <... close resumed>) = 0 [pid 7164] mkdir("./file0", 0777 [pid 7165] ioctl(4, LOOP_SET_FD, 3 [pid 7164] <... mkdir resumed>) = 0 [pid 7162] <... openat resumed>) = 3 [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7164] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7162] chdir("./file0" [pid 5823] <... openat resumed>) = 3 [pid 7164] <... mount resumed>) = 0 [pid 7165] <... ioctl resumed>) = 0 [pid 7163] <... mount resumed>) = 0 [pid 7162] <... chdir resumed>) = 0 [pid 5823] ioctl(3, LOOP_CLR_FD [pid 7162] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5823] <... ioctl resumed>) = 0 [pid 7162] openat(AT_FDCWD, ".", O_RDONLY [pid 5823] close(3 [pid 7164] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7162] <... openat resumed>) = 4 [pid 7165] close(3 [pid 7164] <... openat resumed>) = 3 [pid 7163] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7162] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5823] <... close resumed>) = 0 [pid 7165] <... close resumed>) = 0 [pid 7164] chdir("./file0" [pid 7163] <... openat resumed>) = 3 [pid 7162] <... renameat2 resumed>) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7165] close(4 [pid 7164] <... chdir resumed>) = 0 [pid 7163] chdir("./file0" [pid 7162] sync(./strace-static-x86_64: Process 7166 attached [pid 7165] <... close resumed>) = 0 [pid 7164] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7163] <... chdir resumed>) = 0 [pid 7165] mkdir("./file0", 0777 [pid 7164] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 216.795327][ T7164] loop2: detected capacity change from 0 to 128 [ 216.816455][ T7165] loop4: detected capacity change from 0 to 128 [ 216.818267][ T7164] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 216.824175][ T7163] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [pid 7163] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7166] set_robust_list(0x55557eba4660, 24 [pid 7164] openat(AT_FDCWD, ".", O_RDONLY [pid 7163] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7166 [pid 7166] <... set_robust_list resumed>) = 0 [pid 7164] <... openat resumed>) = 4 [pid 7163] openat(AT_FDCWD, ".", O_RDONLY [pid 7164] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7163] <... openat resumed>) = 4 [pid 7166] chdir("./266" [pid 7165] <... mkdir resumed>) = 0 [pid 7163] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7166] <... chdir resumed>) = 0 [pid 7165] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7164] <... renameat2 resumed>) = 0 [pid 7166] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7163] <... renameat2 resumed>) = 0 [pid 7166] <... prctl resumed>) = 0 [pid 7164] sync( [pid 7166] setpgid(0, 0) = 0 [pid 7166] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7163] sync( [pid 7166] write(3, "1000", 4) = 4 [pid 7166] close(3) = 0 [pid 7166] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7166] write(1, "executing program\n", 18executing program ) = 18 [pid 7166] memfd_create("syzkaller", 0) = 3 [pid 7166] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7166] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7162] <... sync resumed>) = 0 [pid 7162] exit_group(0) = ? [pid 7166] <... write resumed>) = 65536 [pid 7162] +++ exited with 0 +++ [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7162, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 7165] <... mount resumed>) = 0 [pid 7165] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7165] chdir("./file0") = 0 [pid 7165] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7165] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7165] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7166] munmap(0x7f957a000000, 138412032 [pid 5824] <... restart_syscall resumed>) = 0 [pid 5824] umount2("./262", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7166] <... munmap resumed>) = 0 [pid 7165] <... renameat2 resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 216.880196][ T7165] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [pid 5824] openat(AT_FDCWD, "./262", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5824] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(3, [pid 7165] sync( [pid 7166] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7166] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 7166] ioctl(4, LOOP_CLR_FD) = 0 [pid 5824] umount2("./262/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 7166] ioctl(4, LOOP_SET_FD, 3 [pid 5824] umount2("./262/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7166] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5824] newfstatat(AT_FDCWD, "./262/file0", [pid 7166] close(4 [pid 7164] <... sync resumed>) = 0 [pid 7163] <... sync resumed>) = 0 [pid 7166] <... close resumed>) = 0 [pid 7166] close(3 [pid 7164] exit_group(0 [pid 7163] exit_group(0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7164] <... exit_group resumed>) = ? [pid 7163] <... exit_group resumed>) = ? [pid 7166] <... close resumed>) = 0 [pid 7163] +++ exited with 0 +++ [pid 5824] umount2("./262/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7166] openat(AT_FDCWD, ".", O_RDONLY [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7163, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7165] <... sync resumed>) = 0 [pid 7165] exit_group(0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7165] <... exit_group resumed>) = ? [pid 7166] <... openat resumed>) = 3 [pid 7165] +++ exited with 0 +++ [pid 7164] +++ exited with 0 +++ [pid 5824] openat(AT_FDCWD, "./262/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7166] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7165, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7164, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5827] restart_syscall(<... resuming interrupted clone ...> [pid 5825] restart_syscall(<... resuming interrupted clone ...> [pid 5824] <... openat resumed>) = 4 [pid 7166] <... renameat2 resumed>) = -1 ENOENT (No such file or directory) [pid 7166] sync( [pid 5824] newfstatat(4, "", [pid 5825] <... restart_syscall resumed>) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] umount2("./261", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] getdents64(4, [pid 5826] umount2("./266", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] openat(AT_FDCWD, "./261", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... openat resumed>) = 3 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5826] openat(AT_FDCWD, "./266", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] newfstatat(3, "", [pid 5824] getdents64(4, [pid 5826] <... openat resumed>) = 3 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] <... restart_syscall resumed>) = 0 [pid 5826] newfstatat(3, "", [pid 5825] getdents64(3, [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 7166] <... sync resumed>) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 7166] exit_group(0 [pid 5826] getdents64(3, [pid 5824] close(4 [pid 7166] <... exit_group resumed>) = ? [pid 5827] umount2("./256", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5825] umount2("./261/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7166] +++ exited with 0 +++ [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] umount2("./266/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... close resumed>) = 0 [pid 5827] openat(AT_FDCWD, "./256", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] <... umount2 resumed>) = 0 [pid 5827] <... openat resumed>) = 3 [pid 5827] newfstatat(3, "", [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7166, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] umount2("./266", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] getdents64(3, [pid 5824] rmdir("./262/file0" [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] openat(AT_FDCWD, "./266", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] umount2("./256/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./261/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... rmdir resumed>) = 0 [pid 5823] <... openat resumed>) = 3 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] umount2("./262/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] newfstatat(3, "", [pid 5827] <... umount2 resumed>) = 0 [pid 5826] <... umount2 resumed>) = 0 [pid 5825] newfstatat(AT_FDCWD, "./261/file0", [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] umount2("./256/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] umount2("./266/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] newfstatat(AT_FDCWD, "./262/binderfs", [pid 5823] getdents64(3, [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] umount2("./261/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 5826] newfstatat(AT_FDCWD, "./266/file0", [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] umount2("./266/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] newfstatat(AT_FDCWD, "./256/file0", [pid 5824] unlink("./262/binderfs" [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... unlink resumed>) = 0 [pid 5823] newfstatat(AT_FDCWD, "./266/binderfs", [pid 5827] umount2("./256/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] openat(AT_FDCWD, "./261/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] umount2("./266/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... openat resumed>) = 4 [pid 5824] getdents64(3, [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] unlink("./266/binderfs" [pid 5827] openat(AT_FDCWD, "./256/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(4, "", [pid 5824] close(3 [pid 5823] <... unlink resumed>) = 0 [pid 5826] openat(AT_FDCWD, "./266/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] <... openat resumed>) = 4 [pid 5827] newfstatat(4, "", [pid 5826] <... openat resumed>) = 4 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] <... close resumed>) = 0 [pid 5823] getdents64(3, [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] newfstatat(4, "", [pid 5825] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] rmdir("./262" [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5827] getdents64(4, [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(4, [pid 5824] <... rmdir resumed>) = 0 [pid 5823] close(3 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5826] getdents64(4, [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] <... close resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] rmdir("./266" [pid 5827] getdents64(4, [pid 5825] close(4 [pid 5824] mkdir("./263", 0777 [pid 5823] <... rmdir resumed>) = 0 [pid 5824] <... mkdir resumed>) = 0 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5826] getdents64(4, [pid 5825] <... close resumed>) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5823] mkdir("./267", 0777 [pid 5827] close(4 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5825] rmdir("./261/file0" [pid 5827] <... close resumed>) = 0 [pid 5826] close(4 [pid 5827] rmdir("./256/file0" [pid 5826] <... close resumed>) = 0 [pid 5825] <... rmdir resumed>) = 0 [pid 5824] <... openat resumed>) = 3 [pid 5823] <... mkdir resumed>) = 0 [pid 5824] ioctl(3, LOOP_CLR_FD [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5827] <... rmdir resumed>) = 0 [pid 5826] rmdir("./266/file0" [pid 5825] umount2("./261/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... ioctl resumed>) = 0 [pid 5823] <... openat resumed>) = 3 [pid 5824] close(3 [pid 5823] ioctl(3, LOOP_CLR_FD [pid 5826] <... rmdir resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5823] close(3 [pid 5827] umount2("./256/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] umount2("./266/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] newfstatat(AT_FDCWD, "./261/binderfs", [pid 5824] <... close resumed>) = 0 [pid 5823] <... close resumed>) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] newfstatat(AT_FDCWD, "./256/binderfs", [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] newfstatat(AT_FDCWD, "./266/binderfs", [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] unlink("./256/binderfs" [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./261/binderfs" [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7167 attached [pid 5827] <... unlink resumed>) = 0 [pid 5826] unlink("./266/binderfs" [pid 5825] <... unlink resumed>) = 0 [pid 5827] getdents64(3, [pid 5825] getdents64(3, [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] <... unlink resumed>) = 0 [pid 5827] close(3 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] getdents64(3, [pid 5827] <... close resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5825] close(3 [pid 5827] rmdir("./256" [pid 5826] close(3 [pid 5825] <... close resumed>) = 0 [pid 7167] set_robust_list(0x55557eba4660, 24 [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7168 [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7167 [pid 5827] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 7168 attached [pid 7167] <... set_robust_list resumed>) = 0 [pid 5827] mkdir("./257", 0777 [pid 5826] <... close resumed>) = 0 [pid 5825] rmdir("./261" [pid 7168] set_robust_list(0x55557eba4660, 24 [pid 5826] rmdir("./266" [pid 7167] chdir("./267" [pid 5827] <... mkdir resumed>) = 0 [pid 5826] <... rmdir resumed>) = 0 [pid 5825] <... rmdir resumed>) = 0 [pid 5826] mkdir("./267", 0777 [pid 5825] mkdir("./262", 0777 [pid 7167] <... chdir resumed>) = 0 [pid 7167] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7167] setpgid(0, 0) = 0 [pid 5825] <... mkdir resumed>) = 0 [pid 7167] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7168] <... set_robust_list resumed>) = 0 [pid 7167] <... openat resumed>) = 3 [pid 5826] <... mkdir resumed>) = 0 [pid 7168] chdir("./263" [pid 7167] write(3, "1000", 4 [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7167] <... write resumed>) = 4 [pid 5827] <... openat resumed>) = 3 [pid 5826] <... openat resumed>) = 3 [pid 5825] <... openat resumed>) = 3 [pid 7168] <... chdir resumed>) = 0 [pid 7167] close(3 [pid 5827] ioctl(3, LOOP_CLR_FD [pid 5826] ioctl(3, LOOP_CLR_FD [pid 5825] ioctl(3, LOOP_CLR_FD [pid 7167] <... close resumed>) = 0 [pid 7167] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 7167] write(1, "executing program\n", 18) = 18 [pid 7167] memfd_create("syzkaller", 0 [pid 5826] <... ioctl resumed>) = 0 [pid 5825] <... ioctl resumed>) = 0 [pid 5827] <... ioctl resumed>) = 0 [pid 7167] <... memfd_create resumed>) = 3 [pid 7167] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7168] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7167] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5827] close(3 [pid 5826] close(3 [pid 5825] close(3 [pid 7168] <... prctl resumed>) = 0 [pid 5827] <... close resumed>) = 0 [pid 7167] <... write resumed>) = 65536 [pid 7167] munmap(0x7f957a000000, 138412032) = 0 [pid 7167] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5825] <... close resumed>) = 0 [pid 7168] setpgid(0, 0 [pid 7167] <... openat resumed>) = 4 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7167] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 7169 attached [pid 7168] <... setpgid resumed>) = 0 [pid 5826] <... close resumed>) = 0 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7169] set_robust_list(0x55557eba4660, 24) = 0 [pid 7169] chdir("./257" [pid 7168] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7169] <... chdir resumed>) = 0 [pid 7169] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7169] setpgid(0, 0) = 0 [pid 7169] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 7171 attached ./strace-static-x86_64: Process 7170 attached ) = 3 [pid 7168] <... openat resumed>) = 3 [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7170 [pid 7168] write(3, "1000", 4 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7171 [pid 7171] set_robust_list(0x55557eba4660, 24 [pid 7168] <... write resumed>) = 4 [pid 7168] close(3 [pid 7171] <... set_robust_list resumed>) = 0 [pid 7171] chdir("./267" [pid 7170] set_robust_list(0x55557eba4660, 24 [pid 7169] write(3, "1000", 4 [pid 7168] <... close resumed>) = 0 [pid 7171] <... chdir resumed>) = 0 [pid 7168] symlink("/dev/binderfs", "./binderfs" [pid 7171] prctl(PR_SET_PDEATHSIG, SIGKILLexecuting program [pid 7170] <... set_robust_list resumed>) = 0 [pid 7169] <... write resumed>) = 4 [pid 7171] <... prctl resumed>) = 0 [pid 7168] <... symlink resumed>) = 0 [pid 7171] setpgid(0, 0 [pid 7170] chdir("./262" [pid 7169] close(3 [pid 7168] write(1, "executing program\n", 18 [pid 7171] <... setpgid resumed>) = 0 [pid 7170] <... chdir resumed>) = 0 [pid 7169] <... close resumed>) = 0 [pid 7168] <... write resumed>) = 18 [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7169 [pid 7171] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7170] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7169] symlink("/dev/binderfs", "./binderfs"executing program [pid 7171] <... openat resumed>) = 3 [pid 7170] <... prctl resumed>) = 0 [pid 7169] <... symlink resumed>) = 0 [pid 7168] memfd_create("syzkaller", 0 [pid 7170] setpgid(0, 0 [pid 7169] write(1, "executing program\n", 18 [pid 7170] <... setpgid resumed>) = 0 [pid 7169] <... write resumed>) = 18 [pid 7170] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7169] memfd_create("syzkaller", 0 [pid 7170] write(3, "1000", 4 [pid 7169] <... memfd_create resumed>) = 3 [pid 7170] <... write resumed>) = 4 [pid 7169] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7170] close(3 [pid 7167] <... ioctl resumed>) = 0 [pid 7170] <... close resumed>) = 0 [pid 7169] <... mmap resumed>) = 0x7f957a000000 [pid 7170] symlink("/dev/binderfs", "./binderfs" [pid 7167] close(3 [pid 7170] <... symlink resumed>) = 0 [pid 7169] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7167] <... close resumed>) = 0 [pid 7167] close(4executing program ) = 0 [pid 7170] write(1, "executing program\n", 18 [pid 7167] mkdir("./file0", 0777 [pid 7171] write(3, "1000", 4 [pid 7170] <... write resumed>) = 18 [pid 7168] <... memfd_create resumed>) = 3 [pid 7167] <... mkdir resumed>) = 0 [pid 7171] <... write resumed>) = 4 [pid 7170] memfd_create("syzkaller", 0 [pid 7169] <... write resumed>) = 65536 [pid 7168] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7171] close(3 [pid 7168] <... mmap resumed>) = 0x7f957a000000 [pid 7170] <... memfd_create resumed>) = 3 [pid 7169] munmap(0x7f957a000000, 138412032 [pid 7167] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7170] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7169] <... munmap resumed>) = 0 [pid 7170] <... mmap resumed>) = 0x7f957a000000 [ 217.102720][ T7167] loop0: detected capacity change from 0 to 128 [pid 7171] <... close resumed>) = 0 [pid 7170] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7169] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7171] symlink("/dev/binderfs", "./binderfs" [pid 7168] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7171] <... symlink resumed>) = 0 [pid 7168] <... write resumed>) = 65536 [pid 7171] write(1, "executing program\n", 18 [pid 7170] <... write resumed>) = 65536 [pid 7168] munmap(0x7f957a000000, 138412032executing program [pid 7170] munmap(0x7f957a000000, 138412032 [pid 7168] <... munmap resumed>) = 0 [pid 7171] <... write resumed>) = 18 [pid 7168] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7171] memfd_create("syzkaller", 0 [pid 7170] <... munmap resumed>) = 0 [pid 7169] <... openat resumed>) = 4 [pid 7168] <... openat resumed>) = 4 [pid 7171] <... memfd_create resumed>) = 3 [pid 7170] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7169] ioctl(4, LOOP_SET_FD, 3 [pid 7168] ioctl(4, LOOP_SET_FD, 3 [pid 7171] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7170] <... openat resumed>) = 4 [pid 7168] <... ioctl resumed>) = 0 [pid 7170] ioctl(4, LOOP_SET_FD, 3 [pid 7171] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 7168] close(3) = 0 [pid 7171] munmap(0x7f957a000000, 138412032) = 0 [pid 7168] close(4 [pid 7171] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7168] <... close resumed>) = 0 [pid 7171] <... openat resumed>) = 4 [pid 7170] <... ioctl resumed>) = 0 [pid 7169] <... ioctl resumed>) = 0 [pid 7171] ioctl(4, LOOP_SET_FD, 3 [pid 7168] mkdir("./file0", 0777 [pid 7167] <... mount resumed>) = 0 [ 217.164223][ T7167] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 217.182669][ T7168] loop1: detected capacity change from 0 to 128 [ 217.182707][ T7169] loop4: detected capacity change from 0 to 128 [ 217.199439][ T7170] loop2: detected capacity change from 0 to 128 [pid 7167] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7170] close(3 [pid 7167] chdir("./file0" [pid 7170] <... close resumed>) = 0 [pid 7167] <... chdir resumed>) = 0 [pid 7170] close(4 [pid 7167] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7170] <... close resumed>) = 0 [pid 7169] close(3 [pid 7167] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7170] mkdir("./file0", 0777 [pid 7169] <... close resumed>) = 0 [pid 7167] openat(AT_FDCWD, ".", O_RDONLY [pid 7170] <... mkdir resumed>) = 0 [pid 7169] close(4 [pid 7167] <... openat resumed>) = 4 [pid 7170] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7169] <... close resumed>) = 0 [pid 7168] <... mkdir resumed>) = 0 [pid 7167] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7169] mkdir("./file0", 0777 [pid 7167] <... renameat2 resumed>) = 0 [pid 7169] <... mkdir resumed>) = 0 [pid 7168] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7167] sync( [pid 7169] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7171] <... ioctl resumed>) = 0 [pid 7171] close(3) = 0 [pid 7171] close(4 [pid 7170] <... mount resumed>) = 0 [pid 7171] <... close resumed>) = 0 [pid 7170] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7171] mkdir("./file0", 0777) = 0 [pid 7170] <... openat resumed>) = 3 [pid 7171] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7170] chdir("./file0") = 0 [pid 7170] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [ 217.220294][ T7171] loop3: detected capacity change from 0 to 128 [ 217.235873][ T7170] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 217.237058][ T7168] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 217.256282][ T7169] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [pid 7170] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7170] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = 0 [pid 7170] sync( [pid 7168] <... mount resumed>) = 0 [pid 7168] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7169] <... mount resumed>) = 0 [pid 7168] <... openat resumed>) = 3 [pid 7169] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7169] chdir("./file0") = 0 [pid 7169] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7168] chdir("./file0" [pid 7169] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7169] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7169] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = 0 [pid 7171] <... mount resumed>) = 0 [pid 7168] <... chdir resumed>) = 0 [ 217.297646][ T7171] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [pid 7171] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7169] sync( [pid 7168] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7171] <... openat resumed>) = 3 [pid 7168] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7171] chdir("./file0" [pid 7168] openat(AT_FDCWD, ".", O_RDONLY [pid 7171] <... chdir resumed>) = 0 [pid 7168] <... openat resumed>) = 4 [pid 7171] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7170] <... sync resumed>) = 0 [pid 7168] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7167] <... sync resumed>) = 0 [pid 7171] openat(AT_FDCWD, ".", O_RDONLY [pid 7170] exit_group(0 [pid 7167] exit_group(0 [pid 7171] <... openat resumed>) = 4 [pid 7170] <... exit_group resumed>) = ? [pid 7171] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7167] <... exit_group resumed>) = ? [pid 7171] <... renameat2 resumed>) = 0 [pid 7170] +++ exited with 0 +++ [pid 7168] <... renameat2 resumed>) = 0 [pid 7167] +++ exited with 0 +++ [pid 7168] sync( [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7170, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7167, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 7171] sync( [pid 7169] <... sync resumed>) = 0 [pid 7169] exit_group(0 [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 7169] <... exit_group resumed>) = ? [pid 7171] <... sync resumed>) = 0 [pid 7169] +++ exited with 0 +++ [pid 7168] <... sync resumed>) = 0 [pid 5825] umount2("./262", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... restart_syscall resumed>) = 0 [pid 7171] exit_group(0 [pid 7168] exit_group(0 [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7169, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7171] <... exit_group resumed>) = ? [pid 7168] <... exit_group resumed>) = ? [pid 5827] restart_syscall(<... resuming interrupted clone ...> [pid 5825] openat(AT_FDCWD, "./262", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7171] +++ exited with 0 +++ [pid 5823] umount2("./267", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... openat resumed>) = 3 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7171, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5825] newfstatat(3, "", [pid 5823] openat(AT_FDCWD, "./267", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] <... restart_syscall resumed>) = 0 [pid 5826] restart_syscall(<... resuming interrupted clone ...> [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... openat resumed>) = 3 [pid 5826] <... restart_syscall resumed>) = 0 [pid 5825] getdents64(3, [pid 5823] newfstatat(3, "", [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] umount2("./257", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./262/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] getdents64(3, [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] umount2("./267", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5827] openat(AT_FDCWD, "./257", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5827] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... umount2 resumed>) = 0 [pid 5823] umount2("./267/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7168] +++ exited with 0 +++ [pid 5827] getdents64(3, [pid 5826] openat(AT_FDCWD, "./267", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] umount2("./262/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... umount2 resumed>) = 0 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7168, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5827] umount2("./257/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... openat resumed>) = 3 [pid 5825] newfstatat(AT_FDCWD, "./262/file0", [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 5827] <... umount2 resumed>) = 0 [pid 5826] newfstatat(3, "", [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] umount2("./267/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] umount2("./257/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] umount2("./262/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... restart_syscall resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] getdents64(3, [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] newfstatat(AT_FDCWD, "./257/file0", [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5825] openat(AT_FDCWD, "./262/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] umount2("./267/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... openat resumed>) = 4 [pid 5824] umount2("./263", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] umount2("./257/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... umount2 resumed>) = 0 [pid 5825] newfstatat(4, "", [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./267/file0", [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] umount2("./267/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] openat(AT_FDCWD, "./263", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] openat(AT_FDCWD, "./257/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] getdents64(4, [pid 5824] <... openat resumed>) = 3 [pid 5827] <... openat resumed>) = 4 [pid 5826] newfstatat(AT_FDCWD, "./267/file0", [pid 5824] newfstatat(3, "", [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] newfstatat(4, "", [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] umount2("./267/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] getdents64(4, [pid 5824] getdents64(3, [pid 5827] getdents64(4, [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5826] openat(AT_FDCWD, "./267/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] umount2("./263/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... openat resumed>) = 4 [pid 5826] newfstatat(4, "", [pid 5827] getdents64(4, [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5827] close(4 [pid 5826] getdents64(4, [pid 5823] umount2("./267/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... close resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] rmdir("./257/file0" [pid 5826] getdents64(4, [pid 5825] close(4 [pid 5824] <... umount2 resumed>) = 0 [pid 5824] umount2("./263/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./263/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] umount2("./263/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./263/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5825] <... close resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5826] close(4) = 0 [pid 5827] <... rmdir resumed>) = 0 [pid 5826] rmdir("./267/file0") = 0 [pid 5824] newfstatat(4, "", [pid 5823] openat(AT_FDCWD, "./267/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... openat resumed>) = 4 [pid 5824] getdents64(4, [pid 5823] newfstatat(4, "", [pid 5827] umount2("./257/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] umount2("./267/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] getdents64(4, [pid 5823] getdents64(4, [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5826] newfstatat(AT_FDCWD, "./267/binderfs", [pid 5824] close(4 [pid 5823] getdents64(4, [pid 5827] newfstatat(AT_FDCWD, "./257/binderfs", [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] rmdir("./262/file0" [pid 5824] <... close resumed>) = 0 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5826] unlink("./267/binderfs" [pid 5824] rmdir("./263/file0" [pid 5823] close(4 [pid 5826] <... unlink resumed>) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 5823] <... close resumed>) = 0 [pid 5826] getdents64(3, [pid 5825] <... rmdir resumed>) = 0 [pid 5823] rmdir("./267/file0" [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] umount2("./262/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] umount2("./263/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... rmdir resumed>) = 0 [pid 5826] close(3 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] umount2("./267/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... close resumed>) = 0 [pid 5824] newfstatat(AT_FDCWD, "./263/binderfs", [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] rmdir("./267" [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] newfstatat(AT_FDCWD, "./267/binderfs", [pid 5826] <... rmdir resumed>) = 0 [pid 5824] unlink("./263/binderfs" [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./267/binderfs" [pid 5824] <... unlink resumed>) = 0 [pid 5823] <... unlink resumed>) = 0 [pid 5826] mkdir("./268", 0777 [pid 5824] getdents64(3, [pid 5823] getdents64(3, [pid 5827] unlink("./257/binderfs" [pid 5826] <... mkdir resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] close(3) = 0 [pid 5823] close(3 [pid 5825] newfstatat(AT_FDCWD, "./262/binderfs", [pid 5823] <... close resumed>) = 0 [pid 5827] <... unlink resumed>) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] rmdir("./263" [pid 5823] rmdir("./267" [pid 5827] getdents64(3, [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5825] unlink("./262/binderfs") = 0 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5825] getdents64(3, [pid 5827] close(3 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] <... rmdir resumed>) = 0 [pid 5827] <... close resumed>) = 0 [pid 5826] <... openat resumed>) = 3 [pid 5825] close(3 [pid 5824] <... rmdir resumed>) = 0 [pid 5826] ioctl(3, LOOP_CLR_FD [pid 5825] <... close resumed>) = 0 [pid 5826] <... ioctl resumed>) = 0 [pid 5825] rmdir("./262" [pid 5826] close(3 [pid 5823] mkdir("./268", 0777 [pid 5826] <... close resumed>) = 0 [pid 5825] <... rmdir resumed>) = 0 [pid 5824] mkdir("./264", 0777 [pid 5823] <... mkdir resumed>) = 0 [pid 5825] mkdir("./263", 0777 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5825] <... mkdir resumed>) = 0 [pid 5824] <... mkdir resumed>) = 0 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR./strace-static-x86_64: Process 7172 attached [pid 5827] rmdir("./257" [pid 5825] <... openat resumed>) = 3 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5825] ioctl(3, LOOP_CLR_FD [pid 5827] <... rmdir resumed>) = 0 [pid 5825] <... ioctl resumed>) = 0 [pid 5824] <... openat resumed>) = 3 [pid 5823] <... openat resumed>) = 3 [pid 5825] close(3 [pid 5824] ioctl(3, LOOP_CLR_FD [pid 5823] ioctl(3, LOOP_CLR_FD [pid 5825] <... close resumed>) = 0 [pid 5824] <... ioctl resumed>) = 0 [pid 5823] <... ioctl resumed>) = 0 [pid 7172] set_robust_list(0x55557eba4660, 24 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5824] close(3 [pid 5823] close(3./strace-static-x86_64: Process 7173 attached [pid 7172] <... set_robust_list resumed>) = 0 [pid 5827] mkdir("./258", 0777 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7172 [pid 5824] <... close resumed>) = 0 [pid 5823] <... close resumed>) = 0 [pid 7172] chdir("./268" [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7173 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7175 attached ./strace-static-x86_64: Process 7174 attached [pid 5827] <... mkdir resumed>) = 0 [pid 7172] <... chdir resumed>) = 0 [pid 7172] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7172] setpgid(0, 0 [pid 7174] set_robust_list(0x55557eba4660, 24 [pid 7172] <... setpgid resumed>) = 0 [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7175 [pid 7175] set_robust_list(0x55557eba4660, 24 [pid 7173] set_robust_list(0x55557eba4660, 24 [pid 7172] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7174 [pid 7175] <... set_robust_list resumed>) = 0 [pid 7174] <... set_robust_list resumed>) = 0 [pid 7172] <... openat resumed>) = 3 [pid 7175] chdir("./268" [pid 7174] chdir("./264" [pid 7172] write(3, "1000", 4 [pid 7173] <... set_robust_list resumed>) = 0 [pid 7175] <... chdir resumed>) = 0 [pid 7173] chdir("./263" [pid 7172] <... write resumed>) = 4 [pid 5827] <... openat resumed>) = 3 [pid 7173] <... chdir resumed>) = 0 [pid 7175] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7174] <... chdir resumed>) = 0 [pid 7173] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7172] close(3 [pid 5827] ioctl(3, LOOP_CLR_FD [pid 7173] <... prctl resumed>) = 0 [pid 5827] <... ioctl resumed>) = 0 [pid 7175] <... prctl resumed>) = 0 [pid 7174] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7173] setpgid(0, 0 [pid 7172] <... close resumed>) = 0 [pid 5827] close(3 [pid 7173] <... setpgid resumed>) = 0 [pid 7175] setpgid(0, 0 [pid 7174] <... prctl resumed>) = 0 [pid 7172] symlink("/dev/binderfs", "./binderfs" [pid 7174] setpgid(0, 0 [pid 7172] <... symlink resumed>) = 0 [pid 7175] <... setpgid resumed>) = 0 [pid 7174] <... setpgid resumed>) = 0 [pid 7175] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7174] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7173] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXECexecuting program [pid 7175] <... openat resumed>) = 3 [pid 7174] <... openat resumed>) = 3 [pid 7173] <... openat resumed>) = 3 [pid 7172] write(1, "executing program\n", 18 [pid 7175] write(3, "1000", 4 [pid 7174] write(3, "1000", 4 [pid 7173] write(3, "1000", 4 [pid 7172] <... write resumed>) = 18 [pid 7173] <... write resumed>) = 4 [pid 7173] close(3 [pid 7175] <... write resumed>) = 4 [pid 7174] <... write resumed>) = 4 [pid 7172] memfd_create("syzkaller", 0 [pid 7175] close(3 [pid 7174] close(3 [pid 7173] <... close resumed>) = 0 [pid 7175] <... close resumed>) = 0 [pid 7174] <... close resumed>) = 0 [pid 7172] <... memfd_create resumed>) = 3 [pid 7175] symlink("/dev/binderfs", "./binderfs" [pid 7174] symlink("/dev/binderfs", "./binderfs" [pid 7172] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7173] symlink("/dev/binderfs", "./binderfs" [pid 7175] <... symlink resumed>) = 0 [pid 5827] <... close resumed>) = 0 executing program [pid 7173] <... symlink resumed>) = 0 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7173] write(1, "executing program\n", 18) = 18 executing program executing program [pid 7175] write(1, "executing program\n", 18 [pid 7174] <... symlink resumed>) = 0 [pid 7173] memfd_create("syzkaller", 0 [pid 7172] <... mmap resumed>) = 0x7f957a000000 [pid 7173] <... memfd_create resumed>) = 3 [pid 7172] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 7175] <... write resumed>) = 18 [pid 7175] memfd_create("syzkaller", 0 [pid 7174] write(1, "executing program\n", 18 [pid 7172] munmap(0x7f957a000000, 138412032 [pid 7174] <... write resumed>) = 18 [pid 7172] <... munmap resumed>) = 0 [pid 7174] memfd_create("syzkaller", 0 [pid 7172] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7174] <... memfd_create resumed>) = 3 [pid 7172] <... openat resumed>) = 4 [pid 7175] <... memfd_create resumed>) = 3 [pid 7174] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7172] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 7176 attached [pid 7175] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7174] <... mmap resumed>) = 0x7f957a000000 [pid 7173] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7175] <... mmap resumed>) = 0x7f957a000000 [pid 7174] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7173] <... mmap resumed>) = 0x7f957a000000 [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7176 [pid 7175] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7174] <... write resumed>) = 65536 [pid 7173] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7176] set_robust_list(0x55557eba4660, 24 [pid 7174] munmap(0x7f957a000000, 138412032 [pid 7176] <... set_robust_list resumed>) = 0 [pid 7173] <... write resumed>) = 65536 [pid 7176] chdir("./258" [pid 7175] <... write resumed>) = 65536 [pid 7174] <... munmap resumed>) = 0 [pid 7173] munmap(0x7f957a000000, 138412032 [pid 7176] <... chdir resumed>) = 0 [pid 7176] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7175] munmap(0x7f957a000000, 138412032 [pid 7174] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7173] <... munmap resumed>) = 0 [pid 7176] <... prctl resumed>) = 0 [pid 7173] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7176] setpgid(0, 0 [pid 7175] <... munmap resumed>) = 0 [pid 7174] <... openat resumed>) = 4 [pid 7173] <... openat resumed>) = 4 [pid 7176] <... setpgid resumed>) = 0 [pid 7173] ioctl(4, LOOP_SET_FD, 3 [pid 7176] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7175] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7174] ioctl(4, LOOP_SET_FD, 3 [pid 7176] <... openat resumed>) = 3 [pid 7175] <... openat resumed>) = 4 [pid 7176] write(3, "1000", 4) = 4 [pid 7176] close(3) = 0 [pid 7176] symlink("/dev/binderfs", "./binderfs" [pid 7175] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 7172] <... ioctl resumed>) = 0 [pid 7175] ioctl(4, LOOP_CLR_FD [pid 7172] close(3 [pid 7176] <... symlink resumed>) = 0 [pid 7175] <... ioctl resumed>) = 0 [pid 7172] <... close resumed>) = 0 [pid 7172] close(4) = 0 [pid 7172] mkdir("./file0", 0777) = 0 [pid 7172] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7173] <... ioctl resumed>) = 0 [pid 7175] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [ 217.560953][ T7172] loop3: detected capacity change from 0 to 128 [ 217.580182][ T7173] loop2: detected capacity change from 0 to 128 [ 217.580861][ T7174] loop1: detected capacity change from 0 to 128 [pid 7175] close(4executing program [pid 7174] <... ioctl resumed>) = 0 [pid 7176] write(1, "executing program\n", 18 [pid 7173] close(3 [pid 7176] <... write resumed>) = 18 [pid 7175] <... close resumed>) = 0 [pid 7175] close(3 [pid 7174] close(3) = 0 [pid 7174] close(4) = 0 [pid 7175] <... close resumed>) = 0 [pid 7174] mkdir("./file0", 0777 [pid 7176] memfd_create("syzkaller", 0 [pid 7174] <... mkdir resumed>) = 0 [pid 7176] <... memfd_create resumed>) = 3 [pid 7174] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7176] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7175] openat(AT_FDCWD, ".", O_RDONLY [pid 7173] <... close resumed>) = 0 [pid 7176] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7175] <... openat resumed>) = 3 [pid 7172] <... mount resumed>) = 0 [pid 7173] close(4 [pid 7175] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7173] <... close resumed>) = 0 [pid 7175] <... renameat2 resumed>) = -1 ENOENT (No such file or directory) [pid 7173] mkdir("./file0", 0777 [pid 7172] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7172] chdir("./file0") = 0 [pid 7173] <... mkdir resumed>) = 0 [pid 7176] <... write resumed>) = 65536 [pid 7175] sync( [pid 7173] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7172] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7172] openat(AT_FDCWD, ".", O_RDONLY) = 4 [ 217.614565][ T7172] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 217.649424][ T7174] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [pid 7176] munmap(0x7f957a000000, 138412032 [pid 7172] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = 0 [pid 7176] <... munmap resumed>) = 0 [pid 7176] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 7176] ioctl(4, LOOP_SET_FD, 3 [pid 7172] sync( [pid 7176] <... ioctl resumed>) = 0 [pid 7176] close(3) = 0 [pid 7174] <... mount resumed>) = 0 [pid 7174] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7176] close(4 [pid 7174] <... openat resumed>) = 3 [pid 7176] <... close resumed>) = 0 [pid 7174] chdir("./file0" [pid 7176] mkdir("./file0", 0777 [pid 7174] <... chdir resumed>) = 0 [pid 7174] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7176] <... mkdir resumed>) = 0 [pid 7174] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7176] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7174] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7174] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7173] <... mount resumed>) = 0 [pid 7173] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7173] chdir("./file0") = 0 [pid 7174] <... renameat2 resumed>) = 0 [pid 7173] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7174] sync( [pid 7173] openat(AT_FDCWD, ".", O_RDONLY) = 4 [ 217.685711][ T7173] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 217.718444][ T7176] loop4: detected capacity change from 0 to 128 [pid 7173] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = 0 [pid 7173] sync( [pid 7176] <... mount resumed>) = 0 [ 217.757942][ T7176] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [pid 7176] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7176] chdir("./file0") = 0 [pid 7176] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7176] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7176] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = 0 [pid 7173] <... sync resumed>) = 0 [pid 7175] <... sync resumed>) = 0 [pid 7175] exit_group(0 [pid 7176] sync( [pid 7175] <... exit_group resumed>) = ? [pid 7174] <... sync resumed>) = 0 [pid 7173] exit_group(0 [pid 7172] <... sync resumed>) = 0 [pid 7174] exit_group(0 [pid 7173] <... exit_group resumed>) = ? [pid 7172] exit_group(0 [pid 7173] +++ exited with 0 +++ [pid 7174] <... exit_group resumed>) = ? [pid 7172] <... exit_group resumed>) = ? [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7173, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 7172] +++ exited with 0 +++ [pid 7175] +++ exited with 0 +++ [pid 7174] +++ exited with 0 +++ [pid 7176] <... sync resumed>) = 0 [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7172, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7174, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 7176] exit_group(0 [pid 5826] restart_syscall(<... resuming interrupted clone ...> [pid 5825] umount2("./263", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7175, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 7176] <... exit_group resumed>) = ? [pid 5826] <... restart_syscall resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... restart_syscall resumed>) = 0 [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 5825] openat(AT_FDCWD, "./263", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] <... restart_syscall resumed>) = 0 [pid 7176] +++ exited with 0 +++ [pid 5826] umount2("./268", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... openat resumed>) = 3 [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7176, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(3, "", [pid 5824] umount2("./264", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] restart_syscall(<... resuming interrupted clone ...> [pid 5826] openat(AT_FDCWD, "./268", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] umount2("./268", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... restart_syscall resumed>) = 0 [pid 5826] <... openat resumed>) = 3 [pid 5825] getdents64(3, [pid 5824] openat(AT_FDCWD, "./264", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] <... openat resumed>) = 3 [pid 5823] openat(AT_FDCWD, "./268", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] umount2("./258", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] getdents64(3, [pid 5825] umount2("./263/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] newfstatat(3, "", [pid 5823] <... openat resumed>) = 3 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] umount2("./268/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] getdents64(3, [pid 5823] newfstatat(3, "", [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] umount2("./264/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] openat(AT_FDCWD, "./258", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] getdents64(3, [pid 5827] <... openat resumed>) = 3 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 5827] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] umount2("./268/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] umount2("./258/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] newfstatat(AT_FDCWD, "./268/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./268/binderfs") = 0 [pid 5823] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] close(3) = 0 [pid 5827] <... umount2 resumed>) = 0 [pid 5826] <... umount2 resumed>) = 0 [pid 5825] <... umount2 resumed>) = 0 [pid 5824] <... umount2 resumed>) = 0 [pid 5823] rmdir("./268" [pid 5827] umount2("./258/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./263/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./264/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] newfstatat(AT_FDCWD, "./258/file0", [pid 5825] newfstatat(AT_FDCWD, "./263/file0", [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] umount2("./268/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] newfstatat(AT_FDCWD, "./264/file0", [pid 5827] umount2("./258/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] umount2("./263/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] openat(AT_FDCWD, "./258/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] umount2("./264/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... openat resumed>) = 4 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./263/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... rmdir resumed>) = 0 [pid 5827] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] newfstatat(AT_FDCWD, "./268/file0", [pid 5825] <... openat resumed>) = 4 [pid 5824] openat(AT_FDCWD, "./264/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] mkdir("./269", 0777 [pid 5827] getdents64(4, [pid 5825] newfstatat(4, "", [pid 5824] <... openat resumed>) = 4 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] newfstatat(4, "", [pid 5823] <... mkdir resumed>) = 0 [pid 5826] umount2("./268/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] getdents64(4, [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5827] getdents64(4, [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... openat resumed>) = 3 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5825] getdents64(4, [pid 5824] getdents64(4, [pid 5827] close(4 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5827] <... close resumed>) = 0 [pid 5826] openat(AT_FDCWD, "./268/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] close(4 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] ioctl(3, LOOP_CLR_FD [pid 5827] rmdir("./258/file0" [pid 5825] <... close resumed>) = 0 [pid 5824] getdents64(4, [pid 5826] <... openat resumed>) = 4 [pid 5823] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5827] <... rmdir resumed>) = 0 [pid 5825] rmdir("./263/file0" [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5827] umount2("./258/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] newfstatat(4, "", [pid 5823] close(3 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] <... rmdir resumed>) = 0 [pid 5824] close(4 [pid 5823] <... close resumed>) = 0 [pid 5827] newfstatat(AT_FDCWD, "./258/binderfs", [pid 5826] getdents64(4, [pid 5824] <... close resumed>) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] umount2("./263/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] rmdir("./264/file0"./strace-static-x86_64: Process 7177 attached [pid 5827] unlink("./258/binderfs" [pid 5826] getdents64(4, [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7177] set_robust_list(0x55557eba4660, 24 [pid 5824] <... rmdir resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5826] close(4 [pid 5827] <... unlink resumed>) = 0 [pid 5824] umount2("./264/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7177] <... set_robust_list resumed>) = 0 [pid 5827] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] <... close resumed>) = 0 [pid 5827] close(3 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] rmdir("./268/file0" [pid 7177] chdir("./269" [pid 5827] <... close resumed>) = 0 [pid 5826] <... rmdir resumed>) = 0 [pid 5824] newfstatat(AT_FDCWD, "./264/binderfs", [pid 7177] <... chdir resumed>) = 0 [pid 5827] rmdir("./258" [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7177] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5827] <... rmdir resumed>) = 0 [pid 5827] mkdir("./259", 0777 [pid 5826] umount2("./268/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] unlink("./264/binderfs" [pid 7177] <... prctl resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... unlink resumed>) = 0 [pid 7177] setpgid(0, 0 [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7177 [pid 5826] newfstatat(AT_FDCWD, "./268/binderfs", [pid 7177] <... setpgid resumed>) = 0 [pid 5827] <... mkdir resumed>) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] getdents64(3, [pid 7177] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5825] newfstatat(AT_FDCWD, "./263/binderfs", [pid 7177] <... openat resumed>) = 3 [pid 5826] unlink("./268/binderfs" [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7177] write(3, "1000", 4 [pid 5825] unlink("./263/binderfs" [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7177] <... write resumed>) = 4 [pid 7177] close(3 [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5826] <... unlink resumed>) = 0 [pid 5825] <... unlink resumed>) = 0 [pid 5824] close(3 [pid 5826] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] close(3) = 0 [pid 5826] rmdir("./268") = 0 [pid 7177] <... close resumed>) = 0 [pid 5827] <... openat resumed>) = 3 [pid 5825] getdents64(3, [pid 5824] <... close resumed>) = 0 [pid 7177] symlink("/dev/binderfs", "./binderfs" [pid 5827] ioctl(3, LOOP_CLR_FD [pid 5826] mkdir("./269", 0777 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] rmdir("./264" [pid 7177] <... symlink resumed>) = 0 [pid 5827] <... ioctl resumed>) = 0 [pid 5826] <... mkdir resumed>) = 0 [pid 5825] close(3 [pid 5824] <... rmdir resumed>) = 0 executing program [pid 7177] write(1, "executing program\n", 18 [pid 5827] close(3 [pid 5825] <... close resumed>) = 0 [pid 5824] mkdir("./265", 0777 [pid 7177] <... write resumed>) = 18 [pid 5827] <... close resumed>) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5825] rmdir("./263" [pid 7177] memfd_create("syzkaller", 0 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5826] <... openat resumed>) = 3 [pid 5825] <... rmdir resumed>) = 0 [pid 5824] <... mkdir resumed>) = 0 [pid 5826] ioctl(3, LOOP_CLR_FD) = 0 [pid 5825] mkdir("./264", 0777 [pid 5826] close(3./strace-static-x86_64: Process 7178 attached [pid 7177] <... memfd_create resumed>) = 3 [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7178 [pid 5826] <... close resumed>) = 0 [pid 5825] <... mkdir resumed>) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5824] <... openat resumed>) = 3 [pid 7177] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7178] set_robust_list(0x55557eba4660, 24) = 0 [pid 7177] <... mmap resumed>) = 0x7f957a000000 [pid 5825] <... openat resumed>) = 3 [pid 5824] ioctl(3, LOOP_CLR_FD [pid 7178] chdir("./259" [pid 5824] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 7179 attached [pid 7177] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7179 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 5824] close(3 [pid 7178] <... chdir resumed>) = 0 [pid 5825] <... ioctl resumed>) = 0 [pid 7179] set_robust_list(0x55557eba4660, 24) = 0 [pid 7178] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5825] close(3 [pid 7178] <... prctl resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 7179] chdir("./269" [pid 7178] setpgid(0, 0 [pid 7177] <... write resumed>) = 65536 [pid 5825] <... close resumed>) = 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7179] <... chdir resumed>) = 0 [pid 7178] <... setpgid resumed>) = 0 [pid 7179] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7179] setpgid(0, 0 [pid 7178] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7179] <... setpgid resumed>) = 0 ./strace-static-x86_64: Process 7180 attached [pid 7179] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7178] <... openat resumed>) = 3 [pid 7178] write(3, "1000", 4./strace-static-x86_64: Process 7181 attached [pid 7180] set_robust_list(0x55557eba4660, 24 [pid 7179] <... openat resumed>) = 3 [pid 7178] <... write resumed>) = 4 [pid 7180] <... set_robust_list resumed>) = 0 [pid 7177] munmap(0x7f957a000000, 138412032 [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7180 [pid 7178] close(3 [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7181 [pid 7180] chdir("./265" [pid 7178] <... close resumed>) = 0 [pid 7178] symlink("/dev/binderfs", "./binderfs" [pid 7177] <... munmap resumed>) = 0 [pid 7179] write(3, "1000", 4 [pid 7178] <... symlink resumed>) = 0 [pid 7177] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7181] set_robust_list(0x55557eba4660, 24 [pid 7179] <... write resumed>) = 4 [pid 7178] write(1, "executing program\n", 18 [pid 7181] <... set_robust_list resumed>) = 0 [pid 7180] <... chdir resumed>) = 0 [pid 7177] <... openat resumed>) = 4 [pid 7179] close(3 [pid 7181] chdir("./264" [pid 7179] <... close resumed>) = 0 executing program [pid 7179] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7177] ioctl(4, LOOP_SET_FD, 3 [pid 7181] <... chdir resumed>) = 0 [pid 7180] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7178] <... write resumed>) = 18 [pid 7181] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7181] setpgid(0, 0executing program [pid 7179] write(1, "executing program\n", 18 [pid 7181] <... setpgid resumed>) = 0 [pid 7179] <... write resumed>) = 18 [pid 7181] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7179] memfd_create("syzkaller", 0 [pid 7181] <... openat resumed>) = 3 [pid 7179] <... memfd_create resumed>) = 3 [pid 7181] write(3, "1000", 4) = 4 [pid 7179] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7181] close(3 [pid 7180] <... prctl resumed>) = 0 [pid 7179] <... mmap resumed>) = 0x7f957a000000 [pid 7178] memfd_create("syzkaller", 0 [pid 7180] setpgid(0, 0 [pid 7178] <... memfd_create resumed>) = 3 [pid 7181] <... close resumed>) = 0 [pid 7180] <... setpgid resumed>) = 0 [pid 7179] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7181] symlink("/dev/binderfs", "./binderfs" [pid 7179] <... write resumed>) = 65536 [pid 7181] <... symlink resumed>) = 0 executing program [pid 7181] write(1, "executing program\n", 18 [pid 7179] munmap(0x7f957a000000, 138412032 [pid 7181] <... write resumed>) = 18 [pid 7181] memfd_create("syzkaller", 0 [pid 7179] <... munmap resumed>) = 0 [pid 7180] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7178] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7181] <... memfd_create resumed>) = 3 [pid 7180] write(3, "1000", 4 [pid 7179] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7178] <... mmap resumed>) = 0x7f957a000000 [pid 7180] <... write resumed>) = 4 [pid 7177] <... ioctl resumed>) = 0 [pid 7181] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7179] <... openat resumed>) = 4 [pid 7181] <... mmap resumed>) = 0x7f957a000000 [pid 7180] close(3 [pid 7179] ioctl(4, LOOP_SET_FD, 3 [pid 7178] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7177] close(3 [pid 7180] <... close resumed>) = 0 [pid 7177] <... close resumed>) = 0 [pid 7180] symlink("/dev/binderfs", "./binderfs" [pid 7177] close(4 [pid 7181] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7180] <... symlink resumed>) = 0 [pid 7179] <... ioctl resumed>) = 0 [pid 7178] <... write resumed>) = 65536 [pid 7177] <... close resumed>) = 0 [pid 7178] munmap(0x7f957a000000, 138412032 [pid 7177] mkdir("./file0", 0777 [pid 7180] write(1, "executing program\n", 18executing program [pid 7181] <... write resumed>) = 65536 [pid 7180] <... write resumed>) = 18 [pid 7178] <... munmap resumed>) = 0 [pid 7177] <... mkdir resumed>) = 0 [pid 7181] munmap(0x7f957a000000, 138412032) = 0 [pid 7181] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 7181] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 7181] ioctl(4, LOOP_CLR_FD) = 0 [pid 7178] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7177] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7180] memfd_create("syzkaller", 0 [pid 7181] ioctl(4, LOOP_SET_FD, 3 [pid 7178] <... openat resumed>) = 4 [pid 7181] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 7178] ioctl(4, LOOP_SET_FD, 3 [pid 7180] <... memfd_create resumed>) = 3 [pid 7181] close(4 [ 218.005653][ T7177] loop0: detected capacity change from 0 to 128 [ 218.035728][ T7179] loop3: detected capacity change from 0 to 128 [pid 7180] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7181] <... close resumed>) = 0 [pid 7181] close(3) = 0 [pid 7181] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 7179] close(3 [pid 7181] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7179] <... close resumed>) = 0 [pid 7181] <... renameat2 resumed>) = -1 ENOENT (No such file or directory) [pid 7179] close(4 [pid 7181] sync( [pid 7179] <... close resumed>) = 0 [pid 7179] mkdir("./file0", 0777 [pid 7180] <... mmap resumed>) = 0x7f957a000000 [pid 7179] <... mkdir resumed>) = 0 [pid 7179] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7180] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 7180] munmap(0x7f957a000000, 138412032) = 0 [pid 7180] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 7180] ioctl(4, LOOP_SET_FD, 3 [pid 7179] <... mount resumed>) = 0 [pid 7178] <... ioctl resumed>) = 0 [pid 7177] <... mount resumed>) = 0 [pid 7179] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7178] close(3 [pid 7177] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7179] <... openat resumed>) = 3 [pid 7178] <... close resumed>) = 0 [pid 7177] <... openat resumed>) = 3 [pid 7179] chdir("./file0" [pid 7178] close(4 [pid 7179] <... chdir resumed>) = 0 [pid 7177] chdir("./file0" [pid 7179] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7178] <... close resumed>) = 0 [pid 7179] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7178] mkdir("./file0", 0777 [pid 7177] <... chdir resumed>) = 0 [pid 7179] openat(AT_FDCWD, ".", O_RDONLY [pid 7177] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7179] <... openat resumed>) = 4 [pid 7177] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7179] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7177] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7177] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7179] <... renameat2 resumed>) = 0 [pid 7179] sync( [pid 7177] <... renameat2 resumed>) = 0 [pid 7177] sync( [pid 7180] <... ioctl resumed>) = 0 [pid 7178] <... mkdir resumed>) = 0 [ 218.066693][ T7178] loop4: detected capacity change from 0 to 128 [ 218.073748][ T7177] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 218.086950][ T7179] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 218.102302][ T7180] loop1: detected capacity change from 0 to 128 [pid 7178] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7180] close(3) = 0 [pid 7180] close(4) = 0 [pid 7180] mkdir("./file0", 0777) = 0 [pid 7180] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7181] <... sync resumed>) = 0 [pid 7181] exit_group(0) = ? [pid 7181] +++ exited with 0 +++ [pid 7178] <... mount resumed>) = 0 [pid 7178] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7181, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 7178] <... openat resumed>) = 3 [pid 5825] restart_syscall(<... resuming interrupted clone ...> [pid 7178] chdir("./file0") = 0 [pid 7178] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7178] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 5825] <... restart_syscall resumed>) = 0 [pid 7178] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5825] umount2("./264", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./264", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5825] newfstatat(3, "", [pid 7178] <... renameat2 resumed>) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7178] sync( [pid 5825] getdents64(3, 0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 5825] umount2("./264/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./264/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 218.157566][ T7178] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 218.185742][ T7180] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [pid 5825] unlink("./264/binderfs") = 0 [pid 5825] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5825] close(3 [pid 7180] <... mount resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 5825] rmdir("./264" [pid 7180] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7180] chdir("./file0") = 0 [pid 7180] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7180] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7180] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = 0 [pid 7180] sync( [pid 7179] <... sync resumed>) = 0 [pid 7178] <... sync resumed>) = 0 [pid 7177] <... sync resumed>) = 0 [pid 5825] <... rmdir resumed>) = 0 [pid 7178] exit_group(0) = ? [pid 7177] exit_group(0 [pid 5825] mkdir("./265", 0777 [pid 7178] +++ exited with 0 +++ [pid 7177] <... exit_group resumed>) = ? [pid 7177] +++ exited with 0 +++ [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7178, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5825] <... mkdir resumed>) = 0 [pid 7179] exit_group(0 [pid 5827] restart_syscall(<... resuming interrupted clone ...> [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7177, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7180] <... sync resumed>) = 0 [pid 7179] <... exit_group resumed>) = ? [pid 5827] <... restart_syscall resumed>) = 0 [pid 7180] exit_group(0 [pid 5825] <... openat resumed>) = 3 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 5823] umount2("./269", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] umount2("./259", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./269", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] openat(AT_FDCWD, "./259", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] <... openat resumed>) = 3 [pid 5827] <... openat resumed>) = 3 [pid 5823] newfstatat(3, "", [pid 5827] newfstatat(3, "", [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(3, [pid 5827] getdents64(3, [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] umount2("./269/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] umount2("./259/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] close(3 [pid 7180] <... exit_group resumed>) = ? [pid 5823] <... umount2 resumed>) = 0 [pid 5827] <... umount2 resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 7179] +++ exited with 0 +++ [pid 5827] umount2("./259/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5823] umount2("./269/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] newfstatat(AT_FDCWD, "./259/file0", [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7179, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5823] newfstatat(AT_FDCWD, "./269/file0", ./strace-static-x86_64: Process 7182 attached [pid 7180] +++ exited with 0 +++ [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] umount2("./269", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7182] set_robust_list(0x55557eba4660, 24 [pid 5827] umount2("./259/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7180, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5823] umount2("./269/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7182] <... set_robust_list resumed>) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./269", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7182] chdir("./265" [pid 5827] openat(AT_FDCWD, "./259/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] <... openat resumed>) = 3 [pid 5823] openat(AT_FDCWD, "./269/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] <... openat resumed>) = 4 [pid 5824] <... restart_syscall resumed>) = 0 [pid 5826] newfstatat(3, "", [pid 5823] <... openat resumed>) = 4 [pid 7182] <... chdir resumed>) = 0 [pid 5827] newfstatat(4, "", [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7182] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(3, [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7182 [pid 5823] newfstatat(4, "", [pid 7182] <... prctl resumed>) = 0 [pid 5827] getdents64(4, [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] umount2("./265", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7182] setpgid(0, 0 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5826] umount2("./269/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] getdents64(4, [pid 7182] <... setpgid resumed>) = 0 [pid 5827] getdents64(4, [pid 5824] openat(AT_FDCWD, "./265", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 7182] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] <... openat resumed>) = 3 [pid 5823] getdents64(4, [pid 5824] newfstatat(3, "", [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5827] close(4 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] close(4 [pid 7182] <... openat resumed>) = 3 [pid 5827] <... close resumed>) = 0 [pid 5823] <... close resumed>) = 0 [pid 5827] rmdir("./259/file0" [pid 5824] getdents64(3, [pid 5823] rmdir("./269/file0" [pid 7182] write(3, "1000", 4 [pid 5827] <... rmdir resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] <... rmdir resumed>) = 0 [pid 7182] <... write resumed>) = 4 [pid 5824] umount2("./265/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7182] close(3 [pid 5823] umount2("./269/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7182] <... close resumed>) = 0 [pid 5827] umount2("./259/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7182] symlink("/dev/binderfs", "./binderfs" [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./269/binderfs", [pid 7182] <... symlink resumed>) = 0 [pid 5827] newfstatat(AT_FDCWD, "./259/binderfs", [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 executing program [pid 7182] write(1, "executing program\n", 18 [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./269/binderfs" [pid 7182] <... write resumed>) = 18 [pid 5827] unlink("./259/binderfs" [pid 5823] <... unlink resumed>) = 0 [pid 7182] memfd_create("syzkaller", 0 [pid 5827] <... unlink resumed>) = 0 [pid 5823] getdents64(3, [pid 7182] <... memfd_create resumed>) = 3 [pid 5827] getdents64(3, [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7182] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 5827] close(3 [pid 5823] close(3 [pid 5827] <... close resumed>) = 0 [pid 5823] <... close resumed>) = 0 [pid 7182] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5827] rmdir("./259" [pid 5823] rmdir("./269" [pid 5827] <... rmdir resumed>) = 0 [pid 5823] <... rmdir resumed>) = 0 [pid 7182] <... write resumed>) = 65536 [pid 5827] mkdir("./260", 0777) = 0 [pid 5823] mkdir("./270", 0777 [pid 7182] munmap(0x7f957a000000, 138412032 [pid 5823] <... mkdir resumed>) = 0 [pid 7182] <... munmap resumed>) = 0 [pid 7182] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7182] <... openat resumed>) = 4 [pid 5827] <... openat resumed>) = 3 [pid 5826] <... umount2 resumed>) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5826] umount2("./269/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./269/file0", [pid 5824] <... umount2 resumed>) = 0 [pid 7182] ioctl(4, LOOP_SET_FD, 3 [pid 5827] ioctl(3, LOOP_CLR_FD [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... openat resumed>) = 3 [pid 5827] <... ioctl resumed>) = 0 [pid 5826] umount2("./269/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] ioctl(3, LOOP_CLR_FD [pid 5824] umount2("./265/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./265/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] umount2("./265/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] close(3 [pid 5824] openat(AT_FDCWD, "./265/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] <... ioctl resumed>) = 0 [pid 5826] openat(AT_FDCWD, "./269/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] <... close resumed>) = 0 [pid 5826] <... openat resumed>) = 4 [pid 5824] <... openat resumed>) = 4 [pid 5823] close(3 [pid 5826] newfstatat(4, "", [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] newfstatat(4, "", [pid 5823] <... close resumed>) = 0 [pid 5826] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 7183 attached [pid 5826] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] getdents64(4, [pid 5826] close(4 [pid 7183] set_robust_list(0x55557eba4660, 24) = 0 [pid 5826] <... close resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7183] chdir("./260"./strace-static-x86_64: Process 7184 attached ) = 0 [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7183 [pid 5826] rmdir("./269/file0" [pid 5824] getdents64(4, [pid 7183] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7184] set_robust_list(0x55557eba4660, 24 [pid 7183] <... prctl resumed>) = 0 [pid 5826] <... rmdir resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7184 [pid 7183] setpgid(0, 0 [pid 5826] umount2("./269/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7183] <... setpgid resumed>) = 0 [pid 7183] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5824] close(4 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... close resumed>) = 0 [pid 5824] rmdir("./265/file0" [pid 7183] <... openat resumed>) = 3 [pid 5826] newfstatat(AT_FDCWD, "./269/binderfs", [pid 5824] <... rmdir resumed>) = 0 [pid 7184] <... set_robust_list resumed>) = 0 [pid 7184] chdir("./270") = 0 [pid 5824] umount2("./265/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7184] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7184] setpgid(0, 0 [pid 7183] write(3, "1000", 4 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] newfstatat(AT_FDCWD, "./265/binderfs", [pid 7184] <... setpgid resumed>) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7184] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5824] unlink("./265/binderfs") = 0 [pid 7184] <... openat resumed>) = 3 [pid 5824] getdents64(3, [pid 7183] <... write resumed>) = 4 [pid 7182] <... ioctl resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] unlink("./269/binderfs" [pid 7184] write(3, "1000", 4 [pid 7183] close(3 [pid 7182] close(3 [pid 7183] <... close resumed>) = 0 [pid 7182] <... close resumed>) = 0 [pid 7182] close(4 [pid 5824] close(3 [pid 7184] <... write resumed>) = 4 [pid 7183] symlink("/dev/binderfs", "./binderfs" [pid 7182] <... close resumed>) = 0 [pid 5826] <... unlink resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 7184] close(3 [pid 7183] <... symlink resumed>) = 0 [pid 7182] mkdir("./file0", 0777 [pid 5826] getdents64(3, [pid 5824] rmdir("./265" [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7183] write(1, "executing program\n", 18 [pid 5826] close(3 [pid 7184] <... close resumed>) = 0 [pid 7182] <... mkdir resumed>) = 0 [pid 5826] <... close resumed>) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 5826] rmdir("./269" [pid 7184] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5826] <... rmdir resumed>) = 0 [pid 5824] mkdir("./266", 0777executing program executing program [pid 7184] write(1, "executing program\n", 18 [pid 7183] <... write resumed>) = 18 [pid 5826] mkdir("./270", 0777 [pid 5824] <... mkdir resumed>) = 0 [pid 7182] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7184] <... write resumed>) = 18 [pid 5826] <... mkdir resumed>) = 0 [pid 7184] memfd_create("syzkaller", 0 [pid 7183] memfd_create("syzkaller", 0 [pid 7184] <... memfd_create resumed>) = 3 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7184] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7183] <... memfd_create resumed>) = 3 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7183] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5826] <... openat resumed>) = 3 [pid 7184] <... mmap resumed>) = 0x7f957a000000 [pid 5824] <... openat resumed>) = 3 [pid 7183] <... mmap resumed>) = 0x7f957a000000 [pid 5826] ioctl(3, LOOP_CLR_FD [pid 7184] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5826] <... ioctl resumed>) = 0 [pid 5824] ioctl(3, LOOP_CLR_FD [pid 7183] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5826] close(3) = 0 [pid 5824] <... ioctl resumed>) = 0 [ 218.381126][ T7182] loop2: detected capacity change from 0 to 128 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5824] close(3 [pid 7184] <... write resumed>) = 65536 [pid 5824] <... close resumed>) = 0 ./strace-static-x86_64: Process 7185 attached [pid 7184] munmap(0x7f957a000000, 138412032 [pid 7183] <... write resumed>) = 65536 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7186 attached [pid 7185] set_robust_list(0x55557eba4660, 24 [pid 7184] <... munmap resumed>) = 0 [pid 7183] munmap(0x7f957a000000, 138412032 [pid 7184] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7184] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7186 [pid 7185] <... set_robust_list resumed>) = 0 [pid 7183] <... munmap resumed>) = 0 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7185 [pid 7185] chdir("./270" [pid 7183] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7186] set_robust_list(0x55557eba4660, 24 [pid 7185] <... chdir resumed>) = 0 [pid 7183] <... openat resumed>) = 4 [pid 7185] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7183] ioctl(4, LOOP_SET_FD, 3 [pid 7185] <... prctl resumed>) = 0 [pid 7186] <... set_robust_list resumed>) = 0 [pid 7185] setpgid(0, 0 [pid 7186] chdir("./266") = 0 [pid 7186] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7186] setpgid(0, 0) = 0 [pid 7186] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7183] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 7185] <... setpgid resumed>) = 0 [pid 7186] <... openat resumed>) = 3 [pid 7185] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7183] ioctl(4, LOOP_CLR_FD [pid 7186] write(3, "1000", 4 [pid 7183] <... ioctl resumed>) = 0 [pid 7185] <... openat resumed>) = 3 [pid 7186] <... write resumed>) = 4 [pid 7186] close(3) = 0 [pid 7186] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 7186] write(1, "executing program\n", 18) = 18 [pid 7186] memfd_create("syzkaller", 0) = 3 [pid 7185] write(3, "1000", 4 [pid 7186] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7186] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7185] <... write resumed>) = 4 [pid 7185] close(3) = 0 [pid 7185] symlink("/dev/binderfs", "./binderfs" [pid 7183] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 7183] close(4 [pid 7186] <... write resumed>) = 65536 [pid 7185] <... symlink resumed>) = 0 [pid 7184] close(3 [pid 7183] <... close resumed>) = 0 [pid 7184] <... close resumed>) = 0 [pid 7184] close(4 [pid 7186] munmap(0x7f957a000000, 138412032 [pid 7184] <... close resumed>) = 0 [pid 7186] <... munmap resumed>) = 0 [pid 7184] mkdir("./file0", 0777 [pid 7186] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7185] write(1, "executing program\n", 18 [pid 7184] <... mkdir resumed>) = 0 [pid 7183] close(3 [pid 7186] <... openat resumed>) = 4 [pid 7183] <... close resumed>) = 0 [ 218.451275][ T7182] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 218.464565][ T7184] loop0: detected capacity change from 0 to 128 [pid 7186] ioctl(4, LOOP_SET_FD, 3executing program [pid 7185] <... write resumed>) = 18 [pid 7184] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7183] openat(AT_FDCWD, ".", O_RDONLY [pid 7185] memfd_create("syzkaller", 0 [pid 7183] <... openat resumed>) = 3 [pid 7183] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7185] <... memfd_create resumed>) = 3 [pid 7186] <... ioctl resumed>) = 0 [pid 7186] close(3) = 0 [pid 7185] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7183] <... renameat2 resumed>) = -1 ENOENT (No such file or directory) [pid 7186] close(4 [pid 7185] <... mmap resumed>) = 0x7f957a000000 [pid 7183] sync( [pid 7186] <... close resumed>) = 0 [pid 7185] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7186] mkdir("./file0", 0777) = 0 [pid 7182] <... mount resumed>) = 0 [pid 7182] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7185] <... write resumed>) = 65536 [pid 7182] <... openat resumed>) = 3 [pid 7182] chdir("./file0") = 0 [pid 7185] munmap(0x7f957a000000, 138412032 [pid 7182] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7182] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7182] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7186] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7185] <... munmap resumed>) = 0 [pid 7185] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 218.508817][ T7186] loop1: detected capacity change from 0 to 128 [ 218.520343][ T7184] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [pid 7185] ioctl(4, LOOP_SET_FD, 3 [pid 7182] <... renameat2 resumed>) = 0 [pid 7182] sync( [pid 7184] <... mount resumed>) = 0 [pid 7184] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7184] chdir("./file0") = 0 [pid 7184] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7184] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7184] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7185] <... ioctl resumed>) = 0 [pid 7185] close(3 [pid 7184] <... renameat2 resumed>) = 0 [pid 7184] sync( [pid 7185] <... close resumed>) = 0 [pid 7185] close(4) = 0 [pid 7185] mkdir("./file0", 0777) = 0 [pid 7186] <... mount resumed>) = 0 [pid 7185] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7184] <... sync resumed>) = 0 [pid 7183] <... sync resumed>) = 0 [pid 7182] <... sync resumed>) = 0 [pid 7186] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7184] exit_group(0 [pid 7183] exit_group(0 [pid 7182] exit_group(0 [pid 7186] <... openat resumed>) = 3 [pid 7184] <... exit_group resumed>) = ? [ 218.559683][ T7185] loop3: detected capacity change from 0 to 128 [ 218.577367][ T7186] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [pid 7182] <... exit_group resumed>) = ? [pid 7186] chdir("./file0" [pid 7184] +++ exited with 0 +++ [pid 7183] <... exit_group resumed>) = ? [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7184, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7186] <... chdir resumed>) = 0 [pid 7183] +++ exited with 0 +++ [pid 7182] +++ exited with 0 +++ [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7182, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7186] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7183, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5825] restart_syscall(<... resuming interrupted clone ...> [pid 5823] <... restart_syscall resumed>) = 0 [pid 7186] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7186] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 5827] umount2("./260", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] umount2("./270", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] openat(AT_FDCWD, "./260", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] openat(AT_FDCWD, "./270", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7186] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5827] <... openat resumed>) = 3 [pid 5825] <... restart_syscall resumed>) = 0 [pid 5823] <... openat resumed>) = 3 [pid 5827] newfstatat(3, "", [pid 5823] newfstatat(3, "", [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] umount2("./265", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] umount2("./270/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] getdents64(3, 0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 5827] umount2("./260/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] newfstatat(AT_FDCWD, "./260/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] unlink("./260/binderfs") = 0 [pid 5827] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5827] close(3) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] rmdir("./260" [pid 5825] openat(AT_FDCWD, "./265", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7186] <... renameat2 resumed>) = 0 [pid 5827] <... rmdir resumed>) = 0 [pid 7186] sync( [pid 5825] <... openat resumed>) = 3 [pid 5827] mkdir("./261", 0777 [pid 5825] newfstatat(3, "", [pid 5827] <... mkdir resumed>) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(3, [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5825] umount2("./265/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... openat resumed>) = 3 [pid 5827] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5827] close(3) = 0 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5823] <... umount2 resumed>) = 0 [pid 5823] umount2("./270/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 7187 attached [pid 5823] newfstatat(AT_FDCWD, "./270/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... umount2 resumed>) = 0 [pid 5825] umount2("./265/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] umount2("./270/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7187] set_robust_list(0x55557eba4660, 24 [pid 5825] newfstatat(AT_FDCWD, "./265/file0", [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7187] <... set_robust_list resumed>) = 0 [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7187 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] openat(AT_FDCWD, "./270/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7187] chdir("./261" [pid 5825] umount2("./265/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... openat resumed>) = 4 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(4, "", [pid 7187] <... chdir resumed>) = 0 [pid 5825] openat(AT_FDCWD, "./265/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7187] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5825] <... openat resumed>) = 4 [pid 5825] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 7187] <... prctl resumed>) = 0 [pid 5823] getdents64(4, [pid 7187] setpgid(0, 0 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5825] getdents64(4, [pid 7187] <... setpgid resumed>) = 0 [pid 5823] close(4 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 7187] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5825] getdents64(4, [pid 5823] <... close resumed>) = 0 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 7187] <... openat resumed>) = 3 [ 218.658329][ T7185] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [pid 5823] rmdir("./270/file0" [pid 7187] write(3, "1000", 4 [pid 5823] <... rmdir resumed>) = 0 [pid 7187] <... write resumed>) = 4 [pid 5823] umount2("./270/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7187] close(3 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7187] <... close resumed>) = 0 [pid 5823] newfstatat(AT_FDCWD, "./270/binderfs", [pid 7187] symlink("/dev/binderfs", "./binderfs" [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7187] <... symlink resumed>) = 0 [pid 5825] close(4 [pid 5823] unlink("./270/binderfs"executing program [pid 7187] write(1, "executing program\n", 18 [pid 5823] <... unlink resumed>) = 0 [pid 7187] <... write resumed>) = 18 [pid 5823] getdents64(3, [pid 7187] memfd_create("syzkaller", 0 [pid 7185] <... mount resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7185] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5825] rmdir("./265/file0" [pid 7187] <... memfd_create resumed>) = 3 [pid 5825] <... rmdir resumed>) = 0 [pid 5823] close(3 [pid 5825] umount2("./265/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7187] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... close resumed>) = 0 [pid 7187] <... mmap resumed>) = 0x7f957a000000 [pid 5825] newfstatat(AT_FDCWD, "./265/binderfs", [pid 5823] rmdir("./270" [pid 7187] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7185] <... openat resumed>) = 3 [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... rmdir resumed>) = 0 [pid 7185] chdir("./file0" [pid 7187] <... write resumed>) = 65536 [pid 7185] <... chdir resumed>) = 0 [pid 5825] unlink("./265/binderfs" [pid 5823] mkdir("./271", 0777 [pid 7185] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7185] openat(AT_FDCWD, ".", O_RDONLY [pid 5825] <... unlink resumed>) = 0 [pid 7187] munmap(0x7f957a000000, 138412032 [pid 5823] <... mkdir resumed>) = 0 [pid 7187] <... munmap resumed>) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5823] ioctl(3, LOOP_CLR_FD) = 0 [pid 5823] close(3) = 0 [pid 7187] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7185] <... openat resumed>) = 4 [pid 5825] getdents64(3, [pid 7187] <... openat resumed>) = 4 [pid 7186] <... sync resumed>) = 0 [pid 7186] exit_group(0 [pid 7187] ioctl(4, LOOP_SET_FD, 3 [pid 7185] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7186] <... exit_group resumed>) = ? [pid 7186] +++ exited with 0 +++ [pid 5825] close(3) = 0 [pid 7185] <... renameat2 resumed>) = 0 [pid 5825] rmdir("./265" [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7188 [pid 5825] <... rmdir resumed>) = 0 [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7186, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5825] mkdir("./266", 0777 [pid 7185] sync( [pid 5824] umount2("./266", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7188 attached ) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./266", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7187] <... ioctl resumed>) = 0 [pid 5824] <... openat resumed>) = 3 [pid 5824] newfstatat(3, "", [pid 7187] close(3) = 0 [pid 7187] close(4) = 0 [pid 7187] mkdir("./file0", 0777 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(3, [pid 7188] set_robust_list(0x55557eba4660, 24 [pid 7187] <... mkdir resumed>) = 0 [pid 7187] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 7188] <... set_robust_list resumed>) = 0 [pid 5825] <... mkdir resumed>) = 0 [ 218.758701][ T7187] loop4: detected capacity change from 0 to 128 [pid 5824] umount2("./266/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7188] chdir("./271" [pid 7185] <... sync resumed>) = 0 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7188] <... chdir resumed>) = 0 [pid 7185] exit_group(0 [pid 5825] <... openat resumed>) = 3 [pid 7188] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7185] <... exit_group resumed>) = ? [pid 5825] ioctl(3, LOOP_CLR_FD [pid 5824] <... umount2 resumed>) = 0 [pid 7188] <... prctl resumed>) = 0 [pid 5825] <... ioctl resumed>) = 0 [pid 7188] setpgid(0, 0 [pid 5825] close(3 [pid 5824] umount2("./266/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7185] +++ exited with 0 +++ [pid 7188] <... setpgid resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7188] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7185, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5824] newfstatat(AT_FDCWD, "./266/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 7189 attached [pid 5826] restart_syscall(<... resuming interrupted clone ...> [pid 5824] umount2("./266/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7189] set_robust_list(0x55557eba4660, 24 [pid 5826] <... restart_syscall resumed>) = 0 [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7189 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7189] <... set_robust_list resumed>) = 0 [pid 7188] <... openat resumed>) = 3 [pid 5824] openat(AT_FDCWD, "./266/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7189] chdir("./266" [pid 7188] write(3, "1000", 4 [pid 5826] umount2("./270", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... openat resumed>) = 4 [pid 7189] <... chdir resumed>) = 0 [pid 7188] <... write resumed>) = 4 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7189] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7188] close(3 [pid 5826] openat(AT_FDCWD, "./270", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] newfstatat(4, "", [pid 7189] <... prctl resumed>) = 0 [pid 7188] <... close resumed>) = 0 [pid 7189] setpgid(0, 0 [pid 7188] symlink("/dev/binderfs", "./binderfs" [pid 5826] <... openat resumed>) = 3 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7189] <... setpgid resumed>) = 0 [pid 7189] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7188] <... symlink resumed>) = 0 [pid 5826] newfstatat(3, "", [pid 5824] getdents64(4, executing program [pid 7189] <... openat resumed>) = 3 [pid 7188] write(1, "executing program\n", 18 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 7189] write(3, "1000", 4 [pid 7188] <... write resumed>) = 18 [pid 5826] getdents64(3, [pid 7189] <... write resumed>) = 4 [pid 5824] getdents64(4, [pid 7189] close(3 [pid 7188] memfd_create("syzkaller", 0 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 7189] <... close resumed>) = 0 [pid 7188] <... memfd_create resumed>) = 3 [pid 5826] umount2("./270/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] close(4 [pid 7189] symlink("/dev/binderfs", "./binderfs" [pid 7188] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5824] <... close resumed>) = 0 [pid 5824] rmdir("./266/file0" [pid 7188] <... mmap resumed>) = 0x7f957a000000 [pid 7189] <... symlink resumed>) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 5824] umount2("./266/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7189] write(1, "executing program\n", 18 [pid 7188] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) executing program [pid 7189] <... write resumed>) = 18 [ 218.807693][ T7187] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [pid 5824] newfstatat(AT_FDCWD, "./266/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7189] memfd_create("syzkaller", 0 [pid 5824] unlink("./266/binderfs" [pid 7189] <... memfd_create resumed>) = 3 [pid 7188] <... write resumed>) = 65536 [pid 7189] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7188] munmap(0x7f957a000000, 138412032 [pid 7187] <... mount resumed>) = 0 [pid 5826] <... umount2 resumed>) = 0 [pid 5824] <... unlink resumed>) = 0 [pid 7187] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7189] <... mmap resumed>) = 0x7f957a000000 [pid 7188] <... munmap resumed>) = 0 [pid 7187] <... openat resumed>) = 3 [pid 5826] umount2("./270/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] getdents64(3, [pid 7189] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7188] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7187] chdir("./file0" [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7189] <... write resumed>) = 65536 [pid 7188] <... openat resumed>) = 4 [pid 7187] <... chdir resumed>) = 0 [pid 5824] close(3 [pid 7187] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7188] ioctl(4, LOOP_SET_FD, 3 [pid 7187] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5824] <... close resumed>) = 0 [pid 7187] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7187] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = 0 [pid 7187] sync( [pid 5824] rmdir("./266") = 0 [pid 5826] newfstatat(AT_FDCWD, "./270/file0", [pid 5824] mkdir("./267", 0777 [pid 7189] munmap(0x7f957a000000, 138412032 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... mkdir resumed>) = 0 [pid 7189] <... munmap resumed>) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7189] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5826] umount2("./270/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7189] <... openat resumed>) = 4 [pid 5824] <... openat resumed>) = 3 [pid 7189] ioctl(4, LOOP_SET_FD, 3 [pid 5826] openat(AT_FDCWD, "./270/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] ioctl(3, LOOP_CLR_FD) = 0 [pid 7187] <... sync resumed>) = 0 [pid 5826] <... openat resumed>) = 4 [pid 5824] close(3 [pid 7187] exit_group(0) = ? [pid 7187] +++ exited with 0 +++ [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7187, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5824] <... close resumed>) = 0 [pid 5827] restart_syscall(<... resuming interrupted clone ...> [pid 5826] newfstatat(4, "", [pid 5827] <... restart_syscall resumed>) = 0 [pid 5827] umount2("./261", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] openat(AT_FDCWD, "./261", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5827] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 ./strace-static-x86_64: Process 7190 attached [pid 7189] <... ioctl resumed>) = 0 [pid 7188] <... ioctl resumed>) = 0 [pid 5826] getdents64(4, [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7190 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 7190] set_robust_list(0x55557eba4660, 24 [pid 5826] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 7190] <... set_robust_list resumed>) = 0 [pid 7189] close(3 [pid 5826] close(4 [pid 7190] chdir("./267" [pid 5826] <... close resumed>) = 0 [pid 7189] <... close resumed>) = 0 [pid 5826] rmdir("./270/file0" [pid 7190] <... chdir resumed>) = 0 [pid 7189] close(4 [pid 7190] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7189] <... close resumed>) = 0 [pid 7188] close(3 [pid 5827] umount2("./261/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... rmdir resumed>) = 0 [pid 7190] <... prctl resumed>) = 0 [pid 7189] mkdir("./file0", 0777 [pid 7188] <... close resumed>) = 0 [pid 5826] umount2("./270/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7190] setpgid(0, 0 [pid 7189] <... mkdir resumed>) = 0 [pid 7188] close(4 [pid 7190] <... setpgid resumed>) = 0 [pid 7189] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7188] <... close resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7190] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7188] mkdir("./file0", 0777 [pid 7190] <... openat resumed>) = 3 [pid 7188] <... mkdir resumed>) = 0 [ 218.887653][ T7188] loop0: detected capacity change from 0 to 128 [ 218.913012][ T7189] loop2: detected capacity change from 0 to 128 [pid 5826] newfstatat(AT_FDCWD, "./270/binderfs", [pid 7188] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7190] write(3, "1000", 4 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7190] <... write resumed>) = 4 [pid 5827] <... umount2 resumed>) = 0 [pid 5826] unlink("./270/binderfs" [pid 7190] close(3) = 0 [pid 5826] <... unlink resumed>) = 0 [pid 7190] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5827] umount2("./261/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] getdents64(3, [pid 7190] write(1, "executing program\n", 18 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7190] <... write resumed>) = 18 [pid 5826] close(3 [pid 5827] newfstatat(AT_FDCWD, "./261/file0", [pid 7190] memfd_create("syzkaller", 0 [pid 7189] <... mount resumed>) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] <... close resumed>) = 0 [pid 5827] umount2("./261/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7190] <... memfd_create resumed>) = 3 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] rmdir("./270" [pid 5827] openat(AT_FDCWD, "./261/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7190] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5826] <... rmdir resumed>) = 0 [pid 7190] <... mmap resumed>) = 0x7f957a000000 [pid 5827] <... openat resumed>) = 4 [pid 5826] mkdir("./271", 0777 [pid 5827] newfstatat(4, "", [pid 7190] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7189] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] <... mkdir resumed>) = 0 [pid 5827] getdents64(4, [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7189] <... openat resumed>) = 3 [pid 5826] <... openat resumed>) = 3 [pid 7189] chdir("./file0" [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5826] ioctl(3, LOOP_CLR_FD [pid 7190] <... write resumed>) = 65536 [pid 7189] <... chdir resumed>) = 0 [pid 5827] getdents64(4, [pid 5826] <... ioctl resumed>) = 0 [pid 5826] close(3 [pid 7189] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 7189] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5827] close(4 [pid 5826] <... close resumed>) = 0 [pid 7189] openat(AT_FDCWD, ".", O_RDONLY [pid 5827] <... close resumed>) = 0 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5827] rmdir("./261/file0" [pid 7189] <... openat resumed>) = 4 ./strace-static-x86_64: Process 7191 attached [pid 7189] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5827] <... rmdir resumed>) = 0 [pid 7191] set_robust_list(0x55557eba4660, 24 [pid 5827] umount2("./261/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7191 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7191] <... set_robust_list resumed>) = 0 [pid 7190] munmap(0x7f957a000000, 138412032 [pid 5827] newfstatat(AT_FDCWD, "./261/binderfs", [pid 7190] <... munmap resumed>) = 0 [pid 7190] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7191] chdir("./271") = 0 [pid 7190] <... openat resumed>) = 4 [pid 7189] <... renameat2 resumed>) = 0 [pid 7188] <... mount resumed>) = 0 [pid 5827] unlink("./261/binderfs" [pid 7191] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7190] ioctl(4, LOOP_SET_FD, 3 [pid 7189] sync( [pid 7188] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5827] <... unlink resumed>) = 0 [pid 7188] <... openat resumed>) = 3 [pid 7191] <... prctl resumed>) = 0 [ 218.948164][ T7189] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 218.965575][ T7188] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [pid 5827] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5827] close(3) = 0 [pid 5827] rmdir("./261") = 0 [pid 7191] setpgid(0, 0 [pid 7188] chdir("./file0" [pid 5827] mkdir("./262", 0777 [pid 7191] <... setpgid resumed>) = 0 [pid 7188] <... chdir resumed>) = 0 [pid 7191] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7190] <... ioctl resumed>) = 0 [pid 7188] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7190] close(3) = 0 [pid 7188] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7190] close(4 [pid 7188] openat(AT_FDCWD, ".", O_RDONLY [pid 7190] <... close resumed>) = 0 [pid 7190] mkdir("./file0", 0777 [pid 7191] <... openat resumed>) = 3 [pid 7188] <... openat resumed>) = 4 [pid 7191] write(3, "1000", 4 [pid 7188] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7191] <... write resumed>) = 4 [pid 7191] close(3) = 0 [pid 7188] <... renameat2 resumed>) = 0 [pid 7191] symlink("/dev/binderfs", "./binderfs" [pid 7188] sync( [pid 7191] <... symlink resumed>) = 0 [pid 7190] <... mkdir resumed>) = 0 [pid 5827] <... mkdir resumed>) = 0 executing program [pid 7191] write(1, "executing program\n", 18 [pid 7190] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7191] <... write resumed>) = 18 [pid 5827] <... openat resumed>) = 3 [ 219.020615][ T7190] loop1: detected capacity change from 0 to 128 [pid 7191] memfd_create("syzkaller", 0 [pid 5827] ioctl(3, LOOP_CLR_FD [pid 7191] <... memfd_create resumed>) = 3 [pid 7191] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5827] <... ioctl resumed>) = 0 [pid 7191] <... mmap resumed>) = 0x7f957a000000 [pid 5827] close(3 [pid 7191] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 7191] munmap(0x7f957a000000, 138412032) = 0 [pid 5827] <... close resumed>) = 0 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7191] openat(AT_FDCWD, "/dev/loop3", O_RDWR./strace-static-x86_64: Process 7192 attached ) = 4 [pid 7191] ioctl(4, LOOP_SET_FD, 3 [pid 7192] set_robust_list(0x55557eba4660, 24 [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7192 [pid 7192] <... set_robust_list resumed>) = 0 [pid 7192] chdir("./262") = 0 [pid 7192] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7192] setpgid(0, 0) = 0 [pid 7192] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7192] write(3, "1000", 4) = 4 [pid 7192] close(3) = 0 executing program [pid 7192] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7192] write(1, "executing program\n", 18) = 18 [pid 7192] memfd_create("syzkaller", 0) = 3 [pid 7192] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7192] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 7192] munmap(0x7f957a000000, 138412032 [pid 7190] <... mount resumed>) = 0 [pid 7190] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7192] <... munmap resumed>) = 0 [pid 7190] <... openat resumed>) = 3 [pid 7189] <... sync resumed>) = 0 [pid 7189] exit_group(0) = ? [pid 7190] chdir("./file0" [pid 7189] +++ exited with 0 +++ [pid 7190] <... chdir resumed>) = 0 [pid 7192] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7191] <... ioctl resumed>) = 0 [pid 7190] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7189, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7192] <... openat resumed>) = 4 [pid 7191] close(3 [ 219.070724][ T7190] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 219.101323][ T7191] loop3: detected capacity change from 0 to 128 [pid 7192] ioctl(4, LOOP_SET_FD, 3 [pid 7191] <... close resumed>) = 0 [pid 7190] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7188] <... sync resumed>) = 0 [pid 7191] close(4 [pid 7190] openat(AT_FDCWD, ".", O_RDONLY [pid 7188] exit_group(0 [pid 5825] umount2("./266", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7188] <... exit_group resumed>) = ? [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7191] <... close resumed>) = 0 [pid 7190] <... openat resumed>) = 4 [pid 7188] +++ exited with 0 +++ [pid 5825] openat(AT_FDCWD, "./266", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7190] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5825] <... openat resumed>) = 3 [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7188, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7191] mkdir("./file0", 0777 [pid 5825] newfstatat(3, "", [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7191] <... mkdir resumed>) = 0 [pid 5825] getdents64(3, [pid 5823] <... restart_syscall resumed>) = 0 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 7191] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7190] <... renameat2 resumed>) = 0 [pid 5823] umount2("./271", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./271", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5823] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7190] sync( [pid 5825] umount2("./266/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] umount2("./271/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7192] <... ioctl resumed>) = 0 [pid 7192] close(3) = 0 [pid 7192] close(4 [pid 5823] <... umount2 resumed>) = 0 [pid 7192] <... close resumed>) = 0 [pid 5825] <... umount2 resumed>) = 0 [pid 5823] umount2("./271/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./266/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7192] mkdir("./file0", 0777 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./266/file0", [pid 5823] newfstatat(AT_FDCWD, "./271/file0", [pid 7192] <... mkdir resumed>) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] umount2("./266/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] umount2("./271/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./266/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] openat(AT_FDCWD, "./271/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7192] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5823] <... openat resumed>) = 4 [ 219.141682][ T7192] loop4: detected capacity change from 0 to 128 [ 219.167990][ T7191] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [pid 5825] <... openat resumed>) = 4 [pid 5823] newfstatat(4, "", [pid 5825] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(4, [pid 5823] getdents64(4, [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] getdents64(4, [pid 5823] getdents64(4, [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5825] close(4 [pid 5823] close(4 [pid 5825] <... close resumed>) = 0 [pid 5823] <... close resumed>) = 0 [pid 5825] rmdir("./266/file0" [pid 5823] rmdir("./271/file0" [pid 5825] <... rmdir resumed>) = 0 [pid 5825] umount2("./266/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... rmdir resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7191] <... mount resumed>) = 0 [pid 5825] newfstatat(AT_FDCWD, "./266/binderfs", [pid 5823] umount2("./271/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7191] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7191] chdir("./file0" [pid 5825] unlink("./266/binderfs" [pid 5823] newfstatat(AT_FDCWD, "./271/binderfs", [pid 7191] <... chdir resumed>) = 0 [pid 7191] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5825] <... unlink resumed>) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] getdents64(3, [pid 7191] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] unlink("./271/binderfs" [pid 7191] openat(AT_FDCWD, ".", O_RDONLY [pid 5825] close(3 [pid 7191] <... openat resumed>) = 4 [pid 7191] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5825] <... close resumed>) = 0 [pid 5823] <... unlink resumed>) = 0 [pid 7191] <... renameat2 resumed>) = 0 [pid 5825] rmdir("./266" [pid 7192] <... mount resumed>) = 0 [pid 7191] sync( [pid 5825] <... rmdir resumed>) = 0 [pid 7192] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7192] chdir("./file0") = 0 [pid 7192] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5823] getdents64(3, [pid 5825] mkdir("./267", 0777 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7192] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 5825] <... mkdir resumed>) = 0 [pid 5823] close(3) = 0 [pid 7192] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5823] rmdir("./271" [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 7190] <... sync resumed>) = 0 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 7191] <... sync resumed>) = 0 [pid 5825] <... ioctl resumed>) = 0 [pid 5823] <... rmdir resumed>) = 0 [pid 7191] exit_group(0 [pid 7190] exit_group(0 [pid 5825] close(3 [pid 7192] <... renameat2 resumed>) = 0 [pid 7191] <... exit_group resumed>) = ? [pid 7190] <... exit_group resumed>) = ? [pid 5825] <... close resumed>) = 0 [pid 5823] mkdir("./272", 0777 [ 219.192784][ T7192] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [pid 7192] sync( [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7192] <... sync resumed>) = 0 [pid 7191] +++ exited with 0 +++ [pid 7190] +++ exited with 0 +++ [pid 5823] <... mkdir resumed>) = 0 [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7191, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7190, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5826] umount2("./271", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./267", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./271", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] openat(AT_FDCWD, "./267", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] <... openat resumed>) = 3 [pid 5824] <... openat resumed>) = 3 [pid 5826] newfstatat(3, "", [pid 5824] newfstatat(3, "", [pid 7192] exit_group(0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR./strace-static-x86_64: Process 7193 attached [pid 7192] <... exit_group resumed>) = ? [pid 5826] getdents64(3, [pid 5824] getdents64(3, [pid 5823] <... openat resumed>) = 3 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7193 [pid 5824] umount2("./267/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7193] set_robust_list(0x55557eba4660, 24 [pid 7192] +++ exited with 0 +++ [pid 5826] umount2("./271/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... umount2 resumed>) = 0 [pid 5823] ioctl(3, LOOP_CLR_FD [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7192, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5824] umount2("./267/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] <... ioctl resumed>) = 0 [pid 5824] newfstatat(AT_FDCWD, "./267/file0", [pid 5823] close(3 [pid 7193] <... set_robust_list resumed>) = 0 [pid 5827] umount2("./262", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... close resumed>) = 0 [pid 7193] chdir("./267" [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] umount2("./267/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7193] <... chdir resumed>) = 0 [pid 7193] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5827] openat(AT_FDCWD, "./262", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7193] <... prctl resumed>) = 0 [pid 5824] openat(AT_FDCWD, "./267/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 7194 attached [pid 7193] setpgid(0, 0) = 0 [pid 5824] <... openat resumed>) = 4 [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7194 [pid 5824] newfstatat(4, "", [pid 7193] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5827] <... openat resumed>) = 3 [pid 5826] <... umount2 resumed>) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] newfstatat(3, "", [pid 5826] umount2("./271/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] getdents64(4, [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] getdents64(4, [pid 5826] newfstatat(AT_FDCWD, "./271/file0", [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5827] getdents64(3, [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] close(4 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5826] umount2("./271/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... close resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] rmdir("./267/file0" [pid 7194] set_robust_list(0x55557eba4660, 24 [pid 7193] <... openat resumed>) = 3 [pid 5827] umount2("./262/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] openat(AT_FDCWD, "./271/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] <... rmdir resumed>) = 0 [pid 7194] <... set_robust_list resumed>) = 0 [pid 7193] write(3, "1000", 4 [pid 5826] <... openat resumed>) = 4 [pid 5824] umount2("./267/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7193] <... write resumed>) = 4 [pid 5826] newfstatat(4, "", [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7194] chdir("./272" [pid 7193] close(3) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] newfstatat(AT_FDCWD, "./267/binderfs", [pid 5826] getdents64(4, [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] unlink("./267/binderfs" [pid 7193] symlink("/dev/binderfs", "./binderfs" [pid 7194] <... chdir resumed>) = 0 [pid 7193] <... symlink resumed>) = 0 [pid 5827] <... umount2 resumed>) = 0 [pid 5826] getdents64(4, executing program [pid 5824] <... unlink resumed>) = 0 [pid 7193] write(1, "executing program\n", 18) = 18 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5826] close(4 [pid 7193] memfd_create("syzkaller", 0 [pid 5826] <... close resumed>) = 0 [pid 5826] rmdir("./271/file0" [pid 7193] <... memfd_create resumed>) = 3 [pid 7194] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7193] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5826] <... rmdir resumed>) = 0 [pid 5826] umount2("./271/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] getdents64(3, [pid 7194] <... prctl resumed>) = 0 [pid 7193] <... mmap resumed>) = 0x7f957a000000 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7194] setpgid(0, 0 [pid 5826] newfstatat(AT_FDCWD, "./271/binderfs", [pid 7194] <... setpgid resumed>) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7194] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7193] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5826] unlink("./271/binderfs" [pid 7194] <... openat resumed>) = 3 [pid 5826] <... unlink resumed>) = 0 [pid 7194] write(3, "1000", 4 [pid 7193] <... write resumed>) = 65536 [pid 5827] umount2("./262/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] getdents64(3, [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7194] <... write resumed>) = 4 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7194] close(3 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] close(3 [pid 5824] close(3 [pid 7194] <... close resumed>) = 0 [pid 7193] munmap(0x7f957a000000, 138412032 [pid 5827] newfstatat(AT_FDCWD, "./262/file0", [pid 5826] <... close resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 5826] rmdir("./271" [pid 7194] symlink("/dev/binderfs", "./binderfs" [pid 7193] <... munmap resumed>) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] rmdir("./267" [pid 7194] <... symlink resumed>) = 0 [pid 5826] <... rmdir resumed>) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 5827] umount2("./262/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7193] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) executing program [pid 7194] write(1, "executing program\n", 18 [pid 5827] openat(AT_FDCWD, "./262/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7194] <... write resumed>) = 18 [pid 7193] ioctl(4, LOOP_SET_FD, 3 [pid 5827] <... openat resumed>) = 4 [pid 7194] memfd_create("syzkaller", 0 [pid 5827] newfstatat(4, "", [pid 5824] mkdir("./268", 0777 [pid 7194] <... memfd_create resumed>) = 3 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] <... mkdir resumed>) = 0 [pid 7194] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5827] getdents64(4, [pid 7194] <... mmap resumed>) = 0x7f957a000000 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5826] mkdir("./272", 0777) = 0 [pid 5827] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5827] close(4 [pid 5824] <... openat resumed>) = 3 [pid 7194] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5827] <... close resumed>) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7194] <... write resumed>) = 65536 [pid 5827] rmdir("./262/file0" [pid 5824] ioctl(3, LOOP_CLR_FD [pid 5827] <... rmdir resumed>) = 0 [pid 5826] <... openat resumed>) = 3 [pid 5824] <... ioctl resumed>) = 0 [pid 5824] close(3) = 0 [pid 5826] ioctl(3, LOOP_CLR_FD [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7194] munmap(0x7f957a000000, 138412032 [pid 5827] umount2("./262/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... ioctl resumed>) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7194] <... munmap resumed>) = 0 [pid 5827] newfstatat(AT_FDCWD, "./262/binderfs", [pid 7194] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] close(3 [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7195 ./strace-static-x86_64: Process 7195 attached [pid 7194] <... openat resumed>) = 4 [pid 5827] unlink("./262/binderfs" [pid 5826] <... close resumed>) = 0 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7194] ioctl(4, LOOP_SET_FD, 3 [pid 5827] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 7196 attached [pid 7195] set_robust_list(0x55557eba4660, 24 [pid 5827] getdents64(3, [pid 7195] <... set_robust_list resumed>) = 0 [pid 7195] chdir("./268" [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7196 [pid 7196] set_robust_list(0x55557eba4660, 24) = 0 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5827] close(3) = 0 [pid 5827] rmdir("./262") = 0 [pid 5827] mkdir("./263", 0777) = 0 [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7196] chdir("./272" [pid 5827] <... openat resumed>) = 3 [pid 5827] ioctl(3, LOOP_CLR_FD [pid 7193] <... ioctl resumed>) = 0 [pid 5827] <... ioctl resumed>) = 0 [pid 7196] <... chdir resumed>) = 0 [pid 7196] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7195] <... chdir resumed>) = 0 [pid 7193] close(3 [pid 5827] close(3 [pid 7193] <... close resumed>) = 0 [pid 5827] <... close resumed>) = 0 [pid 7196] <... prctl resumed>) = 0 [pid 7195] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7193] close(4 [pid 7196] setpgid(0, 0 [pid 7195] <... prctl resumed>) = 0 [pid 7193] <... close resumed>) = 0 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7196] <... setpgid resumed>) = 0 [pid 7195] setpgid(0, 0 [pid 7193] mkdir("./file0", 0777./strace-static-x86_64: Process 7197 attached [pid 7196] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7195] <... setpgid resumed>) = 0 [pid 7193] <... mkdir resumed>) = 0 [pid 7197] set_robust_list(0x55557eba4660, 24 [pid 7196] <... openat resumed>) = 3 [pid 7195] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7193] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7197] <... set_robust_list resumed>) = 0 [pid 7196] write(3, "1000", 4 [pid 7195] <... openat resumed>) = 3 [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7197 [pid 7197] chdir("./263" [pid 7195] write(3, "1000", 4 [pid 7194] <... ioctl resumed>) = 0 [pid 7195] <... write resumed>) = 4 [ 219.392929][ T7193] loop2: detected capacity change from 0 to 128 [ 219.410140][ T7194] loop0: detected capacity change from 0 to 128 [pid 7197] <... chdir resumed>) = 0 [pid 7196] <... write resumed>) = 4 [pid 7195] close(3 [pid 7194] close(3) = 0 [pid 7194] close(4 [pid 7195] <... close resumed>) = 0 [pid 7197] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7195] symlink("/dev/binderfs", "./binderfs" [pid 7194] <... close resumed>) = 0 [pid 7197] <... prctl resumed>) = 0 [pid 7196] close(3 [pid 7195] <... symlink resumed>) = 0 [pid 7194] mkdir("./file0", 0777 [pid 7196] <... close resumed>) = 0 [pid 7194] <... mkdir resumed>) = 0 [pid 7197] setpgid(0, 0) = 0 [pid 7197] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7194] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7197] write(3, "1000", 4 [pid 7196] symlink("/dev/binderfs", "./binderfs" [pid 7197] <... write resumed>) = 4 [pid 7197] close(3) = 0 [pid 7197] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7196] <... symlink resumed>) = 0 executing program executing program executing program [pid 7197] write(1, "executing program\n", 18) = 18 [pid 7196] write(1, "executing program\n", 18 [pid 7195] write(1, "executing program\n", 18) = 18 [pid 7196] <... write resumed>) = 18 [pid 7195] memfd_create("syzkaller", 0 [pid 7196] memfd_create("syzkaller", 0 [pid 7197] memfd_create("syzkaller", 0) = 3 [pid 7196] <... memfd_create resumed>) = 3 [pid 7197] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7197] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 7197] munmap(0x7f957a000000, 138412032 [pid 7196] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7195] <... memfd_create resumed>) = 3 [pid 7196] <... mmap resumed>) = 0x7f957a000000 [pid 7195] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7197] <... munmap resumed>) = 0 [pid 7195] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7196] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7197] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7196] <... write resumed>) = 65536 [pid 7197] <... openat resumed>) = 4 [pid 7196] munmap(0x7f957a000000, 138412032 [pid 7197] ioctl(4, LOOP_SET_FD, 3 [pid 7196] <... munmap resumed>) = 0 [pid 7197] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 7197] ioctl(4, LOOP_CLR_FD) = 0 [pid 7196] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7197] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 7196] <... openat resumed>) = 4 [pid 7195] <... write resumed>) = 65536 [pid 7197] close(4) = 0 [pid 7197] close(3 [pid 7196] ioctl(4, LOOP_SET_FD, 3 [pid 7195] munmap(0x7f957a000000, 138412032 [pid 7197] <... close resumed>) = 0 [pid 7196] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 7195] <... munmap resumed>) = 0 [pid 7196] ioctl(4, LOOP_CLR_FD [pid 7193] <... mount resumed>) = 0 [pid 7197] openat(AT_FDCWD, ".", O_RDONLY [pid 7193] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7196] <... ioctl resumed>) = 0 [pid 7197] <... openat resumed>) = 3 [pid 7193] <... openat resumed>) = 3 [pid 7197] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = -1 ENOENT (No such file or directory) [pid 7193] chdir("./file0" [pid 7197] sync( [pid 7193] <... chdir resumed>) = 0 [pid 7196] ioctl(4, LOOP_SET_FD, 3 [pid 7195] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7193] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7196] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 7195] <... openat resumed>) = 4 [pid 7193] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7196] close(4 [pid 7193] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7193] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [ 219.454867][ T7193] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 219.478151][ T7194] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [pid 7195] ioctl(4, LOOP_SET_FD, 3 [pid 7196] <... close resumed>) = 0 [pid 7194] <... mount resumed>) = 0 [pid 7194] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7194] chdir("./file0" [pid 7193] <... renameat2 resumed>) = 0 [pid 7194] <... chdir resumed>) = 0 [pid 7194] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7194] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7194] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7193] sync( [pid 7196] close(3 [pid 7194] <... renameat2 resumed>) = 0 [pid 7194] sync( [pid 7196] <... close resumed>) = 0 [pid 7196] openat(AT_FDCWD, ".", O_RDONLY [pid 7195] <... ioctl resumed>) = 0 [pid 7195] close(3) = 0 [pid 7196] <... openat resumed>) = 3 [pid 7196] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7195] close(4 [pid 7196] <... renameat2 resumed>) = -1 ENOENT (No such file or directory) [pid 7195] <... close resumed>) = 0 [pid 7195] mkdir("./file0", 0777 [ 219.530708][ T7195] loop1: detected capacity change from 0 to 128 [pid 7196] sync( [pid 7195] <... mkdir resumed>) = 0 [ 219.603795][ T7195] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [pid 7195] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "") = 0 [pid 7195] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7195] chdir("./file0") = 0 [pid 7196] <... sync resumed>) = 0 [pid 7196] exit_group(0) = ? [pid 7196] +++ exited with 0 +++ [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7196, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5826] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5826] umount2("./272", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./272", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5826] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(3, 0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 7195] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7194] <... sync resumed>) = 0 [pid 5826] umount2("./272/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7195] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./272/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./272/binderfs") = 0 [pid 5826] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] close(3) = 0 [pid 5826] rmdir("./272" [pid 7195] openat(AT_FDCWD, ".", O_RDONLY [pid 5826] <... rmdir resumed>) = 0 [pid 7194] exit_group(0 [pid 7197] <... sync resumed>) = 0 [pid 7195] <... openat resumed>) = 4 [pid 7194] <... exit_group resumed>) = ? [pid 7193] <... sync resumed>) = 0 [pid 5826] mkdir("./273", 0777 [pid 7193] exit_group(0 [pid 5826] <... mkdir resumed>) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5826] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5826] close(3) = 0 [pid 7194] +++ exited with 0 +++ [pid 7197] exit_group(0 [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7194, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5823] umount2("./272", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./272", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5823] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7193] <... exit_group resumed>) = ? [pid 7195] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5823] getdents64(3, [pid 7197] <... exit_group resumed>) = ? [pid 7193] +++ exited with 0 +++ [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] umount2("./272/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7198 attached [pid 7197] +++ exited with 0 +++ [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7198 [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7193, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7197, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 7195] <... renameat2 resumed>) = 0 [pid 5825] restart_syscall(<... resuming interrupted clone ...> [pid 5823] <... umount2 resumed>) = 0 [pid 5823] umount2("./272/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7198] set_robust_list(0x55557eba4660, 24 [pid 7195] sync( [pid 5825] <... restart_syscall resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./272/file0", [pid 5827] umount2("./263", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7198] <... set_robust_list resumed>) = 0 [pid 5823] umount2("./272/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] umount2("./267", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7198] chdir("./273") = 0 [pid 7198] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5827] openat(AT_FDCWD, "./263", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7198] setpgid(0, 0 [pid 5827] <... openat resumed>) = 3 [pid 5823] openat(AT_FDCWD, "./272/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] openat(AT_FDCWD, "./267", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7198] <... setpgid resumed>) = 0 [pid 7198] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5827] newfstatat(3, "", [pid 5825] <... openat resumed>) = 3 [pid 5823] <... openat resumed>) = 4 [pid 7198] <... openat resumed>) = 3 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] newfstatat(3, "", [pid 5823] newfstatat(4, "", [pid 7198] write(3, "1000", 4 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(3, [pid 5823] getdents64(4, [pid 7198] <... write resumed>) = 4 [pid 7198] close(3) = 0 [pid 7198] symlink("/dev/binderfs", "./binderfs" [pid 5827] getdents64(3, [pid 7198] <... symlink resumed>) = 0 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] getdents64(4, [pid 5825] umount2("./267/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 executing program [pid 5823] close(4 [pid 7198] write(1, "executing program\n", 18) = 18 [pid 7198] memfd_create("syzkaller", 0 [pid 5823] <... close resumed>) = 0 [pid 7198] <... memfd_create resumed>) = 3 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 5823] rmdir("./272/file0" [pid 7198] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7195] <... sync resumed>) = 0 [pid 5825] <... umount2 resumed>) = 0 [pid 7198] <... mmap resumed>) = 0x7f957a000000 [pid 7198] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7195] exit_group(0 [pid 5827] umount2("./263/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./267/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... rmdir resumed>) = 0 [pid 7195] <... exit_group resumed>) = ? [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] umount2("./272/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] newfstatat(AT_FDCWD, "./267/file0", [pid 5827] newfstatat(AT_FDCWD, "./263/binderfs", [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] newfstatat(AT_FDCWD, "./272/binderfs", [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7198] <... write resumed>) = 65536 [pid 5827] unlink("./263/binderfs" [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7195] +++ exited with 0 +++ [pid 5827] <... unlink resumed>) = 0 [pid 5825] umount2("./267/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] unlink("./272/binderfs" [pid 5827] getdents64(3, [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7195, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7198] munmap(0x7f957a000000, 138412032) = 0 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 5823] <... unlink resumed>) = 0 [pid 5827] close(3 [pid 5825] openat(AT_FDCWD, "./267/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] getdents64(3, [pid 7198] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5827] <... close resumed>) = 0 [pid 5825] <... openat resumed>) = 4 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5827] rmdir("./263" [pid 5824] <... restart_syscall resumed>) = 0 [pid 5825] newfstatat(4, "", [pid 5823] close(3 [pid 7198] <... openat resumed>) = 4 [pid 7198] ioctl(4, LOOP_SET_FD, 3 [pid 5827] <... rmdir resumed>) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... close resumed>) = 0 [pid 5825] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] rmdir("./272" [pid 5825] getdents64(4, [pid 5824] umount2("./268", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... rmdir resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] mkdir("./273", 0777 [pid 5824] openat(AT_FDCWD, "./268", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7198] <... ioctl resumed>) = 0 [pid 5827] mkdir("./264", 0777 [pid 5825] close(4 [pid 5824] <... openat resumed>) = 3 [pid 5823] <... mkdir resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 5824] newfstatat(3, "", [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7198] close(3 [pid 5827] <... mkdir resumed>) = 0 [pid 5825] rmdir("./267/file0" [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... openat resumed>) = 3 [pid 7198] <... close resumed>) = 0 [pid 5825] <... rmdir resumed>) = 0 [pid 5823] ioctl(3, LOOP_CLR_FD [pid 7198] close(4) = 0 [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5824] getdents64(3, [pid 5823] <... ioctl resumed>) = 0 [pid 7198] mkdir("./file0", 0777 [pid 5827] <... openat resumed>) = 3 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] close(3 [pid 5825] umount2("./267/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./268/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7198] <... mkdir resumed>) = 0 [pid 5827] ioctl(3, LOOP_CLR_FD [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... close resumed>) = 0 [pid 7198] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5827] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5827] close(3) = 0 [pid 5825] newfstatat(AT_FDCWD, "./267/binderfs", [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7200 attached ./strace-static-x86_64: Process 7199 attached [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7199] set_robust_list(0x55557eba4660, 24 [pid 5825] unlink("./267/binderfs" [pid 5824] <... umount2 resumed>) = 0 [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7199 [ 219.757984][ T7198] loop3: detected capacity change from 0 to 128 [pid 7200] set_robust_list(0x55557eba4660, 24) = 0 [pid 5825] <... unlink resumed>) = 0 [pid 5824] umount2("./268/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7199] <... set_robust_list resumed>) = 0 [pid 7200] chdir("./264" [pid 7199] chdir("./273" [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7200 [pid 5825] getdents64(3, [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7199] <... chdir resumed>) = 0 [pid 7200] <... chdir resumed>) = 0 [pid 7199] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] newfstatat(AT_FDCWD, "./268/file0", [pid 7199] <... prctl resumed>) = 0 [pid 5825] close(3 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7199] setpgid(0, 0) = 0 [pid 5824] umount2("./268/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7200] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7199] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5825] <... close resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7200] <... prctl resumed>) = 0 [pid 5825] rmdir("./267" [pid 5824] openat(AT_FDCWD, "./268/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7199] <... openat resumed>) = 3 [pid 7200] setpgid(0, 0) = 0 [pid 7199] write(3, "1000", 4 [pid 5825] <... rmdir resumed>) = 0 [pid 5824] <... openat resumed>) = 4 [pid 7199] <... write resumed>) = 4 [pid 5825] mkdir("./268", 0777 [pid 5824] newfstatat(4, "", [pid 7199] close(3 [pid 7200] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7199] <... close resumed>) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7199] symlink("/dev/binderfs", "./binderfs" [pid 5824] getdents64(4, executing program [pid 7200] <... openat resumed>) = 3 [pid 7199] <... symlink resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 7199] write(1, "executing program\n", 18 [pid 5824] getdents64(4, [pid 7199] <... write resumed>) = 18 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 7200] write(3, "1000", 4 [pid 7199] memfd_create("syzkaller", 0 [pid 7200] <... write resumed>) = 4 [pid 7199] <... memfd_create resumed>) = 3 [pid 5824] close(4 [pid 7200] close(3) = 0 [pid 7200] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 7199] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5824] <... close resumed>) = 0 [pid 7200] write(1, "executing program\n", 18 [pid 7199] <... mmap resumed>) = 0x7f957a000000 [pid 5824] rmdir("./268/file0" [pid 7200] <... write resumed>) = 18 [pid 7200] memfd_create("syzkaller", 0) = 3 [pid 7199] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7200] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 5824] <... rmdir resumed>) = 0 [pid 5824] umount2("./268/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./268/binderfs", [pid 7200] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7200] <... write resumed>) = 65536 [pid 7200] munmap(0x7f957a000000, 138412032) = 0 [pid 7199] <... write resumed>) = 65536 [pid 7198] <... mount resumed>) = 0 [pid 5825] <... mkdir resumed>) = 0 [pid 5824] unlink("./268/binderfs" [pid 7198] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7198] chdir("./file0") = 0 [pid 7198] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7198] openat(AT_FDCWD, ".", O_RDONLY [pid 5824] <... unlink resumed>) = 0 [pid 7199] munmap(0x7f957a000000, 138412032 [pid 7198] <... openat resumed>) = 4 [pid 7198] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7200] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7199] <... munmap resumed>) = 0 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5824] getdents64(3, [pid 7200] <... openat resumed>) = 4 [pid 7199] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5825] <... openat resumed>) = 3 [pid 7200] ioctl(4, LOOP_SET_FD, 3 [pid 7199] <... openat resumed>) = 4 [ 219.814690][ T7198] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [pid 7199] ioctl(4, LOOP_SET_FD, 3 [pid 7198] <... renameat2 resumed>) = 0 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7199] <... ioctl resumed>) = 0 [pid 5825] <... ioctl resumed>) = 0 [pid 7199] close(3 [pid 5824] close(3 [pid 5825] close(3 [pid 7199] <... close resumed>) = 0 [pid 7199] close(4 [pid 5824] <... close resumed>) = 0 [pid 7199] <... close resumed>) = 0 [pid 5824] rmdir("./268" [pid 7199] mkdir("./file0", 0777 [pid 7198] sync( [pid 7199] <... mkdir resumed>) = 0 [pid 7199] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5825] <... close resumed>) = 0 [pid 7200] <... ioctl resumed>) = 0 [pid 7200] close(3) = 0 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7200] close(4) = 0 [pid 7200] mkdir("./file0", 0777./strace-static-x86_64: Process 7201 attached ) = 0 [pid 7201] set_robust_list(0x55557eba4660, 24 [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7201 [pid 5824] <... rmdir resumed>) = 0 [pid 7201] <... set_robust_list resumed>) = 0 [pid 7200] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5824] mkdir("./269", 0777 [pid 7201] chdir("./268" [pid 5824] <... mkdir resumed>) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7201] <... chdir resumed>) = 0 [pid 5824] <... openat resumed>) = 3 [pid 7201] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5824] ioctl(3, LOOP_CLR_FD [pid 7201] <... prctl resumed>) = 0 [pid 5824] <... ioctl resumed>) = 0 [pid 7201] setpgid(0, 0 [pid 5824] close(3 [pid 7201] <... setpgid resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 7201] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7201] <... openat resumed>) = 3 [pid 7201] write(3, "1000", 4) = 4 ./strace-static-x86_64: Process 7202 attached [pid 7201] close(3 [pid 7202] set_robust_list(0x55557eba4660, 24 [pid 7201] <... close resumed>) = 0 [pid 7201] symlink("/dev/binderfs", "./binderfs" [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7202 [pid 7202] <... set_robust_list resumed>) = 0 [pid 7201] <... symlink resumed>) = 0 [pid 7199] <... mount resumed>) = 0 [pid 7201] write(1, "executing program\n", 18 [pid 7199] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7199] chdir("./file0") = 0 executing program [pid 7199] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7202] chdir("./269" [pid 7201] <... write resumed>) = 18 [pid 7199] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7202] <... chdir resumed>) = 0 [pid 7201] memfd_create("syzkaller", 0 [pid 7199] openat(AT_FDCWD, ".", O_RDONLY [pid 7202] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7199] <... openat resumed>) = 4 [pid 7202] <... prctl resumed>) = 0 [pid 7201] <... memfd_create resumed>) = 3 [pid 7199] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7202] setpgid(0, 0 [pid 7199] <... renameat2 resumed>) = 0 [pid 7202] <... setpgid resumed>) = 0 [pid 7201] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7199] sync( [pid 7202] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7201] <... mmap resumed>) = 0x7f957a000000 [pid 7202] <... openat resumed>) = 3 [ 219.861952][ T7200] loop4: detected capacity change from 0 to 128 [ 219.861952][ T7199] loop0: detected capacity change from 0 to 128 [ 219.880407][ T7199] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 219.901008][ T7200] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [pid 7201] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 7202] write(3, "1000", 4 [pid 7201] munmap(0x7f957a000000, 138412032) = 0 [pid 7201] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7202] <... write resumed>) = 4 [pid 7202] close(3 [pid 7201] <... openat resumed>) = 4 [pid 7202] <... close resumed>) = 0 [pid 7201] ioctl(4, LOOP_SET_FD, 3 [pid 7202] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 7200] <... mount resumed>) = 0 [pid 7198] <... sync resumed>) = 0 [pid 7202] write(1, "executing program\n", 18 [pid 7200] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7198] exit_group(0 [pid 7202] <... write resumed>) = 18 [pid 7200] <... openat resumed>) = 3 [pid 7202] memfd_create("syzkaller", 0 [pid 7200] chdir("./file0" [pid 7198] <... exit_group resumed>) = ? [pid 7202] <... memfd_create resumed>) = 3 [pid 7202] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7200] <... chdir resumed>) = 0 [pid 7198] +++ exited with 0 +++ [pid 7202] <... mmap resumed>) = 0x7f957a000000 [pid 7200] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7201] <... ioctl resumed>) = 0 [pid 7202] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7200] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7198, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 7201] close(3 [pid 7200] openat(AT_FDCWD, ".", O_RDONLY [pid 7201] <... close resumed>) = 0 [pid 7200] <... openat resumed>) = 4 [pid 7199] <... sync resumed>) = 0 [pid 5826] restart_syscall(<... resuming interrupted clone ...> [pid 7202] <... write resumed>) = 65536 [pid 7201] close(4 [pid 7200] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7202] munmap(0x7f957a000000, 138412032 [pid 7199] exit_group(0 [pid 5826] <... restart_syscall resumed>) = 0 [pid 7201] <... close resumed>) = 0 [pid 7199] <... exit_group resumed>) = ? [pid 7202] <... munmap resumed>) = 0 [pid 7201] mkdir("./file0", 0777 [pid 7200] <... renameat2 resumed>) = 0 [pid 7199] +++ exited with 0 +++ [pid 7202] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7201] <... mkdir resumed>) = 0 [pid 7200] sync( [pid 5826] umount2("./273", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7199, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7202] <... openat resumed>) = 4 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 7202] ioctl(4, LOOP_SET_FD, 3 [pid 7201] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5826] openat(AT_FDCWD, "./273", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7202] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 7202] ioctl(4, LOOP_CLR_FD [pid 5826] <... openat resumed>) = 3 [pid 5826] newfstatat(3, "", [pid 7202] <... ioctl resumed>) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... restart_syscall resumed>) = 0 [pid 5826] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5826] umount2("./273/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] umount2("./273", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7202] ioctl(4, LOOP_SET_FD, 3 [pid 5823] openat(AT_FDCWD, "./273", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7202] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5823] <... openat resumed>) = 3 [pid 7202] close(4 [pid 5823] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] umount2("./273/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [ 219.967226][ T7201] loop2: detected capacity change from 0 to 128 [pid 5823] umount2("./273/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7202] <... close resumed>) = 0 [pid 5823] newfstatat(AT_FDCWD, "./273/file0", [pid 7202] close(3 [pid 5826] <... umount2 resumed>) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7202] <... close resumed>) = 0 [pid 5826] umount2("./273/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] umount2("./273/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./273/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5823] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(4, [pid 5826] newfstatat(AT_FDCWD, "./273/file0", [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 7202] openat(AT_FDCWD, ".", O_RDONLY [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7202] <... openat resumed>) = 3 [pid 5826] umount2("./273/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] getdents64(4, [pid 7202] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./273/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7202] <... renameat2 resumed>) = -1 ENOENT (No such file or directory) [pid 5826] <... openat resumed>) = 4 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 7202] sync( [pid 5826] newfstatat(4, "", [pid 5823] close(4 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(4, [pid 5823] <... close resumed>) = 0 [pid 5823] rmdir("./273/file0" [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5826] getdents64(4, [pid 5823] <... rmdir resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5826] close(4 [pid 5823] umount2("./273/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... close resumed>) = 0 [pid 5826] rmdir("./273/file0") = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./273/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./273/binderfs") = 0 [pid 5823] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] close(3) = 0 [pid 5823] rmdir("./273") = 0 [pid 5823] mkdir("./274", 0777) = 0 [pid 5826] umount2("./273/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5826] newfstatat(AT_FDCWD, "./273/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... openat resumed>) = 3 [pid 5826] unlink("./273/binderfs" [pid 5823] ioctl(3, LOOP_CLR_FD) = 0 [pid 5823] close(3 [pid 5826] <... unlink resumed>) = 0 [pid 5823] <... close resumed>) = 0 [pid 5826] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] close(3) = 0 [pid 5826] rmdir("./273") = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7203 attached [pid 5826] mkdir("./274", 0777 [pid 7200] <... sync resumed>) = 0 [ 220.049419][ T7201] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [pid 7203] set_robust_list(0x55557eba4660, 24 [pid 7201] <... mount resumed>) = 0 [pid 7200] exit_group(0 [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7203 [pid 7203] <... set_robust_list resumed>) = 0 [pid 7203] chdir("./274") = 0 [pid 7203] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7203] setpgid(0, 0) = 0 [pid 7203] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7203] write(3, "1000", 4) = 4 [pid 7203] close(3) = 0 [pid 7203] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7202] <... sync resumed>) = 0 [pid 7201] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7200] <... exit_group resumed>) = ? [pid 5826] <... mkdir resumed>) = 0 [pid 7202] exit_group(0 [pid 7201] <... openat resumed>) = 3 [pid 7200] +++ exited with 0 +++ [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7201] chdir("./file0" [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7200, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5826] <... openat resumed>) = 3 executing program [pid 7203] write(1, "executing program\n", 18 [pid 7202] <... exit_group resumed>) = ? [pid 7201] <... chdir resumed>) = 0 [pid 5826] ioctl(3, LOOP_CLR_FD [pid 7201] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5826] <... ioctl resumed>) = 0 [pid 7203] <... write resumed>) = 18 [pid 7201] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5826] close(3 [pid 7203] memfd_create("syzkaller", 0 [pid 7202] +++ exited with 0 +++ [pid 7201] openat(AT_FDCWD, ".", O_RDONLY [pid 5826] <... close resumed>) = 0 [pid 7203] <... memfd_create resumed>) = 3 [pid 7203] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7202, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5827] umount2("./264", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7203] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7201] <... openat resumed>) = 4 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] openat(AT_FDCWD, "./264", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7201] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5824] umount2("./269", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7203] <... write resumed>) = 65536 [pid 5827] <... openat resumed>) = 3 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7201] <... renameat2 resumed>) = 0 [pid 5827] newfstatat(3, "", [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5824] openat(AT_FDCWD, "./269", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7203] munmap(0x7f957a000000, 138412032 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7203] <... munmap resumed>) = 0 [pid 5827] getdents64(3, [pid 5824] <... openat resumed>) = 3 [pid 7203] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5824] newfstatat(3, "", [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 7203] <... openat resumed>) = 4 [pid 5827] umount2("./264/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7203] ioctl(4, LOOP_SET_FD, 3 [pid 5824] getdents64(3, ./strace-static-x86_64: Process 7204 attached [pid 7201] sync( [pid 5827] <... umount2 resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 5827] umount2("./264/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] newfstatat(AT_FDCWD, "./264/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] umount2("./264/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] openat(AT_FDCWD, "./264/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5827] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5827] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5827] close(4 [pid 7204] set_robust_list(0x55557eba4660, 24 [pid 7203] <... ioctl resumed>) = 0 [pid 5827] <... close resumed>) = 0 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7204 [pid 5824] umount2("./269/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7204] <... set_robust_list resumed>) = 0 [pid 7204] chdir("./274" [pid 5827] rmdir("./264/file0" [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./269/binderfs", [pid 7204] <... chdir resumed>) = 0 [pid 7204] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7203] close(3 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7204] <... prctl resumed>) = 0 [pid 7203] <... close resumed>) = 0 [pid 7201] <... sync resumed>) = 0 [pid 5827] <... rmdir resumed>) = 0 [pid 5824] unlink("./269/binderfs" [pid 7204] setpgid(0, 0 [pid 7203] close(4 [pid 7201] exit_group(0 [pid 5827] umount2("./264/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] <... unlink resumed>) = 0 [pid 7204] <... setpgid resumed>) = 0 [pid 7203] <... close resumed>) = 0 [pid 5827] newfstatat(AT_FDCWD, "./264/binderfs", [pid 7204] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7203] mkdir("./file0", 0777 [pid 7201] <... exit_group resumed>) = ? [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] getdents64(3, [pid 5827] unlink("./264/binderfs" [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5827] <... unlink resumed>) = 0 [pid 5827] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5827] close(3) = 0 [pid 5827] rmdir("./264") = 0 [pid 5827] mkdir("./265", 0777 [pid 7201] +++ exited with 0 +++ [pid 5827] <... mkdir resumed>) = 0 [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7201, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5824] close(3 [pid 5827] <... openat resumed>) = 3 [pid 5825] restart_syscall(<... resuming interrupted clone ...> [pid 5827] ioctl(3, LOOP_CLR_FD [pid 7203] <... mkdir resumed>) = 0 [pid 5827] <... ioctl resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 7204] <... openat resumed>) = 3 [pid 5827] close(3 [pid 7204] write(3, "1000", 4 [pid 7203] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5827] <... close resumed>) = 0 [pid 5824] rmdir("./269" [pid 7204] <... write resumed>) = 4 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7205 attached [pid 7204] close(3 [pid 5825] <... restart_syscall resumed>) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 7204] <... close resumed>) = 0 [pid 7204] symlink("/dev/binderfs", "./binderfs" [pid 5824] mkdir("./270", 0777 [pid 5825] umount2("./268", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./268", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7205 [pid 5825] <... openat resumed>) = 3 [pid 5825] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5825] umount2("./268/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... mkdir resumed>) = 0 [ 220.166782][ T7203] loop0: detected capacity change from 0 to 128 [pid 7205] set_robust_list(0x55557eba4660, 24executing program ) = 0 [pid 7204] <... symlink resumed>) = 0 [pid 5825] <... umount2 resumed>) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5825] umount2("./268/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... openat resumed>) = 3 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7204] write(1, "executing program\n", 18 [pid 5825] newfstatat(AT_FDCWD, "./268/file0", [pid 5824] ioctl(3, LOOP_CLR_FD [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7205] chdir("./265" [pid 7204] <... write resumed>) = 18 [pid 5825] umount2("./268/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] close(3 [pid 7205] <... chdir resumed>) = 0 [pid 7204] memfd_create("syzkaller", 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... close resumed>) = 0 [pid 7205] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7204] <... memfd_create resumed>) = 3 [pid 7203] <... mount resumed>) = 0 [pid 5825] openat(AT_FDCWD, "./268/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7204] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7203] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5825] <... openat resumed>) = 4 [pid 7205] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 7206 attached [pid 7205] setpgid(0, 0 [pid 5825] newfstatat(4, "", [pid 7205] <... setpgid resumed>) = 0 [pid 7206] set_robust_list(0x55557eba4660, 24 [pid 7205] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7204] <... mmap resumed>) = 0x7f957a000000 [pid 7203] <... openat resumed>) = 3 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7206 [pid 7206] <... set_robust_list resumed>) = 0 [pid 7205] <... openat resumed>) = 3 [pid 7204] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7203] chdir("./file0" [pid 5825] getdents64(4, [pid 7206] chdir("./270" [pid 7205] write(3, "1000", 4 [pid 7203] <... chdir resumed>) = 0 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 7206] <... chdir resumed>) = 0 [pid 7205] <... write resumed>) = 4 [pid 7204] <... write resumed>) = 65536 [pid 7203] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5825] getdents64(4, [pid 7206] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7205] close(3 [pid 7204] munmap(0x7f957a000000, 138412032 [pid 7206] <... prctl resumed>) = 0 [pid 7203] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 7205] <... close resumed>) = 0 [pid 5825] close(4 [pid 7205] symlink("/dev/binderfs", "./binderfs" [pid 7206] setpgid(0, 0) = 0 [pid 7205] <... symlink resumed>) = 0 [pid 7204] <... munmap resumed>) = 0 [pid 7203] openat(AT_FDCWD, ".", O_RDONLY [pid 5825] <... close resumed>) = 0 executing program [pid 7206] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7205] write(1, "executing program\n", 18 [pid 7204] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7203] <... openat resumed>) = 4 [pid 5825] rmdir("./268/file0" [pid 7206] <... openat resumed>) = 3 [pid 7205] <... write resumed>) = 18 [pid 7204] <... openat resumed>) = 4 [ 220.221048][ T7203] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [pid 7206] write(3, "1000", 4 [pid 7205] memfd_create("syzkaller", 0 [pid 7204] ioctl(4, LOOP_SET_FD, 3 [pid 7203] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5825] <... rmdir resumed>) = 0 [pid 7205] <... memfd_create resumed>) = 3 [pid 7206] <... write resumed>) = 4 [pid 7205] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7206] close(3 [pid 7205] <... mmap resumed>) = 0x7f957a000000 [pid 5825] umount2("./268/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7206] <... close resumed>) = 0 [pid 7204] <... ioctl resumed>) = 0 [pid 7206] symlink("/dev/binderfs", "./binderfs" [pid 7205] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7204] close(3 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7206] <... symlink resumed>) = 0 [pid 7205] <... write resumed>) = 65536 [pid 7204] <... close resumed>) = 0 executing program [pid 7206] write(1, "executing program\n", 18 [pid 7205] munmap(0x7f957a000000, 138412032 [pid 7204] close(4 [pid 7203] <... renameat2 resumed>) = 0 [pid 5825] newfstatat(AT_FDCWD, "./268/binderfs", [pid 7206] <... write resumed>) = 18 [pid 7205] <... munmap resumed>) = 0 [pid 7204] <... close resumed>) = 0 [pid 7203] sync( [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7206] memfd_create("syzkaller", 0 [pid 7204] mkdir("./file0", 0777 [pid 5825] unlink("./268/binderfs" [pid 7206] <... memfd_create resumed>) = 3 [pid 7205] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7204] <... mkdir resumed>) = 0 [pid 5825] <... unlink resumed>) = 0 [pid 7206] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7205] <... openat resumed>) = 4 [pid 7204] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7206] <... mmap resumed>) = 0x7f957a000000 [pid 7205] ioctl(4, LOOP_SET_FD, 3 [ 220.285299][ T7204] loop3: detected capacity change from 0 to 128 [pid 5825] getdents64(3, [pid 7206] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7206] <... write resumed>) = 65536 [pid 5825] close(3) = 0 [pid 5825] rmdir("./268") = 0 [pid 5825] mkdir("./269", 0777) = 0 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5825] ioctl(3, LOOP_CLR_FD) = 0 [pid 5825] close(3) = 0 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7206] munmap(0x7f957a000000, 138412032./strace-static-x86_64: Process 7207 attached ) = 0 [pid 7204] <... mount resumed>) = 0 [pid 7203] <... sync resumed>) = 0 [pid 7206] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 7203] exit_group(0 [pid 7204] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7207] set_robust_list(0x55557eba4660, 24 [pid 7206] ioctl(4, LOOP_SET_FD, 3 [pid 7205] <... ioctl resumed>) = 0 [pid 7204] <... openat resumed>) = 3 [pid 7203] <... exit_group resumed>) = ? [ 220.331500][ T7205] loop4: detected capacity change from 0 to 128 [ 220.332466][ T7204] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [pid 7204] chdir("./file0" [pid 7207] <... set_robust_list resumed>) = 0 [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7207 [pid 7204] <... chdir resumed>) = 0 [pid 7207] chdir("./269" [pid 7205] close(3 [pid 7204] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7207] <... chdir resumed>) = 0 [pid 7205] <... close resumed>) = 0 [pid 7207] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7205] close(4 [pid 7204] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7204] openat(AT_FDCWD, ".", O_RDONLY [pid 7207] <... prctl resumed>) = 0 [pid 7205] <... close resumed>) = 0 [pid 7207] setpgid(0, 0 [pid 7205] mkdir("./file0", 0777 [pid 7207] <... setpgid resumed>) = 0 [pid 7205] <... mkdir resumed>) = 0 [pid 7207] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7205] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7207] <... openat resumed>) = 3 [pid 7204] <... openat resumed>) = 4 [pid 7203] +++ exited with 0 +++ [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7203, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5823] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 7207] write(3, "1000", 4 [pid 7204] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5823] umount2("./274", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7207] <... write resumed>) = 4 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7207] close(3) = 0 [pid 5823] openat(AT_FDCWD, "./274", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7207] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7204] <... renameat2 resumed>) = 0 [pid 5823] <... openat resumed>) = 3 [pid 5823] newfstatat(3, "", [pid 7204] sync( [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(3, [pid 7206] <... ioctl resumed>) = 0 [pid 7206] close(3 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 7206] <... close resumed>) = 0 [pid 5823] umount2("./274/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7206] close(4 [pid 7207] write(1, "executing program\n", 18executing program [pid 7206] <... close resumed>) = 0 [pid 7207] <... write resumed>) = 18 [pid 7206] mkdir("./file0", 0777 [pid 7207] memfd_create("syzkaller", 0 [pid 7206] <... mkdir resumed>) = 0 [pid 7207] <... memfd_create resumed>) = 3 [pid 5823] <... umount2 resumed>) = 0 [pid 5823] umount2("./274/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7207] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7206] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7207] <... mmap resumed>) = 0x7f957a000000 [pid 7207] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5823] newfstatat(AT_FDCWD, "./274/file0", [pid 7207] <... write resumed>) = 65536 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] umount2("./274/file0", MNT_FORCE|UMOUNT_NOFOLLOW [ 220.376124][ T7206] loop1: detected capacity change from 0 to 128 [ 220.408487][ T7205] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [pid 7207] munmap(0x7f957a000000, 138412032) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7207] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 7207] ioctl(4, LOOP_SET_FD, 3 [pid 5823] openat(AT_FDCWD, "./274/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7207] <... ioctl resumed>) = 0 [pid 5823] <... openat resumed>) = 4 [pid 7207] close(3) = 0 [pid 7205] <... mount resumed>) = 0 [pid 5823] newfstatat(4, "", [pid 7207] close(4) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7207] mkdir("./file0", 0777 [pid 7206] <... mount resumed>) = 0 [pid 5823] getdents64(4, [pid 7206] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7205] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7206] <... openat resumed>) = 3 [pid 7205] <... openat resumed>) = 3 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] getdents64(4, [pid 7206] chdir("./file0" [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] close(4 [pid 7206] <... chdir resumed>) = 0 [pid 7205] chdir("./file0" [pid 5823] <... close resumed>) = 0 [pid 7206] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5823] rmdir("./274/file0" [pid 7207] <... mkdir resumed>) = 0 [pid 7206] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5823] <... rmdir resumed>) = 0 [pid 7207] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7206] openat(AT_FDCWD, ".", O_RDONLY [ 220.457744][ T7207] loop2: detected capacity change from 0 to 128 [ 220.472546][ T7206] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [pid 5823] umount2("./274/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7206] <... openat resumed>) = 4 [pid 7205] <... chdir resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7206] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7205] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5823] newfstatat(AT_FDCWD, "./274/binderfs", [pid 7205] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7205] openat(AT_FDCWD, ".", O_RDONLY [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7205] <... openat resumed>) = 4 [pid 7205] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5823] unlink("./274/binderfs" [pid 7205] <... renameat2 resumed>) = 0 [pid 7205] sync( [pid 5823] <... unlink resumed>) = 0 [pid 7206] <... renameat2 resumed>) = 0 [pid 5823] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7206] sync( [pid 5823] close(3) = 0 [pid 5823] rmdir("./274") = 0 [pid 5823] mkdir("./275", 0777) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7207] <... mount resumed>) = 0 [pid 7204] <... sync resumed>) = 0 [pid 7207] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7204] exit_group(0 [pid 5823] <... openat resumed>) = 3 [pid 7207] <... openat resumed>) = 3 [pid 5823] ioctl(3, LOOP_CLR_FD [pid 7207] chdir("./file0") = 0 [pid 5823] <... ioctl resumed>) = 0 [pid 7207] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5823] close(3 [pid 7204] <... exit_group resumed>) = ? [pid 7207] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5823] <... close resumed>) = 0 [pid 7204] +++ exited with 0 +++ [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7204, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5826] restart_syscall(<... resuming interrupted clone ...> [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5826] <... restart_syscall resumed>) = 0 [pid 5826] umount2("./274", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./274", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 7208 attached ) = 3 [pid 7207] openat(AT_FDCWD, ".", O_RDONLY [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7208 [pid 5826] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7207] <... openat resumed>) = 4 [pid 5826] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5826] umount2("./274/file0", MNT_FORCE|UMOUNT_NOFOLLOW [ 220.512337][ T7207] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [pid 7207] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7206] <... sync resumed>) = 0 [pid 7208] set_robust_list(0x55557eba4660, 24 [pid 7207] <... renameat2 resumed>) = 0 [pid 7205] <... sync resumed>) = 0 [pid 5826] <... umount2 resumed>) = 0 [pid 7208] <... set_robust_list resumed>) = 0 [pid 7207] sync( [pid 7205] exit_group(0 [pid 5826] umount2("./274/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7208] chdir("./275" [pid 7206] exit_group(0 [pid 7205] <... exit_group resumed>) = ? [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7208] <... chdir resumed>) = 0 [pid 5826] newfstatat(AT_FDCWD, "./274/file0", [pid 7208] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7206] <... exit_group resumed>) = ? [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7208] setpgid(0, 0 [pid 5826] umount2("./274/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7208] <... setpgid resumed>) = 0 [pid 7208] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7206] +++ exited with 0 +++ [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7206, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5826] openat(AT_FDCWD, "./274/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7208] <... openat resumed>) = 3 [pid 7207] <... sync resumed>) = 0 [pid 5826] <... openat resumed>) = 4 [pid 7207] exit_group(0 [pid 7208] write(3, "1000", 4 [pid 5826] newfstatat(4, "", [pid 7207] <... exit_group resumed>) = ? [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(4, [pid 7208] <... write resumed>) = 4 [pid 5824] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5824] umount2("./270", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./270", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5824] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] umount2("./270/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7208] close(3 [pid 7207] +++ exited with 0 +++ [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] <... umount2 resumed>) = 0 [pid 7208] <... close resumed>) = 0 [pid 5826] getdents64(4, [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7207, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7208] symlink("/dev/binderfs", "./binderfs" [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 7208] <... symlink resumed>) = 0 [pid 7205] +++ exited with 0 +++ [pid 5826] close(4 [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7205, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5825] umount2("./269", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./270/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... close resumed>) = 0 executing program [pid 7208] write(1, "executing program\n", 18 [pid 5826] rmdir("./274/file0" [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./269", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] newfstatat(AT_FDCWD, "./270/file0", [pid 5827] umount2("./265", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... rmdir resumed>) = 0 [pid 5824] umount2("./270/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7208] <... write resumed>) = 18 [pid 5826] umount2("./274/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... openat resumed>) = 3 [pid 5827] openat(AT_FDCWD, "./265", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] newfstatat(3, "", [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7208] memfd_create("syzkaller", 0 [pid 5827] <... openat resumed>) = 3 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] openat(AT_FDCWD, "./270/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] newfstatat(3, "", [pid 5826] newfstatat(AT_FDCWD, "./274/binderfs", [pid 5825] getdents64(3, [pid 5824] <... openat resumed>) = 4 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7208] <... memfd_create resumed>) = 3 [pid 5827] getdents64(3, [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 7208] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5826] unlink("./274/binderfs" [pid 5825] umount2("./269/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] newfstatat(4, "", [pid 7208] <... mmap resumed>) = 0x7f957a000000 [pid 5827] umount2("./265/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] getdents64(4, [pid 7208] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5826] <... unlink resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5826] getdents64(3, [pid 5824] close(4 [pid 7208] <... write resumed>) = 65536 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] <... close resumed>) = 0 [pid 7208] munmap(0x7f957a000000, 138412032 [pid 5826] close(3 [pid 7208] <... munmap resumed>) = 0 [pid 5827] <... umount2 resumed>) = 0 [pid 5826] <... close resumed>) = 0 [pid 7208] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5826] rmdir("./274" [pid 5824] rmdir("./270/file0") = 0 [pid 7208] <... openat resumed>) = 4 [pid 5827] umount2("./265/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... rmdir resumed>) = 0 [pid 5825] <... umount2 resumed>) = 0 [pid 5824] umount2("./270/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7208] ioctl(4, LOOP_SET_FD, 3 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] mkdir("./275", 0777 [pid 5825] umount2("./269/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... mkdir resumed>) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7208] <... ioctl resumed>) = 0 [pid 5827] newfstatat(AT_FDCWD, "./265/file0", [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./270/binderfs", [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] <... openat resumed>) = 3 [pid 5827] umount2("./265/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] ioctl(3, LOOP_CLR_FD [pid 5825] newfstatat(AT_FDCWD, "./269/file0", [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7208] close(3 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... ioctl resumed>) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./270/binderfs" [pid 7208] <... close resumed>) = 0 [pid 5827] openat(AT_FDCWD, "./265/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] close(3 [pid 5825] umount2("./269/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... unlink resumed>) = 0 [pid 7208] close(4 [pid 5827] <... openat resumed>) = 4 [pid 5826] <... close resumed>) = 0 [pid 7208] <... close resumed>) = 0 [pid 7208] mkdir("./file0", 0777 [pid 5827] newfstatat(4, "", [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] getdents64(3, [pid 7208] <... mkdir resumed>) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] openat(AT_FDCWD, "./269/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5827] getdents64(4, [pid 5825] <... openat resumed>) = 4 [pid 5824] close(3 [pid 7208] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] newfstatat(4, "", [pid 5824] <... close resumed>) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] rmdir("./270" [pid 5825] getdents64(4, [pid 5824] <... rmdir resumed>) = 0 [pid 5827] getdents64(4, [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5825] getdents64(4, [pid 5827] close(4 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 7209 attached [pid 5827] <... close resumed>) = 0 [pid 5824] mkdir("./271", 0777 [pid 5827] rmdir("./265/file0" [pid 5825] close(4 [pid 5827] <... rmdir resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 5824] <... mkdir resumed>) = 0 [pid 5825] rmdir("./269/file0") = 0 [pid 5827] umount2("./265/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7209 [pid 5825] umount2("./269/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... openat resumed>) = 3 [pid 5825] newfstatat(AT_FDCWD, "./269/binderfs", [pid 5824] ioctl(3, LOOP_CLR_FD [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... ioctl resumed>) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] unlink("./269/binderfs" [pid 5824] close(3 [pid 7209] set_robust_list(0x55557eba4660, 24 [pid 5825] <... unlink resumed>) = 0 [pid 5827] newfstatat(AT_FDCWD, "./265/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5825] close(3) = 0 [pid 7209] <... set_robust_list resumed>) = 0 [pid 5827] unlink("./265/binderfs" [pid 5825] rmdir("./269" [pid 7209] chdir("./275" [pid 7208] <... mount resumed>) = 0 [pid 5825] <... rmdir resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 7209] <... chdir resumed>) = 0 [pid 7208] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5827] <... unlink resumed>) = 0 [pid 7209] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5827] getdents64(3, [pid 7208] <... openat resumed>) = 3 [pid 7209] <... prctl resumed>) = 0 [pid 7209] setpgid(0, 0 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7209] <... setpgid resumed>) = 0 [pid 5827] close(3 [pid 5825] mkdir("./270", 0777 [pid 7209] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5827] <... close resumed>) = 0 [pid 5825] <... mkdir resumed>) = 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7209] <... openat resumed>) = 3 [pid 7208] chdir("./file0" [pid 7209] write(3, "1000", 4 [pid 7208] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 7210 attached [pid 7209] <... write resumed>) = 4 [pid 7208] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7209] close(3 [pid 5827] rmdir("./265" [pid 7210] set_robust_list(0x55557eba4660, 24 [pid 7209] <... close resumed>) = 0 [pid 7208] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5827] <... rmdir resumed>) = 0 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWRexecuting program [pid 7210] <... set_robust_list resumed>) = 0 [pid 7209] symlink("/dev/binderfs", "./binderfs" [pid 7208] openat(AT_FDCWD, ".", O_RDONLY [pid 5825] <... openat resumed>) = 3 [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7210 [pid 7209] <... symlink resumed>) = 0 [pid 5827] mkdir("./266", 0777 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 7209] write(1, "executing program\n", 18 [pid 7208] <... openat resumed>) = 4 [pid 5827] <... mkdir resumed>) = 0 [pid 5825] <... ioctl resumed>) = 0 [pid 7209] <... write resumed>) = 18 [pid 5825] close(3 [pid 7210] chdir("./271" [pid 7209] memfd_create("syzkaller", 0 [pid 7208] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5825] <... close resumed>) = 0 [pid 7209] <... memfd_create resumed>) = 3 [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5827] ioctl(3, LOOP_CLR_FD) = 0 [pid 5827] close(3) = 0 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7210] <... chdir resumed>) = 0 [ 220.646893][ T7208] loop0: detected capacity change from 0 to 128 [ 220.686415][ T7208] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [pid 7209] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7210] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7209] <... mmap resumed>) = 0x7f957a000000 [pid 7210] <... prctl resumed>) = 0 [pid 7209] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7208] <... renameat2 resumed>) = 0 [pid 7210] setpgid(0, 0 [pid 7208] sync(./strace-static-x86_64: Process 7211 attached [pid 7210] <... setpgid resumed>) = 0 [pid 7209] <... write resumed>) = 65536 [pid 7211] set_robust_list(0x55557eba4660, 24 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7211] <... set_robust_list resumed>) = 0 [pid 7210] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7209] munmap(0x7f957a000000, 138412032./strace-static-x86_64: Process 7212 attached [pid 7211] chdir("./270") = 0 [pid 7210] <... openat resumed>) = 3 [pid 7209] <... munmap resumed>) = 0 [pid 7212] set_robust_list(0x55557eba4660, 24 [pid 7211] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7209] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7208] <... sync resumed>) = 0 [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7211 [pid 7212] <... set_robust_list resumed>) = 0 [pid 7211] <... prctl resumed>) = 0 [pid 7210] write(3, "1000", 4 [pid 7209] <... openat resumed>) = 4 [pid 7208] exit_group(0 [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7212 [pid 7212] chdir("./266" [pid 7211] setpgid(0, 0 [pid 7209] ioctl(4, LOOP_SET_FD, 3 [pid 7211] <... setpgid resumed>) = 0 [pid 7211] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7208] <... exit_group resumed>) = ? [pid 7212] <... chdir resumed>) = 0 [pid 7211] <... openat resumed>) = 3 [pid 7212] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7212] setpgid(0, 0) = 0 executing program executing program [pid 7211] write(3, "1000", 4 [pid 7210] <... write resumed>) = 4 [pid 7211] <... write resumed>) = 4 [pid 7211] close(3 [pid 7212] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7211] <... close resumed>) = 0 [pid 7211] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7212] <... openat resumed>) = 3 [pid 7212] write(3, "1000", 4) = 4 [pid 7211] write(1, "executing program\n", 18 [pid 7212] close(3 [pid 7210] close(3 [pid 7212] <... close resumed>) = 0 [pid 7211] <... write resumed>) = 18 [pid 7212] symlink("/dev/binderfs", "./binderfs" [pid 7211] memfd_create("syzkaller", 0 [pid 7212] <... symlink resumed>) = 0 [pid 7211] <... memfd_create resumed>) = 3 [pid 7212] write(1, "executing program\n", 18 [pid 7211] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7212] <... write resumed>) = 18 [pid 7211] <... mmap resumed>) = 0x7f957a000000 [pid 7212] memfd_create("syzkaller", 0 [pid 7211] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7212] <... memfd_create resumed>) = 3 [pid 7210] <... close resumed>) = 0 [pid 7212] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7211] <... write resumed>) = 65536 [pid 7210] symlink("/dev/binderfs", "./binderfs" [pid 7209] <... ioctl resumed>) = 0 [pid 7211] munmap(0x7f957a000000, 138412032 [pid 7210] <... symlink resumed>) = 0 [pid 7209] close(3 executing program [pid 7210] write(1, "executing program\n", 18 [pid 7209] <... close resumed>) = 0 [pid 7210] <... write resumed>) = 18 [pid 7209] close(4 [pid 7212] <... mmap resumed>) = 0x7f957a000000 [pid 7211] <... munmap resumed>) = 0 [pid 7210] memfd_create("syzkaller", 0 [pid 7209] <... close resumed>) = 0 [pid 7208] +++ exited with 0 +++ [pid 7212] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7211] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7210] <... memfd_create resumed>) = 3 [pid 7209] mkdir("./file0", 0777 [pid 7210] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7208, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 7211] <... openat resumed>) = 4 [pid 7210] <... mmap resumed>) = 0x7f957a000000 [pid 7209] <... mkdir resumed>) = 0 [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 7212] <... write resumed>) = 65536 [pid 7211] ioctl(4, LOOP_SET_FD, 3 [pid 7210] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7209] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7212] munmap(0x7f957a000000, 138412032 [pid 7211] <... ioctl resumed>) = 0 [pid 5823] <... restart_syscall resumed>) = 0 [pid 7212] <... munmap resumed>) = 0 [pid 7211] close(3 [pid 7212] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7211] <... close resumed>) = 0 [pid 7212] <... openat resumed>) = 4 [pid 7211] close(4 [pid 5823] umount2("./275", MNT_FORCE|UMOUNT_NOFOLLOW [ 220.746721][ T7209] loop3: detected capacity change from 0 to 128 [ 220.775083][ T7211] loop2: detected capacity change from 0 to 128 [ 220.785317][ T7209] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [pid 7212] ioctl(4, LOOP_SET_FD, 3 [pid 7211] <... close resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7212] <... ioctl resumed>) = 0 [pid 7211] mkdir("./file0", 0777 [pid 7210] <... write resumed>) = 65536 [pid 5823] openat(AT_FDCWD, "./275", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7212] close(3 [pid 7211] <... mkdir resumed>) = 0 [pid 5823] <... openat resumed>) = 3 [pid 7212] <... close resumed>) = 0 [pid 7211] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7210] munmap(0x7f957a000000, 138412032 [pid 5823] newfstatat(3, "", [pid 7212] close(4) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7212] mkdir("./file0", 0777 [pid 7210] <... munmap resumed>) = 0 [pid 7212] <... mkdir resumed>) = 0 [pid 7210] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5823] getdents64(3, [pid 7212] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7210] <... openat resumed>) = 4 [pid 7209] <... mount resumed>) = 0 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 7210] ioctl(4, LOOP_SET_FD, 3 [pid 7209] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5823] umount2("./275/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7209] <... openat resumed>) = 3 [pid 7210] <... ioctl resumed>) = 0 [pid 7209] chdir("./file0") = 0 [pid 7209] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7209] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7209] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5823] <... umount2 resumed>) = 0 [pid 7209] <... renameat2 resumed>) = 0 [pid 5823] umount2("./275/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7209] sync( [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./275/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7212] <... mount resumed>) = 0 [pid 7211] <... mount resumed>) = 0 [pid 7210] close(3 [pid 5823] umount2("./275/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7212] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7211] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7212] <... openat resumed>) = 3 [pid 7211] <... openat resumed>) = 3 [pid 7210] <... close resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7212] chdir("./file0" [pid 7211] chdir("./file0" [pid 7210] close(4 [pid 5823] openat(AT_FDCWD, "./275/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7212] <... chdir resumed>) = 0 [pid 7211] <... chdir resumed>) = 0 [pid 7210] <... close resumed>) = 0 [pid 7212] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7211] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7210] mkdir("./file0", 0777 [pid 5823] <... openat resumed>) = 4 [pid 7212] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7211] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7209] <... sync resumed>) = 0 [pid 5823] newfstatat(4, "", [pid 7212] openat(AT_FDCWD, ".", O_RDONLY [pid 7211] openat(AT_FDCWD, ".", O_RDONLY [pid 7209] exit_group(0 [pid 7210] <... mkdir resumed>) = 0 [pid 7212] <... openat resumed>) = 4 [pid 7211] <... openat resumed>) = 4 [pid 7209] <... exit_group resumed>) = ? [ 220.787817][ T7212] loop4: detected capacity change from 0 to 128 [ 220.808974][ T7211] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 220.824637][ T7212] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 220.836259][ T7210] loop1: detected capacity change from 0 to 128 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7212] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7211] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7210] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7209] +++ exited with 0 +++ [pid 7212] <... renameat2 resumed>) = 0 [pid 5823] getdents64(4, [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7209, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5826] restart_syscall(<... resuming interrupted clone ...> [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5826] <... restart_syscall resumed>) = 0 [pid 5823] getdents64(4, [pid 5826] umount2("./275", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 7211] <... renameat2 resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] close(4 [pid 7212] sync( [pid 5826] openat(AT_FDCWD, "./275", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] <... close resumed>) = 0 [pid 5826] <... openat resumed>) = 3 [pid 5826] newfstatat(3, "", [pid 5823] rmdir("./275/file0" [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5826] umount2("./275/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... rmdir resumed>) = 0 [pid 5823] umount2("./275/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7211] sync( [pid 5826] <... umount2 resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] umount2("./275/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./275/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] newfstatat(AT_FDCWD, "./275/binderfs", [pid 5826] umount2("./275/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] openat(AT_FDCWD, "./275/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5826] newfstatat(4, "", [pid 5823] unlink("./275/binderfs" [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... unlink resumed>) = 0 [pid 5826] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] getdents64(3, [pid 5826] getdents64(4, [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5826] close(4 [pid 5823] close(3 [pid 5826] <... close resumed>) = 0 [pid 5826] rmdir("./275/file0" [pid 5823] <... close resumed>) = 0 [pid 5826] <... rmdir resumed>) = 0 [pid 5823] rmdir("./275" [pid 5826] umount2("./275/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... rmdir resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./275/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./275/binderfs") = 0 [pid 5823] mkdir("./276", 0777 [pid 5826] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] close(3 [pid 5823] <... mkdir resumed>) = 0 [pid 5826] <... close resumed>) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5826] rmdir("./275") = 0 [pid 5823] <... openat resumed>) = 3 [pid 5826] mkdir("./276", 0777 [pid 5823] ioctl(3, LOOP_CLR_FD [pid 5826] <... mkdir resumed>) = 0 [pid 5823] <... ioctl resumed>) = 0 [pid 5823] close(3 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5826] ioctl(3, LOOP_CLR_FD) = 0 [pid 5823] <... close resumed>) = 0 [pid 5826] close(3) = 0 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7213 attached [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [ 220.904918][ T7210] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [pid 7213] set_robust_list(0x55557eba4660, 24./strace-static-x86_64: Process 7214 attached ) = 0 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7213 [pid 7213] chdir("./276" [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7214 [pid 7213] <... chdir resumed>) = 0 [pid 7213] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7213] setpgid(0, 0) = 0 [pid 7213] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7213] write(3, "1000", 4) = 4 [pid 7213] close(3) = 0 [pid 7213] symlink("/dev/binderfs", "./binderfs"executing program [pid 7214] set_robust_list(0x55557eba4660, 24 [pid 7213] <... symlink resumed>) = 0 [pid 7213] write(1, "executing program\n", 18) = 18 [pid 7213] memfd_create("syzkaller", 0) = 3 [pid 7213] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7213] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 7214] <... set_robust_list resumed>) = 0 [pid 7210] <... mount resumed>) = 0 [pid 7210] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7214] chdir("./276" [pid 7210] <... openat resumed>) = 3 [pid 7214] <... chdir resumed>) = 0 [pid 7210] chdir("./file0" [pid 7214] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7210] <... chdir resumed>) = 0 [pid 7214] <... prctl resumed>) = 0 [pid 7210] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7214] setpgid(0, 0 [pid 7210] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7214] <... setpgid resumed>) = 0 [pid 7210] openat(AT_FDCWD, ".", O_RDONLY [pid 7214] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7210] <... openat resumed>) = 4 [pid 7210] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7214] <... openat resumed>) = 3 [pid 7210] <... renameat2 resumed>) = 0 [pid 7214] write(3, "1000", 4) = 4 [pid 7213] munmap(0x7f957a000000, 138412032 [pid 7210] sync( [pid 7214] close(3) = 0 [pid 7213] <... munmap resumed>) = 0 executing program [pid 7214] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7214] write(1, "executing program\n", 18 [pid 7213] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7214] <... write resumed>) = 18 [pid 7213] <... openat resumed>) = 4 [pid 7214] memfd_create("syzkaller", 0 [pid 7213] ioctl(4, LOOP_SET_FD, 3 [pid 7212] <... sync resumed>) = 0 [pid 7211] <... sync resumed>) = 0 [pid 7210] <... sync resumed>) = 0 [pid 7214] <... memfd_create resumed>) = 3 [pid 7212] exit_group(0 [pid 7211] exit_group(0 [pid 7210] exit_group(0 [pid 7214] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7212] <... exit_group resumed>) = ? [pid 7211] <... exit_group resumed>) = ? [pid 7210] <... exit_group resumed>) = ? [pid 7214] <... mmap resumed>) = 0x7f957a000000 [pid 7213] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 7212] +++ exited with 0 +++ [pid 7214] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7210] +++ exited with 0 +++ [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7212, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7214] <... write resumed>) = 65536 [pid 7213] ioctl(4, LOOP_CLR_FD [pid 7211] +++ exited with 0 +++ [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7210, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7213] <... ioctl resumed>) = 0 [pid 5827] umount2("./266", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./271", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7214] munmap(0x7f957a000000, 138412032 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7211, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] openat(AT_FDCWD, "./266", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] restart_syscall(<... resuming interrupted clone ...> [pid 5824] openat(AT_FDCWD, "./271", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] <... openat resumed>) = 3 [pid 5824] <... openat resumed>) = 3 [pid 7214] <... munmap resumed>) = 0 [pid 5827] newfstatat(3, "", [pid 5824] newfstatat(3, "", [pid 7214] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7214] <... openat resumed>) = 4 [pid 5827] getdents64(3, [pid 5824] getdents64(3, [pid 7214] ioctl(4, LOOP_SET_FD, 3 [pid 7213] ioctl(4, LOOP_SET_FD, 3 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 7213] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5827] umount2("./266/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./271/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7213] close(4) = 0 [pid 7213] close(3) = 0 [pid 7213] openat(AT_FDCWD, ".", O_RDONLY [pid 5825] <... restart_syscall resumed>) = 0 [pid 7213] <... openat resumed>) = 3 [pid 7213] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = -1 ENOENT (No such file or directory) [pid 5825] umount2("./270", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7213] sync( [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./270", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5825] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(3, [pid 5827] <... umount2 resumed>) = 0 [pid 5824] <... umount2 resumed>) = 0 [pid 5824] umount2("./271/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7214] <... ioctl resumed>) = 0 [pid 7214] close(3 [pid 5827] umount2("./266/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] umount2("./270/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] newfstatat(AT_FDCWD, "./271/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] umount2("./271/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./271/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5824] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] close(4) = 0 [pid 5824] rmdir("./271/file0") = 0 [pid 5824] umount2("./271/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7214] <... close resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./271/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./271/binderfs") = 0 [pid 5824] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] close(3) = 0 [pid 5824] rmdir("./271" [pid 7214] close(4 [pid 5824] <... rmdir resumed>) = 0 [ 221.038644][ T7214] loop0: detected capacity change from 0 to 128 [pid 7214] <... close resumed>) = 0 [pid 7213] <... sync resumed>) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7213] exit_group(0) = ? [pid 7214] mkdir("./file0", 0777 [pid 7213] +++ exited with 0 +++ [pid 5827] newfstatat(AT_FDCWD, "./266/file0", [pid 5824] mkdir("./272", 0777) = 0 [pid 5825] <... umount2 resumed>) = 0 [pid 5825] umount2("./270/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./270/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] umount2("./270/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./270/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5825] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5825] close(4) = 0 [pid 5825] rmdir("./270/file0" [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5825] <... rmdir resumed>) = 0 [pid 5824] ioctl(3, LOOP_CLR_FD) = 0 [pid 5824] close(3) = 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7215 attached [pid 7214] <... mkdir resumed>) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7213, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5827] umount2("./266/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7214] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] umount2("./270/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] openat(AT_FDCWD, "./266/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./270/binderfs", [pid 5827] <... openat resumed>) = 4 [pid 7215] set_robust_list(0x55557eba4660, 24 [pid 5827] newfstatat(4, "", [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7215] <... set_robust_list resumed>) = 0 [pid 5825] unlink("./270/binderfs" [pid 7215] chdir("./272" [pid 5825] <... unlink resumed>) = 0 [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7215 [pid 5825] getdents64(3, [pid 7215] <... chdir resumed>) = 0 [pid 7215] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7215] setpgid(0, 0) = 0 [pid 7215] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7215] write(3, "1000", 4 [pid 5827] getdents64(4, [pid 7215] <... write resumed>) = 4 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7215] close(3 [pid 5825] close(3 [pid 7215] <... close resumed>) = 0 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] <... close resumed>) = 0 [pid 5827] getdents64(4, [pid 7215] symlink("/dev/binderfs", "./binderfs" [pid 5825] rmdir("./270" [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 executing program [pid 7215] <... symlink resumed>) = 0 [pid 5827] close(4 [pid 5826] umount2("./276", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... rmdir resumed>) = 0 [pid 7215] write(1, "executing program\n", 18 [pid 5825] mkdir("./271", 0777 [pid 7215] <... write resumed>) = 18 [pid 5825] <... mkdir resumed>) = 0 [pid 7215] memfd_create("syzkaller", 0) = 3 [pid 7215] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7215] <... mmap resumed>) = 0x7f957a000000 [pid 5827] <... close resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... openat resumed>) = 3 [pid 7215] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5825] ioctl(3, LOOP_CLR_FD) = 0 [pid 5825] close(3 [pid 7215] <... write resumed>) = 65536 [pid 5825] <... close resumed>) = 0 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7216 attached [pid 7215] munmap(0x7f957a000000, 138412032) = 0 [pid 5827] rmdir("./266/file0" [pid 5826] openat(AT_FDCWD, "./276", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7216] set_robust_list(0x55557eba4660, 24 [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7216 [pid 7216] <... set_robust_list resumed>) = 0 [pid 7215] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7216] chdir("./271" [pid 5826] <... openat resumed>) = 3 [pid 7215] <... openat resumed>) = 4 [pid 5827] <... rmdir resumed>) = 0 [pid 5826] newfstatat(3, "", [pid 7216] <... chdir resumed>) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7216] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7215] ioctl(4, LOOP_SET_FD, 3 [pid 5827] umount2("./266/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] getdents64(3, [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 7216] <... prctl resumed>) = 0 [pid 7215] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5827] newfstatat(AT_FDCWD, "./266/binderfs", [pid 5826] umount2("./276/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7216] setpgid(0, 0) = 0 [pid 7215] ioctl(4, LOOP_CLR_FD [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] unlink("./266/binderfs" [pid 5826] newfstatat(AT_FDCWD, "./276/binderfs", [pid 7216] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7215] <... ioctl resumed>) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] <... unlink resumed>) = 0 [pid 5826] unlink("./276/binderfs" [pid 7216] <... openat resumed>) = 3 [pid 5827] getdents64(3, [pid 5826] <... unlink resumed>) = 0 [pid 7215] ioctl(4, LOOP_SET_FD, 3 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] getdents64(3, [pid 7215] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5827] close(3 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7215] close(4 [pid 5827] <... close resumed>) = 0 [pid 5826] close(3 [pid 5827] rmdir("./266" [pid 5826] <... close resumed>) = 0 [pid 5826] rmdir("./276" [pid 7216] write(3, "1000", 4 [pid 5827] <... rmdir resumed>) = 0 [pid 5826] <... rmdir resumed>) = 0 [ 221.130008][ T7214] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 executing program [pid 5827] mkdir("./267", 0777 [pid 7216] <... write resumed>) = 4 [pid 7214] <... mount resumed>) = 0 [pid 5826] mkdir("./277", 0777 [pid 7216] close(3) = 0 [pid 7216] symlink("/dev/binderfs", "./binderfs" [pid 5826] <... mkdir resumed>) = 0 [pid 7216] <... symlink resumed>) = 0 [pid 5827] <... mkdir resumed>) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7216] write(1, "executing program\n", 18) = 18 [pid 7214] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7215] <... close resumed>) = 0 [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5826] <... openat resumed>) = 3 [pid 7214] <... openat resumed>) = 3 [pid 5827] <... openat resumed>) = 3 [pid 5826] ioctl(3, LOOP_CLR_FD [pid 7214] chdir("./file0" [pid 5827] ioctl(3, LOOP_CLR_FD [pid 5826] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7214] <... chdir resumed>) = 0 [pid 5827] <... ioctl resumed>) = 0 [pid 5826] close(3 [pid 7214] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5827] close(3 [pid 5826] <... close resumed>) = 0 [pid 7214] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5827] <... close resumed>) = 0 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7217 attached [pid 7214] openat(AT_FDCWD, ".", O_RDONLY [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7217] set_robust_list(0x55557eba4660, 24 [pid 7216] memfd_create("syzkaller", 0 [pid 7215] close(3 [pid 7214] <... openat resumed>) = 4 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7217 ./strace-static-x86_64: Process 7218 attached [pid 7217] <... set_robust_list resumed>) = 0 [pid 7216] <... memfd_create resumed>) = 3 [pid 7215] <... close resumed>) = 0 [pid 7214] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7218] set_robust_list(0x55557eba4660, 24 [pid 7217] chdir("./277" [pid 7216] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7215] openat(AT_FDCWD, ".", O_RDONLY [pid 7218] <... set_robust_list resumed>) = 0 [pid 7217] <... chdir resumed>) = 0 [pid 7216] <... mmap resumed>) = 0x7f957a000000 [pid 7215] <... openat resumed>) = 3 [pid 7218] chdir("./267" [pid 7217] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7216] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7215] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7218 [pid 7218] <... chdir resumed>) = 0 [pid 7217] <... prctl resumed>) = 0 [pid 7215] <... renameat2 resumed>) = -1 ENOENT (No such file or directory) [pid 7214] <... renameat2 resumed>) = 0 [pid 7218] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7215] sync( [pid 7218] <... prctl resumed>) = 0 [pid 7216] <... write resumed>) = 65536 [pid 7217] setpgid(0, 0 [pid 7214] sync( [pid 7217] <... setpgid resumed>) = 0 [pid 7218] setpgid(0, 0 [pid 7217] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7216] munmap(0x7f957a000000, 138412032 [pid 7217] <... openat resumed>) = 3 [pid 7217] write(3, "1000", 4 [pid 7218] <... setpgid resumed>) = 0 [pid 7217] <... write resumed>) = 4 [pid 7216] <... munmap resumed>) = 0 [pid 7217] close(3) = 0 [pid 7218] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7216] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7217] symlink("/dev/binderfs", "./binderfs" [pid 7218] <... openat resumed>) = 3 [pid 7217] <... symlink resumed>) = 0 [pid 7216] <... openat resumed>) = 4 [pid 7218] write(3, "1000", 4 [pid 7216] ioctl(4, LOOP_SET_FD, 3 [pid 7218] <... write resumed>) = 4 executing program [pid 7217] write(1, "executing program\n", 18) = 18 [pid 7217] memfd_create("syzkaller", 0) = 3 [pid 7217] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7217] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 7217] munmap(0x7f957a000000, 138412032) = 0 [pid 7214] <... sync resumed>) = 0 [pid 7214] exit_group(0 [pid 7217] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 7214] <... exit_group resumed>) = ? [pid 7217] ioctl(4, LOOP_SET_FD, 3 [pid 7214] +++ exited with 0 +++ [pid 7215] <... sync resumed>) = 0 [pid 7218] close(3 [pid 7215] exit_group(0 [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7214, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 7218] <... close resumed>) = 0 [pid 7215] <... exit_group resumed>) = ? [pid 7217] <... ioctl resumed>) = 0 [pid 7218] symlink("/dev/binderfs", "./binderfs" [pid 7216] <... ioctl resumed>) = 0 [pid 7215] +++ exited with 0 +++ [pid 7218] <... symlink resumed>) = 0 [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7215, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7218] write(1, "executing program\n", 18 [pid 5823] umount2("./276", MNT_FORCE|UMOUNT_NOFOLLOWexecuting program [pid 7218] <... write resumed>) = 18 [pid 7217] close(3 [pid 7216] close(3 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7218] memfd_create("syzkaller", 0 [pid 7217] <... close resumed>) = 0 [pid 7216] <... close resumed>) = 0 [pid 5823] openat(AT_FDCWD, "./276", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7217] close(4 [pid 7216] close(4 [pid 7218] <... memfd_create resumed>) = 3 [pid 7217] <... close resumed>) = 0 [pid 7216] <... close resumed>) = 0 [pid 5823] <... openat resumed>) = 3 [pid 5823] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7217] mkdir("./file0", 0777 [pid 7216] mkdir("./file0", 0777 [pid 5824] umount2("./272", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] getdents64(3, [pid 7218] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7218] <... mmap resumed>) = 0x7f957a000000 [pid 7216] <... mkdir resumed>) = 0 [pid 5824] openat(AT_FDCWD, "./272", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 7218] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7217] <... mkdir resumed>) = 0 [pid 7216] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5824] <... openat resumed>) = 3 [pid 5823] umount2("./276/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] newfstatat(3, "", [pid 7217] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 221.251032][ T7216] loop2: detected capacity change from 0 to 128 [ 221.265585][ T7217] loop3: detected capacity change from 0 to 128 [pid 7218] <... write resumed>) = 65536 [pid 5824] getdents64(3, [pid 7218] munmap(0x7f957a000000, 138412032 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 5824] umount2("./272/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./272/binderfs", [pid 7218] <... munmap resumed>) = 0 [pid 7218] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... umount2 resumed>) = 0 [pid 7218] <... openat resumed>) = 4 [pid 5824] unlink("./272/binderfs" [pid 5823] umount2("./276/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7218] ioctl(4, LOOP_SET_FD, 3 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... unlink resumed>) = 0 [pid 5823] newfstatat(AT_FDCWD, "./276/file0", [pid 5824] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] close(3 [pid 5823] umount2("./276/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... close resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] rmdir("./272" [pid 5823] openat(AT_FDCWD, "./276/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] <... rmdir resumed>) = 0 [pid 5823] <... openat resumed>) = 4 [pid 5824] mkdir("./273", 0777 [pid 5823] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] <... mkdir resumed>) = 0 [pid 5823] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] close(4) = 0 [pid 5823] rmdir("./276/file0") = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5823] umount2("./276/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... openat resumed>) = 3 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] ioctl(3, LOOP_CLR_FD [pid 5823] newfstatat(AT_FDCWD, "./276/binderfs", [pid 5824] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] close(3 [pid 5823] unlink("./276/binderfs" [pid 5824] <... close resumed>) = 0 [pid 7218] <... ioctl resumed>) = 0 [pid 7217] <... mount resumed>) = 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5823] <... unlink resumed>) = 0 [pid 7217] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY./strace-static-x86_64: Process 7219 attached ) = 3 [pid 7219] set_robust_list(0x55557eba4660, 24 [pid 7218] close(3 [pid 7217] chdir("./file0" [pid 7216] <... mount resumed>) = 0 [pid 5823] getdents64(3, [pid 7219] <... set_robust_list resumed>) = 0 [pid 7218] <... close resumed>) = 0 [pid 7217] <... chdir resumed>) = 0 [pid 7216] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7219] chdir("./273" [pid 7218] close(4 [pid 7217] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7216] <... openat resumed>) = 3 [pid 7219] <... chdir resumed>) = 0 [pid 7218] <... close resumed>) = 0 [pid 7217] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7216] chdir("./file0" [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7219 [pid 5823] close(3 [pid 7218] mkdir("./file0", 0777) = 0 [pid 7217] openat(AT_FDCWD, ".", O_RDONLY [pid 7216] <... chdir resumed>) = 0 [ 221.320584][ T7217] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 221.332129][ T7216] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 221.354507][ T7218] loop4: detected capacity change from 0 to 128 [pid 5823] <... close resumed>) = 0 [pid 7219] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7218] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7217] <... openat resumed>) = 4 [pid 7216] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5823] rmdir("./276" [pid 7219] <... prctl resumed>) = 0 [pid 7217] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7216] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7219] setpgid(0, 0 [pid 7216] openat(AT_FDCWD, ".", O_RDONLY [pid 5823] <... rmdir resumed>) = 0 [pid 7219] <... setpgid resumed>) = 0 [pid 7216] <... openat resumed>) = 4 [pid 7216] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7219] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7217] <... renameat2 resumed>) = 0 [pid 7216] <... renameat2 resumed>) = 0 [pid 5823] mkdir("./277", 0777 [pid 7217] sync( [pid 7216] sync( [pid 5823] <... mkdir resumed>) = 0 [pid 7219] <... openat resumed>) = 3 [pid 7219] write(3, "1000", 4) = 4 [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7219] close(3) = 0 [pid 7219] symlink("/dev/binderfs", "./binderfs" [pid 5823] <... openat resumed>) = 3 [pid 7219] <... symlink resumed>) = 0 executing program [pid 7219] write(1, "executing program\n", 18 [pid 5823] ioctl(3, LOOP_CLR_FD [pid 7219] <... write resumed>) = 18 [pid 5823] <... ioctl resumed>) = 0 [pid 7219] memfd_create("syzkaller", 0 [pid 5823] close(3 [pid 7219] <... memfd_create resumed>) = 3 [pid 5823] <... close resumed>) = 0 [pid 7219] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7219] <... mmap resumed>) = 0x7f957a000000 ./strace-static-x86_64: Process 7220 attached [pid 7219] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7220 [pid 7220] set_robust_list(0x55557eba4660, 24 [pid 7219] <... write resumed>) = 65536 [pid 7220] <... set_robust_list resumed>) = 0 [pid 7220] chdir("./277") = 0 [ 221.408930][ T7218] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [pid 7220] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7220] setpgid(0, 0) = 0 [pid 7220] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7219] munmap(0x7f957a000000, 138412032 [pid 7220] write(3, "1000", 4 [pid 7219] <... munmap resumed>) = 0 [pid 7220] <... write resumed>) = 4 [pid 7220] close(3 [pid 7219] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7220] <... close resumed>) = 0 [pid 7219] <... openat resumed>) = 4 [pid 7220] symlink("/dev/binderfs", "./binderfs" [pid 7219] ioctl(4, LOOP_SET_FD, 3 [pid 7218] <... mount resumed>) = 0 [pid 7220] <... symlink resumed>) = 0 executing program [pid 7220] write(1, "executing program\n", 18) = 18 [pid 7220] memfd_create("syzkaller", 0 [pid 7217] <... sync resumed>) = 0 [pid 7216] <... sync resumed>) = 0 [pid 7216] exit_group(0 [pid 7220] <... memfd_create resumed>) = 3 [pid 7216] <... exit_group resumed>) = ? [pid 7220] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7218] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7217] exit_group(0 [pid 7216] +++ exited with 0 +++ [pid 7220] <... mmap resumed>) = 0x7f957a000000 [pid 7218] <... openat resumed>) = 3 [pid 7218] chdir("./file0" [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7216, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 7220] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7218] <... chdir resumed>) = 0 [pid 7217] <... exit_group resumed>) = ? [pid 5825] restart_syscall(<... resuming interrupted clone ...> [pid 7218] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7220] <... write resumed>) = 65536 [pid 7217] +++ exited with 0 +++ [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7217, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5826] restart_syscall(<... resuming interrupted clone ...> [pid 7218] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7220] munmap(0x7f957a000000, 138412032 [pid 7219] <... ioctl resumed>) = 0 [pid 7218] openat(AT_FDCWD, ".", O_RDONLY [pid 5826] <... restart_syscall resumed>) = 0 [pid 5825] <... restart_syscall resumed>) = 0 [pid 7220] <... munmap resumed>) = 0 [pid 7218] <... openat resumed>) = 4 [pid 7219] close(3) = 0 [pid 7218] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7219] close(4 [pid 5826] umount2("./277", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./271", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7220] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7220] <... openat resumed>) = 4 [pid 7219] <... close resumed>) = 0 [pid 5826] openat(AT_FDCWD, "./277", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7219] mkdir("./file0", 0777 [pid 5826] <... openat resumed>) = 3 [pid 5825] openat(AT_FDCWD, "./271", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7220] ioctl(4, LOOP_SET_FD, 3 [pid 5826] newfstatat(3, "", [pid 7220] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 7219] <... mkdir resumed>) = 0 [pid 7218] <... renameat2 resumed>) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] <... openat resumed>) = 3 [pid 5825] newfstatat(3, "", [pid 7220] ioctl(4, LOOP_CLR_FD [pid 5826] getdents64(3, [pid 7220] <... ioctl resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [ 221.479272][ T7219] loop1: detected capacity change from 0 to 128 [pid 5826] umount2("./277/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7219] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7218] sync( [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7220] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 5825] getdents64(3, [pid 7220] close(4 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5825] umount2("./271/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... umount2 resumed>) = 0 [pid 5825] <... umount2 resumed>) = 0 [pid 7219] <... mount resumed>) = 0 [pid 5826] umount2("./277/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7219] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7219] <... openat resumed>) = 3 [pid 5826] newfstatat(AT_FDCWD, "./277/file0", [pid 7219] chdir("./file0") = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7219] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5825] umount2("./271/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] umount2("./277/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7219] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7219] openat(AT_FDCWD, ".", O_RDONLY [pid 5825] newfstatat(AT_FDCWD, "./271/file0", [pid 7219] <... openat resumed>) = 4 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./277/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7219] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5826] <... openat resumed>) = 4 [pid 5825] umount2("./271/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] newfstatat(4, "", [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] openat(AT_FDCWD, "./271/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5826] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 7219] <... renameat2 resumed>) = 0 [pid 5826] close(4 [pid 5825] <... openat resumed>) = 4 [pid 7219] sync( [pid 5825] newfstatat(4, "", [pid 7220] <... close resumed>) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] <... close resumed>) = 0 [pid 5825] getdents64(4, [pid 5826] rmdir("./277/file0" [pid 7220] close(3) = 0 [pid 7218] <... sync resumed>) = 0 [pid 5826] <... rmdir resumed>) = 0 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [ 221.552381][ T7219] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [pid 7220] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 7219] <... sync resumed>) = 0 [pid 7218] exit_group(0 [pid 5825] getdents64(4, [pid 7220] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 7220] <... renameat2 resumed>) = -1 ENOENT (No such file or directory) [pid 7219] exit_group(0 [pid 7218] <... exit_group resumed>) = ? [pid 5825] close(4) = 0 [pid 5825] rmdir("./271/file0" [pid 7220] sync( [pid 5826] umount2("./277/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./277/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./277/binderfs") = 0 [pid 5826] getdents64(3, [pid 5825] <... rmdir resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] close(3) = 0 [pid 5826] rmdir("./277" [pid 7219] <... exit_group resumed>) = ? [pid 7218] +++ exited with 0 +++ [pid 5826] <... rmdir resumed>) = 0 [pid 5825] umount2("./271/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7218, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5826] mkdir("./278", 0777 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] restart_syscall(<... resuming interrupted clone ...> [pid 5826] <... mkdir resumed>) = 0 [pid 5825] newfstatat(AT_FDCWD, "./271/binderfs", [pid 5827] <... restart_syscall resumed>) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5826] ioctl(3, LOOP_CLR_FD) = 0 [pid 5827] umount2("./267", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] close(3 [pid 5827] openat(AT_FDCWD, "./267", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] <... close resumed>) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./271/binderfs" [pid 5827] <... openat resumed>) = 3 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7219] +++ exited with 0 +++ [pid 5827] newfstatat(3, "", [pid 5825] <... unlink resumed>) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(3, [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7219, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 7220] <... sync resumed>) = 0 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 7221 attached [pid 7220] exit_group(0 [pid 5827] getdents64(3, [pid 5825] close(3 [pid 7221] set_robust_list(0x55557eba4660, 24 [pid 7220] <... exit_group resumed>) = ? [pid 7221] <... set_robust_list resumed>) = 0 [pid 7220] +++ exited with 0 +++ [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7221 [pid 5825] <... close resumed>) = 0 [pid 5824] <... restart_syscall resumed>) = 0 [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7220, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 7221] chdir("./278" [pid 5827] umount2("./267/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] rmdir("./271" [pid 7221] <... chdir resumed>) = 0 [pid 5825] <... rmdir resumed>) = 0 [pid 5824] umount2("./273", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] mkdir("./272", 0777 [pid 7221] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... mkdir resumed>) = 0 [pid 5824] openat(AT_FDCWD, "./273", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7221] <... prctl resumed>) = 0 [pid 5823] <... restart_syscall resumed>) = 0 [pid 7221] setpgid(0, 0 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5824] <... openat resumed>) = 3 [pid 5823] umount2("./277", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] newfstatat(3, "", [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... openat resumed>) = 3 [pid 7221] <... setpgid resumed>) = 0 [pid 5827] <... umount2 resumed>) = 0 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] openat(AT_FDCWD, "./277", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7221] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5827] umount2("./267/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... ioctl resumed>) = 0 [pid 5824] getdents64(3, [pid 5823] <... openat resumed>) = 3 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(3, "", [pid 5827] newfstatat(AT_FDCWD, "./267/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] close(3 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7221] <... openat resumed>) = 3 [pid 5827] umount2("./267/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./273/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7221] write(3, "1000", 4 [pid 5825] <... close resumed>) = 0 [pid 5823] getdents64(3, [pid 7221] <... write resumed>) = 4 [pid 7221] close(3 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 5827] openat(AT_FDCWD, "./267/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7221] <... close resumed>) = 0 [pid 5827] <... openat resumed>) = 4 [pid 5823] umount2("./277/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7221] symlink("/dev/binderfs", "./binderfs" [pid 5827] newfstatat(4, "", [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5824] <... umount2 resumed>) = 0 [pid 7221] <... symlink resumed>) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7221] write(1, "executing program\n", 18 executing program [pid 5827] getdents64(4, [pid 5824] umount2("./273/file0", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7222 attached [pid 7221] <... write resumed>) = 18 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] newfstatat(AT_FDCWD, "./277/binderfs", [pid 7222] set_robust_list(0x55557eba4660, 24 [pid 7221] memfd_create("syzkaller", 0 [pid 5827] getdents64(4, [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7221] <... memfd_create resumed>) = 3 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] newfstatat(AT_FDCWD, "./273/file0", [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] close(4 [pid 7221] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5823] unlink("./277/binderfs" [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7222] <... set_robust_list resumed>) = 0 [pid 7221] <... mmap resumed>) = 0x7f957a000000 [pid 5823] <... unlink resumed>) = 0 [pid 5827] <... close resumed>) = 0 [pid 5827] rmdir("./267/file0" [pid 5823] getdents64(3, [pid 7221] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5827] <... rmdir resumed>) = 0 [pid 5824] umount2("./273/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7222] chdir("./272" [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7221] <... write resumed>) = 65536 [pid 5824] openat(AT_FDCWD, "./273/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] close(3 [pid 7222] <... chdir resumed>) = 0 [pid 7222] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7221] munmap(0x7f957a000000, 138412032 [pid 5827] umount2("./267/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7222 [pid 5824] <... openat resumed>) = 4 [pid 5823] <... close resumed>) = 0 [pid 7222] <... prctl resumed>) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7221] <... munmap resumed>) = 0 [pid 5827] newfstatat(AT_FDCWD, "./267/binderfs", [pid 5823] rmdir("./277" [pid 7222] setpgid(0, 0 [pid 5824] newfstatat(4, "", [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] unlink("./267/binderfs" [pid 5823] <... rmdir resumed>) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7222] <... setpgid resumed>) = 0 [pid 5823] mkdir("./278", 0777 [pid 5824] getdents64(4, [pid 7222] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7221] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5827] <... unlink resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] <... mkdir resumed>) = 0 [pid 5824] getdents64(4, [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] <... openat resumed>) = 3 [pid 5824] close(4 [pid 5823] ioctl(3, LOOP_CLR_FD [pid 7222] <... openat resumed>) = 3 [pid 7221] <... openat resumed>) = 4 [pid 5824] <... close resumed>) = 0 [pid 5823] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7221] ioctl(4, LOOP_SET_FD, 3 [pid 5824] rmdir("./273/file0" [pid 5823] close(3 [pid 5824] <... rmdir resumed>) = 0 [pid 5823] <... close resumed>) = 0 [pid 7222] write(3, "1000", 4 [pid 7221] <... ioctl resumed>) = 0 [pid 5827] getdents64(3, [pid 5824] umount2("./273/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] newfstatat(AT_FDCWD, "./273/binderfs", [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7223 [pid 7222] <... write resumed>) = 4 ./strace-static-x86_64: Process 7223 attached [pid 7222] close(3 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7222] <... close resumed>) = 0 [pid 7221] close(3 [pid 5827] close(3 [pid 5824] unlink("./273/binderfs" [pid 5827] <... close resumed>) = 0 [pid 5824] <... unlink resumed>) = 0 [pid 7223] set_robust_list(0x55557eba4660, 24 [pid 5824] getdents64(3, [pid 7222] symlink("/dev/binderfs", "./binderfs" [pid 7221] <... close resumed>) = 0 [pid 5827] rmdir("./267" [pid 7223] <... set_robust_list resumed>) = 0 [pid 7223] chdir("./278" [pid 7222] <... symlink resumed>) = 0 [pid 7223] <... chdir resumed>) = 0 executing program [pid 7222] write(1, "executing program\n", 18 [pid 7221] close(4 [pid 5827] <... rmdir resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7222] <... write resumed>) = 18 [pid 7221] <... close resumed>) = 0 [pid 5827] mkdir("./268", 0777 [pid 5824] close(3 [pid 7221] mkdir("./file0", 0777 [pid 7222] memfd_create("syzkaller", 0 [pid 5824] <... close resumed>) = 0 [pid 7223] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7222] <... memfd_create resumed>) = 3 [pid 7221] <... mkdir resumed>) = 0 [pid 5827] <... mkdir resumed>) = 0 [pid 5824] rmdir("./273" [pid 7222] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7223] <... prctl resumed>) = 0 [pid 7223] setpgid(0, 0) = 0 [pid 7223] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7222] <... mmap resumed>) = 0x7f957a000000 [pid 5827] <... openat resumed>) = 3 [pid 5824] <... rmdir resumed>) = 0 [pid 7223] <... openat resumed>) = 3 [pid 7222] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5827] ioctl(3, LOOP_CLR_FD [pid 5824] mkdir("./274", 0777 [pid 7223] write(3, "1000", 4) = 4 [pid 7223] close(3) = 0 [pid 7223] symlink("/dev/binderfs", "./binderfs"executing program [pid 5824] <... mkdir resumed>) = 0 [pid 7223] <... symlink resumed>) = 0 [pid 7221] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5827] <... ioctl resumed>) = 0 [pid 7223] write(1, "executing program\n", 18) = 18 [pid 5827] close(3 [pid 7223] memfd_create("syzkaller", 0) = 3 [pid 7223] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7223] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 7222] <... write resumed>) = 65536 [pid 5827] <... close resumed>) = 0 [ 221.757244][ T7221] loop3: detected capacity change from 0 to 128 [ 221.792599][ T7221] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7222] munmap(0x7f957a000000, 138412032 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7223] munmap(0x7f957a000000, 138412032 [pid 5824] <... openat resumed>) = 3 [pid 7223] <... munmap resumed>) = 0 [pid 7223] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7223] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 7224 attached [pid 7222] <... munmap resumed>) = 0 [pid 7221] <... mount resumed>) = 0 [pid 5824] ioctl(3, LOOP_CLR_FD [pid 7224] set_robust_list(0x55557eba4660, 24 [pid 7222] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7221] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7224 [pid 5824] <... ioctl resumed>) = 0 [pid 7222] <... openat resumed>) = 4 [pid 5824] close(3 [pid 7224] <... set_robust_list resumed>) = 0 [pid 7221] <... openat resumed>) = 3 [pid 7224] chdir("./268" [pid 7221] chdir("./file0") = 0 [pid 7221] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7224] <... chdir resumed>) = 0 [pid 7222] ioctl(4, LOOP_SET_FD, 3 [pid 7221] openat(AT_FDCWD, ".", O_RDONLY [pid 5824] <... close resumed>) = 0 [pid 7224] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7221] <... openat resumed>) = 4 [pid 7224] <... prctl resumed>) = 0 [pid 7221] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7224] setpgid(0, 0) = 0 [pid 7224] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7221] <... renameat2 resumed>) = 0 [pid 7224] write(3, "1000", 4) = 4 [pid 7224] close(3) = 0 [pid 7221] sync( [pid 7222] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 7225 attached [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7225 [pid 7224] symlink("/dev/binderfs", "./binderfs" [pid 7225] set_robust_list(0x55557eba4660, 24) = 0 [pid 7225] chdir("./274") = 0 [pid 7224] <... symlink resumed>) = 0 [pid 7223] <... ioctl resumed>) = 0 executing program [pid 7224] write(1, "executing program\n", 18 [pid 7225] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7224] <... write resumed>) = 18 [pid 7223] close(3 [pid 7224] memfd_create("syzkaller", 0 [pid 7223] <... close resumed>) = 0 [pid 7225] <... prctl resumed>) = 0 [pid 7223] close(4 [pid 7225] setpgid(0, 0 [pid 7223] <... close resumed>) = 0 [pid 7225] <... setpgid resumed>) = 0 [pid 7223] mkdir("./file0", 0777 [pid 7225] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7224] <... memfd_create resumed>) = 3 [pid 7223] <... mkdir resumed>) = 0 [pid 7222] close(3 [pid 7221] <... sync resumed>) = 0 [pid 7224] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7221] exit_group(0 [pid 7225] <... openat resumed>) = 3 [pid 7224] <... mmap resumed>) = 0x7f957a000000 [pid 7221] <... exit_group resumed>) = ? [pid 7222] <... close resumed>) = 0 [pid 7224] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7222] close(4 [pid 7223] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7222] <... close resumed>) = 0 [ 221.809530][ T7223] loop0: detected capacity change from 0 to 128 [ 221.826296][ T7222] loop2: detected capacity change from 0 to 128 [pid 7225] write(3, "1000", 4 [pid 7222] mkdir("./file0", 0777 [pid 7221] +++ exited with 0 +++ [pid 7225] <... write resumed>) = 4 [pid 7224] <... write resumed>) = 65536 [pid 7222] <... mkdir resumed>) = 0 [pid 7225] close(3 [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7221, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 7225] <... close resumed>) = 0 [pid 5826] restart_syscall(<... resuming interrupted clone ...> [pid 7225] symlink("/dev/binderfs", "./binderfs" [pid 7222] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5826] <... restart_syscall resumed>) = 0 [pid 7225] <... symlink resumed>) = 0 [pid 7224] munmap(0x7f957a000000, 138412032executing program [pid 7225] write(1, "executing program\n", 18 [pid 5826] umount2("./278", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7225] <... write resumed>) = 18 [pid 7224] <... munmap resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./278", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5826] newfstatat(3, "", [pid 7225] memfd_create("syzkaller", 0 [pid 7224] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7224] <... openat resumed>) = 4 [pid 5826] getdents64(3, [pid 7225] <... memfd_create resumed>) = 3 [pid 7224] ioctl(4, LOOP_SET_FD, 3 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 7225] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5826] umount2("./278/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7225] <... mmap resumed>) = 0x7f957a000000 [pid 7225] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 7225] munmap(0x7f957a000000, 138412032) = 0 [pid 5826] <... umount2 resumed>) = 0 [pid 7225] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 7225] ioctl(4, LOOP_SET_FD, 3 [pid 5826] umount2("./278/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./278/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] umount2("./278/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./278/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 221.877417][ T7223] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 221.889710][ T7222] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 221.916113][ T7224] loop4: detected capacity change from 0 to 128 [pid 5826] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 7223] <... mount resumed>) = 0 [pid 5826] getdents64(4, [pid 7223] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 7223] <... openat resumed>) = 3 [pid 5826] close(4 [pid 7223] chdir("./file0") = 0 [pid 7223] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5826] <... close resumed>) = 0 [pid 7223] openat(AT_FDCWD, ".", O_RDONLY [pid 5826] rmdir("./278/file0" [pid 7223] <... openat resumed>) = 4 [pid 7223] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = 0 [pid 7222] <... mount resumed>) = 0 [pid 5826] <... rmdir resumed>) = 0 [pid 7222] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5826] umount2("./278/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7223] sync( [pid 7224] <... ioctl resumed>) = 0 [pid 7222] <... openat resumed>) = 3 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7225] <... ioctl resumed>) = 0 [pid 7224] close(3 [pid 7222] chdir("./file0" [pid 5826] newfstatat(AT_FDCWD, "./278/binderfs", [pid 7225] close(3 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7225] <... close resumed>) = 0 [pid 7224] <... close resumed>) = 0 [pid 7222] <... chdir resumed>) = 0 [pid 5826] unlink("./278/binderfs" [pid 7225] close(4 [pid 7224] close(4 [pid 7222] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7224] <... close resumed>) = 0 [pid 7225] <... close resumed>) = 0 [pid 7222] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7224] mkdir("./file0", 0777 [pid 7222] openat(AT_FDCWD, ".", O_RDONLY [pid 7225] mkdir("./file0", 0777) = 0 [pid 7224] <... mkdir resumed>) = 0 [pid 7223] <... sync resumed>) = 0 [pid 5826] <... unlink resumed>) = 0 [pid 7223] exit_group(0 [pid 7222] <... openat resumed>) = 4 [pid 5826] getdents64(3, [ 221.922768][ T7225] loop1: detected capacity change from 0 to 128 [pid 7225] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7224] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7222] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7223] <... exit_group resumed>) = ? [pid 5826] close(3) = 0 [pid 7223] +++ exited with 0 +++ [pid 5826] rmdir("./278" [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7223, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5826] <... rmdir resumed>) = 0 [pid 5823] umount2("./278", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7222] <... renameat2 resumed>) = 0 [pid 5826] mkdir("./279", 0777 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./278", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5823] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] umount2("./278/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... mkdir resumed>) = 0 [pid 7222] sync( [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5826] ioctl(3, LOOP_CLR_FD) = 0 [pid 5826] close(3 [pid 5823] <... umount2 resumed>) = 0 [pid 5826] <... close resumed>) = 0 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7226 attached [pid 7226] set_robust_list(0x55557eba4660, 24 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7226 [pid 5823] umount2("./278/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7226] <... set_robust_list resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./278/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] umount2("./278/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7226] chdir("./279" [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7226] <... chdir resumed>) = 0 [pid 5823] openat(AT_FDCWD, "./278/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7226] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5823] <... openat resumed>) = 4 [pid 7226] setpgid(0, 0 [pid 5823] newfstatat(4, "", [pid 7226] <... setpgid resumed>) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7226] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5823] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] close(4) = 0 [pid 5823] rmdir("./278/file0") = 0 [pid 7226] <... openat resumed>) = 3 [pid 7226] write(3, "1000", 4) = 4 [pid 7224] <... mount resumed>) = 0 [pid 7224] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5823] umount2("./278/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7224] chdir("./file0" [pid 7226] close(3 [pid 7224] <... chdir resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 221.966552][ T7225] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 221.986461][ T7224] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [pid 7226] <... close resumed>) = 0 [pid 7224] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5823] newfstatat(AT_FDCWD, "./278/binderfs", [pid 7224] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7224] openat(AT_FDCWD, ".", O_RDONLY [pid 7226] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 7224] <... openat resumed>) = 4 [pid 5823] unlink("./278/binderfs" [pid 7226] write(1, "executing program\n", 18 [pid 7224] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5823] <... unlink resumed>) = 0 [pid 5823] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] close(3 [pid 7226] <... write resumed>) = 18 [pid 5823] <... close resumed>) = 0 [pid 5823] rmdir("./278" [pid 7226] memfd_create("syzkaller", 0 [pid 5823] <... rmdir resumed>) = 0 [pid 7226] <... memfd_create resumed>) = 3 [pid 7225] <... mount resumed>) = 0 [pid 7224] <... renameat2 resumed>) = 0 [pid 5823] mkdir("./279", 0777 [pid 7226] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7225] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7224] sync( [pid 5823] <... mkdir resumed>) = 0 [pid 7226] <... mmap resumed>) = 0x7f957a000000 [pid 7225] <... openat resumed>) = 3 [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7225] chdir("./file0" [pid 7226] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7225] <... chdir resumed>) = 0 [pid 5823] <... openat resumed>) = 3 [pid 5823] ioctl(3, LOOP_CLR_FD [pid 7226] <... write resumed>) = 65536 [pid 7225] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7224] <... sync resumed>) = 0 [pid 7222] <... sync resumed>) = 0 [pid 5823] <... ioctl resumed>) = 0 [pid 7226] munmap(0x7f957a000000, 138412032 [pid 7225] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7224] exit_group(0 [pid 7222] exit_group(0) = ? [pid 5823] close(3 [pid 7225] openat(AT_FDCWD, ".", O_RDONLY [pid 7224] <... exit_group resumed>) = ? [pid 5823] <... close resumed>) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7222] +++ exited with 0 +++ [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7227 ./strace-static-x86_64: Process 7227 attached [pid 7227] set_robust_list(0x55557eba4660, 24) = 0 [pid 7227] chdir("./279" [pid 7226] <... munmap resumed>) = 0 [pid 7225] <... openat resumed>) = 4 [pid 7224] +++ exited with 0 +++ [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7222, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 7225] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7224, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5825] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 7227] <... chdir resumed>) = 0 [pid 7227] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7227] setpgid(0, 0) = 0 [pid 7227] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7226] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5825] umount2("./272", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7227] <... openat resumed>) = 3 [pid 7226] <... openat resumed>) = 4 [pid 5827] umount2("./268", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) executing program [pid 7226] ioctl(4, LOOP_SET_FD, 3 [pid 7225] <... renameat2 resumed>) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./272", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7227] write(3, "1000", 4 [pid 5825] <... openat resumed>) = 3 [pid 7227] <... write resumed>) = 4 [pid 5825] newfstatat(3, "", [pid 7227] close(3 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7227] <... close resumed>) = 0 [pid 5825] getdents64(3, [pid 7227] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 7227] write(1, "executing program\n", 18) = 18 [pid 7227] memfd_create("syzkaller", 0) = 3 [pid 7225] sync( [pid 5827] openat(AT_FDCWD, "./268", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] umount2("./272/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... openat resumed>) = 3 [pid 7227] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7227] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5827] newfstatat(3, "", [pid 7227] <... write resumed>) = 65536 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] getdents64(3, [pid 5825] <... umount2 resumed>) = 0 [pid 7227] munmap(0x7f957a000000, 138412032) = 0 [pid 5825] umount2("./272/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7227] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] umount2("./268/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] newfstatat(AT_FDCWD, "./272/file0", [pid 7227] <... openat resumed>) = 4 [pid 7227] ioctl(4, LOOP_SET_FD, 3 [pid 7226] <... ioctl resumed>) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7226] close(3 [pid 5825] umount2("./272/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7226] <... close resumed>) = 0 [pid 5827] <... umount2 resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7225] <... sync resumed>) = 0 [pid 5827] umount2("./268/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7225] exit_group(0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7226] close(4 [pid 7225] <... exit_group resumed>) = ? [pid 5827] newfstatat(AT_FDCWD, "./268/file0", [pid 5825] openat(AT_FDCWD, "./272/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7226] <... close resumed>) = 0 [pid 7225] +++ exited with 0 +++ [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... openat resumed>) = 4 [pid 5825] newfstatat(4, "", [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7225, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5827] umount2("./268/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7227] <... ioctl resumed>) = 0 [pid 7226] mkdir("./file0", 0777 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 5827] openat(AT_FDCWD, "./268/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] getdents64(4, [pid 7227] close(3 [pid 7226] <... mkdir resumed>) = 0 [pid 5827] <... openat resumed>) = 4 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] <... restart_syscall resumed>) = 0 [pid 5827] newfstatat(4, "", [pid 5825] getdents64(4, [pid 7227] <... close resumed>) = 0 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] close(4 [pid 5824] umount2("./274", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7227] close(4 [pid 5825] <... close resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7227] <... close resumed>) = 0 [pid 5825] rmdir("./272/file0" [pid 5824] openat(AT_FDCWD, "./274", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7227] mkdir("./file0", 0777) = 0 [pid 5825] <... rmdir resumed>) = 0 [pid 5824] <... openat resumed>) = 3 [pid 7227] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5825] umount2("./272/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] newfstatat(3, "", [pid 5827] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] getdents64(4, [pid 5825] newfstatat(AT_FDCWD, "./272/binderfs", [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] getdents64(3, [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5827] close(4 [pid 5825] unlink("./272/binderfs" [pid 5824] umount2("./274/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... close resumed>) = 0 [pid 5825] <... unlink resumed>) = 0 [pid 5827] rmdir("./268/file0" [pid 5825] getdents64(3, [pid 5827] <... rmdir resumed>) = 0 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5827] umount2("./268/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] newfstatat(AT_FDCWD, "./268/binderfs", [ 222.124579][ T7226] loop3: detected capacity change from 0 to 128 [ 222.146400][ T7227] loop0: detected capacity change from 0 to 128 [pid 5825] close(3 [pid 7226] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... close resumed>) = 0 [pid 5824] <... umount2 resumed>) = 0 [pid 5824] umount2("./274/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] rmdir("./272" [pid 5827] unlink("./268/binderfs" [pid 5825] <... rmdir resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... unlink resumed>) = 0 [pid 5824] newfstatat(AT_FDCWD, "./274/file0", [pid 5827] getdents64(3, [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] umount2("./274/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] close(3 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... close resumed>) = 0 [pid 5824] openat(AT_FDCWD, "./274/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5825] mkdir("./273", 0777) = 0 [pid 5827] rmdir("./268") = 0 [pid 5824] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] close(4) = 0 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5824] rmdir("./274/file0" [pid 5825] <... openat resumed>) = 3 [pid 5824] <... rmdir resumed>) = 0 [pid 5827] mkdir("./269", 0777 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 5824] umount2("./274/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7227] <... mount resumed>) = 0 [pid 7227] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7227] chdir("./file0" [pid 5827] <... mkdir resumed>) = 0 [pid 5825] <... ioctl resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7227] <... chdir resumed>) = 0 [pid 5825] close(3 [pid 5824] newfstatat(AT_FDCWD, "./274/binderfs", [pid 7227] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5825] <... close resumed>) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7227] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7227] openat(AT_FDCWD, ".", O_RDONLY [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7227] <... openat resumed>) = 4 [pid 5827] <... openat resumed>) = 3 [pid 5827] ioctl(3, LOOP_CLR_FD [pid 5824] unlink("./274/binderfs") = 0 [pid 5827] <... ioctl resumed>) = 0 [pid 5824] getdents64(3, [pid 5827] close(3 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7227] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5827] <... close resumed>) = 0 [pid 5824] close(3 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5824] <... close resumed>) = 0 [pid 5824] rmdir("./274"./strace-static-x86_64: Process 7228 attached [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5824] <... rmdir resumed>) = 0 [ 222.189322][ T7227] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 222.218860][ T7226] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [pid 5824] mkdir("./275", 0777 [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7228 [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7229 [pid 7226] <... mount resumed>) = 0 [pid 5824] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 7229 attached [pid 7226] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 7229] set_robust_list(0x55557eba4660, 24 [pid 7226] chdir("./file0" [pid 5824] ioctl(3, LOOP_CLR_FD [pid 7229] <... set_robust_list resumed>) = 0 [pid 7226] <... chdir resumed>) = 0 [pid 5824] <... ioctl resumed>) = 0 [pid 7229] chdir("./273" [pid 7226] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5824] close(3 [pid 7229] <... chdir resumed>) = 0 [pid 7226] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5824] <... close resumed>) = 0 [pid 7229] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7226] openat(AT_FDCWD, ".", O_RDONLY [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7230 attached [pid 7229] <... prctl resumed>) = 0 [pid 7226] <... openat resumed>) = 4 [pid 7229] setpgid(0, 0 [pid 7226] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7229] <... setpgid resumed>) = 0 [pid 7229] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7228] set_robust_list(0x55557eba4660, 24 [pid 7229] <... openat resumed>) = 3 [pid 7227] <... renameat2 resumed>) = 0 [pid 7230] set_robust_list(0x55557eba4660, 24 [pid 7228] <... set_robust_list resumed>) = 0 [pid 7227] sync( [pid 7226] <... renameat2 resumed>) = 0 [pid 7230] <... set_robust_list resumed>) = 0 [pid 7229] write(3, "1000", 4 [pid 7230] chdir("./275" [pid 7229] <... write resumed>) = 4 [pid 7226] sync( [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7230 [pid 7229] close(3 [pid 7230] <... chdir resumed>) = 0 [pid 7229] <... close resumed>) = 0 [pid 7230] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7229] symlink("/dev/binderfs", "./binderfs" [pid 7230] <... prctl resumed>) = 0 [pid 7229] <... symlink resumed>) = 0 [pid 7230] setpgid(0, 0 [pid 7228] chdir("./269" [pid 7230] <... setpgid resumed>) = 0 [pid 7230] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC executing program [pid 7229] write(1, "executing program\n", 18 [pid 7228] <... chdir resumed>) = 0 [pid 7230] <... openat resumed>) = 3 [pid 7229] <... write resumed>) = 18 [pid 7229] memfd_create("syzkaller", 0 [pid 7228] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7230] write(3, "1000", 4 [pid 7228] setpgid(0, 0) = 0 [pid 7228] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7228] write(3, "1000", 4) = 4 [pid 7230] <... write resumed>) = 4 [pid 7228] close(3 [pid 7230] close(3 [pid 7229] <... memfd_create resumed>) = 3 [pid 7228] <... close resumed>) = 0 [pid 7230] <... close resumed>) = 0 [pid 7229] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7228] symlink("/dev/binderfs", "./binderfs" [pid 7230] symlink("/dev/binderfs", "./binderfs" [pid 7229] <... mmap resumed>) = 0x7f957a000000 [pid 7229] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 7229] munmap(0x7f957a000000, 138412032) = 0 [pid 7229] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 7229] ioctl(4, LOOP_SET_FD, 3 [pid 7230] <... symlink resumed>) = 0 [pid 7230] write(1, "executing program\n", 18 [pid 7228] <... symlink resumed>) = 0 executing program [pid 7230] <... write resumed>) = 18 executing program [pid 7230] memfd_create("syzkaller", 0 [pid 7228] write(1, "executing program\n", 18) = 18 [pid 7228] memfd_create("syzkaller", 0 [pid 7227] <... sync resumed>) = 0 [pid 7226] <... sync resumed>) = 0 [pid 7230] <... memfd_create resumed>) = 3 [pid 7227] exit_group(0 [pid 7230] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7228] <... memfd_create resumed>) = 3 [pid 7227] <... exit_group resumed>) = ? [pid 7226] exit_group(0 [pid 7230] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7228] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7227] +++ exited with 0 +++ [pid 7226] <... exit_group resumed>) = ? [pid 7228] <... mmap resumed>) = 0x7f957a000000 [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7227, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 7226] +++ exited with 0 +++ [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7226, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5826] restart_syscall(<... resuming interrupted clone ...> [pid 7230] <... write resumed>) = 65536 [pid 7228] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5823] umount2("./279", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7230] munmap(0x7f957a000000, 138412032 [pid 5823] openat(AT_FDCWD, "./279", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7230] <... munmap resumed>) = 0 [pid 5823] <... openat resumed>) = 3 [pid 5823] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 7230] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7228] <... write resumed>) = 65536 [pid 5826] <... restart_syscall resumed>) = 0 [pid 5823] umount2("./279/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] umount2("./279", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7230] <... openat resumed>) = 4 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./279", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7228] munmap(0x7f957a000000, 138412032 [pid 7230] ioctl(4, LOOP_SET_FD, 3 [pid 5826] <... openat resumed>) = 3 [pid 7230] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 7228] <... munmap resumed>) = 0 [pid 5826] newfstatat(3, "", [pid 7230] ioctl(4, LOOP_CLR_FD [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7230] <... ioctl resumed>) = 0 [pid 5826] getdents64(3, [pid 5823] <... umount2 resumed>) = 0 [pid 5823] umount2("./279/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] umount2("./279/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] newfstatat(AT_FDCWD, "./279/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] umount2("./279/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7230] ioctl(4, LOOP_SET_FD, 3 [pid 5826] <... umount2 resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] umount2("./279/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7228] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7230] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [ 222.324707][ T7229] loop2: detected capacity change from 0 to 128 [pid 5823] openat(AT_FDCWD, "./279/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7230] close(4 [pid 7229] <... ioctl resumed>) = 0 [pid 7228] <... openat resumed>) = 4 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7230] <... close resumed>) = 0 [pid 7229] close(3 [pid 7230] close(3 [pid 7229] <... close resumed>) = 0 [pid 7230] <... close resumed>) = 0 [pid 7229] close(4) = 0 [pid 7229] mkdir("./file0", 0777) = 0 [pid 5826] newfstatat(AT_FDCWD, "./279/file0", [pid 7228] ioctl(4, LOOP_SET_FD, 3 [pid 5823] <... openat resumed>) = 4 [pid 7230] openat(AT_FDCWD, ".", O_RDONLY [pid 5823] newfstatat(4, "", [pid 7230] <... openat resumed>) = 3 [pid 7229] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7230] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5823] getdents64(4, [pid 7230] <... renameat2 resumed>) = -1 ENOENT (No such file or directory) [pid 5826] umount2("./279/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 7230] sync( [pid 5823] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] close(4 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... close resumed>) = 0 [pid 5826] openat(AT_FDCWD, "./279/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] rmdir("./279/file0" [pid 5826] <... openat resumed>) = 4 [pid 5823] <... rmdir resumed>) = 0 [pid 5823] umount2("./279/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./279/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] newfstatat(4, "", [pid 5823] unlink("./279/binderfs" [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... unlink resumed>) = 0 [pid 5826] getdents64(4, [pid 5823] getdents64(3, [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] close(3 [pid 5826] close(4) = 0 [pid 5823] <... close resumed>) = 0 [pid 5826] rmdir("./279/file0" [pid 5823] rmdir("./279" [pid 7228] <... ioctl resumed>) = 0 [pid 5826] <... rmdir resumed>) = 0 [pid 5823] <... rmdir resumed>) = 0 [pid 7228] close(3 [pid 5826] umount2("./279/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7228] <... close resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] mkdir("./280", 0777 [pid 5826] newfstatat(AT_FDCWD, "./279/binderfs", [pid 7228] close(4) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7228] mkdir("./file0", 0777 [pid 5826] unlink("./279/binderfs" [pid 5823] <... mkdir resumed>) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7228] <... mkdir resumed>) = 0 [pid 7228] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5826] <... unlink resumed>) = 0 [pid 5823] <... openat resumed>) = 3 [ 222.371362][ T7228] loop4: detected capacity change from 0 to 128 [ 222.392864][ T7229] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [pid 5826] getdents64(3, [pid 5823] ioctl(3, LOOP_CLR_FD [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] close(3 [pid 5823] <... ioctl resumed>) = 0 [pid 5826] <... close resumed>) = 0 [pid 5823] close(3) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7231 attached , child_tidptr=0x55557eba4650) = 7231 [pid 5826] rmdir("./279" [pid 7231] set_robust_list(0x55557eba4660, 24) = 0 [pid 7231] chdir("./280" [pid 5826] <... rmdir resumed>) = 0 [pid 7231] <... chdir resumed>) = 0 [pid 7231] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7231] setpgid(0, 0) = 0 [pid 7231] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5826] mkdir("./280", 0777 [pid 7231] write(3, "1000", 4) = 4 [pid 7231] close(3 [pid 5826] <... mkdir resumed>) = 0 [pid 7231] <... close resumed>) = 0 [pid 7231] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWRexecuting program [pid 7231] write(1, "executing program\n", 18) = 18 [pid 7231] memfd_create("syzkaller", 0 [pid 7229] <... mount resumed>) = 0 [pid 5826] <... openat resumed>) = 3 [pid 7229] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5826] ioctl(3, LOOP_CLR_FD [pid 7229] chdir("./file0") = 0 [pid 7229] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5826] <... ioctl resumed>) = 0 [pid 7231] <... memfd_create resumed>) = 3 [pid 7229] openat(AT_FDCWD, ".", O_RDONLY [pid 5826] close(3 [pid 7231] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7229] <... openat resumed>) = 4 [pid 5826] <... close resumed>) = 0 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7231] <... mmap resumed>) = 0x7f957a000000 [pid 7229] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0./strace-static-x86_64: Process 7232 attached [pid 7231] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7232 [pid 7232] set_robust_list(0x55557eba4660, 24) = 0 [pid 7231] <... write resumed>) = 65536 [ 222.422378][ T7228] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [pid 7229] <... renameat2 resumed>) = 0 [pid 7232] chdir("./280" [pid 7231] munmap(0x7f957a000000, 138412032 [pid 7232] <... chdir resumed>) = 0 [pid 7232] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7231] <... munmap resumed>) = 0 [pid 7229] sync( [pid 7232] setpgid(0, 0) = 0 [pid 7232] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7231] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7232] <... openat resumed>) = 3 [pid 7231] <... openat resumed>) = 4 [pid 7231] ioctl(4, LOOP_SET_FD, 3 [pid 7232] write(3, "1000", 4 [pid 7231] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 7231] ioctl(4, LOOP_CLR_FD [pid 7232] <... write resumed>) = 4 [pid 7231] <... ioctl resumed>) = 0 [pid 7232] close(3 [pid 7231] ioctl(4, LOOP_SET_FD, 3 [pid 7232] <... close resumed>) = 0 [pid 7231] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 7231] close(4 [pid 7232] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 7232] write(1, "executing program\n", 18) = 18 [pid 7232] memfd_create("syzkaller", 0 [pid 7228] <... mount resumed>) = 0 [pid 7231] <... close resumed>) = 0 [pid 7231] close(3 [pid 7232] <... memfd_create resumed>) = 3 [pid 7231] <... close resumed>) = 0 [pid 7228] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7232] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7231] openat(AT_FDCWD, ".", O_RDONLY [pid 7228] <... openat resumed>) = 3 [pid 7232] <... mmap resumed>) = 0x7f957a000000 [pid 7231] <... openat resumed>) = 3 [pid 7228] chdir("./file0" [pid 7231] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7232] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7231] <... renameat2 resumed>) = -1 ENOENT (No such file or directory) [pid 7228] <... chdir resumed>) = 0 [pid 7231] sync( [pid 7228] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7232] <... write resumed>) = 65536 [pid 7231] <... sync resumed>) = 0 [pid 7230] <... sync resumed>) = 0 [pid 7229] <... sync resumed>) = 0 [pid 7228] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7232] munmap(0x7f957a000000, 138412032 [pid 7231] exit_group(0 [pid 7230] exit_group(0 [pid 7229] exit_group(0 [pid 7228] openat(AT_FDCWD, ".", O_RDONLY [pid 7231] <... exit_group resumed>) = ? [pid 7230] <... exit_group resumed>) = ? [pid 7229] <... exit_group resumed>) = ? [pid 7232] <... munmap resumed>) = 0 [pid 7230] +++ exited with 0 +++ [pid 7229] +++ exited with 0 +++ [pid 7228] <... openat resumed>) = 4 [pid 7232] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7228] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7229, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7230, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5825] restart_syscall(<... resuming interrupted clone ...> [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 7231] +++ exited with 0 +++ [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7231, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5825] <... restart_syscall resumed>) = 0 [pid 5824] <... restart_syscall resumed>) = 0 [pid 5823] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 7232] <... openat resumed>) = 4 [pid 7228] <... renameat2 resumed>) = 0 [pid 7232] ioctl(4, LOOP_SET_FD, 3 [pid 7228] sync( [pid 5825] umount2("./273", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./275", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] umount2("./280", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] openat(AT_FDCWD, "./273", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] openat(AT_FDCWD, "./275", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... openat resumed>) = 3 [pid 5824] <... openat resumed>) = 3 [pid 5823] openat(AT_FDCWD, "./280", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] newfstatat(3, "", [pid 5824] newfstatat(3, "", [pid 5823] <... openat resumed>) = 3 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] newfstatat(3, "", [pid 5825] getdents64(3, [pid 5824] getdents64(3, [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 5825] umount2("./273/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] getdents64(3, [pid 5825] <... umount2 resumed>) = 0 [pid 5824] umount2("./275/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] umount2("./273/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] newfstatat(AT_FDCWD, "./275/binderfs", [pid 5823] umount2("./280/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] newfstatat(AT_FDCWD, "./273/file0", [pid 5824] unlink("./275/binderfs" [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... unlink resumed>) = 0 [pid 5823] newfstatat(AT_FDCWD, "./280/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./280/binderfs") = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] getdents64(3, [pid 5825] umount2("./273/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] close(3 [pid 5825] openat(AT_FDCWD, "./273/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] getdents64(3, [pid 5823] <... close resumed>) = 0 [pid 5825] <... openat resumed>) = 4 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] close(3 [pid 5823] rmdir("./280" [pid 7228] <... sync resumed>) = 0 [pid 5825] newfstatat(4, "", [pid 5824] <... close resumed>) = 0 [pid 5823] <... rmdir resumed>) = 0 [pid 7228] exit_group(0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] rmdir("./275" [pid 7228] <... exit_group resumed>) = ? [pid 5825] getdents64(4, [pid 5824] <... rmdir resumed>) = 0 [pid 5823] mkdir("./281", 0777) = 0 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 7232] <... ioctl resumed>) = 0 [pid 7228] +++ exited with 0 +++ [pid 5825] getdents64(4, [pid 5824] mkdir("./276", 0777 [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7232] close(3 [pid 5824] <... mkdir resumed>) = 0 [pid 5823] <... openat resumed>) = 3 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] ioctl(3, LOOP_CLR_FD [pid 5825] close(4 [pid 5823] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5825] <... close resumed>) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7232] <... close resumed>) = 0 [pid 5823] close(3 [pid 7232] close(4 [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7228, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5825] rmdir("./273/file0" [pid 5824] <... openat resumed>) = 3 [pid 5823] <... close resumed>) = 0 [pid 7232] <... close resumed>) = 0 [pid 5827] restart_syscall(<... resuming interrupted clone ...> [pid 5825] <... rmdir resumed>) = 0 [pid 5824] ioctl(3, LOOP_CLR_FD [pid 5827] <... restart_syscall resumed>) = 0 [pid 5824] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7232] mkdir("./file0", 0777 [pid 5824] close(3 [pid 5825] umount2("./273/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... close resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7232] <... mkdir resumed>) = 0 [pid 5825] newfstatat(AT_FDCWD, "./273/binderfs", [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7233 attached [pid 5827] umount2("./269", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 7234 attached [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] unlink("./273/binderfs" [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7233 [pid 7233] set_robust_list(0x55557eba4660, 24 [pid 5827] openat(AT_FDCWD, "./269", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] <... unlink resumed>) = 0 [pid 5827] <... openat resumed>) = 3 [ 222.551948][ T7232] loop3: detected capacity change from 0 to 128 [pid 7232] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5827] newfstatat(3, "", [pid 7234] set_robust_list(0x55557eba4660, 24) = 0 [pid 7233] <... set_robust_list resumed>) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(3, [pid 7233] chdir("./281" [pid 5827] getdents64(3, [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7233] <... chdir resumed>) = 0 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5825] close(3 [pid 7233] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5827] umount2("./269/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... close resumed>) = 0 [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7234 [pid 7234] chdir("./276" [pid 7233] <... prctl resumed>) = 0 [pid 7234] <... chdir resumed>) = 0 [pid 5825] rmdir("./273" [pid 7234] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7233] setpgid(0, 0 [pid 5825] <... rmdir resumed>) = 0 [pid 7234] <... prctl resumed>) = 0 [pid 7233] <... setpgid resumed>) = 0 [pid 7234] setpgid(0, 0 [pid 7233] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7234] <... setpgid resumed>) = 0 [pid 5825] mkdir("./274", 0777 [pid 7234] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7233] <... openat resumed>) = 3 [pid 5825] <... mkdir resumed>) = 0 [pid 7233] write(3, "1000", 4) = 4 [pid 7233] close(3) = 0 [pid 7233] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 7233] write(1, "executing program\n", 18 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 7233] <... write resumed>) = 18 [pid 5825] <... ioctl resumed>) = 0 [pid 5825] close(3executing program [pid 7233] memfd_create("syzkaller", 0 [pid 7234] <... openat resumed>) = 3 [pid 5827] <... umount2 resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 7233] <... memfd_create resumed>) = 3 [pid 5827] umount2("./269/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7234] write(3, "1000", 4 [pid 7233] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] newfstatat(AT_FDCWD, "./269/file0", [pid 7234] <... write resumed>) = 4 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7234] close(3 [pid 5827] umount2("./269/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] openat(AT_FDCWD, "./269/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5827] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7233] <... mmap resumed>) = 0x7f957a000000 ./strace-static-x86_64: Process 7235 attached [pid 7234] <... close resumed>) = 0 [pid 7233] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5827] getdents64(4, [pid 7234] symlink("/dev/binderfs", "./binderfs" [pid 7233] <... write resumed>) = 65536 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5827] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 7234] <... symlink resumed>) = 0 [pid 5827] close(4 [pid 7234] write(1, "executing program\n", 18executing program [pid 7235] set_robust_list(0x55557eba4660, 24 [pid 7234] <... write resumed>) = 18 [pid 5827] <... close resumed>) = 0 [pid 7235] <... set_robust_list resumed>) = 0 [pid 7233] munmap(0x7f957a000000, 138412032 [pid 5827] rmdir("./269/file0" [pid 7235] chdir("./274" [pid 7234] memfd_create("syzkaller", 0 [pid 7233] <... munmap resumed>) = 0 [pid 5827] <... rmdir resumed>) = 0 [pid 7235] <... chdir resumed>) = 0 [pid 7232] <... mount resumed>) = 0 [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7235 [pid 7232] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7235] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7234] <... memfd_create resumed>) = 3 [pid 7232] <... openat resumed>) = 3 [pid 7235] <... prctl resumed>) = 0 [pid 7234] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7232] chdir("./file0" [ 222.619045][ T7232] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [pid 7235] setpgid(0, 0 [pid 5827] umount2("./269/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7235] <... setpgid resumed>) = 0 [pid 7234] <... mmap resumed>) = 0x7f957a000000 [pid 7233] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7232] <... chdir resumed>) = 0 [pid 7235] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7234] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7233] <... openat resumed>) = 4 [pid 7232] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7234] <... write resumed>) = 65536 [pid 7232] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5827] newfstatat(AT_FDCWD, "./269/binderfs", [pid 7234] munmap(0x7f957a000000, 138412032 [pid 7232] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] unlink("./269/binderfs" [pid 7234] <... munmap resumed>) = 0 [pid 7232] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5827] <... unlink resumed>) = 0 [pid 5827] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7234] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7233] ioctl(4, LOOP_SET_FD, 3 [pid 7232] <... renameat2 resumed>) = 0 [pid 5827] close(3) = 0 [pid 5827] rmdir("./269" [pid 7234] <... openat resumed>) = 4 [pid 7232] sync( [pid 5827] <... rmdir resumed>) = 0 [pid 7235] <... openat resumed>) = 3 [pid 7235] write(3, "1000", 4) = 4 [pid 7235] close(3 [pid 5827] mkdir("./270", 0777 [pid 7235] <... close resumed>) = 0 [pid 7235] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5827] <... mkdir resumed>) = 0 executing program [pid 7235] write(1, "executing program\n", 18 [pid 7234] ioctl(4, LOOP_SET_FD, 3 [pid 7235] <... write resumed>) = 18 [pid 7235] memfd_create("syzkaller", 0 [pid 7232] <... sync resumed>) = 0 [pid 7232] exit_group(0 [pid 7235] <... memfd_create resumed>) = 3 [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7235] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7232] <... exit_group resumed>) = ? [pid 5827] <... openat resumed>) = 3 [pid 7235] <... mmap resumed>) = 0x7f957a000000 [pid 5827] ioctl(3, LOOP_CLR_FD [pid 7235] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5827] <... ioctl resumed>) = 0 [pid 5827] close(3) = 0 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7232] +++ exited with 0 +++ ./strace-static-x86_64: Process 7236 attached [pid 7235] <... write resumed>) = 65536 [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7232, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7236 [pid 5826] restart_syscall(<... resuming interrupted clone ...> [pid 7236] set_robust_list(0x55557eba4660, 24) = 0 [pid 7235] munmap(0x7f957a000000, 138412032 [pid 7236] chdir("./270" [pid 7235] <... munmap resumed>) = 0 [pid 7236] <... chdir resumed>) = 0 [pid 7235] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7236] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7235] <... openat resumed>) = 4 [pid 7236] <... prctl resumed>) = 0 [pid 7235] ioctl(4, LOOP_SET_FD, 3 [pid 7236] setpgid(0, 0 [pid 5826] <... restart_syscall resumed>) = 0 [pid 7236] <... setpgid resumed>) = 0 [pid 7236] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7233] <... ioctl resumed>) = 0 [pid 7236] <... openat resumed>) = 3 [pid 7233] close(3 [pid 5826] umount2("./280", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7233] <... close resumed>) = 0 [pid 7233] close(4) = 0 [ 222.724360][ T7233] loop0: detected capacity change from 0 to 128 [ 222.724450][ T7234] loop1: detected capacity change from 0 to 128 [ 222.746641][ T7235] loop2: detected capacity change from 0 to 128 [pid 7233] mkdir("./file0", 0777executing program [pid 7236] write(3, "1000", 4 [pid 7233] <... mkdir resumed>) = 0 [pid 5826] openat(AT_FDCWD, "./280", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5826] newfstatat(3, "", [pid 7236] <... write resumed>) = 4 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7236] close(3 [pid 7233] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5826] getdents64(3, [pid 7236] <... close resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 7236] symlink("/dev/binderfs", "./binderfs" [pid 5826] umount2("./280/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7236] <... symlink resumed>) = 0 [pid 7236] write(1, "executing program\n", 18) = 18 [pid 7236] memfd_create("syzkaller", 0) = 3 [pid 5826] <... umount2 resumed>) = 0 [pid 7235] <... ioctl resumed>) = 0 [pid 5826] umount2("./280/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7236] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7235] close(3 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./280/file0", [pid 7235] <... close resumed>) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7236] <... mmap resumed>) = 0x7f957a000000 [pid 7235] close(4 [pid 5826] umount2("./280/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7235] <... close resumed>) = 0 [pid 5826] openat(AT_FDCWD, "./280/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7235] mkdir("./file0", 0777) = 0 [pid 5826] <... openat resumed>) = 4 [pid 7236] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5826] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(4, [pid 7235] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5826] getdents64(4, [pid 7236] <... write resumed>) = 65536 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5826] close(4 [pid 7236] munmap(0x7f957a000000, 138412032 [pid 5826] <... close resumed>) = 0 [pid 7236] <... munmap resumed>) = 0 [pid 5826] rmdir("./280/file0" [pid 7236] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 7236] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 7236] ioctl(4, LOOP_CLR_FD [pid 5826] <... rmdir resumed>) = 0 [pid 7236] <... ioctl resumed>) = 0 [pid 5826] umount2("./280/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./280/binderfs", [pid 7236] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7236] close(4 [pid 5826] unlink("./280/binderfs" [pid 7236] <... close resumed>) = 0 [pid 7236] close(3 [pid 7234] <... ioctl resumed>) = 0 [pid 5826] <... unlink resumed>) = 0 [pid 5826] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] close(3) = 0 [pid 5826] rmdir("./280" [pid 7236] <... close resumed>) = 0 [pid 7234] close(3 [pid 5826] <... rmdir resumed>) = 0 [pid 7234] <... close resumed>) = 0 [pid 5826] mkdir("./281", 0777 [pid 7236] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 7236] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = -1 ENOENT (No such file or directory) [pid 7234] close(4 [pid 5826] <... mkdir resumed>) = 0 [pid 7236] sync( [pid 7234] <... close resumed>) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7234] mkdir("./file0", 0777 [pid 5826] <... openat resumed>) = 3 [pid 7234] <... mkdir resumed>) = 0 [pid 5826] ioctl(3, LOOP_CLR_FD) = 0 [pid 5826] close(3) = 0 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7233] <... mount resumed>) = 0 [pid 7233] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7233] chdir("./file0") = 0 [pid 7233] openat(AT_FDCWD, "/dev/loop0", O_RDWR./strace-static-x86_64: Process 7237 attached ) = -1 EBUSY (Device or resource busy) [pid 7234] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7237] set_robust_list(0x55557eba4660, 24 [pid 7235] <... mount resumed>) = 0 [pid 7235] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7235] chdir("./file0") = 0 [pid 7235] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7235] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7235] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7233] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7237] <... set_robust_list resumed>) = 0 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7237 [pid 7237] chdir("./281" [pid 7233] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7237] <... chdir resumed>) = 0 [pid 7235] <... renameat2 resumed>) = 0 [pid 7237] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7235] sync( [pid 7237] setpgid(0, 0) = 0 [ 222.771734][ T7233] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 222.806702][ T7235] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [pid 7237] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7233] <... renameat2 resumed>) = 0 [pid 7237] <... openat resumed>) = 3 [pid 7233] sync( [pid 7237] write(3, "1000", 4) = 4 [pid 7237] close(3) = 0 [pid 7237] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 7237] write(1, "executing program\n", 18) = 18 [pid 7237] memfd_create("syzkaller", 0) = 3 [pid 7237] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7237] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [ 222.861545][ T7234] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [pid 7237] munmap(0x7f957a000000, 138412032) = 0 [pid 7237] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 7237] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 7234] <... mount resumed>) = 0 [pid 7237] ioctl(4, LOOP_CLR_FD) = 0 [pid 7234] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7234] chdir("./file0") = 0 [pid 7234] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7237] ioctl(4, LOOP_SET_FD, 3 [pid 7234] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7237] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 7234] openat(AT_FDCWD, ".", O_RDONLY [pid 7236] <... sync resumed>) = 0 [pid 7235] <... sync resumed>) = 0 [pid 7233] <... sync resumed>) = 0 [pid 7236] exit_group(0 [pid 7235] exit_group(0 [pid 7236] <... exit_group resumed>) = ? [pid 7235] <... exit_group resumed>) = ? [pid 7236] +++ exited with 0 +++ [pid 7235] +++ exited with 0 +++ [pid 7233] exit_group(0 [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7236, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7235, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5827] restart_syscall(<... resuming interrupted clone ...> [pid 5825] restart_syscall(<... resuming interrupted clone ...> [pid 7233] <... exit_group resumed>) = ? [pid 5827] <... restart_syscall resumed>) = 0 [pid 5825] <... restart_syscall resumed>) = 0 [pid 7237] close(4 [pid 7234] <... openat resumed>) = 4 [pid 5827] umount2("./270", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./274", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7237] <... close resumed>) = 0 [pid 7234] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7237] close(3 [pid 5827] openat(AT_FDCWD, "./270", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] openat(AT_FDCWD, "./274", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7237] <... close resumed>) = 0 [pid 5827] <... openat resumed>) = 3 [pid 5825] <... openat resumed>) = 3 [pid 7237] openat(AT_FDCWD, ".", O_RDONLY [pid 7233] +++ exited with 0 +++ [pid 7234] <... renameat2 resumed>) = 0 [pid 5827] newfstatat(3, "", [pid 5825] newfstatat(3, "", [pid 7237] <... openat resumed>) = 3 [pid 7234] sync( [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7233, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 7237] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = -1 ENOENT (No such file or directory) [pid 7234] <... sync resumed>) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 5825] getdents64(3, [pid 5823] <... restart_syscall resumed>) = 0 [pid 5827] getdents64(3, [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 5825] umount2("./274/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7237] sync( [pid 7234] exit_group(0 [pid 5827] umount2("./270/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] umount2("./281", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7234] <... exit_group resumed>) = ? [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] newfstatat(AT_FDCWD, "./270/binderfs", [pid 5823] openat(AT_FDCWD, "./281", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... openat resumed>) = 3 [pid 5827] unlink("./270/binderfs" [pid 5823] newfstatat(3, "", [pid 7234] +++ exited with 0 +++ [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7234, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5823] getdents64(3, [pid 5824] umount2("./276", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./276", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5824] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(3, [pid 5825] <... umount2 resumed>) = 0 [pid 5825] umount2("./274/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./274/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] umount2("./274/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./274/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5825] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(4, [pid 5827] <... unlink resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5827] getdents64(3, [pid 5824] umount2("./276/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] umount2("./281/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] close(3) = 0 [pid 5827] rmdir("./270" [pid 7237] <... sync resumed>) = 0 [pid 5827] <... rmdir resumed>) = 0 [pid 5827] mkdir("./271", 0777 [pid 7237] exit_group(0 [pid 5827] <... mkdir resumed>) = 0 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] getdents64(4, [pid 7237] <... exit_group resumed>) = ? [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 7237] +++ exited with 0 +++ [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5824] <... umount2 resumed>) = 0 [pid 5823] <... umount2 resumed>) = 0 [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7237, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5825] close(4) = 0 [pid 5827] <... openat resumed>) = 3 [pid 5826] umount2("./281", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] rmdir("./274/file0" [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./281", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] <... rmdir resumed>) = 0 [pid 5823] umount2("./281/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] ioctl(3, LOOP_CLR_FD [pid 5826] <... openat resumed>) = 3 [pid 5826] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(3, [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 5827] close(3 [pid 5826] umount2("./281/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./276/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] newfstatat(AT_FDCWD, "./281/file0", [pid 5827] <... close resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] newfstatat(AT_FDCWD, "./281/binderfs", [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] umount2("./274/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] umount2("./281/file0", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7238 attached [pid 5826] unlink("./281/binderfs" [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... unlink resumed>) = 0 [pid 7238] set_robust_list(0x55557eba4660, 24 [pid 5826] getdents64(3, [pid 7238] <... set_robust_list resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] close(3) = 0 [pid 7238] chdir("./271" [pid 5826] rmdir("./281" [pid 5823] openat(AT_FDCWD, "./281/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7238] <... chdir resumed>) = 0 [pid 5826] <... rmdir resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./276/file0", [pid 5823] <... openat resumed>) = 4 [pid 7238] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5826] mkdir("./282", 0777 [pid 7238] <... prctl resumed>) = 0 [pid 5826] <... mkdir resumed>) = 0 [pid 5825] newfstatat(AT_FDCWD, "./274/binderfs", [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] newfstatat(4, "", [pid 7238] setpgid(0, 0 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] umount2("./276/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7238] <... setpgid resumed>) = 0 [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7238 [pid 5826] <... openat resumed>) = 3 [pid 5825] unlink("./274/binderfs" [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] getdents64(4, [pid 7238] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5826] ioctl(3, LOOP_CLR_FD [pid 5825] <... unlink resumed>) = 0 [pid 5824] openat(AT_FDCWD, "./276/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 7238] <... openat resumed>) = 3 [pid 5826] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5825] getdents64(3, [pid 5824] <... openat resumed>) = 4 [pid 5823] getdents64(4, [pid 7238] write(3, "1000", 4 [pid 5826] close(3 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] newfstatat(4, "", [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 7238] <... write resumed>) = 4 [pid 5826] <... close resumed>) = 0 [pid 5825] close(3 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] close(4 [pid 5825] <... close resumed>) = 0 [pid 5824] getdents64(4, [pid 5823] <... close resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] rmdir("./281/file0" [pid 5825] rmdir("./274" [pid 5824] getdents64(4, [pid 5823] <... rmdir resumed>) = 0 [pid 5825] <... rmdir resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] close(4) = 0 [pid 5824] rmdir("./276/file0") = 0 [pid 5823] umount2("./281/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] mkdir("./275", 0777 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... mkdir resumed>) = 0 [pid 5823] newfstatat(AT_FDCWD, "./281/binderfs", [pid 5824] umount2("./276/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] unlink("./281/binderfs" [pid 5824] newfstatat(AT_FDCWD, "./276/binderfs", [pid 5823] <... unlink resumed>) = 0 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] getdents64(3, [pid 5824] unlink("./276/binderfs" [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5825] <... openat resumed>) = 3 [pid 5824] <... unlink resumed>) = 0 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 5823] close(3 [pid 5825] <... ioctl resumed>) = 0 [pid 5823] <... close resumed>) = 0 [pid 5825] close(3 [pid 5824] getdents64(3, ./strace-static-x86_64: Process 7239 attached [pid 7238] close(3 [pid 5825] <... close resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] rmdir("./281" [pid 7239] set_robust_list(0x55557eba4660, 24 [pid 7238] <... close resumed>) = 0 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7239 [pid 7239] <... set_robust_list resumed>) = 0 [pid 7238] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 7239] chdir("./282" [pid 7238] write(1, "executing program\n", 18 [pid 5824] close(3 [pid 5823] <... rmdir resumed>) = 0 [pid 7239] <... chdir resumed>) = 0 [pid 7238] <... write resumed>) = 18 [pid 5824] <... close resumed>) = 0 [pid 7238] memfd_create("syzkaller", 0 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5824] rmdir("./276" [pid 7238] <... memfd_create resumed>) = 3 [pid 5824] <... rmdir resumed>) = 0 [pid 7238] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 7240 attached [pid 5823] mkdir("./282", 0777 [pid 7240] set_robust_list(0x55557eba4660, 24 [pid 5823] <... mkdir resumed>) = 0 [pid 7240] <... set_robust_list resumed>) = 0 [pid 5824] mkdir("./277", 0777 [pid 7240] chdir("./275" [pid 7239] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7238] <... mmap resumed>) = 0x7f957a000000 [pid 5824] <... mkdir resumed>) = 0 [pid 7239] <... prctl resumed>) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7240] <... chdir resumed>) = 0 [pid 7239] setpgid(0, 0 [pid 7238] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7240 [pid 5823] <... openat resumed>) = 3 [pid 7240] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7239] <... setpgid resumed>) = 0 [pid 7238] <... write resumed>) = 65536 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5823] ioctl(3, LOOP_CLR_FD [pid 7240] <... prctl resumed>) = 0 [pid 7239] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5824] <... openat resumed>) = 3 [pid 7240] setpgid(0, 0 [pid 5823] <... ioctl resumed>) = 0 [pid 7240] <... setpgid resumed>) = 0 [pid 7239] <... openat resumed>) = 3 [pid 7238] munmap(0x7f957a000000, 138412032 [pid 7240] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7239] write(3, "1000", 4 [pid 5824] ioctl(3, LOOP_CLR_FD [pid 7238] <... munmap resumed>) = 0 [pid 5823] close(3 [pid 7239] <... write resumed>) = 4 [pid 7238] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7239] close(3 [pid 7240] <... openat resumed>) = 3 [pid 7239] <... close resumed>) = 0 [pid 7238] <... openat resumed>) = 4 [pid 5824] <... ioctl resumed>) = 0 [pid 5823] <... close resumed>) = 0 [pid 5824] close(3 [pid 7240] write(3, "1000", 4) = 4 [pid 7240] close(3 [pid 7239] symlink("/dev/binderfs", "./binderfs" [pid 7238] ioctl(4, LOOP_SET_FD, 3 [pid 7240] <... close resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 7240] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDexecuting program ./strace-static-x86_64: Process 7241 attached [pid 7240] write(1, "executing program\n", 18 [pid 7239] <... symlink resumed>) = 0 [pid 7238] <... ioctl resumed>) = 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7242 attached [pid 7241] set_robust_list(0x55557eba4660, 24 [pid 7240] <... write resumed>) = 18 executing program [pid 7239] write(1, "executing program\n", 18 [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7241 [pid 7242] set_robust_list(0x55557eba4660, 24 [pid 7241] <... set_robust_list resumed>) = 0 [pid 7240] memfd_create("syzkaller", 0 [pid 7239] <... write resumed>) = 18 [pid 7238] close(3 [pid 7242] <... set_robust_list resumed>) = 0 [pid 7239] memfd_create("syzkaller", 0 [pid 7242] chdir("./277" [pid 7239] <... memfd_create resumed>) = 3 [pid 7242] <... chdir resumed>) = 0 [pid 7241] chdir("./282" [pid 7240] <... memfd_create resumed>) = 3 [pid 7239] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7238] <... close resumed>) = 0 [pid 7242] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7239] <... mmap resumed>) = 0x7f957a000000 [pid 7242] <... prctl resumed>) = 0 [pid 7240] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7238] close(4 [pid 7240] <... mmap resumed>) = 0x7f957a000000 [pid 7239] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7238] <... close resumed>) = 0 [pid 7242] setpgid(0, 0 [pid 7241] <... chdir resumed>) = 0 [pid 7240] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7239] <... write resumed>) = 65536 [pid 7238] mkdir("./file0", 0777 [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7242 [pid 7242] <... setpgid resumed>) = 0 [pid 7241] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7239] munmap(0x7f957a000000, 138412032 [pid 7238] <... mkdir resumed>) = 0 [pid 7242] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7240] <... write resumed>) = 65536 [pid 7239] <... munmap resumed>) = 0 [pid 7242] <... openat resumed>) = 3 [pid 7241] <... prctl resumed>) = 0 [pid 7239] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7242] write(3, "1000", 4 [pid 7241] setpgid(0, 0 [pid 7239] <... openat resumed>) = 4 [pid 7242] <... write resumed>) = 4 [pid 7241] <... setpgid resumed>) = 0 [pid 7239] ioctl(4, LOOP_SET_FD, 3 [pid 7242] close(3 [pid 7241] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7240] munmap(0x7f957a000000, 138412032 [pid 7238] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7240] <... munmap resumed>) = 0 [pid 7241] <... openat resumed>) = 3 [pid 7240] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7241] write(3, "1000", 4 [pid 7240] <... openat resumed>) = 4 [pid 7241] <... write resumed>) = 4 [pid 7240] ioctl(4, LOOP_SET_FD, 3 [pid 7241] close(3 [pid 7240] <... ioctl resumed>) = 0 [pid 7241] <... close resumed>) = 0 [pid 7241] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7240] close(3) = 0 [ 223.120181][ T7238] loop4: detected capacity change from 0 to 128 [ 223.159765][ T7239] loop3: detected capacity change from 0 to 128 executing program [pid 7241] write(1, "executing program\n", 18 [pid 7240] close(4 [pid 7241] <... write resumed>) = 18 [pid 7241] memfd_create("syzkaller", 0 [pid 7240] <... close resumed>) = 0 [pid 7240] mkdir("./file0", 0777 [pid 7242] <... close resumed>) = 0 [pid 7241] <... memfd_create resumed>) = 3 [pid 7242] symlink("/dev/binderfs", "./binderfs" [pid 7241] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7240] <... mkdir resumed>) = 0 [pid 7241] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7240] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7241] <... write resumed>) = 65536 [pid 7241] munmap(0x7f957a000000, 138412032 [pid 7242] <... symlink resumed>) = 0 [pid 7239] <... ioctl resumed>) = 0 executing program [pid 7242] write(1, "executing program\n", 18 [pid 7241] <... munmap resumed>) = 0 [pid 7242] <... write resumed>) = 18 [pid 7242] memfd_create("syzkaller", 0 [pid 7239] close(3 [pid 7238] <... mount resumed>) = 0 [pid 7239] <... close resumed>) = 0 [pid 7239] close(4) = 0 [pid 7242] <... memfd_create resumed>) = 3 [pid 7238] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7239] mkdir("./file0", 0777 [pid 7242] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7239] <... mkdir resumed>) = 0 [pid 7238] <... openat resumed>) = 3 [pid 7239] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7238] chdir("./file0" [pid 7242] <... mmap resumed>) = 0x7f957a000000 [pid 7238] <... chdir resumed>) = 0 [pid 7241] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 223.166559][ T7240] loop2: detected capacity change from 0 to 128 [ 223.183097][ T7238] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 223.194453][ T7240] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [pid 7241] ioctl(4, LOOP_SET_FD, 3 [pid 7242] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7240] <... mount resumed>) = 0 [pid 7238] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7240] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7238] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7240] <... openat resumed>) = 3 [pid 7238] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7238] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7242] <... write resumed>) = 65536 [pid 7240] chdir("./file0" [pid 7238] <... renameat2 resumed>) = 0 [pid 7242] munmap(0x7f957a000000, 138412032 [pid 7240] <... chdir resumed>) = 0 [pid 7238] sync( [pid 7241] <... ioctl resumed>) = 0 [pid 7242] <... munmap resumed>) = 0 [pid 7242] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7240] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7242] <... openat resumed>) = 4 [pid 7240] openat(AT_FDCWD, ".", O_RDONLY [pid 7242] ioctl(4, LOOP_SET_FD, 3 [pid 7240] <... openat resumed>) = 4 [pid 7241] close(3) = 0 [pid 7241] close(4) = 0 [pid 7241] mkdir("./file0", 0777) = 0 [pid 7240] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [ 223.218914][ T7241] loop0: detected capacity change from 0 to 128 [ 223.225551][ T7239] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 223.250931][ T7242] loop1: detected capacity change from 0 to 128 [pid 7241] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7240] <... renameat2 resumed>) = 0 [pid 7240] sync( [pid 7242] <... ioctl resumed>) = 0 [pid 7239] <... mount resumed>) = 0 [ 223.263905][ T7241] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [pid 7239] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7242] close(3 [pid 7239] <... openat resumed>) = 3 [pid 7239] chdir("./file0") = 0 [pid 7241] <... mount resumed>) = 0 [pid 7239] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7242] <... close resumed>) = 0 [pid 7239] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7242] close(4 [pid 7241] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7239] openat(AT_FDCWD, ".", O_RDONLY [pid 7242] <... close resumed>) = 0 [pid 7241] <... openat resumed>) = 3 [pid 7239] <... openat resumed>) = 4 [pid 7242] mkdir("./file0", 0777 [pid 7241] chdir("./file0" [pid 7239] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7241] <... chdir resumed>) = 0 [pid 7241] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7242] <... mkdir resumed>) = 0 [pid 7241] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7239] <... renameat2 resumed>) = 0 [pid 7239] sync( [pid 7241] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7242] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7241] <... renameat2 resumed>) = 0 [pid 7241] sync( [pid 7242] <... mount resumed>) = 0 [pid 7242] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7242] chdir("./file0") = 0 [pid 7242] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7242] openat(AT_FDCWD, ".", O_RDONLY) = 4 [ 223.337107][ T7242] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [pid 7242] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = 0 [pid 7242] sync() = 0 [pid 7241] <... sync resumed>) = 0 [pid 7240] <... sync resumed>) = 0 [pid 7239] <... sync resumed>) = 0 [pid 7238] <... sync resumed>) = 0 [pid 7242] exit_group(0 [pid 7241] exit_group(0 [pid 7240] exit_group(0 [pid 7242] <... exit_group resumed>) = ? [pid 7241] <... exit_group resumed>) = ? [pid 7239] exit_group(0 [pid 7238] exit_group(0 [pid 7242] +++ exited with 0 +++ [pid 7241] +++ exited with 0 +++ [pid 7240] <... exit_group resumed>) = ? [pid 7239] <... exit_group resumed>) = ? [pid 7238] <... exit_group resumed>) = ? [pid 7240] +++ exited with 0 +++ [pid 7239] +++ exited with 0 +++ [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7242, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7241, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 7238] +++ exited with 0 +++ [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7239, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7240, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5823] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7238, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5827] umount2("./271", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./275", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] umount2("./282", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] openat(AT_FDCWD, "./271", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] newfstatat(3, "", [pid 5823] openat(AT_FDCWD, "./282", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] openat(AT_FDCWD, "./275", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] <... openat resumed>) = 3 [pid 5825] <... openat resumed>) = 3 [pid 5823] newfstatat(3, "", [pid 5827] getdents64(3, [pid 5825] newfstatat(3, "", [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(3, [pid 5827] umount2("./271/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] getdents64(3, [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] umount2("./282/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./277", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./275/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./277", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] umount2("./282", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... openat resumed>) = 3 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(3, "", [pid 5826] openat(AT_FDCWD, "./282", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(3, [pid 5826] <... openat resumed>) = 3 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5826] newfstatat(3, "", [pid 5824] umount2("./277/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5826] umount2("./282/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5827] <... umount2 resumed>) = 0 [pid 5825] <... umount2 resumed>) = 0 [pid 5824] <... umount2 resumed>) = 0 [pid 5823] <... umount2 resumed>) = 0 [pid 5825] umount2("./275/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./277/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] umount2("./282/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./275/file0", [pid 5824] newfstatat(AT_FDCWD, "./277/file0", [pid 5826] newfstatat(AT_FDCWD, "./282/file0", [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] umount2("./282/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] umount2("./275/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./277/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./275/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] newfstatat(AT_FDCWD, "./282/file0", [pid 5825] <... openat resumed>) = 4 [pid 5824] openat(AT_FDCWD, "./277/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] umount2("./282/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] newfstatat(4, "", [pid 5824] <... openat resumed>) = 4 [pid 5823] umount2("./282/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] umount2("./271/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] newfstatat(4, "", [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./282/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] getdents64(4, [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] newfstatat(AT_FDCWD, "./271/file0", [pid 5826] <... openat resumed>) = 4 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] getdents64(4, [pid 5823] openat(AT_FDCWD, "./282/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] newfstatat(4, "", [pid 5825] getdents64(4, [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] <... openat resumed>) = 4 [pid 5827] umount2("./271/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] getdents64(4, [pid 5823] newfstatat(4, "", [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] getdents64(4, [pid 5825] close(4 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] openat(AT_FDCWD, "./271/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] <... close resumed>) = 0 [pid 5824] close(4 [pid 5823] getdents64(4, [pid 5827] <... openat resumed>) = 4 [pid 5826] getdents64(4, [pid 5825] rmdir("./275/file0" [pid 5824] <... close resumed>) = 0 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5827] newfstatat(4, "", [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5825] <... rmdir resumed>) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] close(4 [pid 5824] rmdir("./277/file0" [pid 5823] getdents64(4, [pid 5826] <... close resumed>) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5827] getdents64(4, [pid 5826] rmdir("./282/file0" [pid 5823] close(4 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5826] <... rmdir resumed>) = 0 [pid 5824] umount2("./277/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... close resumed>) = 0 [pid 5827] getdents64(4, [pid 5825] umount2("./275/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] rmdir("./282/file0" [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./277/binderfs", [pid 5823] <... rmdir resumed>) = 0 [pid 5827] close(4 [pid 5826] umount2("./282/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] newfstatat(AT_FDCWD, "./275/binderfs", [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] umount2("./282/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... close resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./277/binderfs" [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] rmdir("./271/file0" [pid 5826] newfstatat(AT_FDCWD, "./282/binderfs", [pid 5825] unlink("./275/binderfs" [pid 5824] <... unlink resumed>) = 0 [pid 5823] newfstatat(AT_FDCWD, "./282/binderfs", [pid 5827] <... rmdir resumed>) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... unlink resumed>) = 0 [pid 5824] getdents64(3, [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] umount2("./271/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] unlink("./282/binderfs" [pid 5825] getdents64(3, [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] unlink("./282/binderfs" [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... unlink resumed>) = 0 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] close(3 [pid 5827] newfstatat(AT_FDCWD, "./271/binderfs", [pid 5826] getdents64(3, [pid 5825] close(3 [pid 5824] <... close resumed>) = 0 [pid 5823] <... unlink resumed>) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5825] <... close resumed>) = 0 [pid 5824] rmdir("./277" [pid 5827] unlink("./271/binderfs" [pid 5826] close(3 [pid 5825] rmdir("./275" [pid 5824] <... rmdir resumed>) = 0 [pid 5823] getdents64(3, [pid 5827] <... unlink resumed>) = 0 [pid 5826] <... close resumed>) = 0 [pid 5825] <... rmdir resumed>) = 0 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] rmdir("./282" [pid 5827] getdents64(3, [pid 5826] <... rmdir resumed>) = 0 [pid 5825] mkdir("./276", 0777 [pid 5824] mkdir("./278", 0777 [pid 5823] close(3 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] <... mkdir resumed>) = 0 [pid 5827] close(3 [pid 5826] mkdir("./283", 0777 [pid 5825] <... mkdir resumed>) = 0 [pid 5823] <... close resumed>) = 0 [pid 5827] <... close resumed>) = 0 [pid 5826] <... mkdir resumed>) = 0 [pid 5827] rmdir("./271" [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5823] rmdir("./282" [pid 5827] <... rmdir resumed>) = 0 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5824] <... openat resumed>) = 3 [pid 5823] <... rmdir resumed>) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5824] ioctl(3, LOOP_CLR_FD [pid 5826] <... openat resumed>) = 3 [pid 5824] <... ioctl resumed>) = 0 [pid 5824] close(3) = 0 [pid 5827] mkdir("./272", 0777 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7243 attached [pid 5827] <... mkdir resumed>) = 0 [pid 5826] ioctl(3, LOOP_CLR_FD [pid 5825] <... openat resumed>) = 3 [pid 5823] mkdir("./283", 0777 [pid 7243] set_robust_list(0x55557eba4660, 24 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 5823] <... mkdir resumed>) = 0 [pid 7243] <... set_robust_list resumed>) = 0 [pid 5825] <... ioctl resumed>) = 0 [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5826] <... ioctl resumed>) = 0 [pid 7243] chdir("./278" [pid 5827] <... openat resumed>) = 3 [pid 5826] close(3 [pid 5825] close(3 [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5826] <... close resumed>) = 0 [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7243 [pid 5823] <... openat resumed>) = 3 [pid 5823] ioctl(3, LOOP_CLR_FD [pid 5827] ioctl(3, LOOP_CLR_FD [pid 5823] <... ioctl resumed>) = 0 [pid 5827] <... ioctl resumed>) = 0 [pid 5823] close(3) = 0 [pid 5827] close(3 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7244 attached [pid 5827] <... close resumed>) = 0 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5825] <... close resumed>) = 0 [pid 7243] <... chdir resumed>) = 0 [pid 7243] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7244] set_robust_list(0x55557eba4660, 24) = 0 [pid 7243] <... prctl resumed>) = 0 [pid 7244] chdir("./283") = 0 [pid 7244] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7244] setpgid(0, 0) = 0 [pid 7244] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7243] setpgid(0, 0 [pid 7244] <... openat resumed>) = 3 [pid 7243] <... setpgid resumed>) = 0 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7244 [pid 7243] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7246 attached [pid 7244] write(3, "1000", 4 [pid 7243] <... openat resumed>) = 3 [pid 7244] <... write resumed>) = 4 [pid 7244] close(3) = 0 [pid 7244] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7246] set_robust_list(0x55557eba4660, 24) = 0 ./strace-static-x86_64: Process 7245 attached [pid 7243] write(3, "1000", 4 [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7245 [pid 7243] <... write resumed>) = 4 executing program [pid 7246] chdir("./272" [pid 7245] set_robust_list(0x55557eba4660, 24 [pid 7244] write(1, "executing program\n", 18 [pid 7243] close(3 [pid 7244] <... write resumed>) = 18 [pid 7243] <... close resumed>) = 0 [pid 7245] <... set_robust_list resumed>) = 0 [pid 7244] memfd_create("syzkaller", 0 [pid 7243] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 7247 attached [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7246 [pid 7245] chdir("./276" [pid 7243] <... symlink resumed>) = 0 [pid 7243] write(1, "executing program\n", 18 [pid 7246] <... chdir resumed>) = 0 [pid 7246] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 executing program [pid 7246] setpgid(0, 0 [pid 7244] <... memfd_create resumed>) = 3 [pid 7243] <... write resumed>) = 18 [pid 7247] set_robust_list(0x55557eba4660, 24 [pid 7246] <... setpgid resumed>) = 0 [pid 7245] <... chdir resumed>) = 0 [pid 7244] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7247 [pid 7247] <... set_robust_list resumed>) = 0 [pid 7246] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7245] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7244] <... mmap resumed>) = 0x7f957a000000 [pid 7243] memfd_create("syzkaller", 0 [pid 7246] <... openat resumed>) = 3 [pid 7244] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7245] <... prctl resumed>) = 0 [pid 7243] <... memfd_create resumed>) = 3 [pid 7247] chdir("./283" [pid 7245] setpgid(0, 0 [pid 7243] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7247] <... chdir resumed>) = 0 [pid 7246] write(3, "1000", 4 [pid 7245] <... setpgid resumed>) = 0 [pid 7243] <... mmap resumed>) = 0x7f957a000000 [pid 7246] <... write resumed>) = 4 [pid 7246] close(3 [pid 7245] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7244] <... write resumed>) = 65536 [pid 7246] <... close resumed>) = 0 [pid 7243] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7246] symlink("/dev/binderfs", "./binderfs" [pid 7247] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7246] <... symlink resumed>) = 0 [pid 7247] <... prctl resumed>) = 0 [pid 7244] munmap(0x7f957a000000, 138412032 [pid 7247] setpgid(0, 0 [pid 7246] write(1, "executing program\n", 18 [pid 7245] <... openat resumed>) = 3 [pid 7244] <... munmap resumed>) = 0 executing program [pid 7246] <... write resumed>) = 18 [pid 7247] <... setpgid resumed>) = 0 [pid 7246] memfd_create("syzkaller", 0 [pid 7244] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7247] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7246] <... memfd_create resumed>) = 3 [pid 7244] <... openat resumed>) = 4 [pid 7246] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7245] write(3, "1000", 4 [pid 7244] ioctl(4, LOOP_SET_FD, 3 [pid 7243] <... write resumed>) = 65536 [pid 7246] <... mmap resumed>) = 0x7f957a000000 [pid 7245] <... write resumed>) = 4 [pid 7244] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 7247] <... openat resumed>) = 3 [pid 7245] close(3 [pid 7244] ioctl(4, LOOP_CLR_FD [pid 7245] <... close resumed>) = 0 [pid 7244] <... ioctl resumed>) = 0 [pid 7243] munmap(0x7f957a000000, 138412032 [pid 7246] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7247] write(3, "1000", 4 [pid 7245] symlink("/dev/binderfs", "./binderfs" [pid 7247] <... write resumed>) = 4 [pid 7246] <... write resumed>) = 65536 [pid 7245] <... symlink resumed>) = 0 [pid 7243] <... munmap resumed>) = 0 [pid 7247] close(3) = 0 [pid 7245] write(1, "executing program\n", 18 [pid 7244] ioctl(4, LOOP_SET_FD, 3executing program [pid 7247] symlink("/dev/binderfs", "./binderfs" [pid 7245] <... write resumed>) = 18 [pid 7244] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 7243] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7246] munmap(0x7f957a000000, 138412032 [pid 7244] close(4 [pid 7246] <... munmap resumed>) = 0 [pid 7245] memfd_create("syzkaller", 0 [pid 7244] <... close resumed>) = 0 [pid 7243] <... openat resumed>) = 4 [pid 7244] close(3 [pid 7247] <... symlink resumed>) = 0 [pid 7246] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7244] <... close resumed>) = 0 [pid 7246] <... openat resumed>) = 4 [pid 7246] ioctl(4, LOOP_SET_FD, 3executing program [pid 7247] write(1, "executing program\n", 18 [pid 7245] <... memfd_create resumed>) = 3 [pid 7244] openat(AT_FDCWD, ".", O_RDONLY [pid 7243] ioctl(4, LOOP_SET_FD, 3 [pid 7247] <... write resumed>) = 18 [pid 7245] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7247] memfd_create("syzkaller", 0 [pid 7246] <... ioctl resumed>) = 0 [pid 7245] <... mmap resumed>) = 0x7f957a000000 [pid 7244] <... openat resumed>) = 3 [pid 7243] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 7244] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7243] ioctl(4, LOOP_CLR_FD [pid 7244] <... renameat2 resumed>) = -1 ENOENT (No such file or directory) [pid 7245] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7244] sync( [pid 7243] <... ioctl resumed>) = 0 [pid 7247] <... memfd_create resumed>) = 3 [pid 7245] <... write resumed>) = 65536 [pid 7247] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7246] close(3 [pid 7245] munmap(0x7f957a000000, 138412032 [pid 7247] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7246] <... close resumed>) = 0 [pid 7245] <... munmap resumed>) = 0 [pid 7243] ioctl(4, LOOP_SET_FD, 3 [pid 7245] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7243] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 7246] close(4) = 0 [pid 7243] close(4 [pid 7247] <... write resumed>) = 65536 [pid 7245] <... openat resumed>) = 4 [pid 7247] munmap(0x7f957a000000, 138412032 [pid 7246] mkdir("./file0", 0777 [pid 7245] ioctl(4, LOOP_SET_FD, 3 [pid 7243] <... close resumed>) = 0 [pid 7247] <... munmap resumed>) = 0 [pid 7247] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7246] <... mkdir resumed>) = 0 [pid 7245] <... ioctl resumed>) = 0 [pid 7244] <... sync resumed>) = 0 [pid 7243] close(3) = 0 [pid 7247] <... openat resumed>) = 4 [pid 7246] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7244] exit_group(0 [pid 7243] openat(AT_FDCWD, ".", O_RDONLY [pid 7244] <... exit_group resumed>) = ? [pid 7243] <... openat resumed>) = 3 [pid 7244] +++ exited with 0 +++ [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7244, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5823] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5823] umount2("./283", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./283", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5823] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7243] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5823] getdents64(3, [pid 7247] ioctl(4, LOOP_SET_FD, 3 [ 223.616359][ T7246] loop4: detected capacity change from 0 to 128 [ 223.639654][ T7245] loop2: detected capacity change from 0 to 128 [ 223.652090][ T7246] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [pid 7245] close(3 [pid 7243] <... renameat2 resumed>) = -1 ENOENT (No such file or directory) [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 7245] <... close resumed>) = 0 [pid 7243] sync( [pid 5823] umount2("./283/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7247] <... ioctl resumed>) = 0 [pid 7245] close(4 [pid 5823] newfstatat(AT_FDCWD, "./283/binderfs", [pid 7245] <... close resumed>) = 0 [pid 7245] mkdir("./file0", 0777) = 0 [pid 7245] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7247] close(3 [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./283/binderfs") = 0 [pid 5823] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] close(3) = 0 [pid 5823] rmdir("./283") = 0 [pid 5823] mkdir("./284", 0777) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5823] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5823] close(3) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557eba4650) = 7248 ./strace-static-x86_64: Process 7248 attached [pid 7248] set_robust_list(0x55557eba4660, 24) = 0 [pid 7248] chdir("./284") = 0 [pid 7248] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7248] setpgid(0, 0) = 0 [pid 7248] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7247] <... close resumed>) = 0 [pid 7247] close(4) = 0 [pid 7248] <... openat resumed>) = 3 [pid 7247] mkdir("./file0", 0777 [pid 7248] write(3, "1000", 4) = 4 [pid 7248] close(3) = 0 [pid 7248] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7247] <... mkdir resumed>) = 0 executing program [pid 7247] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7246] <... mount resumed>) = 0 [pid 7248] write(1, "executing program\n", 18) = 18 [ 223.664727][ T7247] loop3: detected capacity change from 0 to 128 [ 223.677372][ T7245] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [pid 7246] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7248] memfd_create("syzkaller", 0 [pid 7246] <... openat resumed>) = 3 [pid 7248] <... memfd_create resumed>) = 3 [pid 7248] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7248] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 7248] munmap(0x7f957a000000, 138412032) = 0 [pid 7248] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7248] ioctl(4, LOOP_SET_FD, 3 [pid 7246] chdir("./file0") = 0 [pid 7246] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7246] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7246] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7245] <... mount resumed>) = 0 [pid 7245] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7245] chdir("./file0") = 0 [pid 7245] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7246] <... renameat2 resumed>) = 0 [pid 7245] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7245] openat(AT_FDCWD, ".", O_RDONLY [pid 7246] sync( [pid 7245] <... openat resumed>) = 4 [pid 7245] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = 0 [pid 7245] sync( [pid 7247] <... mount resumed>) = 0 [pid 7247] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7247] chdir("./file0") = 0 [pid 7247] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7248] <... ioctl resumed>) = 0 [pid 7247] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7247] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7248] close(3 [pid 7247] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7248] <... close resumed>) = 0 [pid 7248] close(4) = 0 [pid 7248] mkdir("./file0", 0777 [pid 7247] <... renameat2 resumed>) = 0 [pid 7247] sync( [pid 7248] <... mkdir resumed>) = 0 [pid 7247] <... sync resumed>) = 0 [pid 7246] <... sync resumed>) = 0 [pid 7245] <... sync resumed>) = 0 [ 223.727041][ T7247] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 223.731006][ T7248] loop0: detected capacity change from 0 to 128 [pid 7243] <... sync resumed>) = 0 [pid 7248] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7247] exit_group(0 [pid 7246] exit_group(0 [pid 7245] exit_group(0 [pid 7243] exit_group(0 [pid 7247] <... exit_group resumed>) = ? [pid 7243] <... exit_group resumed>) = ? [pid 7247] +++ exited with 0 +++ [pid 7243] +++ exited with 0 +++ [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7247, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 7246] <... exit_group resumed>) = ? [pid 7245] <... exit_group resumed>) = ? [pid 7246] +++ exited with 0 +++ [pid 7245] +++ exited with 0 +++ [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7245, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7243, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7246, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5824] umount2("./278", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] restart_syscall(<... resuming interrupted clone ...> [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] umount2("./276", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... restart_syscall resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./278", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] openat(AT_FDCWD, "./276", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5824] <... openat resumed>) = 3 [pid 5825] newfstatat(3, "", [pid 5824] newfstatat(3, "", [pid 5827] umount2("./272", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] getdents64(3, [pid 5824] getdents64(3, [pid 5827] openat(AT_FDCWD, "./272", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 5827] <... openat resumed>) = 3 [pid 5826] umount2("./283", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./276/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./278/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] newfstatat(3, "", [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] openat(AT_FDCWD, "./283", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] newfstatat(AT_FDCWD, "./278/binderfs", [pid 7248] <... mount resumed>) = 0 [pid 5827] getdents64(3, [pid 5826] <... openat resumed>) = 3 [pid 5825] <... umount2 resumed>) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5826] newfstatat(3, "", [pid 5825] umount2("./276/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] unlink("./278/binderfs" [pid 7248] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5827] umount2("./272/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... unlink resumed>) = 0 [pid 7248] <... openat resumed>) = 3 [pid 5827] <... umount2 resumed>) = 0 [pid 5826] getdents64(3, [pid 5825] newfstatat(AT_FDCWD, "./276/file0", [pid 5824] getdents64(3, [pid 5827] umount2("./272/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] umount2("./283/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./276/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] close(3 [pid 7248] chdir("./file0" [pid 5827] newfstatat(AT_FDCWD, "./272/file0", [pid 5826] <... umount2 resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 223.785772][ T7248] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [pid 5824] <... close resumed>) = 0 [pid 7248] <... chdir resumed>) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] umount2("./283/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] openat(AT_FDCWD, "./276/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] rmdir("./278" [pid 7248] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5827] umount2("./272/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... openat resumed>) = 4 [pid 7248] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./283/file0", [pid 5825] newfstatat(4, "", [pid 5824] <... rmdir resumed>) = 0 [pid 7248] openat(AT_FDCWD, ".", O_RDONLY [pid 5827] openat(AT_FDCWD, "./272/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7248] <... openat resumed>) = 4 [pid 5827] <... openat resumed>) = 4 [pid 5826] umount2("./283/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] getdents64(4, [pid 5824] mkdir("./279", 0777 [pid 7248] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5827] newfstatat(4, "", [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] <... mkdir resumed>) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] openat(AT_FDCWD, "./283/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] getdents64(4, [pid 5827] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5826] <... openat resumed>) = 4 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5827] getdents64(4, [pid 5826] newfstatat(4, "", [pid 5825] close(4 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] <... close resumed>) = 0 [pid 5827] close(4 [pid 5826] getdents64(4, [pid 5825] rmdir("./276/file0" [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7248] <... renameat2 resumed>) = 0 [pid 5827] <... close resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] <... rmdir resumed>) = 0 [pid 5827] rmdir("./272/file0" [pid 5826] getdents64(4, [pid 5827] <... rmdir resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5826] close(4) = 0 [pid 7248] sync( [pid 5827] umount2("./272/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] rmdir("./283/file0" [pid 5825] umount2("./276/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... openat resumed>) = 3 [pid 5826] <... rmdir resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] ioctl(3, LOOP_CLR_FD [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5825] newfstatat(AT_FDCWD, "./276/binderfs", [pid 5824] close(3) = 0 [pid 5827] newfstatat(AT_FDCWD, "./272/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7249 attached [pid 5827] unlink("./272/binderfs" [pid 5825] unlink("./276/binderfs" [pid 5826] umount2("./283/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7249] set_robust_list(0x55557eba4660, 24) = 0 [pid 5826] newfstatat(AT_FDCWD, "./283/binderfs", [pid 7249] chdir("./279" [pid 5827] <... unlink resumed>) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... unlink resumed>) = 0 [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7249 [pid 5825] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7249] <... chdir resumed>) = 0 [pid 5825] close(3 [pid 7249] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5825] <... close resumed>) = 0 [pid 7249] <... prctl resumed>) = 0 [pid 5825] rmdir("./276" [pid 7249] setpgid(0, 0 [pid 5826] unlink("./283/binderfs" [pid 5825] <... rmdir resumed>) = 0 [pid 5827] getdents64(3, [pid 7249] <... setpgid resumed>) = 0 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7248] <... sync resumed>) = 0 [pid 5827] close(3 [pid 7249] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7248] exit_group(0 [pid 5827] <... close resumed>) = 0 [pid 7249] <... openat resumed>) = 3 [pid 7248] <... exit_group resumed>) = ? [pid 5827] rmdir("./272" [pid 5826] <... unlink resumed>) = 0 [pid 7249] write(3, "1000", 4 [pid 5826] getdents64(3, [pid 5825] mkdir("./277", 0777 [pid 7249] <... write resumed>) = 4 [pid 5827] <... rmdir resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5825] <... mkdir resumed>) = 0 [pid 7249] close(3 [pid 5827] mkdir("./273", 0777 [pid 5826] close(3 [pid 7249] <... close resumed>) = 0 [pid 5827] <... mkdir resumed>) = 0 [pid 5826] <... close resumed>) = 0 [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7249] symlink("/dev/binderfs", "./binderfs" [pid 7248] +++ exited with 0 +++ [pid 5827] <... openat resumed>) = 3 [pid 5826] rmdir("./283" [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7249] <... symlink resumed>) = 0 [pid 5827] ioctl(3, LOOP_CLR_FD [pid 5826] <... rmdir resumed>) = 0 [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7248, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7249] write(1, "executing program\n", 18executing program [pid 5825] <... openat resumed>) = 3 [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 7249] <... write resumed>) = 18 [pid 5826] mkdir("./284", 0777 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 5827] <... ioctl resumed>) = 0 [pid 5823] <... restart_syscall resumed>) = 0 [pid 5823] umount2("./284", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7249] memfd_create("syzkaller", 0 [pid 5823] openat(AT_FDCWD, "./284", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5823] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] <... ioctl resumed>) = 0 [pid 5823] getdents64(3, [pid 5826] <... mkdir resumed>) = 0 [pid 5825] close(3 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] umount2("./284/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7249] <... memfd_create resumed>) = 3 [pid 5827] close(3 [pid 5825] <... close resumed>) = 0 [pid 7249] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5827] <... close resumed>) = 0 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7249] <... mmap resumed>) = 0x7f957a000000 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5823] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 7250 attached [pid 7249] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5826] <... openat resumed>) = 3 [pid 5826] ioctl(3, LOOP_CLR_FD [pid 7250] set_robust_list(0x55557eba4660, 24 [pid 5826] <... ioctl resumed>) = 0 [pid 5823] umount2("./284/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7250] <... set_robust_list resumed>) = 0 [pid 5826] close(3 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7250] chdir("./277" [pid 7249] <... write resumed>) = 65536 [pid 5826] <... close resumed>) = 0 [pid 5823] newfstatat(AT_FDCWD, "./284/file0", [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7250 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7250] <... chdir resumed>) = 0 [pid 7249] munmap(0x7f957a000000, 138412032 [pid 5823] umount2("./284/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7250] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7249] <... munmap resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7250] <... prctl resumed>) = 0 [pid 5823] openat(AT_FDCWD, "./284/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7250] setpgid(0, 0 [pid 7249] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5823] <... openat resumed>) = 4 [pid 7250] <... setpgid resumed>) = 0 [pid 7249] <... openat resumed>) = 4 [pid 5823] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7250] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5823] getdents64(4, [pid 7249] ioctl(4, LOOP_SET_FD, 3 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 7252 attached ./strace-static-x86_64: Process 7251 attached [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7252 [pid 7252] set_robust_list(0x55557eba4660, 24 [pid 7251] set_robust_list(0x55557eba4660, 24 [pid 7250] <... openat resumed>) = 3 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7251 [pid 7251] <... set_robust_list resumed>) = 0 [pid 7250] write(3, "1000", 4 [pid 5823] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 7251] chdir("./284" [pid 5823] close(4) = 0 [pid 5823] rmdir("./284/file0" [pid 7252] <... set_robust_list resumed>) = 0 [pid 7251] <... chdir resumed>) = 0 [pid 5823] <... rmdir resumed>) = 0 [pid 7250] <... write resumed>) = 4 [pid 7251] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7250] close(3 [pid 7252] chdir("./273" [pid 7251] <... prctl resumed>) = 0 [pid 7252] <... chdir resumed>) = 0 [pid 7251] setpgid(0, 0 [pid 7250] <... close resumed>) = 0 [pid 7252] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7251] <... setpgid resumed>) = 0 [pid 7252] <... prctl resumed>) = 0 [pid 7252] setpgid(0, 0 [pid 7251] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7250] symlink("/dev/binderfs", "./binderfs" [pid 5823] umount2("./284/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7252] <... setpgid resumed>) = 0 [pid 7252] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7251] <... openat resumed>) = 3 [pid 7250] <... symlink resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) executing program [pid 7252] <... openat resumed>) = 3 [pid 7251] write(3, "1000", 4 [pid 7250] write(1, "executing program\n", 18 [pid 5823] newfstatat(AT_FDCWD, "./284/binderfs", [pid 7252] write(3, "1000", 4 [pid 7251] <... write resumed>) = 4 [pid 7252] <... write resumed>) = 4 [pid 7251] close(3 [pid 7252] close(3) = 0 [pid 7251] <... close resumed>) = 0 [pid 7250] <... write resumed>) = 18 [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 executing program [pid 7252] symlink("/dev/binderfs", "./binderfs" [pid 7250] memfd_create("syzkaller", 0 [pid 5823] unlink("./284/binderfs" [pid 7251] symlink("/dev/binderfs", "./binderfs" [pid 7250] <... memfd_create resumed>) = 3 [pid 7252] <... symlink resumed>) = 0 [pid 7251] <... symlink resumed>) = 0 [pid 7250] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5823] <... unlink resumed>) = 0 [pid 7252] write(1, "executing program\n", 18 [pid 7250] <... mmap resumed>) = 0x7f957a000000 [pid 7252] <... write resumed>) = 18 [pid 7251] write(1, "executing program\n", 18 [pid 7250] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 5823] getdents64(3, [pid 7250] munmap(0x7f957a000000, 138412032 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7250] <... munmap resumed>) = 0 [pid 5823] close(3 [pid 7250] openat(AT_FDCWD, "/dev/loop2", O_RDWRexecuting program [pid 5823] <... close resumed>) = 0 [pid 7250] <... openat resumed>) = 4 [pid 5823] rmdir("./284" [pid 7250] ioctl(4, LOOP_SET_FD, 3 [pid 5823] <... rmdir resumed>) = 0 [pid 7252] memfd_create("syzkaller", 0 [pid 7251] <... write resumed>) = 18 [pid 7249] <... ioctl resumed>) = 0 [pid 5823] mkdir("./285", 0777 [pid 7252] <... memfd_create resumed>) = 3 [pid 7251] memfd_create("syzkaller", 0 [pid 7249] close(3 [pid 5823] <... mkdir resumed>) = 0 [pid 7252] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7251] <... memfd_create resumed>) = 3 [pid 7249] <... close resumed>) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7251] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7249] close(4 [pid 7252] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5823] <... openat resumed>) = 3 [pid 7251] <... mmap resumed>) = 0x7f957a000000 [pid 7249] <... close resumed>) = 0 [pid 5823] ioctl(3, LOOP_CLR_FD [pid 7249] mkdir("./file0", 0777 [pid 5823] <... ioctl resumed>) = 0 [pid 7249] <... mkdir resumed>) = 0 [pid 5823] close(3) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7251] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7249] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, ""./strace-static-x86_64: Process 7253 attached [pid 7253] set_robust_list(0x55557eba4660, 24 [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7253 [pid 7253] <... set_robust_list resumed>) = 0 [pid 7251] <... write resumed>) = 65536 [pid 7252] <... write resumed>) = 65536 [pid 7253] chdir("./285" [pid 7252] munmap(0x7f957a000000, 138412032) = 0 [pid 7251] munmap(0x7f957a000000, 138412032 [pid 7253] <... chdir resumed>) = 0 [pid 7253] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 223.951251][ T7249] loop1: detected capacity change from 0 to 128 [ 223.991154][ T7250] loop2: detected capacity change from 0 to 128 [pid 7253] setpgid(0, 0 [pid 7252] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7251] <... munmap resumed>) = 0 [pid 7253] <... setpgid resumed>) = 0 [pid 7252] <... openat resumed>) = 4 [pid 7251] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7253] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7252] ioctl(4, LOOP_SET_FD, 3 [pid 7251] <... openat resumed>) = 4 [pid 7253] <... openat resumed>) = 3 [pid 7253] write(3, "1000", 4 [pid 7251] ioctl(4, LOOP_SET_FD, 3 [pid 7250] <... ioctl resumed>) = 0 [pid 7253] <... write resumed>) = 4 [pid 7250] close(3 [pid 7253] close(3) = 0 [pid 7253] symlink("/dev/binderfs", "./binderfs" [pid 7250] <... close resumed>) = 0 [pid 7253] <... symlink resumed>) = 0 [pid 7250] close(4executing program [pid 7253] write(1, "executing program\n", 18 [pid 7250] <... close resumed>) = 0 [pid 7253] <... write resumed>) = 18 [pid 7250] mkdir("./file0", 0777 [pid 7253] memfd_create("syzkaller", 0 [pid 7250] <... mkdir resumed>) = 0 [pid 7253] <... memfd_create resumed>) = 3 [pid 7250] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7253] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7253] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 7253] munmap(0x7f957a000000, 138412032) = 0 [pid 7253] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 224.021129][ T7252] loop4: detected capacity change from 0 to 128 [ 224.021419][ T7249] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 224.053467][ T7251] loop3: detected capacity change from 0 to 128 [ 224.058454][ T7253] loop0: detected capacity change from 0 to 128 [pid 7253] ioctl(4, LOOP_SET_FD, 3 [pid 7252] <... ioctl resumed>) = 0 [pid 7253] <... ioctl resumed>) = 0 [pid 7252] close(3 [pid 7251] <... ioctl resumed>) = 0 [pid 7252] <... close resumed>) = 0 [pid 7252] close(4) = 0 [pid 7252] mkdir("./file0", 0777 [pid 7253] close(3 [pid 7251] close(3 [pid 7253] <... close resumed>) = 0 [pid 7251] <... close resumed>) = 0 [pid 7252] <... mkdir resumed>) = 0 [pid 7253] close(4 [pid 7251] close(4 [pid 7253] <... close resumed>) = 0 [pid 7252] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7251] <... close resumed>) = 0 [pid 7250] <... mount resumed>) = 0 [pid 7253] mkdir("./file0", 0777 [pid 7251] mkdir("./file0", 0777 [pid 7253] <... mkdir resumed>) = 0 [pid 7251] <... mkdir resumed>) = 0 [pid 7250] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7253] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7251] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7250] <... openat resumed>) = 3 [ 224.067624][ T7250] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 224.102668][ T7252] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [pid 7250] chdir("./file0") = 0 [pid 7249] <... mount resumed>) = 0 [pid 7249] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7250] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7249] <... openat resumed>) = 3 [pid 7250] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7249] chdir("./file0") = 0 [pid 7249] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7250] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7250] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7249] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7249] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7249] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7250] <... renameat2 resumed>) = 0 [pid 7250] sync( [pid 7252] <... mount resumed>) = 0 [pid 7252] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7252] chdir("./file0" [pid 7251] <... mount resumed>) = 0 [ 224.123834][ T7251] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 224.135903][ T7253] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [pid 7252] <... chdir resumed>) = 0 [pid 7251] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7253] <... mount resumed>) = 0 [pid 7252] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7253] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7251] <... openat resumed>) = 3 [pid 7253] <... openat resumed>) = 3 [pid 7253] chdir("./file0" [pid 7252] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7253] <... chdir resumed>) = 0 [pid 7252] openat(AT_FDCWD, ".", O_RDONLY [pid 7253] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7252] <... openat resumed>) = 4 [pid 7253] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7252] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7251] chdir("./file0" [pid 7253] openat(AT_FDCWD, ".", O_RDONLY [pid 7251] <... chdir resumed>) = 0 [pid 7253] <... openat resumed>) = 4 [pid 7251] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7253] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7251] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7252] <... renameat2 resumed>) = 0 [pid 7252] sync( [pid 7251] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7251] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7253] <... renameat2 resumed>) = 0 [pid 7253] sync( [pid 7251] <... renameat2 resumed>) = 0 [ 224.172697][ T7249] UDF-fs: error (device loop1): udf_verify_fi: directory (ino 87) has entry at pos 0 with incorrect tag 10a [pid 7251] sync( [pid 7253] <... sync resumed>) = 0 [pid 7252] <... sync resumed>) = 0 [pid 7250] <... sync resumed>) = 0 [pid 7253] exit_group(0 [pid 7252] exit_group(0 [pid 7253] <... exit_group resumed>) = ? [pid 7253] +++ exited with 0 +++ [pid 7252] <... exit_group resumed>) = ? [pid 7251] <... sync resumed>) = 0 [pid 7252] +++ exited with 0 +++ [pid 7251] exit_group(0 [pid 7250] exit_group(0 [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7253, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7250] <... exit_group resumed>) = ? [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7252, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7251] <... exit_group resumed>) = ? [pid 5827] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 7251] +++ exited with 0 +++ [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7251, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5823] umount2("./285", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] umount2("./273", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] openat(AT_FDCWD, "./273", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5823] openat(AT_FDCWD, "./285", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... openat resumed>) = 3 [pid 5827] getdents64(3, [pid 7250] +++ exited with 0 +++ [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] newfstatat(3, "", [pid 5827] umount2("./273/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7250, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5825] restart_syscall(<... resuming interrupted clone ...> [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 224.225009][ T7249] UDF-fs: error (device loop1): udf_rename: failed to find renamed entry again in directory (ino 87) [pid 5823] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5825] <... restart_syscall resumed>) = 0 [pid 5823] umount2("./285/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./277", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] umount2("./284", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] openat(AT_FDCWD, "./277", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7249] <... renameat2 resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... openat resumed>) = 3 [pid 5823] <... umount2 resumed>) = 0 [pid 7249] sync( [pid 5827] <... umount2 resumed>) = 0 [pid 5826] openat(AT_FDCWD, "./284", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] newfstatat(3, "", [pid 5823] umount2("./285/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] umount2("./273/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./285/file0", [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] getdents64(3, [pid 5823] umount2("./285/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... openat resumed>) = 3 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(3, "", [pid 5825] umount2("./277/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] openat(AT_FDCWD, "./285/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] <... umount2 resumed>) = 0 [pid 5823] <... openat resumed>) = 4 [pid 5826] getdents64(3, [pid 5825] umount2("./277/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] newfstatat(4, "", [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5825] newfstatat(AT_FDCWD, "./277/file0", [pid 5823] getdents64(4, [pid 5827] newfstatat(AT_FDCWD, "./273/file0", [pid 5826] umount2("./284/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] umount2("./277/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5827] umount2("./273/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] getdents64(4, [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./277/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5827] openat(AT_FDCWD, "./273/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] <... openat resumed>) = 4 [pid 5823] close(4 [pid 5827] <... openat resumed>) = 4 [pid 5825] newfstatat(4, "", [pid 5823] <... close resumed>) = 0 [pid 5827] newfstatat(4, "", [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] rmdir("./285/file0" [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] <... umount2 resumed>) = 0 [pid 5825] getdents64(4, [pid 5823] <... rmdir resumed>) = 0 [pid 5827] getdents64(4, [pid 5826] umount2("./284/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] umount2("./285/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] getdents64(4, [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] getdents64(4, [pid 5826] newfstatat(AT_FDCWD, "./284/file0", [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] newfstatat(AT_FDCWD, "./285/binderfs", [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] close(4 [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] close(4 [pid 5826] umount2("./284/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... close resumed>) = 0 [pid 5823] unlink("./285/binderfs" [pid 5827] <... close resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] rmdir("./277/file0" [pid 5823] <... unlink resumed>) = 0 [pid 5827] rmdir("./273/file0" [pid 5826] openat(AT_FDCWD, "./284/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] <... rmdir resumed>) = 0 [pid 5823] getdents64(3, [pid 5827] <... rmdir resumed>) = 0 [pid 5826] <... openat resumed>) = 4 [pid 5825] umount2("./277/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5827] umount2("./273/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] newfstatat(4, "", [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] close(3 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] newfstatat(AT_FDCWD, "./277/binderfs", [pid 5823] <... close resumed>) = 0 [pid 7249] <... sync resumed>) = 0 [pid 5827] newfstatat(AT_FDCWD, "./273/binderfs", [pid 5826] getdents64(4, [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] rmdir("./285" [pid 7249] exit_group(0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7249] <... exit_group resumed>) = ? [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] <... rmdir resumed>) = 0 [pid 5826] getdents64(4, [pid 5823] mkdir("./286", 0777 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] <... mkdir resumed>) = 0 [pid 5826] close(4 [pid 7249] +++ exited with 0 +++ [pid 5826] <... close resumed>) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5826] rmdir("./284/file0" [pid 5825] unlink("./277/binderfs" [pid 5823] <... openat resumed>) = 3 [pid 5827] unlink("./273/binderfs" [pid 5826] <... rmdir resumed>) = 0 [pid 5825] <... unlink resumed>) = 0 [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7249, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5823] ioctl(3, LOOP_CLR_FD [pid 5827] <... unlink resumed>) = 0 [pid 5825] getdents64(3, [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 5823] <... ioctl resumed>) = 0 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] close(3 [pid 5827] getdents64(3, [pid 5825] close(3 [pid 5823] <... close resumed>) = 0 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] umount2("./284/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... close resumed>) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7254 attached [pid 5827] close(3 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] rmdir("./277" [pid 5824] <... restart_syscall resumed>) = 0 [pid 5825] <... rmdir resumed>) = 0 [pid 5827] <... close resumed>) = 0 [pid 5824] umount2("./279", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./279", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] rmdir("./273" [pid 5824] <... openat resumed>) = 3 [pid 5825] mkdir("./278", 0777 [pid 5824] newfstatat(3, "", [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7254 [pid 5827] <... rmdir resumed>) = 0 [pid 5826] newfstatat(AT_FDCWD, "./284/binderfs", [pid 5825] <... mkdir resumed>) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] mkdir("./274", 0777 [pid 7254] set_robust_list(0x55557eba4660, 24 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5824] getdents64(3, [pid 7254] <... set_robust_list resumed>) = 0 [pid 5827] <... mkdir resumed>) = 0 [pid 5826] unlink("./284/binderfs" [pid 5825] <... openat resumed>) = 3 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7254] chdir("./286" [pid 5827] <... openat resumed>) = 3 [pid 5826] <... unlink resumed>) = 0 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 5824] umount2("./279/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7254] <... chdir resumed>) = 0 [pid 5827] ioctl(3, LOOP_CLR_FD [pid 5826] getdents64(3, [pid 5825] <... ioctl resumed>) = 0 [pid 5827] <... ioctl resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5825] close(3 [pid 5827] close(3 [pid 5826] close(3 [pid 5825] <... close resumed>) = 0 [pid 7254] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5827] <... close resumed>) = 0 [pid 5826] <... close resumed>) = 0 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7254] <... prctl resumed>) = 0 [pid 7254] setpgid(0, 0) = 0 [pid 7254] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5826] rmdir("./284"./strace-static-x86_64: Process 7255 attached [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5826] <... rmdir resumed>) = 0 [pid 7254] <... openat resumed>) = 3 [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7255 [pid 7254] write(3, "1000", 4 [pid 5826] mkdir("./285", 0777./strace-static-x86_64: Process 7256 attached [pid 7254] <... write resumed>) = 4 [pid 5826] <... mkdir resumed>) = 0 [pid 7254] close(3 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7254] <... close resumed>) = 0 [pid 5826] <... openat resumed>) = 3 [pid 7254] symlink("/dev/binderfs", "./binderfs" [pid 5826] ioctl(3, LOOP_CLR_FD [pid 7254] <... symlink resumed>) = 0 [pid 5826] <... ioctl resumed>) = 0 [pid 5826] close(3) = 0 executing program [pid 7254] write(1, "executing program\n", 18 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7255] set_robust_list(0x55557eba4660, 24 [pid 7256] set_robust_list(0x55557eba4660, 24 [pid 7255] <... set_robust_list resumed>) = 0 [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7256 [pid 7256] <... set_robust_list resumed>) = 0 [pid 7255] chdir("./278"./strace-static-x86_64: Process 7257 attached [pid 7256] chdir("./274" [pid 7255] <... chdir resumed>) = 0 [pid 7254] <... write resumed>) = 18 [pid 5824] <... umount2 resumed>) = 0 [pid 7257] set_robust_list(0x55557eba4660, 24 [pid 7256] <... chdir resumed>) = 0 [pid 7255] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7254] memfd_create("syzkaller", 0 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7257 [pid 5824] umount2("./279/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7257] <... set_robust_list resumed>) = 0 [pid 7256] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7255] <... prctl resumed>) = 0 [pid 7254] <... memfd_create resumed>) = 3 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7257] chdir("./285" [pid 7256] <... prctl resumed>) = 0 [pid 7255] setpgid(0, 0 [pid 7254] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5824] newfstatat(AT_FDCWD, "./279/file0", [pid 7254] <... mmap resumed>) = 0x7f957a000000 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7257] <... chdir resumed>) = 0 [pid 7254] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5824] umount2("./279/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7257] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7257] <... prctl resumed>) = 0 [pid 5824] openat(AT_FDCWD, "./279/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7257] setpgid(0, 0 [pid 5824] <... openat resumed>) = 4 [pid 7257] <... setpgid resumed>) = 0 [pid 5824] newfstatat(4, "", [pid 7257] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7257] <... openat resumed>) = 3 [pid 5824] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] getdents64(4, [pid 7257] write(3, "1000", 4 [pid 7255] <... setpgid resumed>) = 0 [pid 7254] <... write resumed>) = 65536 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 7256] setpgid(0, 0 [pid 7257] <... write resumed>) = 4 [pid 7256] <... setpgid resumed>) = 0 [pid 7255] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7254] munmap(0x7f957a000000, 138412032 [pid 5824] close(4 [pid 7257] close(3 [pid 7254] <... munmap resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 7257] <... close resumed>) = 0 [pid 7254] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5824] rmdir("./279/file0" [pid 7257] symlink("/dev/binderfs", "./binderfs" [pid 7254] <... openat resumed>) = 4 [pid 5824] <... rmdir resumed>) = 0 [pid 7257] <... symlink resumed>) = 0 [pid 7254] ioctl(4, LOOP_SET_FD, 3 [pid 5824] umount2("./279/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./279/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7256] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7255] <... openat resumed>) = 3 executing program [pid 7257] write(1, "executing program\n", 18 [pid 7256] <... openat resumed>) = 3 [pid 7255] write(3, "1000", 4 [pid 5824] unlink("./279/binderfs" [pid 7257] <... write resumed>) = 18 [pid 7256] write(3, "1000", 4 [pid 7255] <... write resumed>) = 4 [pid 5824] <... unlink resumed>) = 0 [pid 7257] memfd_create("syzkaller", 0 [pid 7256] <... write resumed>) = 4 [pid 7255] close(3 [pid 5824] getdents64(3, [pid 7257] <... memfd_create resumed>) = 3 [pid 7256] close(3 [pid 7255] <... close resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7257] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7256] <... close resumed>) = 0 [pid 7255] symlink("/dev/binderfs", "./binderfs" [pid 5824] close(3 [pid 7257] <... mmap resumed>) = 0x7f957a000000 [pid 7256] symlink("/dev/binderfs", "./binderfs" [pid 5824] <... close resumed>) = 0 [pid 7257] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7256] <... symlink resumed>) = 0 [pid 7255] <... symlink resumed>) = 0 [pid 5824] rmdir("./279" [pid 7257] <... write resumed>) = 65536 [pid 7256] write(1, "executing program\n", 18 [pid 7255] write(1, "executing program\n", 18 [pid 5824] <... rmdir resumed>) = 0 executing program executing program [pid 7257] munmap(0x7f957a000000, 138412032 [pid 5824] mkdir("./280", 0777 [pid 7256] <... write resumed>) = 18 [pid 7255] <... write resumed>) = 18 [pid 7257] <... munmap resumed>) = 0 [pid 7255] memfd_create("syzkaller", 0 [pid 7257] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7256] memfd_create("syzkaller", 0 [pid 5824] <... mkdir resumed>) = 0 [pid 7257] <... openat resumed>) = 4 [pid 7257] ioctl(4, LOOP_SET_FD, 3 [pid 7256] <... memfd_create resumed>) = 3 [pid 7255] <... memfd_create resumed>) = 3 [pid 7256] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7255] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7256] <... mmap resumed>) = 0x7f957a000000 [pid 7255] <... mmap resumed>) = 0x7f957a000000 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 7255] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5824] ioctl(3, LOOP_CLR_FD [pid 7254] <... ioctl resumed>) = 0 [pid 5824] <... ioctl resumed>) = 0 [pid 5824] close(3 [pid 7256] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7255] <... write resumed>) = 65536 [pid 7254] close(3 [pid 5824] <... close resumed>) = 0 [pid 7255] munmap(0x7f957a000000, 138412032 [pid 7254] <... close resumed>) = 0 [pid 7254] close(4) = 0 [pid 7254] mkdir("./file0", 0777) = 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7258 attached [pid 7255] <... munmap resumed>) = 0 [pid 7254] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7256] <... write resumed>) = 65536 [pid 7255] openat(AT_FDCWD, "/dev/loop2", O_RDWR [ 224.418456][ T7254] loop0: detected capacity change from 0 to 128 [ 224.439974][ T7257] loop3: detected capacity change from 0 to 128 [pid 7256] munmap(0x7f957a000000, 138412032 [pid 7255] <... openat resumed>) = 4 [pid 7258] set_robust_list(0x55557eba4660, 24) = 0 [pid 7256] <... munmap resumed>) = 0 [pid 7258] chdir("./280" [pid 7256] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7255] ioctl(4, LOOP_SET_FD, 3 [pid 7258] <... chdir resumed>) = 0 [pid 7256] <... openat resumed>) = 4 [pid 7256] ioctl(4, LOOP_SET_FD, 3 [pid 7258] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7258] setpgid(0, 0 [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7258 [pid 7258] <... setpgid resumed>) = 0 [pid 7258] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXECexecuting program ) = 3 [pid 7257] <... ioctl resumed>) = 0 [pid 7258] write(3, "1000", 4) = 4 [pid 7258] close(3) = 0 [pid 7257] close(3 [pid 7258] symlink("/dev/binderfs", "./binderfs" [pid 7257] <... close resumed>) = 0 [pid 7258] <... symlink resumed>) = 0 [pid 7257] close(4 [pid 7258] write(1, "executing program\n", 18) = 18 [pid 7258] memfd_create("syzkaller", 0) = 3 [pid 7258] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7258] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 7258] munmap(0x7f957a000000, 138412032) = 0 [pid 7258] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 7258] ioctl(4, LOOP_SET_FD, 3 [pid 7257] <... close resumed>) = 0 [pid 7257] mkdir("./file0", 0777) = 0 [pid 7255] <... ioctl resumed>) = 0 [ 224.469163][ T7255] loop2: detected capacity change from 0 to 128 [ 224.471059][ T7254] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 224.476251][ T7256] loop4: detected capacity change from 0 to 128 [ 224.499657][ T7258] loop1: detected capacity change from 0 to 128 [pid 7257] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7258] <... ioctl resumed>) = 0 [pid 7256] <... ioctl resumed>) = 0 [pid 7255] close(3 [pid 7254] <... mount resumed>) = 0 [pid 7258] close(3 [pid 7256] close(3 [pid 7255] <... close resumed>) = 0 [pid 7254] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7258] <... close resumed>) = 0 [pid 7256] <... close resumed>) = 0 [pid 7255] close(4 [pid 7254] <... openat resumed>) = 3 [pid 7258] close(4 [pid 7255] <... close resumed>) = 0 [pid 7254] chdir("./file0" [pid 7258] <... close resumed>) = 0 [pid 7255] mkdir("./file0", 0777 [pid 7254] <... chdir resumed>) = 0 [pid 7258] mkdir("./file0", 0777) = 0 [pid 7256] close(4 [pid 7255] <... mkdir resumed>) = 0 [pid 7254] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7255] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7256] <... close resumed>) = 0 [pid 7258] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7256] mkdir("./file0", 0777 [pid 7254] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7256] <... mkdir resumed>) = 0 [pid 7254] openat(AT_FDCWD, ".", O_RDONLY) = 4 [ 224.519874][ T7257] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 224.555156][ T7255] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [pid 7254] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7256] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7254] <... renameat2 resumed>) = 0 [pid 7257] <... mount resumed>) = 0 [pid 7257] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7257] chdir("./file0" [pid 7254] sync( [pid 7257] <... chdir resumed>) = 0 [pid 7257] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7257] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7257] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = 0 [pid 7257] sync( [pid 7258] <... mount resumed>) = 0 [pid 7258] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7258] chdir("./file0") = 0 [pid 7258] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7258] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7258] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = 0 [pid 7258] sync( [pid 7255] <... mount resumed>) = 0 [pid 7255] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7255] chdir("./file0") = 0 [ 224.572989][ T7258] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 224.598431][ T7256] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [pid 7255] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7256] <... mount resumed>) = 0 [pid 7255] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7255] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7256] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7256] chdir("./file0" [pid 7255] <... renameat2 resumed>) = 0 [pid 7255] sync( [pid 7256] <... chdir resumed>) = 0 [pid 7256] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7256] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7256] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = 0 [pid 7257] <... sync resumed>) = 0 [pid 7254] <... sync resumed>) = 0 [pid 7257] exit_group(0 [pid 7254] exit_group(0) = ? [pid 7258] <... sync resumed>) = 0 [pid 7257] <... exit_group resumed>) = ? [pid 7255] <... sync resumed>) = 0 [pid 7258] exit_group(0 [pid 7256] sync( [pid 7255] exit_group(0 [pid 7254] +++ exited with 0 +++ [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7254, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7257] +++ exited with 0 +++ [pid 7255] <... exit_group resumed>) = ? [pid 5823] umount2("./286", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7258] <... exit_group resumed>) = ? [pid 7255] +++ exited with 0 +++ [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7258] +++ exited with 0 +++ [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7257, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5823] openat(AT_FDCWD, "./286", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] restart_syscall(<... resuming interrupted clone ...> [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7255, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7256] <... sync resumed>) = 0 [pid 5826] <... restart_syscall resumed>) = 0 [pid 5825] restart_syscall(<... resuming interrupted clone ...> [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7258, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5823] <... openat resumed>) = 3 [pid 7256] exit_group(0 [pid 5825] <... restart_syscall resumed>) = 0 [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 7256] <... exit_group resumed>) = ? [pid 5826] umount2("./285", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... restart_syscall resumed>) = 0 [pid 5823] newfstatat(3, "", [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] openat(AT_FDCWD, "./285", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] getdents64(3, [pid 5826] <... openat resumed>) = 3 [pid 5824] umount2("./280", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5826] newfstatat(3, "", [pid 5825] umount2("./278", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] umount2("./286/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./280", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] getdents64(3, [pid 5825] openat(AT_FDCWD, "./278", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] <... openat resumed>) = 3 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5825] <... openat resumed>) = 3 [pid 5824] newfstatat(3, "", [pid 5826] umount2("./285/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] newfstatat(3, "", [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5825] getdents64(3, [pid 5824] umount2("./280/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5825] umount2("./278/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7256] +++ exited with 0 +++ [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7256, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5826] <... umount2 resumed>) = 0 [pid 5824] <... umount2 resumed>) = 0 [pid 5827] restart_syscall(<... resuming interrupted clone ...> [pid 5826] umount2("./285/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./280/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... umount2 resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... umount2 resumed>) = 0 [pid 5826] newfstatat(AT_FDCWD, "./285/file0", [pid 5825] umount2("./278/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] newfstatat(AT_FDCWD, "./280/file0", [pid 5823] umount2("./286/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... restart_syscall resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./278/file0", [pid 5824] umount2("./280/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] newfstatat(AT_FDCWD, "./286/file0", [pid 5827] umount2("./274", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] umount2("./285/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] openat(AT_FDCWD, "./280/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] openat(AT_FDCWD, "./274", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] umount2("./278/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... openat resumed>) = 4 [pid 5823] umount2("./286/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... openat resumed>) = 3 [pid 5826] openat(AT_FDCWD, "./285/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(4, "", [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] newfstatat(3, "", [pid 5826] <... openat resumed>) = 4 [pid 5826] newfstatat(4, "", [pid 5825] openat(AT_FDCWD, "./278/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] openat(AT_FDCWD, "./286/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] <... openat resumed>) = 4 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] getdents64(3, [pid 5826] getdents64(4, [pid 5825] newfstatat(4, "", [pid 5824] getdents64(4, [pid 5823] <... openat resumed>) = 4 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] newfstatat(4, "", [pid 5827] umount2("./274/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] getdents64(4, [pid 5827] <... umount2 resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5825] getdents64(4, [pid 5824] getdents64(4, [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] umount2("./274/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] close(4 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] getdents64(4, [pid 5827] newfstatat(AT_FDCWD, "./274/file0", [pid 5826] <... close resumed>) = 0 [pid 5825] getdents64(4, [pid 5824] close(4 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] rmdir("./285/file0" [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] <... close resumed>) = 0 [pid 5827] umount2("./274/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... rmdir resumed>) = 0 [pid 5825] close(4 [pid 5824] rmdir("./280/file0" [pid 5823] getdents64(4, [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] umount2("./285/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... close resumed>) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5827] openat(AT_FDCWD, "./274/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] rmdir("./278/file0" [pid 5824] umount2("./280/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] close(4 [pid 5827] <... openat resumed>) = 4 [pid 5826] newfstatat(AT_FDCWD, "./285/binderfs", [pid 5825] <... rmdir resumed>) = 0 [pid 5827] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] umount2("./278/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... close resumed>) = 0 [pid 5827] getdents64(4, [pid 5826] unlink("./285/binderfs" [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] rmdir("./286/file0" [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5826] <... unlink resumed>) = 0 [pid 5825] newfstatat(AT_FDCWD, "./278/binderfs", [pid 5827] getdents64(4, [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... rmdir resumed>) = 0 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5826] getdents64(3, [pid 5825] unlink("./278/binderfs" [pid 5827] close(4 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5825] <... unlink resumed>) = 0 [pid 5824] newfstatat(AT_FDCWD, "./280/binderfs", [pid 5827] <... close resumed>) = 0 [pid 5826] close(3 [pid 5825] getdents64(3, [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] umount2("./286/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] rmdir("./274/file0" [pid 5826] <... close resumed>) = 0 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] unlink("./280/binderfs" [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] rmdir("./285" [pid 5825] close(3 [pid 5824] <... unlink resumed>) = 0 [pid 5823] newfstatat(AT_FDCWD, "./286/binderfs", [pid 5827] <... rmdir resumed>) = 0 [pid 5826] <... rmdir resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 5824] getdents64(3, [pid 5827] umount2("./274/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] mkdir("./286", 0777 [pid 5825] rmdir("./278" [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] unlink("./286/binderfs" [pid 5827] newfstatat(AT_FDCWD, "./274/binderfs", [pid 5826] <... mkdir resumed>) = 0 [pid 5825] <... rmdir resumed>) = 0 [pid 5824] close(3 [pid 5823] <... unlink resumed>) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] unlink("./274/binderfs" [pid 5824] <... close resumed>) = 0 [pid 5823] getdents64(3, [pid 5824] rmdir("./280" [pid 5827] <... unlink resumed>) = 0 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5827] getdents64(3, [pid 5824] <... rmdir resumed>) = 0 [pid 5823] close(3 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5827] close(3 [pid 5825] mkdir("./279", 0777 [pid 5823] <... close resumed>) = 0 [pid 5827] <... close resumed>) = 0 [pid 5827] rmdir("./274" [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5825] <... mkdir resumed>) = 0 [pid 5823] rmdir("./286" [pid 5826] <... openat resumed>) = 3 [pid 5824] mkdir("./281", 0777 [pid 5823] <... rmdir resumed>) = 0 [pid 5827] <... rmdir resumed>) = 0 [pid 5826] ioctl(3, LOOP_CLR_FD [pid 5824] <... mkdir resumed>) = 0 [pid 5827] mkdir("./275", 0777 [pid 5826] <... ioctl resumed>) = 0 [pid 5826] close(3 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5823] mkdir("./287", 0777 [pid 5827] <... mkdir resumed>) = 0 [pid 5826] <... close resumed>) = 0 [pid 5825] <... openat resumed>) = 3 [pid 5823] <... mkdir resumed>) = 0 [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5825] ioctl(3, LOOP_CLR_FD [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5827] ioctl(3, LOOP_CLR_FD) = 0 [pid 5825] <... ioctl resumed>) = 0 [pid 5824] <... openat resumed>) = 3 [pid 5827] close(3./strace-static-x86_64: Process 7259 attached ) = 0 [pid 5825] close(3 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5825] <... close resumed>) = 0 [pid 5824] ioctl(3, LOOP_CLR_FD [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5824] <... ioctl resumed>) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR./strace-static-x86_64: Process 7260 attached [pid 7259] set_robust_list(0x55557eba4660, 24 [pid 5824] close(3 [pid 5823] <... openat resumed>) = 3 ./strace-static-x86_64: Process 7261 attached [pid 7260] set_robust_list(0x55557eba4660, 24 [pid 7259] <... set_robust_list resumed>) = 0 [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7260 [pid 5824] <... close resumed>) = 0 [pid 7260] <... set_robust_list resumed>) = 0 [pid 7259] chdir("./286" [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7262 attached [pid 7260] chdir("./275" [pid 5823] ioctl(3, LOOP_CLR_FD [pid 7261] set_robust_list(0x55557eba4660, 24 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7259 [pid 5823] <... ioctl resumed>) = 0 [pid 7261] <... set_robust_list resumed>) = 0 [pid 7259] <... chdir resumed>) = 0 [pid 7262] set_robust_list(0x55557eba4660, 24 [pid 7261] chdir("./279" [pid 7259] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7261 [pid 5823] close(3 [pid 7261] <... chdir resumed>) = 0 [pid 7261] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5823] <... close resumed>) = 0 [pid 7261] <... prctl resumed>) = 0 [pid 7259] <... prctl resumed>) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7262] <... set_robust_list resumed>) = 0 [pid 7261] setpgid(0, 0 [pid 7260] <... chdir resumed>) = 0 [pid 7259] setpgid(0, 0 [pid 7260] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7262] chdir("./281" [pid 7260] setpgid(0, 0 [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7262 [pid 7260] <... setpgid resumed>) = 0 [pid 7262] <... chdir resumed>) = 0 [pid 7261] <... setpgid resumed>) = 0 [pid 7260] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7259] <... setpgid resumed>) = 0 ./strace-static-x86_64: Process 7263 attached [pid 7262] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7259] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7262] <... prctl resumed>) = 0 [pid 7259] <... openat resumed>) = 3 [pid 7262] setpgid(0, 0 [pid 7259] write(3, "1000", 4 [pid 7263] set_robust_list(0x55557eba4660, 24 [pid 7262] <... setpgid resumed>) = 0 [pid 7259] <... write resumed>) = 4 [pid 7263] <... set_robust_list resumed>) = 0 [pid 7262] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7261] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7260] <... openat resumed>) = 3 [pid 7259] close(3 [pid 7263] chdir("./287" [pid 7259] <... close resumed>) = 0 [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7263 [pid 7261] <... openat resumed>) = 3 [pid 7260] write(3, "1000", 4 [pid 7259] symlink("/dev/binderfs", "./binderfs" [pid 7262] <... openat resumed>) = 3 [pid 7260] <... write resumed>) = 4 [pid 7261] write(3, "1000", 4 [pid 7259] <... symlink resumed>) = 0 [pid 7263] <... chdir resumed>) = 0 [pid 7262] write(3, "1000", 4 [pid 7263] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7262] <... write resumed>) = 4 executing program [pid 7263] <... prctl resumed>) = 0 [pid 7262] close(3 [pid 7259] write(1, "executing program\n", 18 [pid 7263] setpgid(0, 0 [pid 7262] <... close resumed>) = 0 [pid 7259] <... write resumed>) = 18 [pid 7263] <... setpgid resumed>) = 0 [pid 7262] symlink("/dev/binderfs", "./binderfs" [pid 7259] memfd_create("syzkaller", 0 [pid 7263] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7262] <... symlink resumed>) = 0 [pid 7259] <... memfd_create resumed>) = 3 executing program [pid 7263] <... openat resumed>) = 3 [pid 7262] write(1, "executing program\n", 18 [pid 7259] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7261] <... write resumed>) = 4 [pid 7260] close(3 [pid 7261] close(3 [pid 7259] <... mmap resumed>) = 0x7f957a000000 [pid 7262] <... write resumed>) = 18 [pid 7259] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7262] memfd_create("syzkaller", 0 [pid 7263] write(3, "1000", 4) = 4 [pid 7263] close(3 [pid 7262] <... memfd_create resumed>) = 3 [pid 7259] <... write resumed>) = 65536 [pid 7263] <... close resumed>) = 0 [pid 7262] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7259] munmap(0x7f957a000000, 138412032 [pid 7263] symlink("/dev/binderfs", "./binderfs" [pid 7262] <... mmap resumed>) = 0x7f957a000000 [pid 7259] <... munmap resumed>) = 0 [pid 7261] <... close resumed>) = 0 [pid 7260] <... close resumed>) = 0 [pid 7263] <... symlink resumed>) = 0 [pid 7261] symlink("/dev/binderfs", "./binderfs" [pid 7260] symlink("/dev/binderfs", "./binderfs"executing program [pid 7262] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7261] <... symlink resumed>) = 0 [pid 7260] <... symlink resumed>) = 0 [pid 7259] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7260] write(1, "executing program\n", 18 [pid 7261] write(1, "executing program\n", 18 [pid 7259] <... openat resumed>) = 4 [pid 7263] write(1, "executing program\n", 18) = 18 [pid 7259] ioctl(4, LOOP_SET_FD, 3 [pid 7263] memfd_create("syzkaller", 0executing program executing program [pid 7259] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 7263] <... memfd_create resumed>) = 3 [pid 7262] <... write resumed>) = 65536 [pid 7263] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7261] <... write resumed>) = 18 [pid 7259] ioctl(4, LOOP_CLR_FD [pid 7260] <... write resumed>) = 18 [pid 7263] <... mmap resumed>) = 0x7f957a000000 [pid 7262] munmap(0x7f957a000000, 138412032 [pid 7261] memfd_create("syzkaller", 0 [pid 7259] <... ioctl resumed>) = 0 [pid 7262] <... munmap resumed>) = 0 [pid 7261] <... memfd_create resumed>) = 3 [pid 7260] memfd_create("syzkaller", 0 [pid 7261] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7263] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7261] <... mmap resumed>) = 0x7f957a000000 [pid 7260] <... memfd_create resumed>) = 3 [pid 7262] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 7263] <... write resumed>) = 65536 [pid 7262] ioctl(4, LOOP_SET_FD, 3 [pid 7261] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7260] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7262] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 7261] <... write resumed>) = 65536 [pid 7260] <... mmap resumed>) = 0x7f957a000000 [pid 7259] ioctl(4, LOOP_SET_FD, 3 [pid 7263] munmap(0x7f957a000000, 138412032 [pid 7261] munmap(0x7f957a000000, 138412032 [pid 7260] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7263] <... munmap resumed>) = 0 [pid 7260] <... write resumed>) = 65536 [pid 7263] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7261] <... munmap resumed>) = 0 [pid 7259] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 7262] ioctl(4, LOOP_CLR_FD [pid 7259] close(4 [pid 7262] <... ioctl resumed>) = 0 [pid 7259] <... close resumed>) = 0 [pid 7261] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7260] munmap(0x7f957a000000, 138412032 [pid 7259] close(3 [pid 7263] <... openat resumed>) = 4 [pid 7261] <... openat resumed>) = 4 [pid 7259] <... close resumed>) = 0 [pid 7263] ioctl(4, LOOP_SET_FD, 3 [pid 7261] ioctl(4, LOOP_SET_FD, 3 [pid 7260] <... munmap resumed>) = 0 [pid 7259] openat(AT_FDCWD, ".", O_RDONLY [pid 7261] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 7260] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7259] <... openat resumed>) = 3 [pid 7262] ioctl(4, LOOP_SET_FD, 3 [pid 7261] ioctl(4, LOOP_CLR_FD [pid 7262] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 7261] <... ioctl resumed>) = 0 [pid 7259] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = -1 ENOENT (No such file or directory) [pid 7259] sync( [pid 7262] close(4 [pid 7260] <... openat resumed>) = 4 [pid 7262] <... close resumed>) = 0 [pid 7262] close(3) = 0 [pid 7260] ioctl(4, LOOP_SET_FD, 3 [pid 7262] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 7262] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = -1 ENOENT (No such file or directory) [pid 7262] sync( [pid 7263] <... ioctl resumed>) = 0 [pid 7263] close(3) = 0 [pid 7263] close(4) = 0 [pid 7263] mkdir("./file0", 0777) = 0 [pid 7261] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 7263] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7261] close(4) = 0 [pid 7261] close(3) = 0 [pid 7260] <... ioctl resumed>) = 0 [pid 7260] close(3 [pid 7261] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 7260] <... close resumed>) = 0 [pid 7261] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7260] close(4) = 0 [pid 7260] mkdir("./file0", 0777) = 0 [pid 7261] <... renameat2 resumed>) = -1 ENOENT (No such file or directory) [pid 7261] sync( [ 224.927934][ T7263] loop0: detected capacity change from 0 to 128 [ 224.947543][ T7260] loop4: detected capacity change from 0 to 128 [ 224.960507][ T7263] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [pid 7260] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7263] <... mount resumed>) = 0 [pid 7263] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7263] chdir("./file0") = 0 [pid 7262] <... sync resumed>) = 0 [pid 7259] <... sync resumed>) = 0 [pid 7263] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7262] exit_group(0 [pid 7260] <... mount resumed>) = 0 [pid 7259] exit_group(0 [pid 7262] <... exit_group resumed>) = ? [pid 7260] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7259] <... exit_group resumed>) = ? [pid 7263] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7263] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7263] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7260] <... openat resumed>) = 3 [pid 7259] +++ exited with 0 +++ [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7259, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 7260] chdir("./file0") = 0 [pid 7262] +++ exited with 0 +++ [ 225.011637][ T7260] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [pid 7260] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5826] umount2("./286", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7263] <... renameat2 resumed>) = 0 [pid 7261] <... sync resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7261] exit_group(0 [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7262, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5826] openat(AT_FDCWD, "./286", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7261] <... exit_group resumed>) = ? [pid 7260] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5824] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 7260] openat(AT_FDCWD, ".", O_RDONLY [pid 7263] sync( [pid 5826] <... openat resumed>) = 3 [pid 5824] umount2("./281", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7261] +++ exited with 0 +++ [pid 5826] newfstatat(3, "", [pid 7260] <... openat resumed>) = 4 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7260] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] openat(AT_FDCWD, "./281", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] getdents64(3, [pid 5824] <... openat resumed>) = 3 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7261, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5824] newfstatat(3, "", [pid 5826] umount2("./286/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] restart_syscall(<... resuming interrupted clone ...> [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7260] <... renameat2 resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] getdents64(3, [pid 5826] newfstatat(AT_FDCWD, "./286/binderfs", [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 5824] umount2("./281/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... restart_syscall resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7260] sync( [pid 5826] unlink("./286/binderfs" [pid 5824] newfstatat(AT_FDCWD, "./281/binderfs", [pid 7263] <... sync resumed>) = 0 [pid 5826] <... unlink resumed>) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7263] exit_group(0 [pid 5826] getdents64(3, [pid 5825] umount2("./279", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] unlink("./281/binderfs" [pid 7263] <... exit_group resumed>) = ? [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./279", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7263] +++ exited with 0 +++ [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5825] <... openat resumed>) = 3 [pid 5824] <... unlink resumed>) = 0 [pid 5824] getdents64(3, [pid 5826] close(3 [pid 5825] newfstatat(3, "", [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7263, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5826] <... close resumed>) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] close(3 [pid 5826] rmdir("./286" [pid 5825] getdents64(3, [pid 5824] <... close resumed>) = 0 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 5824] rmdir("./281" [pid 5823] umount2("./287", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./279/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... rmdir resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7260] <... sync resumed>) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 5823] openat(AT_FDCWD, "./287", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7260] exit_group(0 [pid 5826] mkdir("./287", 0777 [pid 5825] newfstatat(AT_FDCWD, "./279/binderfs", [pid 5824] mkdir("./282", 0777 [pid 5823] <... openat resumed>) = 3 [pid 7260] <... exit_group resumed>) = ? [pid 5826] <... mkdir resumed>) = 0 [pid 5823] newfstatat(3, "", [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] <... openat resumed>) = 3 [pid 5825] unlink("./279/binderfs" [pid 5824] <... mkdir resumed>) = 0 [pid 5823] getdents64(3, [pid 7260] +++ exited with 0 +++ [pid 5826] ioctl(3, LOOP_CLR_FD [pid 5825] <... unlink resumed>) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5825] getdents64(3, [pid 5824] <... openat resumed>) = 3 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7260, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5824] ioctl(3, LOOP_CLR_FD [pid 5827] umount2("./275", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5823] umount2("./287/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] openat(AT_FDCWD, "./275", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] close(3 [pid 5825] close(3 [pid 5824] close(3 [pid 5823] <... umount2 resumed>) = 0 [pid 5826] <... close resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 5823] umount2("./287/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5825] rmdir("./279" [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... rmdir resumed>) = 0 [pid 5823] newfstatat(AT_FDCWD, "./287/file0", ./strace-static-x86_64: Process 7264 attached [pid 5827] <... openat resumed>) = 3 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] newfstatat(3, "", [pid 5823] umount2("./287/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./287/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5823] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] mkdir("./280", 0777 [pid 5823] getdents64(4, ./strace-static-x86_64: Process 7265 attached [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7265 [pid 5827] getdents64(3, [pid 5825] <... mkdir resumed>) = 0 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] getdents64(4, [pid 7265] set_robust_list(0x55557eba4660, 24 [pid 7264] set_robust_list(0x55557eba4660, 24 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7264 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 7264] <... set_robust_list resumed>) = 0 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5823] close(4 [pid 7264] chdir("./287" [pid 5825] <... openat resumed>) = 3 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 5823] <... close resumed>) = 0 [pid 7264] <... chdir resumed>) = 0 [pid 5825] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5823] rmdir("./287/file0" [pid 7265] <... set_robust_list resumed>) = 0 [pid 5827] umount2("./275/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... rmdir resumed>) = 0 [pid 7264] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5825] close(3 [pid 7264] setpgid(0, 0 [pid 7265] chdir("./282" [pid 7264] <... setpgid resumed>) = 0 [pid 7264] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5825] <... close resumed>) = 0 [pid 7264] <... openat resumed>) = 3 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5823] umount2("./287/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7266 attached [pid 7265] <... chdir resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7265] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5823] newfstatat(AT_FDCWD, "./287/binderfs", [pid 7264] write(3, "1000", 4 [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7264] <... write resumed>) = 4 [pid 5827] <... umount2 resumed>) = 0 [pid 7266] set_robust_list(0x55557eba4660, 24 [pid 7264] close(3 [pid 5823] unlink("./287/binderfs" [pid 7266] <... set_robust_list resumed>) = 0 [pid 7264] <... close resumed>) = 0 [pid 5823] <... unlink resumed>) = 0 [pid 7266] chdir("./280" [pid 7264] symlink("/dev/binderfs", "./binderfs" [pid 5827] umount2("./275/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7266 [pid 5823] getdents64(3, [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7264] <... symlink resumed>) = 0 [pid 5827] newfstatat(AT_FDCWD, "./275/file0", [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] umount2("./275/file0", MNT_FORCE|UMOUNT_NOFOLLOWexecuting program [pid 7266] <... chdir resumed>) = 0 [pid 7264] write(1, "executing program\n", 18 [pid 5823] close(3 [pid 7265] setpgid(0, 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7265] <... setpgid resumed>) = 0 [pid 5827] openat(AT_FDCWD, "./275/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7266] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7265] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7264] <... write resumed>) = 18 [pid 5827] <... openat resumed>) = 4 [pid 5823] <... close resumed>) = 0 [pid 7266] <... prctl resumed>) = 0 [pid 7265] <... openat resumed>) = 3 [pid 7264] memfd_create("syzkaller", 0 [pid 5827] newfstatat(4, "", [pid 7266] setpgid(0, 0) = 0 [pid 7265] write(3, "1000", 4 [pid 7264] <... memfd_create resumed>) = 3 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] rmdir("./287" [pid 7266] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7264] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5827] getdents64(4, [pid 5823] <... rmdir resumed>) = 0 [pid 7266] <... openat resumed>) = 3 [pid 7264] <... mmap resumed>) = 0x7f957a000000 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 7266] write(3, "1000", 4 [pid 7265] <... write resumed>) = 4 [pid 7266] <... write resumed>) = 4 [pid 7265] close(3 [pid 7264] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5827] getdents64(4, [pid 5823] mkdir("./288", 0777 [pid 7266] close(3 [pid 7265] <... close resumed>) = 0 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 7266] <... close resumed>) = 0 [pid 7265] symlink("/dev/binderfs", "./binderfs" [pid 5827] close(4 [pid 5823] <... mkdir resumed>) = 0 [pid 7264] <... write resumed>) = 65536 [pid 7266] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5827] <... close resumed>) = 0 executing program [pid 5827] rmdir("./275/file0" [pid 7266] write(1, "executing program\n", 18 [pid 7265] <... symlink resumed>) = 0 [pid 7264] munmap(0x7f957a000000, 138412032executing program [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7266] <... write resumed>) = 18 [pid 7265] write(1, "executing program\n", 18) = 18 [pid 7264] <... munmap resumed>) = 0 [pid 5823] <... openat resumed>) = 3 [pid 7266] memfd_create("syzkaller", 0) = 3 [pid 7265] memfd_create("syzkaller", 0 [pid 7264] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5823] ioctl(3, LOOP_CLR_FD [pid 7266] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7264] <... openat resumed>) = 4 [pid 5823] <... ioctl resumed>) = 0 [pid 5827] <... rmdir resumed>) = 0 [pid 7266] <... mmap resumed>) = 0x7f957a000000 [pid 7265] <... memfd_create resumed>) = 3 [pid 7264] ioctl(4, LOOP_SET_FD, 3 [pid 5827] umount2("./275/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] close(3 [pid 7265] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... close resumed>) = 0 [pid 7266] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7265] <... mmap resumed>) = 0x7f957a000000 [pid 5827] newfstatat(AT_FDCWD, "./275/binderfs", [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7267 attached [pid 7265] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7265] <... write resumed>) = 65536 [pid 5827] unlink("./275/binderfs" [pid 7265] munmap(0x7f957a000000, 138412032 [pid 7267] set_robust_list(0x55557eba4660, 24 [pid 7266] <... write resumed>) = 65536 [pid 7265] <... munmap resumed>) = 0 [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7267 [pid 7267] <... set_robust_list resumed>) = 0 [pid 7265] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7264] <... ioctl resumed>) = 0 [pid 5827] <... unlink resumed>) = 0 [pid 7267] chdir("./288" [pid 5827] getdents64(3, [pid 7265] <... openat resumed>) = 4 [pid 7264] close(3 [pid 7267] <... chdir resumed>) = 0 [pid 7266] munmap(0x7f957a000000, 138412032 [pid 7265] ioctl(4, LOOP_SET_FD, 3 [pid 7264] <... close resumed>) = 0 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7267] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7266] <... munmap resumed>) = 0 [pid 7264] close(4 [pid 5827] close(3 [pid 7266] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 7266] ioctl(4, LOOP_SET_FD, 3 [pid 7267] setpgid(0, 0 [pid 7264] <... close resumed>) = 0 [pid 5827] <... close resumed>) = 0 [pid 7267] <... setpgid resumed>) = 0 [pid 7264] mkdir("./file0", 0777 [pid 5827] rmdir("./275" [pid 7264] <... mkdir resumed>) = 0 [pid 5827] <... rmdir resumed>) = 0 [pid 7267] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5827] mkdir("./276", 0777 [pid 7267] <... openat resumed>) = 3 [pid 7265] <... ioctl resumed>) = 0 [pid 7264] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5827] <... mkdir resumed>) = 0 [pid 7267] write(3, "1000", 4 [pid 7265] close(3 [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7267] <... write resumed>) = 4 [pid 7265] <... close resumed>) = 0 [pid 7267] close(3 [pid 7265] close(4 [pid 7267] <... close resumed>) = 0 [pid 7267] symlink("/dev/binderfs", "./binderfs" [pid 7265] <... close resumed>) = 0 [pid 5827] <... openat resumed>) = 3 [ 225.196068][ T7264] loop3: detected capacity change from 0 to 128 [ 225.216273][ T7265] loop1: detected capacity change from 0 to 128 [ 225.219385][ T7266] loop2: detected capacity change from 0 to 128 [pid 7267] <... symlink resumed>) = 0 [pid 7265] mkdir("./file0", 0777 [pid 5827] ioctl(3, LOOP_CLR_FD) = 0 [pid 5827] close(3 [pid 7267] write(1, "executing program\n", 18 [pid 7266] <... ioctl resumed>) = 0 [pid 7265] <... mkdir resumed>) = 0 [pid 7266] close(3) = 0 [pid 7266] close(4) = 0 executing program [pid 7266] mkdir("./file0", 0777 [pid 7267] <... write resumed>) = 18 [pid 7267] memfd_create("syzkaller", 0 [pid 7266] <... mkdir resumed>) = 0 [pid 7265] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5827] <... close resumed>) = 0 [ 225.248706][ T7264] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 225.288553][ T7266] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [pid 7266] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7267] <... memfd_create resumed>) = 3 [pid 7267] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7267] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7264] <... mount resumed>) = 0 [pid 7264] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY./strace-static-x86_64: Process 7268 attached [pid 7267] <... write resumed>) = 65536 [pid 7264] <... openat resumed>) = 3 [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7268 [pid 7264] chdir("./file0") = 0 [pid 7264] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7267] munmap(0x7f957a000000, 138412032 [pid 7268] set_robust_list(0x55557eba4660, 24 [pid 7264] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7264] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7264] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7268] <... set_robust_list resumed>) = 0 [pid 7267] <... munmap resumed>) = 0 [pid 7268] chdir("./276" [pid 7267] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7264] <... renameat2 resumed>) = 0 [pid 7267] <... openat resumed>) = 4 [pid 7268] <... chdir resumed>) = 0 [pid 7267] ioctl(4, LOOP_SET_FD, 3 [pid 7264] sync( [pid 7268] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7266] <... mount resumed>) = 0 [pid 7268] <... prctl resumed>) = 0 [pid 7267] <... ioctl resumed>) = 0 [pid 7266] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7267] close(3 [pid 7268] setpgid(0, 0 [pid 7266] chdir("./file0") = 0 [pid 7266] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7268] <... setpgid resumed>) = 0 [pid 7267] <... close resumed>) = 0 [pid 7266] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7268] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7267] close(4 [pid 7266] openat(AT_FDCWD, ".", O_RDONLY [pid 7268] <... openat resumed>) = 3 [pid 7267] <... close resumed>) = 0 [pid 7266] <... openat resumed>) = 4 [pid 7268] write(3, "1000", 4 [pid 7267] mkdir("./file0", 0777 [pid 7268] <... write resumed>) = 4 [pid 7268] close(3 [pid 7266] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7268] <... close resumed>) = 0 [pid 7267] <... mkdir resumed>) = 0 [pid 7268] symlink("/dev/binderfs", "./binderfs" [pid 7267] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7268] <... symlink resumed>) = 0 [pid 7268] write(1, "executing program\n", 18 [pid 7266] <... renameat2 resumed>) = 0 [pid 7265] <... mount resumed>) = 0 [pid 7265] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY executing program [ 225.289292][ T7265] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 225.332818][ T7267] loop0: detected capacity change from 0 to 128 [pid 7266] sync( [pid 7268] <... write resumed>) = 18 [pid 7265] <... openat resumed>) = 3 [pid 7268] memfd_create("syzkaller", 0 [pid 7265] chdir("./file0" [pid 7268] <... memfd_create resumed>) = 3 [pid 7265] <... chdir resumed>) = 0 [pid 7268] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7265] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7268] <... mmap resumed>) = 0x7f957a000000 [pid 7265] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7268] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7265] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7265] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = 0 [pid 7267] <... mount resumed>) = 0 [pid 7265] sync( [pid 7268] <... write resumed>) = 65536 [pid 7267] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 225.380550][ T7267] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [pid 7267] chdir("./file0" [pid 7268] munmap(0x7f957a000000, 138412032 [pid 7267] <... chdir resumed>) = 0 [pid 7268] <... munmap resumed>) = 0 [pid 7267] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7266] <... sync resumed>) = 0 [pid 7265] <... sync resumed>) = 0 [pid 7264] <... sync resumed>) = 0 [pid 7268] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7267] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7266] exit_group(0 [pid 7265] exit_group(0 [pid 7264] exit_group(0 [pid 7268] <... openat resumed>) = 4 [pid 7267] openat(AT_FDCWD, ".", O_RDONLY [pid 7265] <... exit_group resumed>) = ? [pid 7264] <... exit_group resumed>) = ? [pid 7268] ioctl(4, LOOP_SET_FD, 3 [pid 7267] <... openat resumed>) = 4 [pid 7266] <... exit_group resumed>) = ? [pid 7265] +++ exited with 0 +++ [pid 7264] +++ exited with 0 +++ [pid 7267] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7266] +++ exited with 0 +++ [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7264, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7266, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5826] restart_syscall(<... resuming interrupted clone ...> [pid 5825] restart_syscall(<... resuming interrupted clone ...> [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7265, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 7267] <... renameat2 resumed>) = 0 [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 7267] sync( [pid 5826] <... restart_syscall resumed>) = 0 [pid 5825] <... restart_syscall resumed>) = 0 [pid 5826] umount2("./287", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] umount2("./280", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] openat(AT_FDCWD, "./287", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... openat resumed>) = 3 [pid 5825] openat(AT_FDCWD, "./280", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] newfstatat(3, "", [pid 5825] <... openat resumed>) = 3 [pid 5824] <... restart_syscall resumed>) = 0 [pid 7267] <... sync resumed>) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] newfstatat(3, "", [pid 7268] <... ioctl resumed>) = 0 [pid 7268] close(3 [pid 7267] exit_group(0 [pid 5826] getdents64(3, [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] umount2("./282", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7268] <... close resumed>) = 0 [pid 7267] <... exit_group resumed>) = ? [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5825] getdents64(3, [pid 7268] close(4 [pid 5826] umount2("./287/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7268] <... close resumed>) = 0 [pid 5825] umount2("./280/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] openat(AT_FDCWD, "./282", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7268] mkdir("./file0", 0777 [pid 7267] +++ exited with 0 +++ [pid 5824] <... openat resumed>) = 3 [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7267, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [ 225.472997][ T7268] loop4: detected capacity change from 0 to 128 [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 7268] <... mkdir resumed>) = 0 [pid 5826] <... umount2 resumed>) = 0 [pid 5824] newfstatat(3, "", [pid 7268] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5826] umount2("./287/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] newfstatat(AT_FDCWD, "./287/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] getdents64(3, [pid 5823] <... restart_syscall resumed>) = 0 [pid 5826] umount2("./287/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5826] openat(AT_FDCWD, "./287/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] umount2("./288", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... openat resumed>) = 4 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(4, "", [pid 5823] openat(AT_FDCWD, "./288", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... openat resumed>) = 3 [pid 5826] getdents64(4, [pid 5823] newfstatat(3, "", [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(4, [pid 5823] getdents64(3, [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5826] close(4 [pid 5823] umount2("./288/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... close resumed>) = 0 [pid 5824] umount2("./282/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] rmdir("./287/file0" [pid 5825] <... umount2 resumed>) = 0 [pid 5826] <... rmdir resumed>) = 0 [pid 5825] umount2("./280/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./280/file0", [pid 5826] umount2("./287/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] umount2("./280/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] newfstatat(AT_FDCWD, "./287/binderfs", [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] openat(AT_FDCWD, "./280/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] unlink("./287/binderfs" [pid 5825] <... openat resumed>) = 4 [pid 5825] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5825] close(4) = 0 [pid 5825] rmdir("./280/file0") = 0 [pid 5825] umount2("./280/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... unlink resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./280/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] getdents64(3, [pid 5825] unlink("./280/binderfs" [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5825] <... unlink resumed>) = 0 [pid 5826] close(3 [pid 5825] getdents64(3, [pid 5826] <... close resumed>) = 0 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] <... umount2 resumed>) = 0 [pid 5826] rmdir("./287" [pid 5825] close(3 [pid 5823] umount2("./288/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... rmdir resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] rmdir("./280" [pid 5823] newfstatat(AT_FDCWD, "./288/file0", [pid 5825] <... rmdir resumed>) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] mkdir("./288", 0777 [pid 5825] mkdir("./281", 0777 [pid 5823] umount2("./288/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... mkdir resumed>) = 0 [pid 5825] <... mkdir resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7268] <... mount resumed>) = 0 [pid 5823] openat(AT_FDCWD, "./288/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5823] newfstatat(4, "", [pid 7268] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5826] <... openat resumed>) = 3 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7268] chdir("./file0" [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5824] <... umount2 resumed>) = 0 [pid 5823] getdents64(4, [pid 7268] <... chdir resumed>) = 0 [pid 5824] umount2("./282/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7268] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 225.544261][ T7268] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [pid 7268] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5826] ioctl(3, LOOP_CLR_FD [pid 5824] newfstatat(AT_FDCWD, "./282/file0", [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 7268] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 5826] <... ioctl resumed>) = 0 [pid 5825] <... openat resumed>) = 3 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] getdents64(4, [pid 5826] close(3 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 7268] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5824] umount2("./282/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... close resumed>) = 0 [pid 5825] <... ioctl resumed>) = 0 [pid 5823] close(4 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5825] close(3 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... close resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 5824] openat(AT_FDCWD, "./282/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] rmdir("./288/file0"./strace-static-x86_64: Process 7269 attached [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5824] <... openat resumed>) = 4 [pid 5823] <... rmdir resumed>) = 0 [pid 5824] newfstatat(4, "", [pid 7268] <... renameat2 resumed>) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] umount2("./288/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7268] sync( [pid 5824] getdents64(4, [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 7270 attached [pid 7269] set_robust_list(0x55557eba4660, 24 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] newfstatat(AT_FDCWD, "./288/binderfs", [pid 5824] getdents64(4, [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7269 [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7270 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] close(4 [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... close resumed>) = 0 [pid 7269] <... set_robust_list resumed>) = 0 [pid 5824] rmdir("./282/file0" [pid 5823] unlink("./288/binderfs" [pid 7269] chdir("./288" [pid 5823] <... unlink resumed>) = 0 [pid 7269] <... chdir resumed>) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 5823] getdents64(3, [pid 5824] umount2("./282/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7269] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7269] <... prctl resumed>) = 0 [pid 5823] close(3 [pid 5824] newfstatat(AT_FDCWD, "./282/binderfs", [pid 7269] setpgid(0, 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... close resumed>) = 0 [pid 7269] <... setpgid resumed>) = 0 [pid 5823] rmdir("./288" [pid 5824] unlink("./282/binderfs" [pid 7269] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5824] <... unlink resumed>) = 0 [pid 5823] <... rmdir resumed>) = 0 [pid 7270] set_robust_list(0x55557eba4660, 24 [pid 5824] getdents64(3, [pid 7269] <... openat resumed>) = 3 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] close(3 [pid 7269] write(3, "1000", 4 [pid 5824] <... close resumed>) = 0 [pid 5823] mkdir("./289", 0777 [pid 7269] <... write resumed>) = 4 [pid 5824] rmdir("./282" [pid 5823] <... mkdir resumed>) = 0 [pid 7269] close(3) = 0 [pid 7269] symlink("/dev/binderfs", "./binderfs" [pid 7270] <... set_robust_list resumed>) = 0 [pid 7269] <... symlink resumed>) = 0 [pid 7268] <... sync resumed>) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 7270] chdir("./281" [pid 5824] mkdir("./283", 0777 [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWRexecuting program [pid 7269] write(1, "executing program\n", 18 [pid 7268] exit_group(0 [pid 5823] <... openat resumed>) = 3 [pid 7269] <... write resumed>) = 18 [pid 5824] <... mkdir resumed>) = 0 [pid 5823] ioctl(3, LOOP_CLR_FD [pid 7270] <... chdir resumed>) = 0 [pid 7269] memfd_create("syzkaller", 0 [pid 7268] <... exit_group resumed>) = ? [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5823] <... ioctl resumed>) = 0 [pid 7270] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7269] <... memfd_create resumed>) = 3 [pid 5823] close(3 [pid 7270] <... prctl resumed>) = 0 [pid 5824] <... openat resumed>) = 3 [pid 5823] <... close resumed>) = 0 [pid 5824] ioctl(3, LOOP_CLR_FD) = 0 [pid 7270] setpgid(0, 0 [pid 7269] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7268] +++ exited with 0 +++ [pid 5824] close(3 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7270] <... setpgid resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7268, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 7270] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7269] <... mmap resumed>) = 0x7f957a000000 [pid 5827] restart_syscall(<... resuming interrupted clone ...> [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7270] <... openat resumed>) = 3 [pid 7269] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536./strace-static-x86_64: Process 7272 attached ./strace-static-x86_64: Process 7271 attached ) = 65536 [pid 7270] write(3, "1000", 4 [pid 7272] set_robust_list(0x55557eba4660, 24 [pid 7271] set_robust_list(0x55557eba4660, 24 [pid 7270] <... write resumed>) = 4 [pid 7269] munmap(0x7f957a000000, 138412032 [pid 5827] <... restart_syscall resumed>) = 0 [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7272 [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7271 [pid 7271] <... set_robust_list resumed>) = 0 [pid 7271] chdir("./289" [pid 7269] <... munmap resumed>) = 0 [pid 7271] <... chdir resumed>) = 0 [pid 7269] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7271] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7269] <... openat resumed>) = 4 [pid 7271] <... prctl resumed>) = 0 [pid 7269] ioctl(4, LOOP_SET_FD, 3 [pid 7271] setpgid(0, 0 [pid 7272] <... set_robust_list resumed>) = 0 [pid 7271] <... setpgid resumed>) = 0 [pid 7270] close(3 [pid 7271] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7272] chdir("./283" [pid 7270] <... close resumed>) = 0 [pid 5827] umount2("./276", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7270] symlink("/dev/binderfs", "./binderfs" [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7272] <... chdir resumed>) = 0 [pid 7272] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7271] <... openat resumed>) = 3 [pid 7270] <... symlink resumed>) = 0 [pid 5827] openat(AT_FDCWD, "./276", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7272] <... prctl resumed>) = 0 [pid 7272] setpgid(0, 0 [pid 7271] write(3, "1000", 4 [pid 7270] write(1, "executing program\n", 18 [pid 5827] <... openat resumed>) = 3 executing program [pid 7272] <... setpgid resumed>) = 0 [pid 7271] <... write resumed>) = 4 [pid 7270] <... write resumed>) = 18 [pid 5827] newfstatat(3, "", [pid 7271] close(3 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7271] <... close resumed>) = 0 [pid 7270] memfd_create("syzkaller", 0 [pid 5827] getdents64(3, [pid 7272] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7271] symlink("/dev/binderfs", "./binderfs" [pid 7270] <... memfd_create resumed>) = 3 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 7272] <... openat resumed>) = 3 [pid 7271] <... symlink resumed>) = 0 [pid 7270] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5827] umount2("./276/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7272] write(3, "1000", 4executing program ) = 4 [pid 7271] write(1, "executing program\n", 18 [pid 7270] <... mmap resumed>) = 0x7f957a000000 [pid 5827] <... umount2 resumed>) = 0 [pid 7272] close(3 [pid 7271] <... write resumed>) = 18 executing program [pid 7272] <... close resumed>) = 0 [pid 7271] memfd_create("syzkaller", 0 [pid 7270] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5827] umount2("./276/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7272] symlink("/dev/binderfs", "./binderfs" [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7272] <... symlink resumed>) = 0 [pid 5827] newfstatat(AT_FDCWD, "./276/file0", [pid 7272] write(1, "executing program\n", 18 [pid 7271] <... memfd_create resumed>) = 3 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7272] <... write resumed>) = 18 [pid 7271] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5827] umount2("./276/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7272] memfd_create("syzkaller", 0 [pid 7271] <... mmap resumed>) = 0x7f957a000000 [pid 7270] <... write resumed>) = 65536 [pid 7269] <... ioctl resumed>) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7272] <... memfd_create resumed>) = 3 [pid 7271] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5827] openat(AT_FDCWD, "./276/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7272] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5827] <... openat resumed>) = 4 [pid 7269] close(3) = 0 [pid 7271] <... write resumed>) = 65536 [pid 7269] close(4) = 0 [pid 5827] newfstatat(4, "", [pid 7269] mkdir("./file0", 0777) = 0 [pid 7271] munmap(0x7f957a000000, 138412032) = 0 [pid 7269] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [ 225.677472][ T7269] loop3: detected capacity change from 0 to 128 [pid 7271] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7271] ioctl(4, LOOP_SET_FD, 3 [pid 7272] <... mmap resumed>) = 0x7f957a000000 [pid 7270] munmap(0x7f957a000000, 138412032 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] getdents64(4, [pid 7272] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5827] getdents64(4, [pid 7272] <... write resumed>) = 65536 [pid 7270] <... munmap resumed>) = 0 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 7272] munmap(0x7f957a000000, 138412032 [pid 5827] close(4) = 0 [pid 5827] rmdir("./276/file0") = 0 [pid 7272] <... munmap resumed>) = 0 [pid 7270] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5827] umount2("./276/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7271] <... ioctl resumed>) = 0 [pid 7271] close(3) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7271] close(4 [pid 7270] <... openat resumed>) = 4 [pid 5827] newfstatat(AT_FDCWD, "./276/binderfs", [pid 7272] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7271] <... close resumed>) = 0 [pid 7271] mkdir("./file0", 0777 [pid 7272] <... openat resumed>) = 4 [pid 7271] <... mkdir resumed>) = 0 [pid 7270] ioctl(4, LOOP_SET_FD, 3 [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7272] ioctl(4, LOOP_SET_FD, 3 [pid 7271] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [ 225.729677][ T7271] loop0: detected capacity change from 0 to 128 [ 225.748192][ T7269] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 225.769578][ T7270] loop2: detected capacity change from 0 to 128 [pid 5827] unlink("./276/binderfs" [pid 7269] <... mount resumed>) = 0 [pid 7269] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5827] <... unlink resumed>) = 0 [pid 7269] <... openat resumed>) = 3 [pid 7269] chdir("./file0") = 0 [pid 7269] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7272] <... ioctl resumed>) = 0 [pid 7270] <... ioctl resumed>) = 0 [pid 5827] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7272] close(3 [pid 7270] close(3 [pid 7272] <... close resumed>) = 0 [pid 7270] <... close resumed>) = 0 [pid 7272] close(4 [pid 7270] close(4 [pid 7272] <... close resumed>) = 0 [pid 7270] <... close resumed>) = 0 [pid 5827] close(3) = 0 [pid 5827] rmdir("./276" [pid 7272] mkdir("./file0", 0777 [pid 7270] mkdir("./file0", 0777 [pid 5827] <... rmdir resumed>) = 0 [pid 7269] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5827] mkdir("./277", 0777 [pid 7270] <... mkdir resumed>) = 0 [pid 7269] openat(AT_FDCWD, ".", O_RDONLY [pid 5827] <... mkdir resumed>) = 0 [pid 7272] <... mkdir resumed>) = 0 [pid 7270] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7269] <... openat resumed>) = 4 [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7269] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5827] <... openat resumed>) = 3 [pid 7272] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7269] <... renameat2 resumed>) = 0 [ 225.778291][ T7272] loop1: detected capacity change from 0 to 128 [ 225.794994][ T7271] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [pid 5827] ioctl(3, LOOP_CLR_FD [pid 7269] sync( [pid 5827] <... ioctl resumed>) = 0 [pid 5827] close(3) = 0 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7273 attached [pid 7271] <... mount resumed>) = 0 [pid 7271] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7273 [pid 7271] chdir("./file0" [pid 7273] set_robust_list(0x55557eba4660, 24 [pid 7271] <... chdir resumed>) = 0 [pid 7273] <... set_robust_list resumed>) = 0 [pid 7271] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7273] chdir("./277" [pid 7271] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7273] <... chdir resumed>) = 0 [pid 7271] openat(AT_FDCWD, ".", O_RDONLY [pid 7273] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7271] <... openat resumed>) = 4 [pid 7273] <... prctl resumed>) = 0 [pid 7271] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7273] setpgid(0, 0 [pid 7271] <... renameat2 resumed>) = 0 [pid 7273] <... setpgid resumed>) = 0 [pid 7271] sync( [pid 7273] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7273] write(3, "1000", 4) = 4 [pid 7273] close(3) = 0 [pid 7273] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7273] write(1, "executing program\n", 18executing program ) = 18 [pid 7273] memfd_create("syzkaller", 0) = 3 [pid 7273] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7273] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 7273] munmap(0x7f957a000000, 138412032) = 0 [pid 7273] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 225.830939][ T7270] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 225.860408][ T7272] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [pid 7273] ioctl(4, LOOP_SET_FD, 3 [pid 7270] <... mount resumed>) = 0 [pid 7270] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7270] chdir("./file0") = 0 [pid 7270] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7270] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7270] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7273] <... ioctl resumed>) = 0 [pid 7272] <... mount resumed>) = 0 [pid 7270] <... renameat2 resumed>) = 0 [pid 7272] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7273] close(3 [pid 7272] <... openat resumed>) = 3 [pid 7273] <... close resumed>) = 0 [pid 7273] close(4) = 0 [pid 7273] mkdir("./file0", 0777 [pid 7272] chdir("./file0" [pid 7270] sync( [pid 7272] <... chdir resumed>) = 0 [pid 7272] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7273] <... mkdir resumed>) = 0 [pid 7272] openat(AT_FDCWD, ".", O_RDONLY) = 4 [ 225.909267][ T7273] loop4: detected capacity change from 0 to 128 [pid 7273] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7272] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7271] <... sync resumed>) = 0 [pid 7271] exit_group(0) = ? [pid 7272] <... renameat2 resumed>) = 0 [pid 7271] +++ exited with 0 +++ [pid 7270] <... sync resumed>) = 0 [pid 7269] <... sync resumed>) = 0 [pid 7269] exit_group(0 [pid 7270] exit_group(0 [pid 7269] <... exit_group resumed>) = ? [pid 7272] sync( [pid 7270] <... exit_group resumed>) = ? [pid 7269] +++ exited with 0 +++ [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7271, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7270] +++ exited with 0 +++ [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7269, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7270, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5823] umount2("./289", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] restart_syscall(<... resuming interrupted clone ...> [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./289", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5823] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(3, [pid 5825] <... restart_syscall resumed>) = 0 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] umount2("./289/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./281", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./281", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5825] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5825] umount2("./281/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] umount2("./288", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./288", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5826] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5826] umount2("./288/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5825] <... umount2 resumed>) = 0 [pid 5826] umount2("./288/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./281/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... umount2 resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] umount2("./289/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] newfstatat(AT_FDCWD, "./288/file0", [pid 5825] newfstatat(AT_FDCWD, "./281/file0", [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] newfstatat(AT_FDCWD, "./289/file0", [pid 5826] umount2("./288/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./281/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] umount2("./289/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] openat(AT_FDCWD, "./288/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] openat(AT_FDCWD, "./281/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [ 225.981855][ T7273] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... openat resumed>) = 4 [pid 5825] <... openat resumed>) = 4 [pid 5826] newfstatat(4, "", [pid 5825] newfstatat(4, "", [pid 5823] openat(AT_FDCWD, "./289/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... openat resumed>) = 4 [pid 5826] getdents64(4, [pid 5825] getdents64(4, [pid 5823] newfstatat(4, "", [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(4, [pid 5825] getdents64(4, [pid 5823] getdents64(4, [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5826] close(4 [pid 5825] close(4 [pid 5823] getdents64(4, [pid 5826] <... close resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 5826] rmdir("./288/file0" [pid 5825] rmdir("./281/file0" [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5826] <... rmdir resumed>) = 0 [pid 5825] <... rmdir resumed>) = 0 [pid 5823] close(4 [pid 5825] umount2("./281/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... close resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] rmdir("./289/file0" [pid 5826] umount2("./288/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] newfstatat(AT_FDCWD, "./281/binderfs", [pid 5823] <... rmdir resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] newfstatat(AT_FDCWD, "./288/binderfs", [pid 5825] unlink("./281/binderfs" [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./288/binderfs" [pid 5825] <... unlink resumed>) = 0 [pid 5823] umount2("./289/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... unlink resumed>) = 0 [pid 5826] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./289/binderfs", [pid 5825] getdents64(3, [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] close(3 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] unlink("./289/binderfs" [pid 5826] <... close resumed>) = 0 [pid 5825] close(3 [pid 5823] <... unlink resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 5826] rmdir("./288") = 0 [pid 5825] rmdir("./281") = 0 [pid 5823] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] close(3 [pid 5825] mkdir("./282", 0777 [pid 5823] <... close resumed>) = 0 [pid 5826] mkdir("./289", 0777 [pid 5825] <... mkdir resumed>) = 0 [pid 5823] rmdir("./289" [pid 5826] <... mkdir resumed>) = 0 [pid 5823] <... rmdir resumed>) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5823] mkdir("./290", 0777 [pid 5826] <... openat resumed>) = 3 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5823] <... mkdir resumed>) = 0 [pid 5826] ioctl(3, LOOP_CLR_FD [pid 5825] <... openat resumed>) = 3 [pid 5826] <... ioctl resumed>) = 0 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5826] close(3 [pid 5825] <... ioctl resumed>) = 0 [pid 5823] <... openat resumed>) = 3 [pid 5826] <... close resumed>) = 0 [pid 5825] close(3 [pid 5823] ioctl(3, LOOP_CLR_FD [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5825] <... close resumed>) = 0 [pid 5823] <... ioctl resumed>) = 0 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5823] close(3) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7275 attached [pid 7273] <... mount resumed>) = 0 ./strace-static-x86_64: Process 7276 attached ./strace-static-x86_64: Process 7274 attached [pid 7273] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7275] set_robust_list(0x55557eba4660, 24 [pid 7273] chdir("./file0" [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7276 [pid 7275] <... set_robust_list resumed>) = 0 [pid 7273] <... chdir resumed>) = 0 [pid 7276] set_robust_list(0x55557eba4660, 24 [pid 7275] chdir("./290" [pid 7274] set_robust_list(0x55557eba4660, 24 [pid 7273] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7274 [pid 7276] <... set_robust_list resumed>) = 0 [pid 7274] <... set_robust_list resumed>) = 0 [pid 7273] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7276] chdir("./289" [pid 7273] openat(AT_FDCWD, ".", O_RDONLY [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7275 [pid 7276] <... chdir resumed>) = 0 [pid 7274] chdir("./282" [pid 7273] <... openat resumed>) = 4 [pid 7275] <... chdir resumed>) = 0 [pid 7275] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7275] setpgid(0, 0) = 0 [pid 7275] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7273] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7275] <... openat resumed>) = 3 [pid 7276] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7274] <... chdir resumed>) = 0 [pid 7276] <... prctl resumed>) = 0 [pid 7274] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7272] <... sync resumed>) = 0 [pid 7276] setpgid(0, 0 [pid 7275] write(3, "1000", 4 [pid 7276] <... setpgid resumed>) = 0 [pid 7274] <... prctl resumed>) = 0 [pid 7272] exit_group(0 [pid 7276] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7275] <... write resumed>) = 4 [pid 7274] setpgid(0, 0 [pid 7273] <... renameat2 resumed>) = 0 [pid 7272] <... exit_group resumed>) = ? [pid 7275] close(3 [pid 7274] <... setpgid resumed>) = 0 [pid 7273] sync( [pid 7272] +++ exited with 0 +++ [pid 7276] <... openat resumed>) = 3 [pid 7275] <... close resumed>) = 0 [pid 7274] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7272, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7275] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 7274] <... openat resumed>) = 3 [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 7274] write(3, "1000", 4 [pid 7276] write(3, "1000", 4 [pid 7275] write(1, "executing program\n", 18 [pid 7274] <... write resumed>) = 4 [pid 7275] <... write resumed>) = 18 [pid 7274] close(3 [pid 7276] <... write resumed>) = 4 [pid 7275] memfd_create("syzkaller", 0) = 3 [pid 7275] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7274] <... close resumed>) = 0 [pid 5824] <... restart_syscall resumed>) = 0 [pid 7276] close(3 [pid 7274] symlink("/dev/binderfs", "./binderfs" [pid 7276] <... close resumed>) = 0 [pid 7275] <... mmap resumed>) = 0x7f957a000000 [pid 7276] symlink("/dev/binderfs", "./binderfs" [pid 7275] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7274] <... symlink resumed>) = 0 [pid 7273] <... sync resumed>) = 0 [pid 5824] umount2("./283", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7276] <... symlink resumed>) = 0 [pid 7274] write(1, "executing program\n", 18 [pid 7273] exit_group(0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) executing program executing program [pid 7275] <... write resumed>) = 65536 [pid 7274] <... write resumed>) = 18 [pid 5824] openat(AT_FDCWD, "./283", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7273] <... exit_group resumed>) = ? [pid 5824] <... openat resumed>) = 3 [pid 7276] write(1, "executing program\n", 18 [pid 7274] memfd_create("syzkaller", 0 [pid 7273] +++ exited with 0 +++ [pid 5824] newfstatat(3, "", [pid 7276] <... write resumed>) = 18 [pid 7274] <... memfd_create resumed>) = 3 [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7273, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 7276] memfd_create("syzkaller", 0 [pid 7274] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7275] munmap(0x7f957a000000, 138412032 [pid 7274] <... mmap resumed>) = 0x7f957a000000 [pid 7276] <... memfd_create resumed>) = 3 [pid 7275] <... munmap resumed>) = 0 [pid 7274] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5824] getdents64(3, [pid 7275] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 7275] ioctl(4, LOOP_SET_FD, 3 [pid 5824] umount2("./283/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7276] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7275] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 7274] <... write resumed>) = 65536 [pid 7275] ioctl(4, LOOP_CLR_FD) = 0 [pid 5827] umount2("./277", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] openat(AT_FDCWD, "./277", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] <... umount2 resumed>) = 0 [pid 7276] <... mmap resumed>) = 0x7f957a000000 [pid 7274] munmap(0x7f957a000000, 138412032 [pid 5827] <... openat resumed>) = 3 [pid 5824] umount2("./283/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7275] ioctl(4, LOOP_SET_FD, 3 [pid 7274] <... munmap resumed>) = 0 [pid 5827] newfstatat(3, "", [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7276] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7275] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 7274] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] newfstatat(AT_FDCWD, "./283/file0", [pid 7275] close(4 [pid 7274] <... openat resumed>) = 4 [pid 5827] getdents64(3, [pid 7276] <... write resumed>) = 65536 [pid 7275] <... close resumed>) = 0 [pid 7274] ioctl(4, LOOP_SET_FD, 3 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7275] close(3 [pid 5827] umount2("./277/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7275] <... close resumed>) = 0 [pid 7275] openat(AT_FDCWD, ".", O_RDONLY [pid 7276] munmap(0x7f957a000000, 138412032 [pid 7275] <... openat resumed>) = 3 [pid 5824] umount2("./283/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7276] <... munmap resumed>) = 0 [pid 5824] openat(AT_FDCWD, "./283/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5824] newfstatat(4, "", [pid 7276] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7275] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7275] <... renameat2 resumed>) = -1 ENOENT (No such file or directory) [pid 7276] <... openat resumed>) = 4 [pid 5824] getdents64(4, [pid 7276] ioctl(4, LOOP_SET_FD, 3 [pid 7275] sync( [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] getdents64(4, [pid 5827] <... umount2 resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5827] umount2("./277/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] close(4 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... close resumed>) = 0 [pid 5827] newfstatat(AT_FDCWD, "./277/file0", [pid 5824] rmdir("./283/file0" [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] umount2("./277/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7274] <... ioctl resumed>) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] openat(AT_FDCWD, "./277/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5827] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 7274] close(3 [pid 5824] umount2("./283/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7274] <... close resumed>) = 0 [pid 7274] close(4 [pid 5827] getdents64(4, [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7275] <... sync resumed>) = 0 [pid 7274] <... close resumed>) = 0 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] newfstatat(AT_FDCWD, "./283/binderfs", [pid 7275] exit_group(0 [pid 7274] mkdir("./file0", 0777 [pid 5827] getdents64(4, [pid 7276] <... ioctl resumed>) = 0 [pid 7275] <... exit_group resumed>) = ? [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7276] close(3 [pid 7274] <... mkdir resumed>) = 0 [pid 5827] close(4 [pid 5824] unlink("./283/binderfs" [pid 7276] <... close resumed>) = 0 [pid 7274] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5827] <... close resumed>) = 0 [pid 5827] rmdir("./277/file0" [pid 5824] <... unlink resumed>) = 0 [pid 7276] close(4 [pid 5827] <... rmdir resumed>) = 0 [pid 5824] getdents64(3, [pid 7276] <... close resumed>) = 0 [pid 7275] +++ exited with 0 +++ [pid 5827] umount2("./277/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7276] mkdir("./file0", 0777 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] close(3 [pid 5827] newfstatat(AT_FDCWD, "./277/binderfs", [pid 5824] <... close resumed>) = 0 [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7275, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 7276] <... mkdir resumed>) = 0 [pid 5827] unlink("./277/binderfs" [pid 5824] rmdir("./283" [pid 5827] <... unlink resumed>) = 0 [pid 5827] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [ 226.169569][ T7274] loop2: detected capacity change from 0 to 128 [ 226.187850][ T7276] loop3: detected capacity change from 0 to 128 [pid 5824] <... rmdir resumed>) = 0 [pid 5827] close(3) = 0 [pid 5827] rmdir("./277") = 0 [pid 5823] <... restart_syscall resumed>) = 0 [pid 5823] umount2("./290", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./290", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5823] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(3, [pid 5827] mkdir("./278", 0777 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 5827] <... mkdir resumed>) = 0 [pid 5823] umount2("./290/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./290/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] mkdir("./284", 0777 [pid 5823] unlink("./290/binderfs") = 0 [pid 7276] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5824] <... mkdir resumed>) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5827] <... openat resumed>) = 3 [pid 5827] ioctl(3, LOOP_CLR_FD) = 0 [pid 5824] <... openat resumed>) = 3 [pid 5824] ioctl(3, LOOP_CLR_FD [pid 5827] close(3 [pid 5824] <... ioctl resumed>) = 0 [pid 5827] <... close resumed>) = 0 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5824] close(3./strace-static-x86_64: Process 7277 attached [pid 5823] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] close(3 [pid 5824] <... close resumed>) = 0 [pid 5823] <... close resumed>) = 0 [pid 5823] rmdir("./290") = 0 [pid 7277] set_robust_list(0x55557eba4660, 24 [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7277 [pid 7277] <... set_robust_list resumed>) = 0 [pid 7277] chdir("./278" [pid 5823] mkdir("./291", 0777 [pid 7277] <... chdir resumed>) = 0 [pid 5823] <... mkdir resumed>) = 0 [pid 7277] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7277] setpgid(0, 0) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7277] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5823] <... openat resumed>) = 3 [pid 7277] <... openat resumed>) = 3 [pid 5823] ioctl(3, LOOP_CLR_FD [pid 7277] write(3, "1000", 4 [pid 5823] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7277] <... write resumed>) = 4 [pid 5823] close(3 [pid 7277] close(3 [pid 5823] <... close resumed>) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7277] <... close resumed>) = 0 [pid 7277] symlink("/dev/binderfs", "./binderfs") = 0 executing program ./strace-static-x86_64: Process 7278 attached [pid 7277] write(1, "executing program\n", 18) = 18 [pid 7277] memfd_create("syzkaller", 0) = 3 [pid 7277] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7277] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7278] set_robust_list(0x55557eba4660, 24) = 0 [pid 7278] chdir("./291" [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7278 [pid 7278] <... chdir resumed>) = 0 [pid 7278] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7277] <... write resumed>) = 65536 ./strace-static-x86_64: Process 7279 attached [pid 7278] <... prctl resumed>) = 0 [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7279 [pid 7278] setpgid(0, 0 [pid 7274] <... mount resumed>) = 0 [pid 7274] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7279] set_robust_list(0x55557eba4660, 24 [pid 7274] <... openat resumed>) = 3 [pid 7279] <... set_robust_list resumed>) = 0 [pid 7278] <... setpgid resumed>) = 0 [pid 7274] chdir("./file0" [pid 7277] munmap(0x7f957a000000, 138412032 [pid 7274] <... chdir resumed>) = 0 [pid 7279] chdir("./284" [pid 7278] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7277] <... munmap resumed>) = 0 [pid 7274] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7279] <... chdir resumed>) = 0 [pid 7278] <... openat resumed>) = 3 [pid 7277] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7274] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7274] openat(AT_FDCWD, ".", O_RDONLY [pid 7279] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7278] write(3, "1000", 4 [pid 7277] <... openat resumed>) = 4 [pid 7274] <... openat resumed>) = 4 [pid 7274] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7279] <... prctl resumed>) = 0 [pid 7278] <... write resumed>) = 4 [pid 7277] ioctl(4, LOOP_SET_FD, 3 [pid 7279] setpgid(0, 0 [pid 7278] close(3 [pid 7277] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 7279] <... setpgid resumed>) = 0 [pid 7278] <... close resumed>) = 0 [pid 7279] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7277] ioctl(4, LOOP_CLR_FD [pid 7279] <... openat resumed>) = 3 [pid 7278] symlink("/dev/binderfs", "./binderfs" [ 226.230730][ T7274] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 226.252424][ T7276] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 executing program [pid 7277] <... ioctl resumed>) = 0 [pid 7274] <... renameat2 resumed>) = 0 [pid 7279] write(3, "1000", 4 [pid 7278] <... symlink resumed>) = 0 [pid 7276] <... mount resumed>) = 0 [pid 7274] sync( [pid 7276] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7279] <... write resumed>) = 4 [pid 7278] write(1, "executing program\n", 18 [pid 7276] <... openat resumed>) = 3 [pid 7279] close(3 [pid 7278] <... write resumed>) = 18 [pid 7276] chdir("./file0" [pid 7279] <... close resumed>) = 0 [pid 7278] memfd_create("syzkaller", 0 [pid 7276] <... chdir resumed>) = 0 [pid 7279] symlink("/dev/binderfs", "./binderfs" [pid 7278] <... memfd_create resumed>) = 3 [pid 7276] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7279] <... symlink resumed>) = 0 [pid 7278] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7277] ioctl(4, LOOP_SET_FD, 3executing program [pid 7279] write(1, "executing program\n", 18 [pid 7278] <... mmap resumed>) = 0x7f957a000000 [pid 7277] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 7276] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7279] <... write resumed>) = 18 [pid 7278] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7277] close(4 [pid 7279] memfd_create("syzkaller", 0 [pid 7277] <... close resumed>) = 0 [pid 7276] openat(AT_FDCWD, ".", O_RDONLY [pid 7279] <... memfd_create resumed>) = 3 [pid 7278] <... write resumed>) = 65536 [pid 7277] close(3 [pid 7276] <... openat resumed>) = 4 [pid 7279] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7277] <... close resumed>) = 0 [pid 7279] <... mmap resumed>) = 0x7f957a000000 [pid 7278] munmap(0x7f957a000000, 138412032 [pid 7277] openat(AT_FDCWD, ".", O_RDONLY [pid 7279] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7278] <... munmap resumed>) = 0 [pid 7277] <... openat resumed>) = 3 [pid 7276] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7278] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7277] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = -1 ENOENT (No such file or directory) [pid 7278] <... openat resumed>) = 4 [pid 7277] sync( [pid 7279] <... write resumed>) = 65536 [pid 7278] ioctl(4, LOOP_SET_FD, 3 [pid 7276] <... renameat2 resumed>) = 0 [pid 7279] munmap(0x7f957a000000, 138412032) = 0 [pid 7279] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 7276] sync( [pid 7279] ioctl(4, LOOP_SET_FD, 3 [pid 7274] <... sync resumed>) = 0 [pid 7274] exit_group(0 [pid 7276] <... sync resumed>) = 0 [pid 7274] <... exit_group resumed>) = ? [pid 7276] exit_group(0 [pid 7274] +++ exited with 0 +++ [pid 7276] <... exit_group resumed>) = ? [pid 7277] <... sync resumed>) = 0 [pid 7277] exit_group(0 [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7274, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 7277] <... exit_group resumed>) = ? [pid 5825] restart_syscall(<... resuming interrupted clone ...> [pid 7277] +++ exited with 0 +++ [pid 7276] +++ exited with 0 +++ [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7277, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7276, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5827] restart_syscall(<... resuming interrupted clone ...> [pid 5826] restart_syscall(<... resuming interrupted clone ...> [pid 5827] <... restart_syscall resumed>) = 0 [pid 5826] <... restart_syscall resumed>) = 0 [pid 5825] <... restart_syscall resumed>) = 0 [pid 5827] umount2("./278", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] umount2("./289", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./282", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] openat(AT_FDCWD, "./278", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] openat(AT_FDCWD, "./289", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] openat(AT_FDCWD, "./282", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7279] <... ioctl resumed>) = 0 [pid 7278] <... ioctl resumed>) = 0 [pid 5827] <... openat resumed>) = 3 [pid 5826] <... openat resumed>) = 3 [pid 5825] <... openat resumed>) = 3 [pid 5827] newfstatat(3, "", [pid 5826] newfstatat(3, "", [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] newfstatat(3, "", [pid 5827] getdents64(3, [pid 5826] getdents64(3, [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7278] close(3 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5825] getdents64(3, [pid 7278] <... close resumed>) = 0 [pid 5827] umount2("./278/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 7279] close(3 [pid 7278] close(4 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] umount2("./289/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./282/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7279] <... close resumed>) = 0 [pid 7278] <... close resumed>) = 0 [pid 5827] newfstatat(AT_FDCWD, "./278/binderfs", [pid 7279] close(4 [pid 7278] mkdir("./file0", 0777 [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7279] <... close resumed>) = 0 [pid 7278] <... mkdir resumed>) = 0 [pid 5827] unlink("./278/binderfs" [ 226.338949][ T7278] loop0: detected capacity change from 0 to 128 [ 226.350427][ T7279] loop1: detected capacity change from 0 to 128 [pid 7279] mkdir("./file0", 0777 [pid 7278] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5827] <... unlink resumed>) = 0 [pid 7279] <... mkdir resumed>) = 0 [pid 5827] getdents64(3, [pid 7279] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5825] <... umount2 resumed>) = 0 [pid 5825] umount2("./282/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./282/file0", [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] umount2("./282/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] close(3 [pid 5826] <... umount2 resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./282/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5825] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(4, [pid 5827] <... close resumed>) = 0 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5827] rmdir("./278" [pid 5826] umount2("./289/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] getdents64(4, [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5827] <... rmdir resumed>) = 0 [pid 5827] mkdir("./279", 0777) = 0 [pid 5825] close(4 [pid 5826] newfstatat(AT_FDCWD, "./289/file0", [pid 5825] <... close resumed>) = 0 [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] rmdir("./282/file0" [pid 5827] <... openat resumed>) = 3 [pid 5826] umount2("./289/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... rmdir resumed>) = 0 [pid 5825] umount2("./282/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./282/binderfs", [pid 5826] openat(AT_FDCWD, "./289/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] ioctl(3, LOOP_CLR_FD [pid 5826] <... openat resumed>) = 4 [pid 5825] unlink("./282/binderfs" [pid 5827] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5826] newfstatat(4, "", [pid 5825] <... unlink resumed>) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(3, [pid 5827] close(3 [pid 5826] getdents64(4, [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5827] <... close resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] close(3 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5825] <... close resumed>) = 0 [pid 5825] rmdir("./282"./strace-static-x86_64: Process 7280 attached ) = 0 [pid 5826] getdents64(4, [pid 5825] mkdir("./283", 0777 [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7280 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5825] <... mkdir resumed>) = 0 [pid 5826] close(4 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5826] <... close resumed>) = 0 [pid 5825] <... openat resumed>) = 3 [pid 5826] rmdir("./289/file0" [pid 5825] ioctl(3, LOOP_CLR_FD [pid 5826] <... rmdir resumed>) = 0 [pid 5825] <... ioctl resumed>) = 0 [pid 5825] close(3 [pid 5826] umount2("./289/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./289/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./289/binderfs") = 0 [pid 7280] set_robust_list(0x55557eba4660, 24 [pid 5826] getdents64(3, [pid 7280] <... set_robust_list resumed>) = 0 [pid 7280] chdir("./279") = 0 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7280] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5826] close(3 [pid 7280] setpgid(0, 0 [pid 5826] <... close resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 7280] <... setpgid resumed>) = 0 [pid 5826] rmdir("./289" [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7280] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5826] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 7281 attached [pid 5826] mkdir("./290", 0777) = 0 [ 226.408264][ T7278] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 226.427960][ T7279] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7280] <... openat resumed>) = 3 [pid 7278] <... mount resumed>) = 0 [pid 7278] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7278] chdir("./file0") = 0 [pid 7278] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7278] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7278] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = 0 [pid 7281] set_robust_list(0x55557eba4660, 24 [pid 7279] <... mount resumed>) = 0 [pid 5826] <... openat resumed>) = 3 [pid 7279] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7281 [pid 7279] <... openat resumed>) = 3 [pid 5826] ioctl(3, LOOP_CLR_FD [pid 7281] <... set_robust_list resumed>) = 0 [pid 7279] chdir("./file0" [pid 5826] <... ioctl resumed>) = 0 [pid 7281] chdir("./283" [pid 7279] <... chdir resumed>) = 0 [pid 7278] sync( [pid 5826] close(3 [pid 7279] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7281] <... chdir resumed>) = 0 [pid 7279] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5826] <... close resumed>) = 0 [pid 7281] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7279] openat(AT_FDCWD, ".", O_RDONLY [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7282 attached [pid 7281] <... prctl resumed>) = 0 [pid 7280] write(3, "1000", 4 [pid 7279] <... openat resumed>) = 4 [pid 7282] set_robust_list(0x55557eba4660, 24 [pid 7281] setpgid(0, 0 [pid 7280] <... write resumed>) = 4 [pid 7279] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7282] <... set_robust_list resumed>) = 0 [pid 7281] <... setpgid resumed>) = 0 [pid 7282] chdir("./290" [pid 7281] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7280] close(3 [pid 7282] <... chdir resumed>) = 0 [pid 7281] <... openat resumed>) = 3 [pid 7282] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7282 [pid 7282] <... prctl resumed>) = 0 [pid 7282] setpgid(0, 0 [pid 7281] write(3, "1000", 4 [pid 7282] <... setpgid resumed>) = 0 [pid 7281] <... write resumed>) = 4 [pid 7282] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7281] close(3 [pid 7280] <... close resumed>) = 0 [pid 7279] <... renameat2 resumed>) = 0 [pid 7282] <... openat resumed>) = 3 [pid 7281] <... close resumed>) = 0 [pid 7280] symlink("/dev/binderfs", "./binderfs" [pid 7281] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7282] write(3, "1000", 4) = 4 [pid 7279] sync( [pid 7282] close(3 [pid 7280] <... symlink resumed>) = 0 [pid 7282] <... close resumed>) = 0 [pid 7282] symlink("/dev/binderfs", "./binderfs" [pid 7281] write(1, "executing program\n", 18 [pid 7280] write(1, "executing program\n", 18executing program [pid 7281] <... write resumed>) = 18 [pid 7278] <... sync resumed>) = 0 executing program [pid 7281] memfd_create("syzkaller", 0 [pid 7278] exit_group(0 [pid 7280] <... write resumed>) = 18 [pid 7278] <... exit_group resumed>) = ? [pid 7282] <... symlink resumed>) = 0 [pid 7280] memfd_create("syzkaller", 0 [pid 7282] write(1, "executing program\n", 18 [pid 7281] <... memfd_create resumed>) = 3 [pid 7280] <... memfd_create resumed>) = 3 executing program [pid 7282] <... write resumed>) = 18 [pid 7281] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7280] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7282] memfd_create("syzkaller", 0 [pid 7281] <... mmap resumed>) = 0x7f957a000000 [pid 7280] <... mmap resumed>) = 0x7f957a000000 [pid 7282] <... memfd_create resumed>) = 3 [pid 7281] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7282] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7280] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7282] <... mmap resumed>) = 0x7f957a000000 [pid 7282] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7281] <... write resumed>) = 65536 [pid 7280] <... write resumed>) = 65536 [pid 7278] +++ exited with 0 +++ [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7278, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 7280] munmap(0x7f957a000000, 138412032 [pid 7282] <... write resumed>) = 65536 [pid 7281] munmap(0x7f957a000000, 138412032 [pid 7280] <... munmap resumed>) = 0 [pid 7281] <... munmap resumed>) = 0 [pid 7279] <... sync resumed>) = 0 [pid 7282] munmap(0x7f957a000000, 138412032) = 0 [pid 7281] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7279] exit_group(0 [pid 7281] <... openat resumed>) = 4 [pid 7280] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5823] <... restart_syscall resumed>) = 0 [pid 7279] <... exit_group resumed>) = ? [pid 7281] ioctl(4, LOOP_SET_FD, 3 [pid 7280] <... openat resumed>) = 4 [pid 7279] +++ exited with 0 +++ [pid 7282] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7280] ioctl(4, LOOP_SET_FD, 3 [pid 5823] umount2("./291", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7279, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./291", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5823] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] umount2("./291/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... restart_syscall resumed>) = 0 [pid 7281] <... ioctl resumed>) = 0 [pid 7282] <... openat resumed>) = 4 [pid 7280] <... ioctl resumed>) = 0 [pid 5823] <... umount2 resumed>) = 0 [pid 7282] ioctl(4, LOOP_SET_FD, 3 [pid 5824] umount2("./284", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7281] close(3 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] umount2("./291/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] openat(AT_FDCWD, "./284", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7281] <... close resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... openat resumed>) = 3 [pid 7281] close(4 [pid 7280] close(3 [pid 5824] newfstatat(3, "", [pid 5823] newfstatat(AT_FDCWD, "./291/file0", [pid 7281] <... close resumed>) = 0 [pid 7280] <... close resumed>) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7280] close(4 [pid 5823] umount2("./291/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7280] <... close resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7281] mkdir("./file0", 0777 [pid 7280] mkdir("./file0", 0777 [pid 5824] getdents64(3, [pid 5823] openat(AT_FDCWD, "./291/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7281] <... mkdir resumed>) = 0 [pid 7280] <... mkdir resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] <... openat resumed>) = 4 [pid 5824] umount2("./284/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7280] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5823] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [ 226.540087][ T7281] loop2: detected capacity change from 0 to 128 [ 226.547462][ T7280] loop4: detected capacity change from 0 to 128 [ 226.569879][ T7282] loop3: detected capacity change from 0 to 128 [pid 5823] getdents64(4, [pid 7281] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5824] <... umount2 resumed>) = 0 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] umount2("./284/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] close(4 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... close resumed>) = 0 [pid 5824] newfstatat(AT_FDCWD, "./284/file0", [pid 5823] rmdir("./291/file0" [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... rmdir resumed>) = 0 [pid 5824] umount2("./284/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] umount2("./291/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./291/binderfs", [pid 5824] openat(AT_FDCWD, "./284/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... openat resumed>) = 4 [pid 5823] unlink("./291/binderfs" [pid 5824] newfstatat(4, "", [pid 5823] <... unlink resumed>) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(3, [pid 5824] getdents64(4, [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7282] <... ioctl resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] close(3 [pid 7282] close(3 [pid 5824] getdents64(4, [pid 5823] <... close resumed>) = 0 [pid 7282] <... close resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] rmdir("./291") = 0 [pid 5824] close(4) = 0 [pid 5823] mkdir("./292", 0777 [pid 7282] close(4 [pid 5824] rmdir("./284/file0" [pid 5823] <... mkdir resumed>) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 5824] umount2("./284/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7282] <... close resumed>) = 0 [pid 5824] newfstatat(AT_FDCWD, "./284/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5824] unlink("./284/binderfs" [pid 7282] mkdir("./file0", 0777) = 0 [pid 5824] <... unlink resumed>) = 0 [pid 5823] ioctl(3, LOOP_CLR_FD) = 0 [pid 5823] close(3) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5824] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] close(3) = 0 [pid 7282] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, ""./strace-static-x86_64: Process 7283 attached [pid 5824] rmdir("./284" [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7283 [pid 5824] <... rmdir resumed>) = 0 [pid 5824] mkdir("./285", 0777 [pid 7283] set_robust_list(0x55557eba4660, 24 [pid 5824] <... mkdir resumed>) = 0 [pid 7283] <... set_robust_list resumed>) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7283] chdir("./292" [pid 5824] <... openat resumed>) = 3 [pid 5824] ioctl(3, LOOP_CLR_FD [pid 7283] <... chdir resumed>) = 0 [pid 5824] <... ioctl resumed>) = 0 [pid 7283] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5824] close(3 [pid 7283] <... prctl resumed>) = 0 [pid 5824] <... close resumed>) = 0 [ 226.595572][ T7280] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 226.625706][ T7282] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDexecuting program [pid 7283] setpgid(0, 0) = 0 [pid 7283] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 7284 attached ) = 3 [pid 7283] write(3, "1000", 4 [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7284 [pid 7283] <... write resumed>) = 4 [pid 7284] set_robust_list(0x55557eba4660, 24 [pid 7283] close(3 [pid 7284] <... set_robust_list resumed>) = 0 [pid 7283] <... close resumed>) = 0 [pid 7284] chdir("./285" [pid 7283] symlink("/dev/binderfs", "./binderfs" [pid 7284] <... chdir resumed>) = 0 [pid 7283] <... symlink resumed>) = 0 [pid 7284] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7283] write(1, "executing program\n", 18 [pid 7284] <... prctl resumed>) = 0 [pid 7283] <... write resumed>) = 18 [pid 7284] setpgid(0, 0 [pid 7283] memfd_create("syzkaller", 0 [pid 7284] <... setpgid resumed>) = 0 [pid 7283] <... memfd_create resumed>) = 3 [pid 7284] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7283] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7284] <... openat resumed>) = 3 [pid 7283] <... mmap resumed>) = 0x7f957a000000 [pid 7284] write(3, "1000", 4 [pid 7283] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 7284] <... write resumed>) = 4 [pid 7284] close(3) = 0 [pid 7284] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7283] munmap(0x7f957a000000, 138412032) = 0 [pid 7284] write(1, "executing program\n", 18executing program ) = 18 [pid 7284] memfd_create("syzkaller", 0 [pid 7283] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7284] <... memfd_create resumed>) = 3 [pid 7283] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 7283] ioctl(4, LOOP_CLR_FD) = 0 [pid 7284] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7284] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7283] ioctl(4, LOOP_SET_FD, 3 [pid 7280] <... mount resumed>) = 0 [pid 7283] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 7280] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7284] <... write resumed>) = 65536 [pid 7283] close(4 [pid 7280] <... openat resumed>) = 3 [pid 7283] <... close resumed>) = 0 [pid 7280] chdir("./file0" [pid 7284] munmap(0x7f957a000000, 138412032 [pid 7283] close(3 [pid 7280] <... chdir resumed>) = 0 [pid 7284] <... munmap resumed>) = 0 [pid 7283] <... close resumed>) = 0 [pid 7280] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7283] openat(AT_FDCWD, ".", O_RDONLY [pid 7280] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7283] <... openat resumed>) = 3 [pid 7280] openat(AT_FDCWD, ".", O_RDONLY [pid 7284] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7283] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7280] <... openat resumed>) = 4 [pid 7283] <... renameat2 resumed>) = -1 ENOENT (No such file or directory) [pid 7280] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7283] sync( [pid 7282] <... mount resumed>) = 0 [pid 7281] <... mount resumed>) = 0 [pid 7280] <... renameat2 resumed>) = 0 [pid 7282] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7281] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7282] <... openat resumed>) = 3 [pid 7281] <... openat resumed>) = 3 [pid 7282] chdir("./file0" [ 226.643777][ T7281] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [pid 7281] chdir("./file0" [pid 7282] <... chdir resumed>) = 0 [pid 7281] <... chdir resumed>) = 0 [pid 7282] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7281] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7280] sync( [pid 7282] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7281] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7282] openat(AT_FDCWD, ".", O_RDONLY [pid 7281] openat(AT_FDCWD, ".", O_RDONLY [pid 7282] <... openat resumed>) = 4 [pid 7281] <... openat resumed>) = 4 [pid 7282] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7281] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7282] <... renameat2 resumed>) = 0 [pid 7281] <... renameat2 resumed>) = 0 [pid 7282] sync( [pid 7281] sync( [pid 7284] <... openat resumed>) = 4 [pid 7283] <... sync resumed>) = 0 [pid 7282] <... sync resumed>) = 0 [pid 7281] <... sync resumed>) = 0 [pid 7280] <... sync resumed>) = 0 [pid 7284] ioctl(4, LOOP_SET_FD, 3 [pid 7282] exit_group(0 [pid 7281] exit_group(0 [pid 7280] exit_group(0 [pid 7283] exit_group(0 [pid 7282] <... exit_group resumed>) = ? [pid 7281] <... exit_group resumed>) = ? [pid 7280] <... exit_group resumed>) = ? [pid 7283] <... exit_group resumed>) = ? [pid 7282] +++ exited with 0 +++ [pid 7280] +++ exited with 0 +++ [pid 7283] +++ exited with 0 +++ [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7280, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7282, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5827] umount2("./279", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7281] +++ exited with 0 +++ [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7283, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5827] openat(AT_FDCWD, "./279", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5826] umount2("./290", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 5827] newfstatat(3, "", [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7281, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] openat(AT_FDCWD, "./290", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] getdents64(3, [pid 5826] <... openat resumed>) = 3 [pid 5825] restart_syscall(<... resuming interrupted clone ...> [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5826] newfstatat(3, "", [pid 5827] umount2("./279/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] <... umount2 resumed>) = 0 [pid 5827] umount2("./279/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] getdents64(3, [pid 5825] <... restart_syscall resumed>) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] <... restart_syscall resumed>) = 0 [pid 5827] newfstatat(AT_FDCWD, "./279/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] umount2("./283", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] umount2("./279/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] umount2("./290/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] openat(AT_FDCWD, "./283", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] umount2("./292", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] openat(AT_FDCWD, "./279/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] <... umount2 resumed>) = 0 [pid 5825] <... openat resumed>) = 3 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7284] <... ioctl resumed>) = 0 [pid 5827] <... openat resumed>) = 4 [pid 5826] umount2("./290/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] openat(AT_FDCWD, "./292", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] newfstatat(4, "", [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... openat resumed>) = 3 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] newfstatat(AT_FDCWD, "./290/file0", [pid 5825] newfstatat(3, "", [pid 5823] newfstatat(3, "", [pid 5827] getdents64(4, [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7284] close(3 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5826] umount2("./290/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] getdents64(3, [pid 5823] getdents64(3, [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 5826] openat(AT_FDCWD, "./290/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] umount2("./283/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] umount2("./292/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7284] <... close resumed>) = 0 [pid 5827] getdents64(4, [pid 5826] <... openat resumed>) = 4 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5826] newfstatat(4, "", [ 226.735896][ T7284] loop1: detected capacity change from 0 to 128 [pid 5823] newfstatat(AT_FDCWD, "./292/binderfs", [pid 5827] close(4 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7284] close(4 [pid 5827] <... close resumed>) = 0 [pid 5826] getdents64(4, [pid 5823] unlink("./292/binderfs" [pid 7284] <... close resumed>) = 0 [pid 5827] rmdir("./279/file0" [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 7284] mkdir("./file0", 0777 [pid 5827] <... rmdir resumed>) = 0 [pid 5823] <... unlink resumed>) = 0 [pid 7284] <... mkdir resumed>) = 0 [pid 5827] umount2("./279/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... umount2 resumed>) = 0 [pid 5823] getdents64(3, [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] umount2("./283/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] newfstatat(AT_FDCWD, "./279/binderfs", [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] getdents64(4, [pid 5825] newfstatat(AT_FDCWD, "./283/file0", [pid 5823] close(3 [pid 5827] unlink("./279/binderfs" [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] <... unlink resumed>) = 0 [pid 5826] close(4 [pid 5825] umount2("./283/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... close resumed>) = 0 [pid 7284] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5827] getdents64(3, [pid 5826] <... close resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] rmdir("./292" [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] rmdir("./290/file0" [pid 5825] openat(AT_FDCWD, "./283/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] <... rmdir resumed>) = 0 [pid 5827] close(3 [pid 5826] <... rmdir resumed>) = 0 [pid 5825] <... openat resumed>) = 4 [pid 5823] mkdir("./293", 0777 [pid 5827] <... close resumed>) = 0 [pid 5826] umount2("./290/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] newfstatat(4, "", [pid 5823] <... mkdir resumed>) = 0 [pid 5827] rmdir("./279" [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] <... rmdir resumed>) = 0 [pid 5826] newfstatat(AT_FDCWD, "./290/binderfs", [pid 5825] getdents64(4, [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] <... openat resumed>) = 3 [pid 5826] unlink("./290/binderfs" [pid 5825] getdents64(4, [pid 5823] ioctl(3, LOOP_CLR_FD [pid 5827] mkdir("./280", 0777 [pid 5826] <... unlink resumed>) = 0 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5827] <... mkdir resumed>) = 0 [pid 5826] getdents64(3, [pid 5825] close(4 [pid 5823] close(3 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5825] <... close resumed>) = 0 [pid 5823] <... close resumed>) = 0 [pid 5825] rmdir("./283/file0" [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7285 attached [pid 5826] close(3 [pid 5825] <... rmdir resumed>) = 0 [pid 5826] <... close resumed>) = 0 [pid 5826] rmdir("./290" [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5826] <... rmdir resumed>) = 0 [pid 5825] umount2("./283/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7285] set_robust_list(0x55557eba4660, 24 [pid 5827] <... openat resumed>) = 3 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7285] <... set_robust_list resumed>) = 0 [pid 5825] newfstatat(AT_FDCWD, "./283/binderfs", [pid 7285] chdir("./293" [pid 5826] mkdir("./291", 0777 [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] ioctl(3, LOOP_CLR_FD [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7285 [pid 5827] <... ioctl resumed>) = 0 [pid 5825] unlink("./283/binderfs" [pid 7285] <... chdir resumed>) = 0 [pid 5827] close(3 [pid 5825] <... unlink resumed>) = 0 [pid 7285] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5827] <... close resumed>) = 0 [pid 5826] <... mkdir resumed>) = 0 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7285] <... prctl resumed>) = 0 [pid 7285] setpgid(0, 0./strace-static-x86_64: Process 7286 attached ) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7285] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5826] <... openat resumed>) = 3 [pid 5825] getdents64(3, [pid 5826] ioctl(3, LOOP_CLR_FD [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7285] <... openat resumed>) = 3 [pid 5826] <... ioctl resumed>) = 0 [pid 5825] close(3 [pid 5826] close(3 [pid 5825] <... close resumed>) = 0 [pid 7286] set_robust_list(0x55557eba4660, 24 [pid 5826] <... close resumed>) = 0 [pid 5825] rmdir("./283" [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5825] <... rmdir resumed>) = 0 [pid 7286] <... set_robust_list resumed>) = 0 [pid 7285] write(3, "1000", 4 [pid 7286] chdir("./280" [pid 7285] <... write resumed>) = 4 executing program [pid 7285] close(3 [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7286 [pid 7285] <... close resumed>) = 0 [pid 7285] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 7287 attached ) = 0 [pid 5825] mkdir("./284", 0777 [pid 7287] set_robust_list(0x55557eba4660, 24 [pid 7286] <... chdir resumed>) = 0 [pid 7285] write(1, "executing program\n", 18 [pid 5825] <... mkdir resumed>) = 0 [pid 7287] <... set_robust_list resumed>) = 0 [pid 7286] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7285] <... write resumed>) = 18 [pid 7286] <... prctl resumed>) = 0 [pid 7285] memfd_create("syzkaller", 0 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7287 [pid 7287] chdir("./291" [pid 7286] setpgid(0, 0) = 0 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7287] <... chdir resumed>) = 0 [pid 7286] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7285] <... memfd_create resumed>) = 3 [pid 5825] <... openat resumed>) = 3 [pid 7287] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7286] <... openat resumed>) = 3 [pid 7285] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 7287] <... prctl resumed>) = 0 [pid 7287] setpgid(0, 0 [pid 7286] write(3, "1000", 4 [pid 7285] <... mmap resumed>) = 0x7f957a000000 [pid 5825] <... ioctl resumed>) = 0 [pid 7287] <... setpgid resumed>) = 0 [pid 7286] <... write resumed>) = 4 [pid 7287] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7286] close(3 [pid 7285] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5825] close(3 [pid 7286] <... close resumed>) = 0 [pid 7287] <... openat resumed>) = 3 [pid 7286] symlink("/dev/binderfs", "./binderfs"executing program executing program ) = 0 [pid 5825] <... close resumed>) = 0 [pid 7285] <... write resumed>) = 65536 [pid 7287] write(3, "1000", 4) = 4 [pid 7287] close(3 [pid 7286] write(1, "executing program\n", 18 [pid 7287] <... close resumed>) = 0 [pid 7286] <... write resumed>) = 18 [pid 7287] symlink("/dev/binderfs", "./binderfs" [pid 7286] memfd_create("syzkaller", 0 [pid 7285] munmap(0x7f957a000000, 138412032 [pid 7287] <... symlink resumed>) = 0 [pid 7286] <... memfd_create resumed>) = 3 [pid 7285] <... munmap resumed>) = 0 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7288 attached [pid 7287] write(1, "executing program\n", 18 [pid 7286] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7285] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7287] <... write resumed>) = 18 [pid 7286] <... mmap resumed>) = 0x7f957a000000 [pid 7285] <... openat resumed>) = 4 [pid 7287] memfd_create("syzkaller", 0 [pid 7285] ioctl(4, LOOP_SET_FD, 3 [pid 7288] set_robust_list(0x55557eba4660, 24 [pid 7287] <... memfd_create resumed>) = 3 [pid 7286] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7288] <... set_robust_list resumed>) = 0 [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7288 [pid 7288] chdir("./284") = 0 [pid 7287] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7288] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7287] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7286] <... write resumed>) = 65536 [pid 7288] <... prctl resumed>) = 0 [pid 7288] setpgid(0, 0 [pid 7286] munmap(0x7f957a000000, 138412032 [pid 7287] <... write resumed>) = 65536 [pid 7286] <... munmap resumed>) = 0 [pid 7288] <... setpgid resumed>) = 0 [pid 7288] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7286] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7288] <... openat resumed>) = 3 [pid 7288] write(3, "1000", 4 [pid 7287] munmap(0x7f957a000000, 138412032) = 0 [pid 7287] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7286] <... openat resumed>) = 4 [pid 7287] <... openat resumed>) = 4 [pid 7286] ioctl(4, LOOP_SET_FD, 3executing program [pid 7287] ioctl(4, LOOP_SET_FD, 3 [pid 7288] <... write resumed>) = 4 [pid 7288] close(3) = 0 [pid 7288] symlink("/dev/binderfs", "./binderfs" [pid 7285] <... ioctl resumed>) = 0 [pid 7288] <... symlink resumed>) = 0 [pid 7285] close(3) = 0 [pid 7288] write(1, "executing program\n", 18 [pid 7285] close(4 [pid 7288] <... write resumed>) = 18 [pid 7288] memfd_create("syzkaller", 0) = 3 [pid 7288] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7288] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 7288] munmap(0x7f957a000000, 138412032 [pid 7286] <... ioctl resumed>) = 0 [ 226.865082][ T7285] loop0: detected capacity change from 0 to 128 [ 226.872430][ T7284] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 226.897987][ T7286] loop4: detected capacity change from 0 to 128 [ 226.907483][ T7287] loop3: detected capacity change from 0 to 128 [pid 7288] <... munmap resumed>) = 0 [pid 7287] <... ioctl resumed>) = 0 [pid 7286] close(3 [pid 7285] <... close resumed>) = 0 [pid 7284] <... mount resumed>) = 0 [pid 7285] mkdir("./file0", 0777 [pid 7284] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7285] <... mkdir resumed>) = 0 [pid 7284] <... openat resumed>) = 3 [pid 7286] <... close resumed>) = 0 [pid 7285] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7284] chdir("./file0" [pid 7288] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7287] close(3 [pid 7286] close(4 [pid 7284] <... chdir resumed>) = 0 [pid 7288] <... openat resumed>) = 4 [pid 7287] <... close resumed>) = 0 [pid 7286] <... close resumed>) = 0 [pid 7284] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7288] ioctl(4, LOOP_SET_FD, 3 [pid 7287] close(4 [pid 7286] mkdir("./file0", 0777 [pid 7284] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7286] <... mkdir resumed>) = 0 [pid 7284] openat(AT_FDCWD, ".", O_RDONLY [pid 7287] <... close resumed>) = 0 [pid 7284] <... openat resumed>) = 4 [pid 7287] mkdir("./file0", 0777 [pid 7284] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7287] <... mkdir resumed>) = 0 [pid 7286] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7284] <... renameat2 resumed>) = 0 [pid 7287] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7284] sync( [pid 7288] <... ioctl resumed>) = 0 [pid 7288] close(3) = 0 [pid 7288] close(4) = 0 [ 226.943231][ T7288] loop2: detected capacity change from 0 to 128 [ 226.955376][ T7285] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 226.978916][ T7287] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [pid 7288] mkdir("./file0", 0777) = 0 [pid 7288] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7285] <... mount resumed>) = 0 [pid 7285] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7285] chdir("./file0") = 0 [pid 7285] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7285] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7285] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = 0 [ 226.994106][ T7286] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 227.009258][ T7288] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [pid 7285] sync( [pid 7287] <... mount resumed>) = 0 [pid 7287] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7287] chdir("./file0") = 0 [pid 7286] <... mount resumed>) = 0 [pid 7287] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7286] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7287] openat(AT_FDCWD, ".", O_RDONLY [pid 7286] <... openat resumed>) = 3 [pid 7286] chdir("./file0" [pid 7287] <... openat resumed>) = 4 [pid 7286] <... chdir resumed>) = 0 [pid 7286] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7287] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7288] <... mount resumed>) = 0 [pid 7286] openat(AT_FDCWD, ".", O_RDONLY [pid 7288] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7286] <... openat resumed>) = 4 [pid 7288] <... openat resumed>) = 3 [pid 7286] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7288] chdir("./file0" [pid 7286] <... renameat2 resumed>) = 0 [pid 7288] <... chdir resumed>) = 0 [pid 7288] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7288] openat(AT_FDCWD, ".", O_RDONLY [pid 7286] sync( [pid 7288] <... openat resumed>) = 4 [pid 7288] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = 0 [pid 7287] <... renameat2 resumed>) = 0 [pid 7288] sync( [pid 7285] <... sync resumed>) = 0 [pid 7285] exit_group(0 [pid 7286] <... sync resumed>) = 0 [pid 7285] <... exit_group resumed>) = ? [pid 7284] <... sync resumed>) = 0 [pid 7287] sync( [pid 7286] exit_group(0 [pid 7285] +++ exited with 0 +++ [pid 7284] exit_group(0 [pid 7288] <... sync resumed>) = 0 [pid 7286] <... exit_group resumed>) = ? [pid 7284] <... exit_group resumed>) = ? [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7285, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 7284] +++ exited with 0 +++ [pid 7288] exit_group(0 [pid 7287] <... sync resumed>) = 0 [pid 7286] +++ exited with 0 +++ [pid 7288] <... exit_group resumed>) = ? [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7284, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 7288] +++ exited with 0 +++ [pid 7287] exit_group(0) = ? [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7286, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5823] umount2("./293", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] restart_syscall(<... resuming interrupted clone ...> [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7288, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5825] restart_syscall(<... resuming interrupted clone ...> [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./293", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5823] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(3, [pid 7287] +++ exited with 0 +++ [pid 5827] <... restart_syscall resumed>) = 0 [pid 5825] <... restart_syscall resumed>) = 0 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] umount2("./293/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] umount2("./280", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./284", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] openat(AT_FDCWD, "./280", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] openat(AT_FDCWD, "./284", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] <... openat resumed>) = 3 [pid 5825] <... openat resumed>) = 3 [pid 5827] newfstatat(3, "", [pid 5825] newfstatat(3, "", [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] getdents64(3, [pid 5825] getdents64(3, [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5827] umount2("./280/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./284/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7287, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5824] umount2("./285", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... umount2 resumed>) = 0 [pid 5823] umount2("./293/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] umount2("./291", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./291", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] openat(AT_FDCWD, "./285", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] newfstatat(AT_FDCWD, "./293/file0", [pid 5826] <... openat resumed>) = 3 [pid 5826] newfstatat(3, "", [pid 5824] <... openat resumed>) = 3 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] getdents64(3, [pid 5824] newfstatat(3, "", [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] umount2("./293/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] umount2("./291/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./293/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] getdents64(3, [pid 5823] <... openat resumed>) = 4 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] newfstatat(4, "", [pid 5824] umount2("./285/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(4, [pid 5826] <... umount2 resumed>) = 0 [pid 5825] <... umount2 resumed>) = 0 [pid 5826] umount2("./291/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... umount2 resumed>) = 0 [pid 5825] umount2("./284/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] umount2("./280/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] newfstatat(AT_FDCWD, "./284/file0", [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] newfstatat(AT_FDCWD, "./280/file0", [pid 5825] umount2("./284/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] umount2("./280/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./284/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./291/file0", [pid 5825] <... openat resumed>) = 4 [pid 5827] openat(AT_FDCWD, "./280/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] newfstatat(4, "", [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5827] <... openat resumed>) = 4 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(4, [pid 5827] newfstatat(4, "", [pid 5825] getdents64(4, [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] close(4 [pid 5827] getdents64(4, [pid 5825] getdents64(4, [pid 5823] <... close resumed>) = 0 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] rmdir("./293/file0" [pid 5827] getdents64(4, [pid 5825] close(4 [pid 5823] <... rmdir resumed>) = 0 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5825] <... close resumed>) = 0 [pid 5823] umount2("./293/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] close(4 [pid 5825] rmdir("./284/file0" [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... close resumed>) = 0 [pid 5825] <... rmdir resumed>) = 0 [pid 5823] newfstatat(AT_FDCWD, "./293/binderfs", [pid 5827] rmdir("./280/file0" [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] <... rmdir resumed>) = 0 [pid 5823] unlink("./293/binderfs" [pid 5826] umount2("./291/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... unlink resumed>) = 0 [pid 5827] umount2("./280/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] umount2("./284/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... umount2 resumed>) = 0 [pid 5823] getdents64(3, [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] umount2("./285/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5827] newfstatat(AT_FDCWD, "./280/binderfs", [pid 5826] openat(AT_FDCWD, "./291/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] close(3 [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] newfstatat(AT_FDCWD, "./285/file0", [pid 5823] <... close resumed>) = 0 [pid 5827] unlink("./280/binderfs" [pid 5826] <... openat resumed>) = 4 [pid 5825] newfstatat(AT_FDCWD, "./284/binderfs", [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] rmdir("./293" [pid 5826] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] umount2("./285/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... rmdir resumed>) = 0 [pid 5826] getdents64(4, [pid 5825] unlink("./284/binderfs" [pid 5827] <... unlink resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] <... unlink resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] mkdir("./294", 0777 [pid 5826] getdents64(4, [pid 5825] getdents64(3, [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5826] close(4 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] openat(AT_FDCWD, "./285/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] <... mkdir resumed>) = 0 [pid 5826] <... close resumed>) = 0 [pid 5825] close(3 [pid 5827] getdents64(3, [pid 5826] rmdir("./291/file0" [pid 5825] <... close resumed>) = 0 [pid 5824] <... openat resumed>) = 4 [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5825] rmdir("./284" [pid 5824] newfstatat(4, "", [pid 5823] <... openat resumed>) = 3 [pid 5826] <... rmdir resumed>) = 0 [pid 5827] close(3 [pid 5826] umount2("./291/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... rmdir resumed>) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] ioctl(3, LOOP_CLR_FD [pid 5827] <... close resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] mkdir("./285", 0777 [pid 5824] getdents64(4, [pid 5823] <... ioctl resumed>) = 0 [pid 5826] newfstatat(AT_FDCWD, "./291/binderfs", [pid 5827] rmdir("./280" [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] close(3 [pid 5827] <... rmdir resumed>) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... mkdir resumed>) = 0 [pid 5824] getdents64(4, [pid 5823] <... close resumed>) = 0 [pid 5826] unlink("./291/binderfs" [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5826] <... unlink resumed>) = 0 [pid 5825] <... openat resumed>) = 3 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 7289 attached [pid 5827] mkdir("./281", 0777 [pid 5826] getdents64(3, [pid 5825] ioctl(3, LOOP_CLR_FD [pid 5824] close(4 [pid 7289] set_robust_list(0x55557eba4660, 24 [pid 5827] <... mkdir resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5825] <... ioctl resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 7289] <... set_robust_list resumed>) = 0 [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5826] close(3 [pid 5825] close(3 [pid 5824] rmdir("./285/file0" [pid 7289] chdir("./294" [pid 5827] <... openat resumed>) = 3 [pid 5824] <... rmdir resumed>) = 0 [pid 5826] <... close resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 5824] umount2("./285/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7289 [pid 7289] <... chdir resumed>) = 0 [pid 5827] ioctl(3, LOOP_CLR_FD [pid 5826] rmdir("./291" [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7289] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7289] setpgid(0, 0) = 0 [pid 7289] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 7290 attached ) = 3 [pid 5826] <... rmdir resumed>) = 0 [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7290 [pid 5826] mkdir("./292", 0777 [pid 7289] write(3, "1000", 4 [pid 5827] <... ioctl resumed>) = 0 [pid 7289] <... write resumed>) = 4 [pid 5827] close(3 [pid 7289] close(3 [pid 5827] <... close resumed>) = 0 [pid 5826] <... mkdir resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7289] <... close resumed>) = 0 [pid 5824] newfstatat(AT_FDCWD, "./285/binderfs", [pid 7290] set_robust_list(0x55557eba4660, 24 [pid 7289] symlink("/dev/binderfs", "./binderfs" [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7289] <... symlink resumed>) = 0 [pid 5824] unlink("./285/binderfs") = 0 [pid 5824] getdents64(3, executing program [pid 7289] write(1, "executing program\n", 18 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7289] <... write resumed>) = 18 [pid 5824] close(3 [pid 7289] memfd_create("syzkaller", 0 [pid 5824] <... close resumed>) = 0 [pid 5824] rmdir("./285" [pid 7290] <... set_robust_list resumed>) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7289] <... memfd_create resumed>) = 3 [pid 7290] chdir("./285" [pid 7289] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7291 attached [pid 7290] <... chdir resumed>) = 0 [pid 7289] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5824] mkdir("./286", 0777 [pid 7290] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5824] <... mkdir resumed>) = 0 [pid 7291] set_robust_list(0x55557eba4660, 24 [pid 7290] <... prctl resumed>) = 0 [pid 7289] <... write resumed>) = 65536 [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7291 [pid 7291] <... set_robust_list resumed>) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 7291] chdir("./281" [pid 7290] setpgid(0, 0 [pid 7289] munmap(0x7f957a000000, 138412032 [pid 5826] <... openat resumed>) = 3 [pid 5824] ioctl(3, LOOP_CLR_FD [pid 7290] <... setpgid resumed>) = 0 [pid 7291] <... chdir resumed>) = 0 [pid 7289] <... munmap resumed>) = 0 [pid 5824] <... ioctl resumed>) = 0 [pid 7291] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5824] close(3 [pid 7291] <... prctl resumed>) = 0 [pid 7289] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5824] <... close resumed>) = 0 [pid 7291] setpgid(0, 0 [pid 7289] <... openat resumed>) = 4 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7289] ioctl(4, LOOP_SET_FD, 3 [pid 7291] <... setpgid resumed>) = 0 [pid 7290] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7289] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5826] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 7292 attached [pid 7291] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7289] ioctl(4, LOOP_CLR_FD) = 0 [pid 7291] <... openat resumed>) = 3 [pid 7291] write(3, "1000", 4) = 4 [pid 7291] close(3) = 0 [pid 7291] symlink("/dev/binderfs", "./binderfs" [pid 7292] set_robust_list(0x55557eba4660, 24 [pid 7290] <... openat resumed>) = 3 [pid 5826] <... ioctl resumed>) = 0 [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7292 executing program [pid 7290] write(3, "1000", 4 [pid 5826] close(3 [pid 7292] <... set_robust_list resumed>) = 0 [pid 7289] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 7291] <... symlink resumed>) = 0 [pid 7289] close(4) = 0 [pid 7289] close(3 [pid 7291] write(1, "executing program\n", 18 [pid 7289] <... close resumed>) = 0 [pid 7291] <... write resumed>) = 18 [pid 7291] memfd_create("syzkaller", 0 [pid 7289] openat(AT_FDCWD, ".", O_RDONLY [pid 7291] <... memfd_create resumed>) = 3 [pid 7290] <... write resumed>) = 4 [pid 7289] <... openat resumed>) = 3 [pid 5826] <... close resumed>) = 0 [pid 7292] chdir("./286" [pid 7290] close(3 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7292] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 7293 attached [pid 7292] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7291] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7290] <... close resumed>) = 0 [pid 7289] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7292] <... prctl resumed>) = 0 [pid 7290] symlink("/dev/binderfs", "./binderfs" [pid 7291] <... mmap resumed>) = 0x7f957a000000 [pid 7290] <... symlink resumed>) = 0 [pid 7289] <... renameat2 resumed>) = -1 ENOENT (No such file or directory) [pid 7292] setpgid(0, 0 [pid 7293] set_robust_list(0x55557eba4660, 24 [pid 7292] <... setpgid resumed>) = 0 [pid 7291] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7290] write(1, "executing program\n", 18 [pid 7289] sync(executing program [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7293 [pid 7293] <... set_robust_list resumed>) = 0 [pid 7292] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7291] <... write resumed>) = 65536 [pid 7290] <... write resumed>) = 18 [pid 7291] munmap(0x7f957a000000, 138412032) = 0 [pid 7293] chdir("./292" [pid 7292] <... openat resumed>) = 3 [pid 7290] memfd_create("syzkaller", 0 [pid 7293] <... chdir resumed>) = 0 [pid 7292] write(3, "1000", 4 [pid 7290] <... memfd_create resumed>) = 3 [pid 7292] <... write resumed>) = 4 [pid 7290] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7293] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7292] close(3) = 0 [pid 7291] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7293] <... prctl resumed>) = 0 [pid 7293] setpgid(0, 0 [pid 7291] <... openat resumed>) = 4 [pid 7291] ioctl(4, LOOP_SET_FD, 3 [pid 7293] <... setpgid resumed>) = 0 [pid 7293] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7292] symlink("/dev/binderfs", "./binderfs" [pid 7290] <... mmap resumed>) = 0x7f957a000000 [pid 7292] <... symlink resumed>) = 0 executing program [pid 7293] <... openat resumed>) = 3 [pid 7292] write(1, "executing program\n", 18 [pid 7290] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7291] <... ioctl resumed>) = 0 [pid 7291] close(3) = 0 [pid 7292] <... write resumed>) = 18 [pid 7291] close(4) = 0 [pid 7292] memfd_create("syzkaller", 0 [pid 7291] mkdir("./file0", 0777) = 0 [pid 7292] <... memfd_create resumed>) = 3 [pid 7291] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7293] write(3, "1000", 4 [pid 7292] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7290] <... write resumed>) = 65536 [pid 7293] <... write resumed>) = 4 [pid 7292] <... mmap resumed>) = 0x7f957a000000 [pid 7293] close(3) = 0 [pid 7292] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7290] munmap(0x7f957a000000, 138412032 [pid 7293] symlink("/dev/binderfs", "./binderfs" [pid 7290] <... munmap resumed>) = 0 [pid 7293] <... symlink resumed>) = 0 executing program [pid 7293] write(1, "executing program\n", 18 [pid 7292] <... write resumed>) = 65536 [pid 7290] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7293] <... write resumed>) = 18 [ 227.335278][ T7291] loop4: detected capacity change from 0 to 128 [ 227.361995][ T7291] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [pid 7293] memfd_create("syzkaller", 0 [pid 7290] <... openat resumed>) = 4 [pid 7293] <... memfd_create resumed>) = 3 [pid 7290] ioctl(4, LOOP_SET_FD, 3 [pid 7293] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7293] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 7292] munmap(0x7f957a000000, 138412032 [pid 7290] <... ioctl resumed>) = 0 [pid 7292] <... munmap resumed>) = 0 [pid 7293] munmap(0x7f957a000000, 138412032) = 0 [pid 7293] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7292] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7291] <... mount resumed>) = 0 [pid 7290] close(3 [pid 7293] <... openat resumed>) = 4 [pid 7292] <... openat resumed>) = 4 [pid 7291] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7290] <... close resumed>) = 0 [pid 7289] <... sync resumed>) = 0 [ 227.381037][ T7290] loop2: detected capacity change from 0 to 128 [pid 7293] ioctl(4, LOOP_SET_FD, 3 [pid 7292] ioctl(4, LOOP_SET_FD, 3 [pid 7291] <... openat resumed>) = 3 [pid 7290] close(4 [pid 7289] exit_group(0 [pid 7291] chdir("./file0" [pid 7289] <... exit_group resumed>) = ? [pid 7291] <... chdir resumed>) = 0 [pid 7291] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7291] openat(AT_FDCWD, ".", O_RDONLY [pid 7290] <... close resumed>) = 0 [pid 7289] +++ exited with 0 +++ [pid 7291] <... openat resumed>) = 4 [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7289, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 7291] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = 0 [pid 7293] <... ioctl resumed>) = 0 [pid 7290] mkdir("./file0", 0777 [pid 7293] close(3 [pid 7292] <... ioctl resumed>) = 0 [pid 7290] <... mkdir resumed>) = 0 [pid 7290] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5823] umount2("./294", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./294", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7291] sync( [pid 7293] <... close resumed>) = 0 [pid 5823] <... openat resumed>) = 3 [pid 7292] close(3 [pid 5823] newfstatat(3, "", [pid 7293] close(4 [pid 7292] <... close resumed>) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7292] close(4 [pid 5823] getdents64(3, 0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 7293] <... close resumed>) = 0 [pid 7292] <... close resumed>) = 0 [pid 5823] umount2("./294/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7293] mkdir("./file0", 0777 [pid 7292] mkdir("./file0", 0777 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./294/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./294/binderfs" [pid 7292] <... mkdir resumed>) = 0 [pid 5823] <... unlink resumed>) = 0 [pid 7293] <... mkdir resumed>) = 0 [pid 5823] getdents64(3, [pid 7292] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [ 227.413556][ T7293] loop3: detected capacity change from 0 to 128 [ 227.420460][ T7292] loop1: detected capacity change from 0 to 128 [ 227.450077][ T7290] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [pid 5823] close(3 [pid 7293] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5823] <... close resumed>) = 0 [pid 5823] rmdir("./294") = 0 [pid 7290] <... mount resumed>) = 0 [pid 5823] mkdir("./295", 0777 [pid 7290] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5823] <... mkdir resumed>) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5823] ioctl(3, LOOP_CLR_FD [pid 7290] <... openat resumed>) = 3 [pid 5823] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5823] close(3 [pid 7290] chdir("./file0" [pid 5823] <... close resumed>) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7294 attached , child_tidptr=0x55557eba4650) = 7294 [pid 7294] set_robust_list(0x55557eba4660, 24 [pid 7290] <... chdir resumed>) = 0 [pid 7294] <... set_robust_list resumed>) = 0 [pid 7294] chdir("./295") = 0 [pid 7294] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7294] setpgid(0, 0) = 0 [pid 7294] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7290] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7294] <... openat resumed>) = 3 [pid 7294] write(3, "1000", 4) = 4 [pid 7294] close(3) = 0 [pid 7294] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7290] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7290] openat(AT_FDCWD, ".", O_RDONLY [pid 7294] write(1, "executing program\n", 18executing program ) = 18 [pid 7290] <... openat resumed>) = 4 [pid 7294] memfd_create("syzkaller", 0 [pid 7290] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7294] <... memfd_create resumed>) = 3 [pid 7294] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7290] <... renameat2 resumed>) = 0 [pid 7294] <... mmap resumed>) = 0x7f957a000000 [pid 7290] sync( [pid 7292] <... mount resumed>) = 0 [pid 7294] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7292] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7293] <... mount resumed>) = 0 [pid 7294] <... write resumed>) = 65536 [pid 7293] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7292] chdir("./file0" [pid 7294] munmap(0x7f957a000000, 138412032 [pid 7293] <... openat resumed>) = 3 [pid 7292] <... chdir resumed>) = 0 [pid 7291] <... sync resumed>) = 0 [pid 7290] <... sync resumed>) = 0 [ 227.467980][ T7292] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 227.483918][ T7293] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [pid 7294] <... munmap resumed>) = 0 [pid 7293] chdir("./file0" [pid 7292] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7291] exit_group(0 [pid 7290] exit_group(0 [pid 7294] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7294] ioctl(4, LOOP_SET_FD, 3 [pid 7293] <... chdir resumed>) = 0 [pid 7292] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7291] <... exit_group resumed>) = ? [pid 7290] <... exit_group resumed>) = ? [pid 7293] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7292] openat(AT_FDCWD, ".", O_RDONLY [pid 7291] +++ exited with 0 +++ [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7291, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5827] restart_syscall(<... resuming interrupted clone ...> [pid 7292] <... openat resumed>) = 4 [pid 7293] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7292] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7290] +++ exited with 0 +++ [pid 7293] openat(AT_FDCWD, ".", O_RDONLY [pid 7292] <... renameat2 resumed>) = 0 [pid 5827] <... restart_syscall resumed>) = 0 [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7290, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7293] <... openat resumed>) = 4 [pid 5825] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 7292] sync( [pid 5827] umount2("./281", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./285", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7293] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] openat(AT_FDCWD, "./281", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] openat(AT_FDCWD, "./285", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] <... openat resumed>) = 3 [pid 5825] <... openat resumed>) = 3 [pid 5827] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5827] umount2("./281/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(3, [pid 7293] <... renameat2 resumed>) = 0 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5825] umount2("./285/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... umount2 resumed>) = 0 [pid 5827] umount2("./281/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] newfstatat(AT_FDCWD, "./281/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] umount2("./281/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7293] sync( [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] openat(AT_FDCWD, "./281/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5827] newfstatat(4, "", [pid 5825] <... umount2 resumed>) = 0 [pid 5825] umount2("./285/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./285/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] umount2("./285/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./285/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] <... openat resumed>) = 4 [pid 7292] <... sync resumed>) = 0 [pid 5827] getdents64(4, [pid 5825] newfstatat(4, "", [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7294] <... ioctl resumed>) = 0 [pid 7292] exit_group(0 [pid 5827] getdents64(4, [pid 5825] getdents64(4, [pid 7294] close(3 [pid 7292] <... exit_group resumed>) = ? [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 7294] <... close resumed>) = 0 [pid 7293] <... sync resumed>) = 0 [pid 5827] close(4 [pid 5825] getdents64(4, [pid 7294] close(4 [pid 7292] +++ exited with 0 +++ [pid 7294] <... close resumed>) = 0 [pid 7293] exit_group(0 [pid 5827] <... close resumed>) = 0 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 7293] <... exit_group resumed>) = ? [pid 5827] rmdir("./281/file0" [pid 5825] close(4 [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7292, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7294] mkdir("./file0", 0777 [pid 5827] <... rmdir resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 7294] <... mkdir resumed>) = 0 [pid 7293] +++ exited with 0 +++ [pid 5825] rmdir("./285/file0" [pid 5824] <... restart_syscall resumed>) = 0 [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7293, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [ 227.559652][ T7294] loop0: detected capacity change from 0 to 128 [pid 5826] restart_syscall(<... resuming interrupted clone ...> [pid 5825] <... rmdir resumed>) = 0 [pid 5827] umount2("./281/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./285/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7294] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] umount2("./286", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] newfstatat(AT_FDCWD, "./281/binderfs", [pid 5826] <... restart_syscall resumed>) = 0 [pid 5825] newfstatat(AT_FDCWD, "./285/binderfs", [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./286", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... openat resumed>) = 3 [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./285/binderfs" [pid 5824] newfstatat(3, "", [pid 5825] <... unlink resumed>) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] unlink("./281/binderfs" [pid 5825] getdents64(3, [pid 5824] getdents64(3, [pid 5827] <... unlink resumed>) = 0 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5826] umount2("./292", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] close(3 [pid 5824] umount2("./286/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] getdents64(3, [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... close resumed>) = 0 [pid 5826] openat(AT_FDCWD, "./292", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5825] rmdir("./285" [pid 5826] newfstatat(3, "", [pid 5824] <... umount2 resumed>) = 0 [pid 5824] umount2("./286/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] getdents64(3, [pid 5824] newfstatat(AT_FDCWD, "./286/file0", [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] umount2("./292/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./286/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] <... rmdir resumed>) = 0 [pid 5824] openat(AT_FDCWD, "./286/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5827] close(3) = 0 [pid 5824] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(4, [pid 5827] rmdir("./281" [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5827] <... rmdir resumed>) = 0 [pid 5825] mkdir("./286", 0777 [pid 5824] getdents64(4, [pid 5825] <... mkdir resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] close(4) = 0 [pid 5826] <... umount2 resumed>) = 0 [pid 5824] rmdir("./286/file0" [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5827] mkdir("./282", 0777 [pid 5825] <... openat resumed>) = 3 [pid 5827] <... mkdir resumed>) = 0 [pid 5825] ioctl(3, LOOP_CLR_FD) = 0 [pid 5825] close(3) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5826] umount2("./292/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... openat resumed>) = 3 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7295 [pid 5824] umount2("./286/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 7295 attached [pid 5827] ioctl(3, LOOP_CLR_FD [pid 5824] newfstatat(AT_FDCWD, "./286/binderfs", [pid 5827] <... ioctl resumed>) = 0 [pid 5826] newfstatat(AT_FDCWD, "./292/file0", [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] close(3 [pid 5824] unlink("./286/binderfs" [pid 5827] <... close resumed>) = 0 [pid 5824] <... unlink resumed>) = 0 [pid 7295] set_robust_list(0x55557eba4660, 24 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5824] getdents64(3, [pid 7295] <... set_robust_list resumed>) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7295] chdir("./286" [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] umount2("./292/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] close(3./strace-static-x86_64: Process 7296 attached [pid 7295] <... chdir resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... close resumed>) = 0 [pid 7296] set_robust_list(0x55557eba4660, 24 [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7296 [pid 5826] openat(AT_FDCWD, "./292/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7295] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5824] rmdir("./286" [pid 7296] <... set_robust_list resumed>) = 0 [pid 7295] <... prctl resumed>) = 0 [pid 5826] <... openat resumed>) = 4 [pid 5824] <... rmdir resumed>) = 0 [pid 7295] setpgid(0, 0 [pid 5824] mkdir("./287", 0777 [pid 7295] <... setpgid resumed>) = 0 [pid 5824] <... mkdir resumed>) = 0 [pid 7295] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7296] chdir("./282" [pid 7295] <... openat resumed>) = 3 [pid 5826] newfstatat(4, "", [pid 5824] <... openat resumed>) = 3 [pid 7295] write(3, "1000", 4 [pid 5824] ioctl(3, LOOP_CLR_FD [pid 7295] <... write resumed>) = 4 [pid 5824] <... ioctl resumed>) = 0 [pid 7295] close(3 [pid 5824] close(3 [pid 7296] <... chdir resumed>) = 0 [pid 7295] <... close resumed>) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] <... close resumed>) = 0 [pid 7296] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5826] getdents64(4, [pid 7296] <... prctl resumed>) = 0 [pid 7295] symlink("/dev/binderfs", "./binderfs" [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 7296] setpgid(0, 0 [pid 5826] getdents64(4, [pid 7296] <... setpgid resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 executing program ./strace-static-x86_64: Process 7297 attached [pid 7296] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7295] <... symlink resumed>) = 0 [pid 5826] close(4 [pid 7295] write(1, "executing program\n", 18 [pid 5826] <... close resumed>) = 0 [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7297 [pid 7296] <... openat resumed>) = 3 [pid 5826] rmdir("./292/file0" [pid 7295] <... write resumed>) = 18 [pid 5826] <... rmdir resumed>) = 0 [pid 7295] memfd_create("syzkaller", 0 [pid 5826] umount2("./292/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7295] <... memfd_create resumed>) = 3 [pid 7295] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7296] write(3, "1000", 4 [pid 7295] <... mmap resumed>) = 0x7f957a000000 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7296] <... write resumed>) = 4 [pid 5826] newfstatat(AT_FDCWD, "./292/binderfs", [ 227.670637][ T7294] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [pid 7296] close(3 [pid 7297] set_robust_list(0x55557eba4660, 24 [pid 7296] <... close resumed>) = 0 [pid 7295] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7297] <... set_robust_list resumed>) = 0 [pid 7295] <... write resumed>) = 65536 [pid 7297] chdir("./287" [pid 7295] munmap(0x7f957a000000, 138412032) = 0 [pid 5826] unlink("./292/binderfs" [pid 7297] <... chdir resumed>) = 0 [pid 7297] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7297] setpgid(0, 0 [pid 7295] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 7295] ioctl(4, LOOP_SET_FD, 3 [pid 7296] symlink("/dev/binderfs", "./binderfs" [pid 5826] <... unlink resumed>) = 0 [pid 5826] getdents64(3, executing program [pid 7297] <... setpgid resumed>) = 0 [pid 7296] <... symlink resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7297] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5826] close(3 [pid 7297] <... openat resumed>) = 3 [pid 5826] <... close resumed>) = 0 [pid 7297] write(3, "1000", 4) = 4 [pid 7297] close(3) = 0 [pid 7297] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7297] write(1, "executing program\n", 18) = 18 [pid 7297] memfd_create("syzkaller", 0 [pid 5826] rmdir("./292" [pid 7297] <... memfd_create resumed>) = 3 [pid 7297] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7297] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5826] <... rmdir resumed>) = 0 [pid 7296] write(1, "executing program\n", 18 [pid 5826] mkdir("./293", 0777executing program [pid 7297] <... write resumed>) = 65536 [pid 7297] munmap(0x7f957a000000, 138412032) = 0 [pid 7296] <... write resumed>) = 18 [pid 5826] <... mkdir resumed>) = 0 [pid 7297] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 7296] memfd_create("syzkaller", 0 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7296] <... memfd_create resumed>) = 3 [pid 5826] <... openat resumed>) = 3 [pid 7296] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 5826] ioctl(3, LOOP_CLR_FD [pid 7297] ioctl(4, LOOP_SET_FD, 3 [pid 7295] <... ioctl resumed>) = 0 [pid 7296] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5826] <... ioctl resumed>) = 0 [pid 7297] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 7295] close(3 [pid 7297] ioctl(4, LOOP_CLR_FD [pid 7295] <... close resumed>) = 0 [pid 7297] <... ioctl resumed>) = 0 [pid 7295] close(4) = 0 [pid 7295] mkdir("./file0", 0777) = 0 [pid 7297] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 5826] close(3 [pid 7297] close(4 [pid 7295] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7297] <... close resumed>) = 0 [pid 5826] <... close resumed>) = 0 [pid 7297] close(3 [pid 7296] <... write resumed>) = 65536 [pid 7294] <... mount resumed>) = 0 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7297] <... close resumed>) = 0 [pid 7294] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7297] openat(AT_FDCWD, ".", O_RDONLY [pid 7294] chdir("./file0"./strace-static-x86_64: Process 7298 attached [pid 7297] <... openat resumed>) = 3 [pid 7294] <... chdir resumed>) = 0 [pid 7296] munmap(0x7f957a000000, 138412032 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7298 [pid 7298] set_robust_list(0x55557eba4660, 24 [pid 7296] <... munmap resumed>) = 0 [pid 7294] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7298] <... set_robust_list resumed>) = 0 [pid 7297] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7296] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7297] <... renameat2 resumed>) = -1 ENOENT (No such file or directory) [pid 7294] openat(AT_FDCWD, ".", O_RDONLY [pid 7297] sync( [pid 7294] <... openat resumed>) = 4 [pid 7294] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7298] chdir("./293" [pid 7296] <... openat resumed>) = 4 [ 227.712938][ T7295] loop2: detected capacity change from 0 to 128 [pid 7296] ioctl(4, LOOP_SET_FD, 3 [pid 7294] <... renameat2 resumed>) = 0 [pid 7294] sync( [pid 7298] <... chdir resumed>) = 0 [pid 7298] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7296] <... ioctl resumed>) = 0 [pid 7298] <... prctl resumed>) = 0 [pid 7296] close(3 [pid 7298] setpgid(0, 0) = 0 [pid 7298] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7296] <... close resumed>) = 0 [pid 7298] write(3, "1000", 4 [pid 7296] close(4) = 0 [pid 7298] <... write resumed>) = 4 [pid 7296] mkdir("./file0", 0777 [pid 7298] close(3 [pid 7296] <... mkdir resumed>) = 0 [pid 7298] <... close resumed>) = 0 [pid 7296] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7298] symlink("/dev/binderfs", "./binderfs") = 0 [ 227.767041][ T7296] loop4: detected capacity change from 0 to 128 [ 227.774635][ T7295] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 executing program [pid 7298] write(1, "executing program\n", 18) = 18 [pid 7298] memfd_create("syzkaller", 0) = 3 [pid 7298] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7298] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7295] <... mount resumed>) = 0 [pid 7295] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7295] chdir("./file0") = 0 [pid 7295] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7295] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7295] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7298] <... write resumed>) = 65536 [pid 7298] munmap(0x7f957a000000, 138412032 [pid 7295] <... renameat2 resumed>) = 0 [pid 7295] sync( [pid 7298] <... munmap resumed>) = 0 [pid 7298] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 227.811122][ T7296] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [pid 7298] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7298] close(3) = 0 [pid 7296] <... mount resumed>) = 0 [pid 7298] close(4 [pid 7296] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7298] <... close resumed>) = 0 [pid 7296] <... openat resumed>) = 3 [pid 7296] chdir("./file0") = 0 [pid 7298] mkdir("./file0", 0777 [pid 7296] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7296] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7296] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = 0 [pid 7296] sync( [pid 7298] <... mkdir resumed>) = 0 [ 227.870615][ T7298] loop3: detected capacity change from 0 to 128 [pid 7298] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "") = 0 [pid 7298] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7298] chdir("./file0") = 0 [pid 7298] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7298] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7297] <... sync resumed>) = 0 [pid 7296] <... sync resumed>) = 0 [pid 7295] <... sync resumed>) = 0 [pid 7294] <... sync resumed>) = 0 [pid 7297] exit_group(0 [pid 7295] exit_group(0 [pid 7294] exit_group(0 [pid 7296] exit_group(0 [pid 7298] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7296] <... exit_group resumed>) = ? [pid 7295] <... exit_group resumed>) = ? [pid 7294] <... exit_group resumed>) = ? [pid 7296] +++ exited with 0 +++ [pid 7295] +++ exited with 0 +++ [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7296, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7295, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5827] restart_syscall(<... resuming interrupted clone ...> [pid 5825] restart_syscall(<... resuming interrupted clone ...> [pid 5827] <... restart_syscall resumed>) = 0 [pid 5825] <... restart_syscall resumed>) = 0 [pid 7294] +++ exited with 0 +++ [pid 5827] umount2("./282", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7294, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] umount2("./286", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] openat(AT_FDCWD, "./282", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7297] <... exit_group resumed>) = ? [pid 5827] <... openat resumed>) = 3 [pid 5825] openat(AT_FDCWD, "./286", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7298] <... renameat2 resumed>) = 0 [pid 5827] newfstatat(3, "", [pid 5825] <... openat resumed>) = 3 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] newfstatat(3, "", [pid 5827] getdents64(3, [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5825] getdents64(3, [pid 5827] umount2("./282/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 7298] sync( [ 227.933027][ T7298] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [pid 5825] umount2("./286/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7297] +++ exited with 0 +++ [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7297, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 5827] <... umount2 resumed>) = 0 [pid 5827] umount2("./282/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... restart_syscall resumed>) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] newfstatat(AT_FDCWD, "./282/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] umount2("./287", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] umount2("./282/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./287", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] openat(AT_FDCWD, "./282/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] <... openat resumed>) = 3 [pid 5827] <... openat resumed>) = 4 [pid 5825] <... umount2 resumed>) = 0 [pid 5824] newfstatat(3, "", [pid 5827] newfstatat(4, "", [pid 5825] umount2("./286/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7298] <... sync resumed>) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] getdents64(4, [pid 5825] newfstatat(AT_FDCWD, "./286/file0", [pid 5823] umount2("./295", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7298] exit_group(0 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] getdents64(3, [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7298] <... exit_group resumed>) = ? [pid 5825] umount2("./286/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 5823] openat(AT_FDCWD, "./295", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] getdents64(4, [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] umount2("./287/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... openat resumed>) = 3 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5825] openat(AT_FDCWD, "./286/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(3, "", [pid 7298] +++ exited with 0 +++ [pid 5827] close(4 [pid 5825] <... openat resumed>) = 4 [pid 5824] newfstatat(AT_FDCWD, "./287/binderfs", [pid 5825] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] close(4 [pid 5823] getdents64(3, [pid 5825] <... close resumed>) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5827] <... close resumed>) = 0 [pid 5825] rmdir("./286/file0" [pid 5824] unlink("./287/binderfs" [pid 5823] umount2("./295/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] rmdir("./282/file0" [pid 5825] <... rmdir resumed>) = 0 [pid 5824] <... unlink resumed>) = 0 [pid 5827] <... rmdir resumed>) = 0 [pid 5825] umount2("./286/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] getdents64(3, [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5825] newfstatat(AT_FDCWD, "./286/binderfs", [pid 5824] close(3 [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... close resumed>) = 0 [pid 5827] umount2("./282/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] unlink("./286/binderfs" [pid 5824] rmdir("./287" [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... unlink resumed>) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7298, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5825] getdents64(3, [pid 5824] mkdir("./288", 0777 [pid 5827] newfstatat(AT_FDCWD, "./282/binderfs", [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5825] close(3) = 0 [pid 5825] rmdir("./286") = 0 [pid 5825] mkdir("./287", 0777 [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] restart_syscall(<... resuming interrupted clone ...> [pid 5824] <... mkdir resumed>) = 0 [pid 5823] <... umount2 resumed>) = 0 [pid 5827] unlink("./282/binderfs" [pid 5826] <... restart_syscall resumed>) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5827] <... unlink resumed>) = 0 [pid 5827] getdents64(3, [pid 5825] <... mkdir resumed>) = 0 [pid 5824] ioctl(3, LOOP_CLR_FD [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5827] close(3 [pid 5826] umount2("./293", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5827] <... close resumed>) = 0 [pid 5823] umount2("./295/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] rmdir("./282" [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5824] close(3 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./295/file0", [pid 5825] <... openat resumed>) = 3 [pid 5827] <... rmdir resumed>) = 0 [pid 5826] openat(AT_FDCWD, "./293", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] <... close resumed>) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5823] umount2("./295/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... ioctl resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] close(3 [pid 5823] openat(AT_FDCWD, "./295/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] <... close resumed>) = 0 [pid 5823] <... openat resumed>) = 4 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5823] newfstatat(4, "", ./strace-static-x86_64: Process 7300 attached ./strace-static-x86_64: Process 7299 attached [pid 5826] <... openat resumed>) = 3 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] newfstatat(3, "", [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7299 [pid 7300] set_robust_list(0x55557eba4660, 24 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(4, [pid 7299] set_robust_list(0x55557eba4660, 24 [pid 7300] <... set_robust_list resumed>) = 0 [pid 7299] <... set_robust_list resumed>) = 0 [pid 5827] mkdir("./283", 0777 [pid 5826] getdents64(3, [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7300 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 7300] chdir("./287" [pid 5827] <... mkdir resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] getdents64(4, [pid 7299] chdir("./288" [pid 5826] umount2("./293/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 7300] <... chdir resumed>) = 0 [pid 5823] close(4 [pid 7300] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5823] <... close resumed>) = 0 [pid 7300] <... prctl resumed>) = 0 [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5823] rmdir("./295/file0" [pid 7299] <... chdir resumed>) = 0 [pid 7300] setpgid(0, 0 [pid 7299] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5827] <... openat resumed>) = 3 [pid 5823] <... rmdir resumed>) = 0 [pid 7299] <... prctl resumed>) = 0 [pid 5827] ioctl(3, LOOP_CLR_FD [pid 7300] <... setpgid resumed>) = 0 [pid 7299] setpgid(0, 0 [pid 5827] <... ioctl resumed>) = 0 [pid 7299] <... setpgid resumed>) = 0 [pid 5827] close(3 [pid 7300] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7299] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5827] <... close resumed>) = 0 [pid 7300] <... openat resumed>) = 3 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5823] umount2("./295/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7300] write(3, "1000", 4 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7300] <... write resumed>) = 4 [pid 5823] newfstatat(AT_FDCWD, "./295/binderfs", [pid 7300] close(3 [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7300] <... close resumed>) = 0 ./strace-static-x86_64: Process 7301 attached [pid 7300] symlink("/dev/binderfs", "./binderfs" [pid 7299] <... openat resumed>) = 3 [pid 5826] <... umount2 resumed>) = 0 [pid 5823] unlink("./295/binderfs" [pid 7301] set_robust_list(0x55557eba4660, 24 [pid 7300] <... symlink resumed>) = 0 [pid 7299] write(3, "1000", 4 [pid 5826] umount2("./293/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... unlink resumed>) = 0 [pid 7301] <... set_robust_list resumed>) = 0 [pid 7299] <... write resumed>) = 4 [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7301 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) executing program [pid 7301] chdir("./283" [pid 7300] write(1, "executing program\n", 18 [pid 7299] close(3 [pid 5826] newfstatat(AT_FDCWD, "./293/file0", [pid 7300] <... write resumed>) = 18 [pid 7299] <... close resumed>) = 0 [pid 5823] getdents64(3, [pid 7300] memfd_create("syzkaller", 0 [pid 7299] symlink("/dev/binderfs", "./binderfs" [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7300] <... memfd_create resumed>) = 3 [pid 5826] umount2("./293/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] close(3 [pid 7300] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... close resumed>) = 0 [pid 7300] <... mmap resumed>) = 0x7f957a000000 [pid 7299] <... symlink resumed>) = 0 [pid 5826] openat(AT_FDCWD, "./293/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] rmdir("./295"executing program [pid 7301] <... chdir resumed>) = 0 [pid 7300] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7299] write(1, "executing program\n", 18 [pid 5826] <... openat resumed>) = 4 [pid 5823] <... rmdir resumed>) = 0 [pid 7299] <... write resumed>) = 18 [pid 5826] newfstatat(4, "", [pid 5823] mkdir("./296", 0777 [pid 7300] <... write resumed>) = 65536 [pid 5823] <... mkdir resumed>) = 0 [pid 7299] memfd_create("syzkaller", 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7301] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7299] <... memfd_create resumed>) = 3 [pid 5826] getdents64(4, [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7301] <... prctl resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 7301] setpgid(0, 0 [pid 7299] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5826] getdents64(4, [pid 5823] <... openat resumed>) = 3 [pid 7300] munmap(0x7f957a000000, 138412032 [pid 7299] <... mmap resumed>) = 0x7f957a000000 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] ioctl(3, LOOP_CLR_FD [pid 7300] <... munmap resumed>) = 0 [pid 5823] <... ioctl resumed>) = 0 [pid 7300] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7299] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5826] close(4 [pid 5823] close(3 [pid 7301] <... setpgid resumed>) = 0 [pid 7300] <... openat resumed>) = 4 [pid 7301] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5826] <... close resumed>) = 0 [pid 5823] <... close resumed>) = 0 [pid 7301] <... openat resumed>) = 3 [pid 5826] rmdir("./293/file0" [pid 7300] ioctl(4, LOOP_SET_FD, 3 [pid 7299] <... write resumed>) = 65536 [pid 5826] <... rmdir resumed>) = 0 [pid 5826] umount2("./293/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7301] write(3, "1000", 4 [pid 7300] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 7301] <... write resumed>) = 4 [pid 7300] ioctl(4, LOOP_CLR_FD [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7302 attached [pid 7301] close(3 [pid 7300] <... ioctl resumed>) = 0 [pid 5826] newfstatat(AT_FDCWD, "./293/binderfs", [pid 7301] <... close resumed>) = 0 [pid 7299] munmap(0x7f957a000000, 138412032 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7302] set_robust_list(0x55557eba4660, 24 [pid 7301] symlink("/dev/binderfs", "./binderfs" [pid 5826] unlink("./293/binderfs" [pid 7299] <... munmap resumed>) = 0 [pid 7302] <... set_robust_list resumed>) = 0 [pid 7301] <... symlink resumed>) = 0 [pid 5826] <... unlink resumed>) = 0 [pid 7301] write(1, "executing program\n", 18 [pid 5826] getdents64(3, [pid 7299] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7302] chdir("./296" [pid 7300] ioctl(4, LOOP_SET_FD, 3 [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7302 [pid 7300] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 7302] <... chdir resumed>) = 0 [pid 7300] close(4 [pid 7302] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7300] <... close resumed>) = 0 [pid 7302] <... prctl resumed>) = 0 [pid 7300] close(3 [pid 7302] setpgid(0, 0 [pid 7300] <... close resumed>) = 0 [pid 7302] <... setpgid resumed>) = 0 [pid 7300] openat(AT_FDCWD, ".", O_RDONLYexecuting program [pid 7302] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7300] <... openat resumed>) = 3 [pid 7300] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7299] <... openat resumed>) = 4 [pid 7301] <... write resumed>) = 18 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7302] <... openat resumed>) = 3 [pid 7301] memfd_create("syzkaller", 0 [pid 7299] ioctl(4, LOOP_SET_FD, 3 [pid 5826] close(3 [pid 7302] write(3, "1000", 4 [pid 7300] <... renameat2 resumed>) = -1 ENOENT (No such file or directory) [pid 7302] <... write resumed>) = 4 [pid 7300] sync( [pid 5826] <... close resumed>) = 0 [pid 7302] close(3) = 0 [pid 7302] symlink("/dev/binderfs", "./binderfs" [pid 7301] <... memfd_create resumed>) = 3 [pid 5826] rmdir("./293" [pid 7301] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0executing program [pid 7302] <... symlink resumed>) = 0 [pid 7301] <... mmap resumed>) = 0x7f957a000000 [pid 5826] <... rmdir resumed>) = 0 [pid 7302] write(1, "executing program\n", 18) = 18 [pid 7302] memfd_create("syzkaller", 0 [pid 7301] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5826] mkdir("./294", 0777 [pid 7302] <... memfd_create resumed>) = 3 [pid 7302] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7301] <... write resumed>) = 65536 [pid 5826] <... mkdir resumed>) = 0 [pid 7302] <... mmap resumed>) = 0x7f957a000000 [pid 7301] munmap(0x7f957a000000, 138412032 [pid 7300] <... sync resumed>) = 0 [pid 7299] <... ioctl resumed>) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7302] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7301] <... munmap resumed>) = 0 [pid 7300] exit_group(0 [pid 7299] close(3 [pid 5826] <... openat resumed>) = 3 [pid 7300] <... exit_group resumed>) = ? [pid 7299] <... close resumed>) = 0 [pid 5826] ioctl(3, LOOP_CLR_FD [pid 7302] <... write resumed>) = 65536 [pid 7301] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7299] close(4 [pid 5826] <... ioctl resumed>) = 0 [pid 7302] munmap(0x7f957a000000, 138412032 [pid 5826] close(3 [pid 7301] <... openat resumed>) = 4 [pid 5826] <... close resumed>) = 0 [pid 7302] <... munmap resumed>) = 0 [pid 7300] +++ exited with 0 +++ [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7302] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7300, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 7299] <... close resumed>) = 0 [pid 7301] ioctl(4, LOOP_SET_FD, 3 [pid 7299] mkdir("./file0", 0777 [pid 7301] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) ./strace-static-x86_64: Process 7303 attached [pid 7302] ioctl(4, LOOP_SET_FD, 3 [pid 5825] restart_syscall(<... resuming interrupted clone ...> [pid 7301] ioctl(4, LOOP_CLR_FD [pid 7299] <... mkdir resumed>) = 0 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7303 [pid 5825] <... restart_syscall resumed>) = 0 [pid 7303] set_robust_list(0x55557eba4660, 24 [pid 7301] <... ioctl resumed>) = 0 [pid 7299] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5825] umount2("./287", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7303] <... set_robust_list resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 228.147666][ T7299] loop1: detected capacity change from 0 to 128 [pid 5825] openat(AT_FDCWD, "./287", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7303] chdir("./294" [pid 5825] <... openat resumed>) = 3 [pid 7303] <... chdir resumed>) = 0 [pid 5825] newfstatat(3, "", [pid 7303] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7303] <... prctl resumed>) = 0 [pid 5825] getdents64(3, [pid 7303] setpgid(0, 0 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 7303] <... setpgid resumed>) = 0 [pid 5825] umount2("./287/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7303] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7303] <... openat resumed>) = 3 [pid 5825] newfstatat(AT_FDCWD, "./287/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./287/binderfs" [pid 7303] write(3, "1000", 4 [pid 7301] ioctl(4, LOOP_SET_FD, 3 [pid 5825] <... unlink resumed>) = 0 [pid 7303] <... write resumed>) = 4 [pid 7303] close(3 [pid 7301] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 7303] <... close resumed>) = 0 [pid 7301] close(4 [pid 5825] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7303] symlink("/dev/binderfs", "./binderfs" [pid 5825] close(3 [pid 7303] <... symlink resumed>) = 0 [pid 7301] <... close resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 7301] close(3) = 0 [pid 5825] rmdir("./287" [pid 7301] openat(AT_FDCWD, ".", O_RDONLY [pid 5825] <... rmdir resumed>) = 0 [pid 7301] <... openat resumed>) = 3 [pid 7299] <... mount resumed>) = 0 [pid 7299] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7301] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0executing program [pid 7303] write(1, "executing program\n", 18 [pid 7301] <... renameat2 resumed>) = -1 ENOENT (No such file or directory) [pid 7299] <... openat resumed>) = 3 [pid 5825] mkdir("./288", 0777 [pid 7301] sync( [pid 7299] chdir("./file0" [pid 7303] <... write resumed>) = 18 [pid 7299] <... chdir resumed>) = 0 [pid 5825] <... mkdir resumed>) = 0 [pid 7299] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7303] memfd_create("syzkaller", 0 [pid 7299] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7299] openat(AT_FDCWD, ".", O_RDONLY [pid 7303] <... memfd_create resumed>) = 3 [pid 7299] <... openat resumed>) = 4 [pid 5825] <... openat resumed>) = 3 [pid 7303] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7299] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 7303] <... mmap resumed>) = 0x7f957a000000 [pid 5825] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7303] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5825] close(3) = 0 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7303] <... write resumed>) = 65536 [pid 7299] <... renameat2 resumed>) = 0 [ 228.198579][ T7299] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 228.216891][ T7302] loop0: detected capacity change from 0 to 128 [pid 7299] sync(./strace-static-x86_64: Process 7304 attached [pid 7303] munmap(0x7f957a000000, 138412032 [pid 7302] <... ioctl resumed>) = 0 [pid 7301] <... sync resumed>) = 0 [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7304 [pid 7304] set_robust_list(0x55557eba4660, 24 [pid 7303] <... munmap resumed>) = 0 [pid 7302] close(3 [pid 7304] <... set_robust_list resumed>) = 0 [pid 7303] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7302] <... close resumed>) = 0 [pid 7301] exit_group(0 [pid 7299] <... sync resumed>) = 0 [pid 7303] <... openat resumed>) = 4 [pid 7302] close(4 [pid 7301] <... exit_group resumed>) = ? [pid 7299] exit_group(0 [pid 7302] <... close resumed>) = 0 [pid 7302] mkdir("./file0", 0777 [pid 7303] ioctl(4, LOOP_SET_FD, 3 [pid 7302] <... mkdir resumed>) = 0 [pid 7304] chdir("./288" [pid 7301] +++ exited with 0 +++ [pid 7299] <... exit_group resumed>) = ? [pid 7302] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7304] <... chdir resumed>) = 0 [pid 7299] +++ exited with 0 +++ [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7301, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7299, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 7304] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5827] restart_syscall(<... resuming interrupted clone ...> [pid 7304] <... prctl resumed>) = 0 [pid 7304] setpgid(0, 0) = 0 [pid 5824] umount2("./288", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7304] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./288", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7304] <... openat resumed>) = 3 [pid 7304] write(3, "1000", 4 [pid 5824] <... openat resumed>) = 3 [pid 7304] <... write resumed>) = 4 [pid 5824] newfstatat(3, "", [pid 7304] close(3) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7304] symlink("/dev/binderfs", "./binderfs" [pid 5824] getdents64(3, [pid 7304] <... symlink resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 executing program [pid 7304] write(1, "executing program\n", 18 [pid 5827] <... restart_syscall resumed>) = 0 [pid 5824] umount2("./288/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7304] <... write resumed>) = 18 [pid 7304] memfd_create("syzkaller", 0 [pid 7303] <... ioctl resumed>) = 0 [pid 7303] close(3) = 0 [pid 7303] close(4) = 0 [pid 7303] mkdir("./file0", 0777) = 0 [pid 7303] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7304] <... memfd_create resumed>) = 3 [pid 7304] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 5824] <... umount2 resumed>) = 0 [pid 7304] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5824] umount2("./288/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7304] <... write resumed>) = 65536 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./288/file0", [pid 5827] umount2("./283", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] openat(AT_FDCWD, "./283", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] umount2("./288/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... openat resumed>) = 3 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7304] munmap(0x7f957a000000, 138412032 [pid 5824] openat(AT_FDCWD, "./288/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7304] <... munmap resumed>) = 0 [pid 5827] newfstatat(3, "", [pid 5824] <... openat resumed>) = 4 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] newfstatat(4, "", [pid 7304] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] getdents64(3, [pid 5824] getdents64(4, [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 7304] <... openat resumed>) = 4 [pid 5827] umount2("./283/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] getdents64(4, [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5827] newfstatat(AT_FDCWD, "./283/binderfs", [pid 5824] close(4 [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... close resumed>) = 0 [pid 5824] rmdir("./288/file0" [pid 7304] ioctl(4, LOOP_SET_FD, 3 [ 228.272811][ T7303] loop3: detected capacity change from 0 to 128 [ 228.289554][ T7302] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 228.311464][ T7303] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [pid 5824] <... rmdir resumed>) = 0 [pid 7304] <... ioctl resumed>) = 0 [pid 5827] unlink("./283/binderfs" [pid 5824] umount2("./288/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./288/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./288/binderfs") = 0 [pid 5824] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] close(3) = 0 [pid 5824] rmdir("./288" [pid 5827] <... unlink resumed>) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 7304] close(3 [pid 5824] mkdir("./289", 0777 [pid 7303] <... mount resumed>) = 0 [pid 7302] <... mount resumed>) = 0 [pid 5827] getdents64(3, [pid 7302] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] <... mkdir resumed>) = 0 [pid 7302] chdir("./file0" [pid 5827] close(3 [pid 7304] <... close resumed>) = 0 [ 228.335154][ T7304] loop2: detected capacity change from 0 to 128 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7304] close(4 [pid 7303] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7302] <... chdir resumed>) = 0 [pid 5827] <... close resumed>) = 0 [pid 7304] <... close resumed>) = 0 [pid 7303] <... openat resumed>) = 3 [pid 7302] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7304] mkdir("./file0", 0777 [pid 7303] chdir("./file0" [pid 7302] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7303] <... chdir resumed>) = 0 [pid 7302] openat(AT_FDCWD, ".", O_RDONLY [pid 5827] rmdir("./283" [pid 5824] <... openat resumed>) = 3 [pid 7303] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7302] <... openat resumed>) = 4 [pid 7303] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7302] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7303] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7303] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5824] ioctl(3, LOOP_CLR_FD [pid 7304] <... mkdir resumed>) = 0 [pid 7302] <... renameat2 resumed>) = 0 [pid 5827] <... rmdir resumed>) = 0 [pid 5824] <... ioctl resumed>) = 0 [pid 7302] sync( [pid 5827] mkdir("./284", 0777 [pid 5824] close(3 [pid 7303] <... renameat2 resumed>) = 0 [pid 5827] <... mkdir resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7303] sync( [pid 7304] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7305 [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5827] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 7305 attached ) = -1 ENXIO (No such device or address) [pid 7305] set_robust_list(0x55557eba4660, 24) = 0 [pid 7305] chdir("./289") = 0 [pid 7305] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7305] setpgid(0, 0) = 0 [pid 7305] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5827] close(3 [pid 7305] <... openat resumed>) = 3 [pid 5827] <... close resumed>) = 0 [pid 7305] write(3, "1000", 4) = 4 [pid 7305] close(3) = 0 [pid 7305] symlink("/dev/binderfs", "./binderfs" [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7305] <... symlink resumed>) = 0 executing program [pid 7305] write(1, "executing program\n", 18) = 18 [pid 7305] memfd_create("syzkaller", 0 [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7306 ./strace-static-x86_64: Process 7306 attached [pid 7305] <... memfd_create resumed>) = 3 [pid 7305] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7306] set_robust_list(0x55557eba4660, 24 [pid 7305] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7306] <... set_robust_list resumed>) = 0 [pid 7306] chdir("./284" [pid 7305] <... write resumed>) = 65536 [pid 7306] <... chdir resumed>) = 0 [pid 7306] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7306] setpgid(0, 0) = 0 [pid 7305] munmap(0x7f957a000000, 138412032 [pid 7306] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7305] <... munmap resumed>) = 0 [pid 7306] <... openat resumed>) = 3 [pid 7305] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 7305] ioctl(4, LOOP_SET_FD, 3 [pid 7304] <... mount resumed>) = 0 [ 228.444051][ T7304] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [pid 7306] write(3, "1000", 4 [pid 7304] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7304] chdir("./file0" [pid 7306] <... write resumed>) = 4 [pid 7304] <... chdir resumed>) = 0 [pid 7302] <... sync resumed>) = 0 [pid 7306] close(3 [pid 7305] <... ioctl resumed>) = 0 [pid 7304] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7302] exit_group(0 [pid 7306] <... close resumed>) = 0 [pid 7302] <... exit_group resumed>) = ? [pid 7306] symlink("/dev/binderfs", "./binderfs" [pid 7302] +++ exited with 0 +++ [pid 7306] <... symlink resumed>) = 0 [pid 7306] write(1, "executing program\n", 18executing program ) = 18 [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7302, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7306] memfd_create("syzkaller", 0) = 3 [pid 5823] umount2("./296", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7306] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7306] <... mmap resumed>) = 0x7f957a000000 [pid 7305] close(3 [pid 7304] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5823] openat(AT_FDCWD, "./296", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7306] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7303] <... sync resumed>) = 0 [pid 5823] <... openat resumed>) = 3 [pid 7306] <... write resumed>) = 65536 [pid 7303] exit_group(0 [pid 7305] <... close resumed>) = 0 [pid 7304] openat(AT_FDCWD, ".", O_RDONLY [pid 7303] <... exit_group resumed>) = ? [pid 5823] newfstatat(3, "", [pid 7306] munmap(0x7f957a000000, 138412032 [pid 7305] close(4 [pid 7304] <... openat resumed>) = 4 [pid 7303] +++ exited with 0 +++ [pid 7305] <... close resumed>) = 0 [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7303, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 7304] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7306] <... munmap resumed>) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7306] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7305] mkdir("./file0", 0777 [pid 5823] getdents64(3, [pid 7306] <... openat resumed>) = 4 [pid 7305] <... mkdir resumed>) = 0 [ 228.488189][ T7305] loop1: detected capacity change from 0 to 128 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 7306] ioctl(4, LOOP_SET_FD, 3 [pid 7305] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7304] <... renameat2 resumed>) = 0 [pid 5823] umount2("./296/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7304] sync( [pid 5826] umount2("./294", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./294", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5823] <... umount2 resumed>) = 0 [pid 5826] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] umount2("./296/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] getdents64(3, [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] newfstatat(AT_FDCWD, "./296/file0", [pid 5826] umount2("./294/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] umount2("./296/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./296/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5823] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] close(4) = 0 [pid 5823] rmdir("./296/file0") = 0 [pid 5826] <... umount2 resumed>) = 0 [pid 5823] umount2("./296/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] umount2("./294/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7306] <... ioctl resumed>) = 0 [pid 7306] close(3) = 0 [pid 7306] close(4) = 0 [pid 7306] mkdir("./file0", 0777) = 0 [pid 5823] newfstatat(AT_FDCWD, "./296/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./296/binderfs") = 0 [pid 7306] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5823] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] close(3) = 0 [ 228.541129][ T7306] loop4: detected capacity change from 0 to 128 [ 228.571128][ T7305] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [pid 5823] rmdir("./296") = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./294/file0", [pid 5823] mkdir("./297", 0777 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] umount2("./294/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... mkdir resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5826] openat(AT_FDCWD, "./294/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] <... openat resumed>) = 3 [pid 5823] ioctl(3, LOOP_CLR_FD [pid 5826] <... openat resumed>) = 4 [pid 5823] <... ioctl resumed>) = 0 [pid 5823] close(3) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5826] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 7307 attached [pid 5826] getdents64(4, [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7307 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5826] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5826] close(4) = 0 [pid 5826] rmdir("./294/file0" [pid 7307] set_robust_list(0x55557eba4660, 24) = 0 [pid 5826] <... rmdir resumed>) = 0 [pid 7307] chdir("./297" [pid 5826] umount2("./294/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7305] <... mount resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7305] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5826] newfstatat(AT_FDCWD, "./294/binderfs", [pid 7305] <... openat resumed>) = 3 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./294/binderfs" [pid 7305] chdir("./file0" [pid 7307] <... chdir resumed>) = 0 [pid 7305] <... chdir resumed>) = 0 [pid 5826] <... unlink resumed>) = 0 [pid 7307] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7305] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5826] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7307] <... prctl resumed>) = 0 [pid 7307] setpgid(0, 0) = 0 [pid 7307] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5826] close(3 [pid 7305] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7307] <... openat resumed>) = 3 [pid 7307] write(3, "1000", 4 [pid 7305] openat(AT_FDCWD, ".", O_RDONLY [pid 5826] <... close resumed>) = 0 [pid 7307] <... write resumed>) = 4 [pid 7307] close(3) = 0 [pid 5826] rmdir("./294" [pid 7307] symlink("/dev/binderfs", "./binderfs" [pid 7305] <... openat resumed>) = 4 [pid 7307] <... symlink resumed>) = 0 [pid 7305] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5826] <... rmdir resumed>) = 0 [ 228.593564][ T7306] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [pid 5826] mkdir("./295", 0777executing program [pid 7307] write(1, "executing program\n", 18) = 18 [pid 7307] memfd_create("syzkaller", 0) = 3 [pid 7307] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7307] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 5826] <... mkdir resumed>) = 0 [pid 7307] munmap(0x7f957a000000, 138412032) = 0 [pid 7307] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7305] <... renameat2 resumed>) = 0 [pid 7307] ioctl(4, LOOP_SET_FD, 3 [pid 7306] <... mount resumed>) = 0 [pid 7305] sync( [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5826] ioctl(3, LOOP_CLR_FD) = 0 [pid 7306] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7306] chdir("./file0") = 0 [pid 7306] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7306] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7306] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = 0 [pid 5826] close(3 [pid 7306] sync( [pid 5826] <... close resumed>) = 0 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7307] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 7308 attached [pid 7306] <... sync resumed>) = 0 [pid 7305] <... sync resumed>) = 0 [pid 7304] <... sync resumed>) = 0 [pid 7304] exit_group(0 [pid 7308] set_robust_list(0x55557eba4660, 24 [pid 7306] exit_group(0 [pid 7305] exit_group(0 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7308 [pid 7308] <... set_robust_list resumed>) = 0 [pid 7307] close(3 [pid 7306] <... exit_group resumed>) = ? [pid 7305] <... exit_group resumed>) = ? [pid 7304] <... exit_group resumed>) = ? [pid 7308] chdir("./295" [pid 7307] <... close resumed>) = 0 [pid 7306] +++ exited with 0 +++ [pid 7305] +++ exited with 0 +++ [pid 7304] +++ exited with 0 +++ [pid 7308] <... chdir resumed>) = 0 [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7306, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7305, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7308] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 7308] <... prctl resumed>) = 0 [pid 7308] setpgid(0, 0 [pid 7307] close(4 [pid 7308] <... setpgid resumed>) = 0 [pid 7307] <... close resumed>) = 0 [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7304, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [ 228.663694][ T7307] loop0: detected capacity change from 0 to 128 [pid 7308] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7307] mkdir("./file0", 0777 [pid 7308] <... openat resumed>) = 3 [pid 7307] <... mkdir resumed>) = 0 [pid 5827] umount2("./284", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7308] write(3, "1000", 4 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] umount2("./288", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7308] <... write resumed>) = 4 [pid 5827] openat(AT_FDCWD, "./284", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7308] close(3 [pid 5825] openat(AT_FDCWD, "./288", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7308] <... close resumed>) = 0 [pid 5827] <... openat resumed>) = 3 [pid 5825] <... openat resumed>) = 3 [pid 5824] <... restart_syscall resumed>) = 0 [pid 7308] symlink("/dev/binderfs", "./binderfs" [pid 5825] newfstatat(3, "", executing program [pid 7308] <... symlink resumed>) = 0 [pid 7307] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5827] newfstatat(3, "", [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7308] write(1, "executing program\n", 18 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(3, [pid 7308] <... write resumed>) = 18 [pid 5827] getdents64(3, [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5825] umount2("./288/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] umount2("./284/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7308] memfd_create("syzkaller", 0 [pid 5824] umount2("./289", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7308] <... memfd_create resumed>) = 3 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7308] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5824] openat(AT_FDCWD, "./289", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 7308] <... mmap resumed>) = 0x7f957a000000 [pid 5824] newfstatat(3, "", [pid 7308] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5825] <... umount2 resumed>) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] umount2("./288/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] getdents64(3, [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5825] newfstatat(AT_FDCWD, "./288/file0", [pid 5824] umount2("./289/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] umount2("./288/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7308] <... write resumed>) = 65536 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./288/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5825] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5825] close(4) = 0 [pid 5825] rmdir("./288/file0") = 0 [pid 5825] umount2("./288/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./288/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./288/binderfs") = 0 [pid 5827] <... umount2 resumed>) = 0 [pid 5825] getdents64(3, [pid 5827] umount2("./284/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] close(3 [pid 5827] newfstatat(AT_FDCWD, "./284/file0", [pid 5825] <... close resumed>) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] rmdir("./288" [pid 5827] umount2("./284/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... rmdir resumed>) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] openat(AT_FDCWD, "./284/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5827] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] getdents64(4, [pid 5825] mkdir("./289", 0777 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] <... mkdir resumed>) = 0 [pid 5827] getdents64(4, [pid 7308] munmap(0x7f957a000000, 138412032 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5827] close(4) = 0 [pid 5827] rmdir("./284/file0" [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7308] <... munmap resumed>) = 0 [pid 7307] <... mount resumed>) = 0 [pid 5827] <... rmdir resumed>) = 0 [pid 5825] <... openat resumed>) = 3 [pid 7308] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7307] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7308] <... openat resumed>) = 4 [pid 7307] chdir("./file0" [pid 7308] ioctl(4, LOOP_SET_FD, 3 [pid 7307] <... chdir resumed>) = 0 [pid 5824] <... umount2 resumed>) = 0 [pid 7308] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [ 228.745231][ T7307] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [pid 7307] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5825] ioctl(3, LOOP_CLR_FD [pid 5824] umount2("./289/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7308] ioctl(4, LOOP_CLR_FD [pid 7307] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7308] <... ioctl resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./289/file0", [pid 7307] openat(AT_FDCWD, ".", O_RDONLY [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7307] <... openat resumed>) = 4 [pid 7307] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5827] umount2("./284/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... ioctl resumed>) = 0 [pid 5824] umount2("./289/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7308] ioctl(4, LOOP_SET_FD, 3 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7308] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5825] close(3 [pid 5824] openat(AT_FDCWD, "./289/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] newfstatat(AT_FDCWD, "./284/binderfs", [pid 5825] <... close resumed>) = 0 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7308] close(4 [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... openat resumed>) = 4 [pid 5827] unlink("./284/binderfs" [pid 5824] newfstatat(4, "", [pid 5827] <... unlink resumed>) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] getdents64(3, [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7309 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] getdents64(4, [pid 5827] close(3./strace-static-x86_64: Process 7309 attached [pid 7308] <... close resumed>) = 0 [pid 7307] <... renameat2 resumed>) = 0 [pid 5827] <... close resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5827] rmdir("./284" [pid 5824] getdents64(4, [pid 7309] set_robust_list(0x55557eba4660, 24 [pid 7308] close(3 [pid 5827] <... rmdir resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 7309] <... set_robust_list resumed>) = 0 [pid 5824] close(4) = 0 [pid 5824] rmdir("./289/file0" [pid 7307] sync( [pid 5824] <... rmdir resumed>) = 0 [pid 7309] chdir("./289" [pid 7308] <... close resumed>) = 0 [pid 5824] umount2("./289/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7309] <... chdir resumed>) = 0 [pid 5827] mkdir("./285", 0777 [pid 7309] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7308] openat(AT_FDCWD, ".", O_RDONLY [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7309] <... prctl resumed>) = 0 [pid 5824] newfstatat(AT_FDCWD, "./289/binderfs", [pid 7309] setpgid(0, 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7309] <... setpgid resumed>) = 0 [pid 7308] <... openat resumed>) = 3 [pid 5827] <... mkdir resumed>) = 0 [pid 5824] unlink("./289/binderfs") = 0 [pid 5824] getdents64(3, [pid 7308] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7308] <... renameat2 resumed>) = -1 ENOENT (No such file or directory) [pid 5824] close(3) = 0 [pid 5824] rmdir("./289") = 0 [pid 7309] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7308] sync( [pid 7307] <... sync resumed>) = 0 [pid 5827] <... openat resumed>) = 3 [pid 5824] mkdir("./290", 0777 [pid 7307] exit_group(0 [pid 5827] ioctl(3, LOOP_CLR_FD) = 0 [pid 5824] <... mkdir resumed>) = 0 [pid 7307] <... exit_group resumed>) = ? [pid 5827] close(3 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7309] <... openat resumed>) = 3 [pid 5827] <... close resumed>) = 0 [pid 5824] <... openat resumed>) = 3 [pid 5824] ioctl(3, LOOP_CLR_FD) = 0 [pid 5824] close(3 [pid 7309] write(3, "1000", 4 [pid 5824] <... close resumed>) = 0 [pid 7309] <... write resumed>) = 4 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7309] close(3./strace-static-x86_64: Process 7310 attached ) = 0 [pid 7307] +++ exited with 0 +++ [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7309] symlink("/dev/binderfs", "./binderfs" [pid 7310] set_robust_list(0x55557eba4660, 24) = 0 [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7307, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7310] chdir("./290" [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 7310] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 7311 attached [pid 7310] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7309] <... symlink resumed>) = 0 [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7310 [pid 5823] <... restart_syscall resumed>) = 0 executing program [pid 7311] set_robust_list(0x55557eba4660, 24 [pid 7310] <... prctl resumed>) = 0 [pid 7310] setpgid(0, 0 [pid 7309] write(1, "executing program\n", 18) = 18 [pid 5823] umount2("./297", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7311] <... set_robust_list resumed>) = 0 [pid 7308] <... sync resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7311] chdir("./285" [pid 7310] <... setpgid resumed>) = 0 [pid 7309] memfd_create("syzkaller", 0 [pid 7308] exit_group(0 [pid 5823] openat(AT_FDCWD, "./297", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7311] <... chdir resumed>) = 0 [pid 7310] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7309] <... memfd_create resumed>) = 3 [pid 7308] <... exit_group resumed>) = ? [pid 5823] <... openat resumed>) = 3 [pid 7309] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5823] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(3, [pid 7309] <... mmap resumed>) = 0x7f957a000000 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] umount2("./297/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7309] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 7308] +++ exited with 0 +++ [pid 7309] munmap(0x7f957a000000, 138412032 [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7308, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 7310] <... openat resumed>) = 3 [pid 7309] <... munmap resumed>) = 0 [pid 5826] restart_syscall(<... resuming interrupted clone ...> [pid 7309] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7311] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7309] <... openat resumed>) = 4 [pid 7311] setpgid(0, 0 [pid 7310] write(3, "1000", 4 [pid 7309] ioctl(4, LOOP_SET_FD, 3 [pid 7311] <... setpgid resumed>) = 0 [pid 7310] <... write resumed>) = 4 [pid 7311] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7310] close(3 [pid 7309] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 7311] <... openat resumed>) = 3 [pid 7310] <... close resumed>) = 0 [pid 7309] ioctl(4, LOOP_CLR_FD [pid 5826] <... restart_syscall resumed>) = 0 [pid 7310] symlink("/dev/binderfs", "./binderfs" [pid 7309] <... ioctl resumed>) = 0 [pid 5823] <... umount2 resumed>) = 0 [pid 7311] write(3, "1000", 4 [pid 7310] <... symlink resumed>) = 0 [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7311 executing program [pid 5823] umount2("./297/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7311] <... write resumed>) = 4 [pid 7310] write(1, "executing program\n", 18 [pid 5826] umount2("./295", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7311] close(3 [pid 7310] <... write resumed>) = 18 [pid 7309] ioctl(4, LOOP_SET_FD, 3 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7311] <... close resumed>) = 0 [pid 5823] newfstatat(AT_FDCWD, "./297/file0", [pid 7311] symlink("/dev/binderfs", "./binderfs" [pid 7310] memfd_create("syzkaller", 0 [pid 7311] <... symlink resumed>) = 0 [pid 7310] <... memfd_create resumed>) = 3 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 executing program [pid 7311] write(1, "executing program\n", 18 [pid 7310] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5823] umount2("./297/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7311] <... write resumed>) = 18 [pid 7311] memfd_create("syzkaller", 0 [pid 7310] <... mmap resumed>) = 0x7f957a000000 [pid 7309] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5826] openat(AT_FDCWD, "./295", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7311] <... memfd_create resumed>) = 3 [pid 7309] close(4 [pid 5823] openat(AT_FDCWD, "./297/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7311] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5823] <... openat resumed>) = 4 [pid 7311] <... mmap resumed>) = 0x7f957a000000 [pid 7310] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5826] <... openat resumed>) = 3 [pid 7311] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5826] newfstatat(3, "", [pid 5823] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] getdents64(4, [pid 7310] <... write resumed>) = 65536 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] close(4) = 0 [pid 5823] rmdir("./297/file0" [pid 7311] <... write resumed>) = 65536 [pid 5823] <... rmdir resumed>) = 0 [pid 7310] munmap(0x7f957a000000, 138412032 [pid 5826] getdents64(3, [pid 7310] <... munmap resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 7311] munmap(0x7f957a000000, 138412032 [pid 5826] umount2("./295/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] umount2("./297/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7310] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7311] <... munmap resumed>) = 0 [pid 5823] newfstatat(AT_FDCWD, "./297/binderfs", [pid 7311] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7310] <... openat resumed>) = 4 [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7311] <... openat resumed>) = 4 [pid 7309] <... close resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./295/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7310] ioctl(4, LOOP_SET_FD, 3 [pid 5826] unlink("./295/binderfs" [pid 5823] unlink("./297/binderfs" [pid 7311] ioctl(4, LOOP_SET_FD, 3 [pid 5826] <... unlink resumed>) = 0 [pid 5823] <... unlink resumed>) = 0 [pid 5826] getdents64(3, [pid 5823] getdents64(3, [pid 7309] close(3 [pid 7311] <... ioctl resumed>) = 0 [pid 7310] <... ioctl resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] close(3 [pid 7309] <... close resumed>) = 0 [pid 5826] <... close resumed>) = 0 [pid 5826] rmdir("./295" [pid 7309] openat(AT_FDCWD, ".", O_RDONLY [pid 5826] <... rmdir resumed>) = 0 [pid 7309] <... openat resumed>) = 3 [pid 5826] mkdir("./296", 0777 [pid 7309] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5823] close(3) = 0 [pid 5823] rmdir("./297" [pid 5826] <... mkdir resumed>) = 0 [pid 7309] <... renameat2 resumed>) = -1 ENOENT (No such file or directory) [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5823] <... rmdir resumed>) = 0 [pid 7309] sync( [pid 5823] mkdir("./298", 0777 [pid 7311] close(3 [pid 5826] <... openat resumed>) = 3 [pid 7311] <... close resumed>) = 0 [pid 5826] ioctl(3, LOOP_CLR_FD [pid 7311] close(4 [pid 5826] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5823] <... mkdir resumed>) = 0 [pid 5826] close(3 [pid 7311] <... close resumed>) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7311] mkdir("./file0", 0777 [pid 5823] <... openat resumed>) = 3 [pid 5823] ioctl(3, LOOP_CLR_FD) = 0 [pid 5823] close(3) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7312 attached [pid 7311] <... mkdir resumed>) = 0 [pid 7311] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7312] set_robust_list(0x55557eba4660, 24 [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7312 [ 228.985418][ T7310] loop1: detected capacity change from 0 to 128 [ 229.003290][ T7311] loop4: detected capacity change from 0 to 128 [pid 7310] close(3 [pid 7312] <... set_robust_list resumed>) = 0 [pid 7309] <... sync resumed>) = 0 [pid 5826] <... close resumed>) = 0 [pid 7312] chdir("./298" [pid 7309] exit_group(0 [pid 7312] <... chdir resumed>) = 0 [pid 7309] <... exit_group resumed>) = ? [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7309] +++ exited with 0 +++ [pid 7310] <... close resumed>) = 0 [pid 7310] close(4 [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7309, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5825] restart_syscall(<... resuming interrupted clone ...> [pid 7312] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 7313 attached ) = 0 [pid 7310] <... close resumed>) = 0 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7313 [pid 5825] <... restart_syscall resumed>) = 0 [pid 7310] mkdir("./file0", 0777) = 0 [pid 5825] umount2("./289", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7310] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./289", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7312] setpgid(0, 0 [pid 5825] <... openat resumed>) = 3 [ 229.036880][ T7311] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [pid 5825] newfstatat(3, "", [pid 7312] <... setpgid resumed>) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7312] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5825] getdents64(3, [pid 7313] set_robust_list(0x55557eba4660, 24 [pid 7312] <... openat resumed>) = 3 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 7313] <... set_robust_list resumed>) = 0 [pid 5825] umount2("./289/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7313] chdir("./296" [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7313] <... chdir resumed>) = 0 [pid 5825] newfstatat(AT_FDCWD, "./289/binderfs", [pid 7313] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7313] <... prctl resumed>) = 0 [pid 7312] write(3, "1000", 4 [pid 5825] unlink("./289/binderfs" [pid 7313] setpgid(0, 0 [pid 7312] <... write resumed>) = 4 [pid 5825] <... unlink resumed>) = 0 [pid 7313] <... setpgid resumed>) = 0 [pid 7312] close(3 [pid 5825] getdents64(3, executing program [pid 7312] <... close resumed>) = 0 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7312] symlink("/dev/binderfs", "./binderfs" [pid 7313] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5825] close(3 [pid 7312] <... symlink resumed>) = 0 [pid 7312] write(1, "executing program\n", 18 [pid 5825] <... close resumed>) = 0 [pid 7312] <... write resumed>) = 18 [pid 7312] memfd_create("syzkaller", 0 [pid 5825] rmdir("./289" [pid 7312] <... memfd_create resumed>) = 3 [pid 5825] <... rmdir resumed>) = 0 [pid 7312] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7313] <... openat resumed>) = 3 [pid 7312] <... mmap resumed>) = 0x7f957a000000 [pid 5825] mkdir("./290", 0777 [pid 7313] write(3, "1000", 4 [pid 7312] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7311] <... mount resumed>) = 0 [pid 5825] <... mkdir resumed>) = 0 [pid 7311] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7313] <... write resumed>) = 4 [pid 7311] <... openat resumed>) = 3 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7313] close(3 [pid 7311] chdir("./file0" [pid 5825] <... openat resumed>) = 3 [pid 7313] <... close resumed>) = 0 [pid 7311] <... chdir resumed>) = 0 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 7313] symlink("/dev/binderfs", "./binderfs" [pid 7311] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5825] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7313] <... symlink resumed>) = 0 [pid 7311] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5825] close(3executing program [pid 7313] write(1, "executing program\n", 18 [pid 5825] <... close resumed>) = 0 [pid 7313] <... write resumed>) = 18 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7314 attached [pid 7313] memfd_create("syzkaller", 0 [pid 7312] <... write resumed>) = 65536 [pid 7311] openat(AT_FDCWD, ".", O_RDONLY [pid 7313] <... memfd_create resumed>) = 3 [pid 7313] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7311] <... openat resumed>) = 4 [pid 7312] munmap(0x7f957a000000, 138412032 [pid 7313] <... mmap resumed>) = 0x7f957a000000 [pid 7311] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7314] set_robust_list(0x55557eba4660, 24 [pid 7313] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7314 [pid 7314] <... set_robust_list resumed>) = 0 [pid 7314] chdir("./290" [pid 7313] <... write resumed>) = 65536 [pid 7314] <... chdir resumed>) = 0 [pid 7313] munmap(0x7f957a000000, 138412032 [pid 7314] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7313] <... munmap resumed>) = 0 [pid 7314] <... prctl resumed>) = 0 [pid 7313] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7314] setpgid(0, 0 [pid 7313] <... openat resumed>) = 4 [pid 7312] <... munmap resumed>) = 0 [pid 7314] <... setpgid resumed>) = 0 [pid 7313] ioctl(4, LOOP_SET_FD, 3 [pid 7314] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 229.079919][ T7310] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [pid 7314] write(3, "1000", 4) = 4 [pid 7312] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7314] close(3) = 0 [pid 7314] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7312] <... openat resumed>) = 4 [pid 7311] <... renameat2 resumed>) = 0 [pid 7312] ioctl(4, LOOP_SET_FD, 3 [pid 7311] sync(executing program [pid 7314] write(1, "executing program\n", 18 [pid 7310] <... mount resumed>) = 0 [pid 7314] <... write resumed>) = 18 [pid 7310] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7314] memfd_create("syzkaller", 0 [pid 7310] <... openat resumed>) = 3 [pid 7314] <... memfd_create resumed>) = 3 [pid 7310] chdir("./file0" [pid 7314] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7310] <... chdir resumed>) = 0 [pid 7314] <... mmap resumed>) = 0x7f957a000000 [pid 7310] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7314] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7310] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7310] openat(AT_FDCWD, ".", O_RDONLY [pid 7314] <... write resumed>) = 65536 [pid 7310] <... openat resumed>) = 4 [pid 7314] munmap(0x7f957a000000, 138412032 [pid 7310] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7314] <... munmap resumed>) = 0 [pid 7313] <... ioctl resumed>) = 0 [pid 7314] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7312] <... ioctl resumed>) = 0 [pid 7310] <... renameat2 resumed>) = 0 [pid 7314] <... openat resumed>) = 4 [pid 7313] close(3 [pid 7310] sync( [pid 7313] <... close resumed>) = 0 [ 229.133839][ T7313] loop3: detected capacity change from 0 to 128 [ 229.141943][ T7312] loop0: detected capacity change from 0 to 128 [pid 7313] close(4 [pid 7314] ioctl(4, LOOP_SET_FD, 3 [pid 7313] <... close resumed>) = 0 [pid 7313] mkdir("./file0", 0777 [pid 7312] close(3 [pid 7311] <... sync resumed>) = 0 [pid 7313] <... mkdir resumed>) = 0 [pid 7310] <... sync resumed>) = 0 [pid 7312] <... close resumed>) = 0 [pid 7311] exit_group(0 [pid 7310] exit_group(0 [pid 7313] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7312] close(4 [pid 7311] <... exit_group resumed>) = ? [pid 7310] <... exit_group resumed>) = ? [pid 7312] <... close resumed>) = 0 [pid 7311] +++ exited with 0 +++ [pid 7310] +++ exited with 0 +++ [pid 7312] mkdir("./file0", 0777 [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7311, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7312] <... mkdir resumed>) = 0 [pid 5827] restart_syscall(<... resuming interrupted clone ...> [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7310, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5827] <... restart_syscall resumed>) = 0 [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 7312] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5824] <... restart_syscall resumed>) = 0 [pid 5827] umount2("./285", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 229.176038][ T7314] loop2: detected capacity change from 0 to 128 [ 229.200005][ T7313] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [pid 7314] <... ioctl resumed>) = 0 [pid 5827] openat(AT_FDCWD, "./285", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5827] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] umount2("./290", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] getdents64(3, [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] openat(AT_FDCWD, "./290", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 7314] close(3 [pid 5827] umount2("./285/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7314] <... close resumed>) = 0 [pid 5824] getdents64(3, [pid 7314] close(4 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 7314] <... close resumed>) = 0 [pid 5824] umount2("./290/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7314] mkdir("./file0", 0777) = 0 [pid 7314] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5827] <... umount2 resumed>) = 0 [pid 5824] <... umount2 resumed>) = 0 [pid 5827] umount2("./285/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] newfstatat(AT_FDCWD, "./285/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] umount2("./285/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] umount2("./290/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] openat(AT_FDCWD, "./285/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5827] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5827] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5827] close(4) = 0 [pid 5827] rmdir("./285/file0") = 0 [pid 5827] umount2("./285/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] newfstatat(AT_FDCWD, "./285/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] unlink("./285/binderfs") = 0 [pid 5827] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [ 229.220719][ T7312] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [pid 5827] close(3) = 0 [pid 5827] rmdir("./285") = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] mkdir("./286", 0777) = 0 [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5827] ioctl(3, LOOP_CLR_FD) = 0 [pid 5827] close(3) = 0 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5824] newfstatat(AT_FDCWD, "./290/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] umount2("./290/file0", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7315 attached [pid 7315] set_robust_list(0x55557eba4660, 24 [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7315 [pid 7315] <... set_robust_list resumed>) = 0 [pid 7315] chdir("./286" [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./290/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7315] <... chdir resumed>) = 0 [pid 7315] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5824] <... openat resumed>) = 4 [pid 7313] <... mount resumed>) = 0 [pid 5824] newfstatat(4, "", [pid 7313] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7313] <... openat resumed>) = 3 [pid 5824] getdents64(4, [pid 7313] chdir("./file0") = 0 [pid 7313] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7315] setpgid(0, 0 [pid 7313] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7315] <... setpgid resumed>) = 0 [pid 7313] openat(AT_FDCWD, ".", O_RDONLY [pid 7315] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7313] <... openat resumed>) = 4 [pid 7315] <... openat resumed>) = 3 [pid 7313] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7315] write(3, "1000", 4) = 4 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 7315] close(3) = 0 executing program [pid 7315] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7315] write(1, "executing program\n", 18) = 18 [pid 7315] memfd_create("syzkaller", 0) = 3 [pid 7315] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7315] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 7315] munmap(0x7f957a000000, 138412032 [pid 7313] <... renameat2 resumed>) = 0 [pid 7312] <... mount resumed>) = 0 [pid 5824] getdents64(4, [pid 7313] sync( [pid 7312] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7315] <... munmap resumed>) = 0 [pid 7312] chdir("./file0" [pid 7315] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7312] <... chdir resumed>) = 0 [pid 7315] <... openat resumed>) = 4 [ 229.273911][ T7314] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [pid 7312] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7315] ioctl(4, LOOP_SET_FD, 3 [pid 7312] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 7314] <... mount resumed>) = 0 [pid 7312] openat(AT_FDCWD, ".", O_RDONLY [pid 5824] close(4 [pid 7312] <... openat resumed>) = 4 [pid 5824] <... close resumed>) = 0 [pid 5824] rmdir("./290/file0" [pid 7312] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7314] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7314] chdir("./file0" [pid 7312] <... renameat2 resumed>) = 0 [pid 7314] <... chdir resumed>) = 0 [pid 7312] sync( [pid 7314] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7314] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7314] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5824] <... rmdir resumed>) = 0 [pid 5824] umount2("./290/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./290/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./290/binderfs" [pid 7315] <... ioctl resumed>) = 0 [pid 7314] <... renameat2 resumed>) = 0 [pid 5824] <... unlink resumed>) = 0 [pid 7315] close(3 [pid 7314] sync( [pid 5824] getdents64(3, [pid 7315] <... close resumed>) = 0 [pid 7315] close(4 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7315] <... close resumed>) = 0 [pid 5824] close(3 [pid 7315] mkdir("./file0", 0777 [pid 5824] <... close resumed>) = 0 [ 229.328513][ T7315] loop4: detected capacity change from 0 to 128 [pid 5824] rmdir("./290") = 0 [pid 5824] mkdir("./291", 0777 [pid 7315] <... mkdir resumed>) = 0 [pid 7314] <... sync resumed>) = 0 [pid 7313] <... sync resumed>) = 0 [pid 7312] <... sync resumed>) = 0 [pid 5824] <... mkdir resumed>) = 0 [pid 7315] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7314] exit_group(0 [pid 7312] exit_group(0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7312] <... exit_group resumed>) = ? [pid 7313] exit_group(0 [pid 7314] <... exit_group resumed>) = ? [pid 7312] +++ exited with 0 +++ [pid 5824] <... openat resumed>) = 3 [pid 7314] +++ exited with 0 +++ [pid 7313] <... exit_group resumed>) = ? [pid 5824] ioctl(3, LOOP_CLR_FD [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7312, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5823] umount2("./298", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7313] +++ exited with 0 +++ [pid 5823] openat(AT_FDCWD, "./298", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7314, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5823] <... openat resumed>) = 3 [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7313, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5823] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(3, [pid 5824] <... ioctl resumed>) = 0 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] close(3 [pid 5823] umount2("./298/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... close resumed>) = 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7316 attached [pid 7316] set_robust_list(0x55557eba4660, 24 [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7316 [pid 7316] <... set_robust_list resumed>) = 0 [pid 5825] umount2("./290", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] umount2("./296", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7316] chdir("./291" [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./290", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7316] <... chdir resumed>) = 0 [pid 5826] openat(AT_FDCWD, "./296", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] <... openat resumed>) = 3 [pid 7316] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5826] <... openat resumed>) = 3 [pid 5825] newfstatat(3, "", [pid 7316] setpgid(0, 0 [pid 5826] newfstatat(3, "", [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7316] <... setpgid resumed>) = 0 [pid 7316] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(3, [pid 7316] <... openat resumed>) = 3 [pid 5826] getdents64(3, [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 7316] write(3, "1000", 4) = 4 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5825] umount2("./290/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7316] close(3 [pid 5826] umount2("./296/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7316] <... close resumed>) = 0 [pid 5826] <... umount2 resumed>) = 0 [pid 5825] <... umount2 resumed>) = 0 [pid 5823] <... umount2 resumed>) = 0 [pid 7316] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5826] umount2("./296/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./290/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] umount2("./298/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7316] write(1, "executing program\n", 18 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./296/file0", [pid 5825] newfstatat(AT_FDCWD, "./290/file0", [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] umount2("./296/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./290/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) executing program [pid 5826] openat(AT_FDCWD, "./296/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] openat(AT_FDCWD, "./290/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7316] <... write resumed>) = 18 [pid 5823] newfstatat(AT_FDCWD, "./298/file0", [pid 5826] <... openat resumed>) = 4 [pid 7316] memfd_create("syzkaller", 0 [pid 5825] <... openat resumed>) = 4 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7316] <... memfd_create resumed>) = 3 [pid 5823] umount2("./298/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7316] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5826] newfstatat(4, "", [pid 5825] newfstatat(4, "", [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7316] <... mmap resumed>) = 0x7f957a000000 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] openat(AT_FDCWD, "./298/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] getdents64(4, [pid 5825] getdents64(4, [pid 5823] <... openat resumed>) = 4 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] newfstatat(4, "", [pid 5826] getdents64(4, [pid 5825] getdents64(4, [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] close(4 [pid 5825] close(4 [pid 5826] <... close resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 5823] getdents64(4, [pid 7316] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5826] rmdir("./296/file0" [pid 5825] rmdir("./290/file0" [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 7316] <... write resumed>) = 65536 [pid 5826] <... rmdir resumed>) = 0 [pid 5825] <... rmdir resumed>) = 0 [pid 5823] getdents64(4, [pid 5826] umount2("./296/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./290/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] close(4 [pid 7316] munmap(0x7f957a000000, 138412032 [pid 5826] newfstatat(AT_FDCWD, "./296/binderfs", [pid 5825] newfstatat(AT_FDCWD, "./290/binderfs", [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... close resumed>) = 0 [pid 5826] unlink("./296/binderfs" [pid 7316] <... munmap resumed>) = 0 [pid 5826] <... unlink resumed>) = 0 [pid 5825] unlink("./290/binderfs" [pid 5823] rmdir("./298/file0" [pid 7316] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5826] getdents64(3, [pid 5825] <... unlink resumed>) = 0 [pid 7316] <... openat resumed>) = 4 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] <... rmdir resumed>) = 0 [pid 5826] close(3 [ 229.420222][ T7315] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [pid 5825] getdents64(3, [pid 7316] ioctl(4, LOOP_SET_FD, 3 [pid 5826] <... close resumed>) = 0 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] umount2("./298/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] rmdir("./296" [pid 5825] close(3 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... close resumed>) = 0 [pid 5825] rmdir("./290" [pid 5826] <... rmdir resumed>) = 0 [pid 5823] newfstatat(AT_FDCWD, "./298/binderfs", [pid 5825] <... rmdir resumed>) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./298/binderfs" [pid 7315] <... mount resumed>) = 0 [pid 5825] mkdir("./291", 0777 [pid 5826] mkdir("./297", 0777 [pid 5825] <... mkdir resumed>) = 0 [pid 7315] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5826] <... mkdir resumed>) = 0 [pid 5823] <... unlink resumed>) = 0 [pid 7315] <... openat resumed>) = 3 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5823] getdents64(3, [pid 7315] chdir("./file0" [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7315] <... chdir resumed>) = 0 [pid 5823] close(3 [pid 7315] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7316] <... ioctl resumed>) = 0 [pid 7315] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5826] <... openat resumed>) = 3 [pid 5825] <... openat resumed>) = 3 [pid 5823] <... close resumed>) = 0 [pid 5825] ioctl(3, LOOP_CLR_FD) = 0 [pid 5826] ioctl(3, LOOP_CLR_FD [pid 5825] close(3 [pid 5826] <... ioctl resumed>) = 0 [pid 7315] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 5826] close(3 [pid 5825] <... close resumed>) = 0 [pid 5823] rmdir("./298" [pid 7315] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7316] close(3 [pid 5826] <... close resumed>) = 0 [pid 5823] <... rmdir resumed>) = 0 [pid 7316] <... close resumed>) = 0 [pid 7316] close(4) = 0 [pid 7315] <... renameat2 resumed>) = 0 [pid 5823] mkdir("./299", 0777 [pid 7316] mkdir("./file0", 0777 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7317 attached [pid 7316] <... mkdir resumed>) = 0 [pid 7315] sync( [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5823] <... mkdir resumed>) = 0 [pid 7316] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7317] set_robust_list(0x55557eba4660, 24./strace-static-x86_64: Process 7318 attached ) = 0 [pid 7317] chdir("./291" [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7318] set_robust_list(0x55557eba4660, 24 [pid 7317] <... chdir resumed>) = 0 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7318 [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7317 [pid 7317] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7317] setpgid(0, 0) = 0 [pid 7317] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7317] write(3, "1000", 4) = 4 [pid 7317] close(3) = 0 [pid 7317] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 7317] write(1, "executing program\n", 18) = 18 [pid 7317] memfd_create("syzkaller", 0) = 3 [pid 7317] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7317] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7318] <... set_robust_list resumed>) = 0 [pid 5823] <... openat resumed>) = 3 [pid 7318] chdir("./297" [pid 7317] <... write resumed>) = 65536 [pid 7317] munmap(0x7f957a000000, 138412032 [pid 7318] <... chdir resumed>) = 0 [pid 7317] <... munmap resumed>) = 0 [pid 5823] ioctl(3, LOOP_CLR_FD [pid 7318] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7317] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5823] <... ioctl resumed>) = 0 [pid 7318] <... prctl resumed>) = 0 [pid 7317] <... openat resumed>) = 4 [pid 7318] setpgid(0, 0 [pid 5823] close(3 [pid 7318] <... setpgid resumed>) = 0 [pid 7317] ioctl(4, LOOP_SET_FD, 3 [pid 7318] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 229.482602][ T7316] loop1: detected capacity change from 0 to 128 [ 229.522476][ T7316] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [pid 7318] write(3, "1000", 4 [pid 7316] <... mount resumed>) = 0 [pid 5823] <... close resumed>) = 0 [pid 7318] <... write resumed>) = 4 [pid 7316] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7318] close(3) = 0 [pid 7316] <... openat resumed>) = 3 ./strace-static-x86_64: Process 7319 attached [pid 7319] set_robust_list(0x55557eba4660, 24) = 0 [pid 7319] chdir("./299" [pid 7318] symlink("/dev/binderfs", "./binderfs" [pid 7316] chdir("./file0" [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7319 [pid 7319] <... chdir resumed>) = 0 [pid 7319] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7318] <... symlink resumed>) = 0 [pid 7319] <... prctl resumed>) = 0 [pid 7319] setpgid(0, 0 [pid 7316] <... chdir resumed>) = 0 [pid 7319] <... setpgid resumed>) = 0 [pid 7319] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7318] write(1, "executing program\n", 18 [pid 7316] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7319] <... openat resumed>) = 3 [pid 7319] write(3, "1000", 4executing program [pid 7317] <... ioctl resumed>) = 0 [pid 7319] <... write resumed>) = 4 [pid 7318] <... write resumed>) = 18 [pid 7317] close(3 [pid 7316] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7315] <... sync resumed>) = 0 [pid 7318] memfd_create("syzkaller", 0 [pid 7316] openat(AT_FDCWD, ".", O_RDONLY [pid 7315] exit_group(0 [pid 7318] <... memfd_create resumed>) = 3 [pid 7316] <... openat resumed>) = 4 [pid 7319] close(3 [pid 7315] <... exit_group resumed>) = ? [pid 7317] <... close resumed>) = 0 [pid 7318] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7316] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7317] close(4 [pid 7318] <... mmap resumed>) = 0x7f957a000000 [pid 7317] <... close resumed>) = 0 [pid 7316] <... renameat2 resumed>) = 0 [pid 7317] mkdir("./file0", 0777 [ 229.554258][ T7317] loop2: detected capacity change from 0 to 128 [pid 7318] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7319] <... close resumed>) = 0 [pid 7318] <... write resumed>) = 65536 [pid 7317] <... mkdir resumed>) = 0 [pid 7316] sync( [pid 7315] +++ exited with 0 +++ executing program [pid 7319] symlink("/dev/binderfs", "./binderfs" [pid 7318] munmap(0x7f957a000000, 138412032 [pid 7317] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7315, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5827] umount2("./286", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7319] <... symlink resumed>) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7319] write(1, "executing program\n", 18 [pid 5827] openat(AT_FDCWD, "./286", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7319] <... write resumed>) = 18 [pid 7318] <... munmap resumed>) = 0 [pid 5827] <... openat resumed>) = 3 [pid 5827] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5827] umount2("./286/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7319] memfd_create("syzkaller", 0 [pid 7318] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 7318] ioctl(4, LOOP_SET_FD, 3 [pid 5827] <... umount2 resumed>) = 0 [pid 5827] umount2("./286/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] newfstatat(AT_FDCWD, "./286/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] umount2("./286/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] openat(AT_FDCWD, "./286/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5827] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5827] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 7319] <... memfd_create resumed>) = 3 [pid 5827] close(4 [pid 7319] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7318] <... ioctl resumed>) = 0 [pid 5827] <... close resumed>) = 0 [pid 7319] <... mmap resumed>) = 0x7f957a000000 [pid 7318] close(3 [pid 5827] rmdir("./286/file0" [pid 7318] <... close resumed>) = 0 [pid 5827] <... rmdir resumed>) = 0 [pid 5827] umount2("./286/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7319] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7318] close(4 [pid 5827] newfstatat(AT_FDCWD, "./286/binderfs", [pid 7318] <... close resumed>) = 0 [pid 7319] <... write resumed>) = 65536 [pid 7318] mkdir("./file0", 0777 [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7318] <... mkdir resumed>) = 0 [pid 5827] unlink("./286/binderfs" [pid 7319] munmap(0x7f957a000000, 138412032 [pid 7318] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5827] <... unlink resumed>) = 0 [pid 5827] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5827] close(3) = 0 [pid 5827] rmdir("./286") = 0 [ 229.620602][ T7317] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 229.643893][ T7318] loop3: detected capacity change from 0 to 128 [pid 7319] <... munmap resumed>) = 0 [pid 7317] <... mount resumed>) = 0 [pid 5827] mkdir("./287", 0777) = 0 [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5827] ioctl(3, LOOP_CLR_FD) = 0 [pid 5827] close(3) = 0 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7319] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7317] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY./strace-static-x86_64: Process 7320 attached [pid 7319] <... openat resumed>) = 4 [pid 7317] <... openat resumed>) = 3 [pid 7319] ioctl(4, LOOP_SET_FD, 3 [pid 7317] chdir("./file0" [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7320 [pid 7317] <... chdir resumed>) = 0 [pid 7320] set_robust_list(0x55557eba4660, 24 [pid 7317] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7320] <... set_robust_list resumed>) = 0 [pid 7320] chdir("./287" [pid 7317] openat(AT_FDCWD, ".", O_RDONLY [pid 7320] <... chdir resumed>) = 0 [pid 7320] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7317] <... openat resumed>) = 4 [pid 7320] <... prctl resumed>) = 0 [pid 7317] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7320] setpgid(0, 0) = 0 [pid 7320] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7320] write(3, "1000", 4) = 4 [pid 7320] close(3 [pid 7319] <... ioctl resumed>) = 0 [pid 7317] <... renameat2 resumed>) = 0 [pid 7320] <... close resumed>) = 0 [pid 7319] close(3 [pid 7320] symlink("/dev/binderfs", "./binderfs" [pid 7317] sync(executing program [pid 7320] <... symlink resumed>) = 0 [pid 7319] <... close resumed>) = 0 [pid 7320] write(1, "executing program\n", 18 [pid 7319] close(4) = 0 [pid 7318] <... mount resumed>) = 0 [ 229.679910][ T7318] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 229.697868][ T7319] loop0: detected capacity change from 0 to 128 [pid 7320] <... write resumed>) = 18 [pid 7319] mkdir("./file0", 0777 [pid 7318] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7320] memfd_create("syzkaller", 0 [pid 7318] <... openat resumed>) = 3 [pid 7320] <... memfd_create resumed>) = 3 [pid 7319] <... mkdir resumed>) = 0 [pid 7318] chdir("./file0" [pid 7320] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7319] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7318] <... chdir resumed>) = 0 [pid 7320] <... mmap resumed>) = 0x7f957a000000 [pid 7320] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7318] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7320] <... write resumed>) = 65536 [pid 7318] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7318] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7320] munmap(0x7f957a000000, 138412032) = 0 [pid 7318] <... renameat2 resumed>) = 0 [pid 7320] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 7320] ioctl(4, LOOP_SET_FD, 3 [pid 7318] sync( [pid 7320] <... ioctl resumed>) = 0 [pid 7320] close(3) = 0 [pid 7320] close(4 [pid 7319] <... mount resumed>) = 0 [pid 7317] <... sync resumed>) = 0 [pid 7316] <... sync resumed>) = 0 [pid 7320] <... close resumed>) = 0 [pid 7317] exit_group(0 [pid 7320] mkdir("./file0", 0777 [pid 7319] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7317] <... exit_group resumed>) = ? [pid 7316] exit_group(0) = ? [pid 7320] <... mkdir resumed>) = 0 [pid 7319] <... openat resumed>) = 3 [pid 7316] +++ exited with 0 +++ [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7316, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5824] restart_syscall(<... resuming interrupted clone ...>) = 0 [ 229.764364][ T7319] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 229.789345][ T7320] loop4: detected capacity change from 0 to 128 [pid 7319] chdir("./file0" [pid 5824] umount2("./291", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7320] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7319] <... chdir resumed>) = 0 [pid 7317] +++ exited with 0 +++ [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7317, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5824] openat(AT_FDCWD, "./291", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7319] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5825] umount2("./291", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... openat resumed>) = 3 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./291", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5825] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5825] umount2("./291/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7319] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5825] <... umount2 resumed>) = 0 [pid 5824] newfstatat(3, "", [pid 5825] umount2("./291/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./291/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] umount2("./291/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./291/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5825] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7319] openat(AT_FDCWD, ".", O_RDONLY [pid 5825] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5825] close(4) = 0 [pid 5825] rmdir("./291/file0") = 0 [pid 7319] <... openat resumed>) = 4 [pid 5825] umount2("./291/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] getdents64(3, [pid 7319] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] umount2("./291/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] newfstatat(AT_FDCWD, "./291/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./291/binderfs") = 0 [pid 5825] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5825] close(3 [pid 7319] <... renameat2 resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 5825] rmdir("./291" [pid 5824] <... umount2 resumed>) = 0 [pid 5825] <... rmdir resumed>) = 0 [pid 5824] umount2("./291/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7319] sync( [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./291/file0", [pid 7320] <... mount resumed>) = 0 [pid 7318] <... sync resumed>) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] mkdir("./292", 0777 [pid 5824] umount2("./291/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7320] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7318] exit_group(0 [pid 5825] <... mkdir resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7318] <... exit_group resumed>) = ? [pid 5824] openat(AT_FDCWD, "./291/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7320] <... openat resumed>) = 3 [pid 5824] <... openat resumed>) = 4 [pid 5824] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5824] getdents64(4, [pid 5825] <... openat resumed>) = 3 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 5824] close(4 [pid 5825] <... ioctl resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 7318] +++ exited with 0 +++ [pid 7320] chdir("./file0" [pid 5825] close(3 [pid 5824] rmdir("./291/file0" [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7318, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5825] <... close resumed>) = 0 [pid 5826] restart_syscall(<... resuming interrupted clone ...> [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7320] <... chdir resumed>) = 0 [pid 7320] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7321 [pid 5824] <... rmdir resumed>) = 0 [pid 7320] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5824] umount2("./291/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7320] openat(AT_FDCWD, ".", O_RDONLY [pid 5824] newfstatat(AT_FDCWD, "./291/binderfs", [pid 7320] <... openat resumed>) = 4 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./291/binderfs") = 0 [ 229.863782][ T7320] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [pid 5824] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] close(3) = 0 [pid 5824] rmdir("./291"./strace-static-x86_64: Process 7321 attached [pid 7320] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5824] <... rmdir resumed>) = 0 [pid 5826] <... restart_syscall resumed>) = 0 [pid 5826] umount2("./297", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./297", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7321] set_robust_list(0x55557eba4660, 24 [pid 5826] <... openat resumed>) = 3 [pid 5826] newfstatat(3, "", [pid 7321] <... set_robust_list resumed>) = 0 [pid 7320] <... renameat2 resumed>) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(3, [pid 5824] mkdir("./292", 0777) = 0 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5826] umount2("./297/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... openat resumed>) = 3 [pid 7320] sync( [pid 7321] chdir("./292" [pid 5824] ioctl(3, LOOP_CLR_FD [pid 7321] <... chdir resumed>) = 0 [pid 5824] <... ioctl resumed>) = 0 [pid 7321] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5824] close(3 [pid 7321] <... prctl resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7322 attached , child_tidptr=0x55557eba4650) = 7322 [pid 7321] setpgid(0, 0 [pid 7319] <... sync resumed>) = 0 [pid 7322] set_robust_list(0x55557eba4660, 24 [pid 7319] exit_group(0 [pid 7322] <... set_robust_list resumed>) = 0 [pid 7322] chdir("./292" [pid 7321] <... setpgid resumed>) = 0 [pid 7319] <... exit_group resumed>) = ? [pid 7322] <... chdir resumed>) = 0 [pid 7322] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7319] +++ exited with 0 +++ [pid 5826] <... umount2 resumed>) = 0 [pid 5826] umount2("./297/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7319, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7322] <... prctl resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 7322] setpgid(0, 0 [pid 5826] newfstatat(AT_FDCWD, "./297/file0", [pid 7322] <... setpgid resumed>) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7322] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5826] umount2("./297/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7322] <... openat resumed>) = 3 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7322] write(3, "1000", 4 [pid 5826] openat(AT_FDCWD, "./297/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7322] <... write resumed>) = 4 [pid 5826] <... openat resumed>) = 4 [pid 7322] close(3 [pid 5826] newfstatat(4, "", [pid 7322] <... close resumed>) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 executing program [pid 7322] symlink("/dev/binderfs", "./binderfs" [pid 5826] getdents64(4, [pid 7322] <... symlink resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5826] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5826] close(4 [pid 5823] <... restart_syscall resumed>) = 0 [pid 7320] <... sync resumed>) = 0 [pid 5826] <... close resumed>) = 0 [pid 7322] write(1, "executing program\n", 18 [pid 5826] rmdir("./297/file0" [pid 7322] <... write resumed>) = 18 [pid 7320] exit_group(0 [pid 5826] <... rmdir resumed>) = 0 [pid 7322] memfd_create("syzkaller", 0 [pid 5826] umount2("./297/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7322] <... memfd_create resumed>) = 3 [pid 7321] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7320] <... exit_group resumed>) = ? [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./297/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7322] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5826] unlink("./297/binderfs" [pid 7322] <... mmap resumed>) = 0x7f957a000000 [pid 5826] <... unlink resumed>) = 0 [pid 7322] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7320] +++ exited with 0 +++ [pid 5826] getdents64(3, [pid 5823] umount2("./299", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7321] <... openat resumed>) = 3 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7321] write(3, "1000", 4 [pid 5823] openat(AT_FDCWD, "./299", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORYexecuting program [pid 7322] <... write resumed>) = 65536 [pid 7321] <... write resumed>) = 4 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] <... openat resumed>) = 3 [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7320, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5826] close(3 [pid 5827] restart_syscall(<... resuming interrupted clone ...> [pid 5826] <... close resumed>) = 0 [pid 7321] close(3 [pid 5826] rmdir("./297" [pid 5823] newfstatat(3, "", [pid 7322] munmap(0x7f957a000000, 138412032 [pid 7321] <... close resumed>) = 0 [pid 5826] <... rmdir resumed>) = 0 [pid 7322] <... munmap resumed>) = 0 [pid 7321] symlink("/dev/binderfs", "./binderfs" [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7322] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5827] <... restart_syscall resumed>) = 0 [pid 5826] mkdir("./298", 0777 [pid 7322] <... openat resumed>) = 4 [pid 7321] <... symlink resumed>) = 0 [pid 5823] getdents64(3, [pid 7321] write(1, "executing program\n", 18 [pid 7322] ioctl(4, LOOP_SET_FD, 3 [pid 7321] <... write resumed>) = 18 [pid 5827] umount2("./287", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 7321] memfd_create("syzkaller", 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... mkdir resumed>) = 0 [pid 5823] umount2("./299/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7321] <... memfd_create resumed>) = 3 [pid 7321] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5827] openat(AT_FDCWD, "./287", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5826] <... openat resumed>) = 3 [pid 5826] ioctl(3, LOOP_CLR_FD) = 0 [pid 5826] close(3) = 0 [pid 7321] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7321] <... write resumed>) = 65536 [pid 5827] newfstatat(3, "", [pid 7321] munmap(0x7f957a000000, 138412032./strace-static-x86_64: Process 7323 attached ) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5827] umount2("./287/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7323 [pid 7321] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7323] set_robust_list(0x55557eba4660, 24 [pid 7322] <... ioctl resumed>) = 0 [pid 7321] <... openat resumed>) = 4 [pid 7322] close(3) = 0 [pid 7321] ioctl(4, LOOP_SET_FD, 3 [ 230.013737][ T7322] loop1: detected capacity change from 0 to 128 [pid 7323] <... set_robust_list resumed>) = 0 [pid 7322] close(4) = 0 [pid 7322] mkdir("./file0", 0777) = 0 [pid 5823] <... umount2 resumed>) = 0 [pid 7322] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7323] chdir("./298" [pid 5823] umount2("./299/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7323] <... chdir resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./299/file0", [pid 7323] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7323] <... prctl resumed>) = 0 [pid 7321] <... ioctl resumed>) = 0 [pid 5827] <... umount2 resumed>) = 0 [pid 5823] umount2("./299/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7323] setpgid(0, 0 [pid 7321] close(3 [pid 7323] <... setpgid resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] umount2("./287/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7323] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7321] <... close resumed>) = 0 [pid 5823] openat(AT_FDCWD, "./299/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7323] <... openat resumed>) = 3 [pid 7321] close(4 [pid 5827] newfstatat(AT_FDCWD, "./287/file0", [pid 5823] <... openat resumed>) = 4 [pid 7323] write(3, "1000", 4 [pid 7321] <... close resumed>) = 0 [pid 5823] newfstatat(4, "", [pid 7323] <... write resumed>) = 4 [ 230.054793][ T7321] loop2: detected capacity change from 0 to 128 [ 230.071217][ T7322] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [pid 7321] mkdir("./file0", 0777 [pid 7323] close(3 [pid 7321] <... mkdir resumed>) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7323] <... close resumed>) = 0 [pid 7321] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7323] symlink("/dev/binderfs", "./binderfs" [pid 5823] getdents64(4, [pid 5827] umount2("./287/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] openat(AT_FDCWD, "./287/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5827] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] getdents64(4, [pid 7323] <... symlink resumed>) = 0 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] getdents64(4, [pid 5827] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5827] close(4 [pid 7323] write(1, "executing program\n", 18 [pid 5827] <... close resumed>) = 0 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5827] rmdir("./287/file0"executing program [pid 7323] <... write resumed>) = 18 [pid 5827] <... rmdir resumed>) = 0 [pid 5823] close(4 [pid 5827] umount2("./287/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... close resumed>) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7323] memfd_create("syzkaller", 0 [pid 5827] newfstatat(AT_FDCWD, "./287/binderfs", [pid 5823] rmdir("./299/file0" [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... rmdir resumed>) = 0 [pid 7323] <... memfd_create resumed>) = 3 [pid 5827] unlink("./287/binderfs" [pid 5823] umount2("./299/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7323] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5827] <... unlink resumed>) = 0 [pid 7323] <... mmap resumed>) = 0x7f957a000000 [pid 5827] getdents64(3, [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5827] close(3 [pid 7323] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7322] <... mount resumed>) = 0 [pid 5827] <... close resumed>) = 0 [pid 5823] newfstatat(AT_FDCWD, "./299/binderfs", [pid 7322] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5827] rmdir("./287" [pid 7322] <... openat resumed>) = 3 [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7323] <... write resumed>) = 65536 [pid 7322] chdir("./file0" [pid 5827] <... rmdir resumed>) = 0 [pid 5823] unlink("./299/binderfs" [pid 7322] <... chdir resumed>) = 0 [pid 5827] mkdir("./288", 0777 [pid 7322] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5827] <... mkdir resumed>) = 0 [pid 5823] <... unlink resumed>) = 0 [pid 7322] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7322] openat(AT_FDCWD, ".", O_RDONLY [pid 5823] getdents64(3, [pid 7323] munmap(0x7f957a000000, 138412032 [pid 7322] <... openat resumed>) = 4 [pid 7321] <... mount resumed>) = 0 [ 230.096389][ T7321] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [pid 7322] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7321] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7323] <... munmap resumed>) = 0 [pid 7321] <... openat resumed>) = 3 [pid 5827] <... openat resumed>) = 3 [pid 5823] close(3 [pid 7323] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7322] <... renameat2 resumed>) = 0 [pid 7321] chdir("./file0" [pid 5827] ioctl(3, LOOP_CLR_FD [pid 7323] <... openat resumed>) = 4 [pid 7322] sync( [pid 7321] <... chdir resumed>) = 0 [pid 5827] <... ioctl resumed>) = 0 [pid 5823] <... close resumed>) = 0 [pid 7323] ioctl(4, LOOP_SET_FD, 3 [pid 7321] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5823] rmdir("./299" [pid 5827] close(3) = 0 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7321] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5823] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 7324 attached [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7324 [pid 7324] set_robust_list(0x55557eba4660, 24) = 0 [pid 7324] chdir("./288" [pid 7321] openat(AT_FDCWD, ".", O_RDONLY [pid 5823] mkdir("./300", 0777 [pid 7324] <... chdir resumed>) = 0 [pid 7324] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7324] setpgid(0, 0) = 0 [pid 7324] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7324] write(3, "1000", 4) = 4 [pid 7321] <... openat resumed>) = 4 [pid 5823] <... mkdir resumed>) = 0 [pid 7324] close(3 [pid 7321] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7324] <... close resumed>) = 0 [pid 7324] symlink("/dev/binderfs", "./binderfs" [pid 5823] <... openat resumed>) = 3 [pid 7321] <... renameat2 resumed>) = 0 [pid 5823] ioctl(3, LOOP_CLR_FD) = 0 executing program [pid 7324] <... symlink resumed>) = 0 [pid 5823] close(3 [pid 7324] write(1, "executing program\n", 18) = 18 [pid 7324] memfd_create("syzkaller", 0 [pid 7321] sync( [pid 5823] <... close resumed>) = 0 [pid 7324] <... memfd_create resumed>) = 3 [pid 7324] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7324] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7323] <... ioctl resumed>) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7324] <... write resumed>) = 65536 [pid 7323] close(3./strace-static-x86_64: Process 7325 attached [pid 7324] munmap(0x7f957a000000, 138412032 [pid 7323] <... close resumed>) = 0 [pid 7324] <... munmap resumed>) = 0 [pid 7323] close(4 [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7325 [pid 7325] set_robust_list(0x55557eba4660, 24 [pid 7323] <... close resumed>) = 0 [pid 7324] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 7324] ioctl(4, LOOP_SET_FD, 3 [pid 7323] mkdir("./file0", 0777 [pid 7324] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 7324] ioctl(4, LOOP_CLR_FD [pid 7323] <... mkdir resumed>) = 0 [pid 7325] <... set_robust_list resumed>) = 0 [pid 7325] chdir("./300" [pid 7324] <... ioctl resumed>) = 0 [pid 7325] <... chdir resumed>) = 0 [pid 7322] <... sync resumed>) = 0 [pid 7321] <... sync resumed>) = 0 [pid 7325] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7323] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7322] exit_group(0 [pid 7321] exit_group(0 [pid 7325] <... prctl resumed>) = 0 [pid 7322] <... exit_group resumed>) = ? [pid 7321] <... exit_group resumed>) = ? [ 230.160391][ T7323] loop3: detected capacity change from 0 to 128 [pid 7325] setpgid(0, 0 [pid 7324] ioctl(4, LOOP_SET_FD, 3 [pid 7322] +++ exited with 0 +++ [pid 7321] +++ exited with 0 +++ [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7321, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7322, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5825] restart_syscall(<... resuming interrupted clone ...> [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 7325] <... setpgid resumed>) = 0 [pid 7324] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5825] <... restart_syscall resumed>) = 0 [pid 5824] <... restart_syscall resumed>) = 0 [pid 7325] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5825] umount2("./292", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./292", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./292", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] openat(AT_FDCWD, "./292", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7325] <... openat resumed>) = 3 [pid 5825] <... openat resumed>) = 3 [pid 5824] <... openat resumed>) = 3 [pid 7325] write(3, "1000", 4 [pid 7324] close(4 [pid 5825] newfstatat(3, "", [pid 5824] newfstatat(3, "", [pid 7325] <... write resumed>) = 4 [pid 7324] <... close resumed>) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(3, [pid 5824] getdents64(3, [pid 7325] close(3 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 7325] <... close resumed>) = 0 [pid 5825] umount2("./292/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./292/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7325] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7324] close(3executing program [pid 7325] write(1, "executing program\n", 18) = 18 [pid 7324] <... close resumed>) = 0 [pid 7325] memfd_create("syzkaller", 0 [pid 7324] openat(AT_FDCWD, ".", O_RDONLY [pid 7325] <... memfd_create resumed>) = 3 [pid 7325] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7324] <... openat resumed>) = 3 [pid 7325] <... mmap resumed>) = 0x7f957a000000 [pid 7324] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7325] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7324] <... renameat2 resumed>) = -1 ENOENT (No such file or directory) [pid 7324] sync( [pid 7325] <... write resumed>) = 65536 [pid 5825] <... umount2 resumed>) = 0 [pid 5824] <... umount2 resumed>) = 0 [pid 7325] munmap(0x7f957a000000, 138412032 [pid 5824] umount2("./292/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./292/file0", [pid 7325] <... munmap resumed>) = 0 [pid 5825] umount2("./292/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] umount2("./292/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] newfstatat(AT_FDCWD, "./292/file0", [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7325] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] openat(AT_FDCWD, "./292/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7325] <... openat resumed>) = 4 [pid 5825] umount2("./292/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... openat resumed>) = 4 [pid 7325] ioctl(4, LOOP_SET_FD, 3 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(4, "", [pid 7325] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 7325] ioctl(4, LOOP_CLR_FD [pid 5825] openat(AT_FDCWD, "./292/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7325] <... ioctl resumed>) = 0 [pid 5825] <... openat resumed>) = 4 [pid 5824] getdents64(4, [pid 5825] newfstatat(4, "", [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(4, [pid 5825] getdents64(4, [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] close(4 [pid 7325] ioctl(4, LOOP_SET_FD, 3 [pid 5825] getdents64(4, [pid 7325] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] <... close resumed>) = 0 [pid 7325] close(4 [pid 5825] close(4 [pid 7325] <... close resumed>) = 0 [pid 5824] rmdir("./292/file0" [pid 7325] close(3 [pid 5825] <... close resumed>) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 5825] rmdir("./292/file0" [pid 5824] umount2("./292/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7325] <... close resumed>) = 0 [pid 5825] <... rmdir resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] umount2("./292/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] newfstatat(AT_FDCWD, "./292/binderfs", [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] newfstatat(AT_FDCWD, "./292/binderfs", [pid 5824] unlink("./292/binderfs" [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... unlink resumed>) = 0 [pid 7325] openat(AT_FDCWD, ".", O_RDONLY [pid 5825] unlink("./292/binderfs" [pid 5824] getdents64(3, [pid 7325] <... openat resumed>) = 3 [pid 5825] <... unlink resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5825] getdents64(3, [pid 7325] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5824] close(3 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] <... close resumed>) = 0 [pid 5825] close(3 [pid 5824] rmdir("./292" [pid 5825] <... close resumed>) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 7325] <... renameat2 resumed>) = -1 ENOENT (No such file or directory) [pid 5825] rmdir("./292" [pid 7325] sync( [pid 5825] <... rmdir resumed>) = 0 [pid 5825] mkdir("./293", 0777) = 0 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5824] mkdir("./293", 0777 [pid 5825] <... openat resumed>) = 3 [pid 5824] <... mkdir resumed>) = 0 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5825] <... ioctl resumed>) = 0 [pid 5825] close(3 [pid 7323] <... mount resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 5824] <... openat resumed>) = 3 [pid 7323] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7323] <... openat resumed>) = 3 ./strace-static-x86_64: Process 7326 attached [pid 7323] chdir("./file0" [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7326 [ 230.272895][ T7323] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [pid 5824] ioctl(3, LOOP_CLR_FDexecuting program [pid 7323] <... chdir resumed>) = 0 [pid 7323] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7323] openat(AT_FDCWD, ".", O_RDONLY [pid 7326] set_robust_list(0x55557eba4660, 24 [pid 7323] <... openat resumed>) = 4 [pid 7326] <... set_robust_list resumed>) = 0 [pid 7323] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7326] chdir("./293" [pid 7323] <... renameat2 resumed>) = 0 [pid 7323] sync( [pid 5824] <... ioctl resumed>) = 0 [pid 7326] <... chdir resumed>) = 0 [pid 5824] close(3 [pid 7326] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5824] <... close resumed>) = 0 [pid 7326] setpgid(0, 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7326] <... setpgid resumed>) = 0 [pid 7326] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7326] write(3, "1000", 4) = 4 [pid 7326] close(3) = 0 [pid 7326] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7324] <... sync resumed>) = 0 [pid 7325] <... sync resumed>) = 0 [pid 7324] exit_group(0 [pid 7323] <... sync resumed>) = 0 [pid 7326] write(1, "executing program\n", 18 [pid 7325] exit_group(0 [pid 7324] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 7327 attached [pid 7326] <... write resumed>) = 18 [pid 7325] <... exit_group resumed>) = ? [pid 7323] exit_group(0 [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7327 [pid 7327] set_robust_list(0x55557eba4660, 24 [pid 7326] memfd_create("syzkaller", 0 [pid 7325] +++ exited with 0 +++ [pid 7324] +++ exited with 0 +++ [pid 7323] <... exit_group resumed>) = ? [pid 7327] <... set_robust_list resumed>) = 0 [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7324, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5827] restart_syscall(<... resuming interrupted clone ...> [pid 7327] chdir("./293" [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7325, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 7327] <... chdir resumed>) = 0 [pid 7326] <... memfd_create resumed>) = 3 [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 7327] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7326] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 5827] <... restart_syscall resumed>) = 0 [pid 5827] umount2("./288", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7326] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5827] openat(AT_FDCWD, "./288", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5823] <... restart_syscall resumed>) = 0 [pid 5827] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] getdents64(3, [pid 7326] <... write resumed>) = 65536 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 5827] umount2("./288/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7327] <... prctl resumed>) = 0 [pid 7323] +++ exited with 0 +++ [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] umount2("./300", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] newfstatat(AT_FDCWD, "./288/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7323, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5827] unlink("./288/binderfs" [pid 5826] restart_syscall(<... resuming interrupted clone ...> [pid 5827] <... unlink resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] getdents64(3, [pid 5826] <... restart_syscall resumed>) = 0 [pid 7327] setpgid(0, 0 [pid 7326] munmap(0x7f957a000000, 138412032 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] openat(AT_FDCWD, "./300", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7326] <... munmap resumed>) = 0 [pid 5827] close(3 [pid 7327] <... setpgid resumed>) = 0 [pid 7326] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5827] <... close resumed>) = 0 [pid 5826] umount2("./298", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... openat resumed>) = 3 [pid 7327] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7326] <... openat resumed>) = 4 [pid 5827] rmdir("./288" [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(3, "", [pid 7327] <... openat resumed>) = 3 [pid 7326] ioctl(4, LOOP_SET_FD, 3 [pid 5827] <... rmdir resumed>) = 0 [pid 5826] openat(AT_FDCWD, "./298", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7327] write(3, "1000", 4 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] <... openat resumed>) = 3 [pid 5826] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(3, [pid 7327] <... write resumed>) = 4 [pid 7327] close(3 [pid 5827] mkdir("./289", 0777 [pid 5826] getdents64(3, [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 7327] <... close resumed>) = 0 [pid 5827] <... mkdir resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] umount2("./300/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7327] symlink("/dev/binderfs", "./binderfs" [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7327] <... symlink resumed>) = 0 [pid 5826] umount2("./298/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] newfstatat(AT_FDCWD, "./300/binderfs", executing program [pid 7327] write(1, "executing program\n", 18 [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7327] <... write resumed>) = 18 [pid 5827] <... openat resumed>) = 3 [pid 5823] unlink("./300/binderfs" [pid 7327] memfd_create("syzkaller", 0 [pid 5827] ioctl(3, LOOP_CLR_FD [pid 5823] <... unlink resumed>) = 0 [pid 7327] <... memfd_create resumed>) = 3 [pid 5823] getdents64(3, [pid 7327] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7327] <... mmap resumed>) = 0x7f957a000000 [pid 5827] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5826] <... umount2 resumed>) = 0 [pid 5823] close(3 [pid 7327] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5827] close(3 [pid 5826] umount2("./298/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... close resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5826] newfstatat(AT_FDCWD, "./298/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... close resumed>) = 0 [pid 5826] umount2("./298/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7328 [pid 5826] openat(AT_FDCWD, "./298/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5826] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] rmdir("./300"./strace-static-x86_64: Process 7328 attached [pid 5826] getdents64(4, [pid 5823] <... rmdir resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] mkdir("./301", 0777 [pid 7328] set_robust_list(0x55557eba4660, 24 [pid 7327] <... write resumed>) = 65536 [pid 5826] close(4 [pid 5823] <... mkdir resumed>) = 0 [pid 7328] <... set_robust_list resumed>) = 0 [pid 7327] munmap(0x7f957a000000, 138412032 [pid 7326] <... ioctl resumed>) = 0 [pid 5826] <... close resumed>) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7328] chdir("./289" [pid 7327] <... munmap resumed>) = 0 [pid 7326] close(3 [pid 5826] rmdir("./298/file0" [pid 5823] <... openat resumed>) = 3 [pid 7326] <... close resumed>) = 0 [pid 5826] <... rmdir resumed>) = 0 [pid 5823] ioctl(3, LOOP_CLR_FD [pid 7326] close(4 [pid 5823] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 230.368508][ T7326] loop2: detected capacity change from 0 to 128 [pid 7328] <... chdir resumed>) = 0 [pid 7327] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7326] <... close resumed>) = 0 [pid 5826] umount2("./298/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] close(3 [pid 7328] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7326] mkdir("./file0", 0777 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7327] <... openat resumed>) = 4 [pid 5823] <... close resumed>) = 0 [pid 7328] setpgid(0, 0 [pid 7327] ioctl(4, LOOP_SET_FD, 3 [pid 5826] newfstatat(AT_FDCWD, "./298/binderfs", [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7328] <... setpgid resumed>) = 0 [pid 7326] <... mkdir resumed>) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 7329 attached [pid 7328] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7326] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5826] unlink("./298/binderfs" [pid 7328] <... openat resumed>) = 3 [pid 5826] <... unlink resumed>) = 0 [pid 7329] set_robust_list(0x55557eba4660, 24 [pid 7328] write(3, "1000", 4 [pid 5826] getdents64(3, [pid 7329] <... set_robust_list resumed>) = 0 [pid 7328] <... write resumed>) = 4 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7329] chdir("./301" [pid 7328] close(3 [pid 5826] close(3 [pid 7328] <... close resumed>) = 0 [pid 7328] symlink("/dev/binderfs", "./binderfs" [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7329 [pid 5826] <... close resumed>) = 0 [pid 5826] rmdir("./298") = 0 [pid 7329] <... chdir resumed>) = 0 [pid 7329] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7329] setpgid(0, 0) = 0 [pid 5826] mkdir("./299", 0777 [pid 7329] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5826] <... mkdir resumed>) = 0 [pid 7329] <... openat resumed>) = 3 [pid 7329] write(3, "1000", 4 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 7329] <... write resumed>) = 4 [pid 7328] <... symlink resumed>) = 0 [pid 7327] <... ioctl resumed>) = 0 [pid 7328] write(1, "executing program\n", 18executing program ) = 18 [pid 7327] close(3 [pid 7328] memfd_create("syzkaller", 0 [pid 7327] <... close resumed>) = 0 [pid 7329] close(3 [pid 7327] close(4 [pid 5826] ioctl(3, LOOP_CLR_FD [pid 7329] <... close resumed>) = 0 [pid 7328] <... memfd_create resumed>) = 3 [pid 7327] <... close resumed>) = 0 [pid 5826] <... ioctl resumed>) = 0 [pid 7327] mkdir("./file0", 0777 [pid 7329] symlink("/dev/binderfs", "./binderfs" [pid 5826] close(3 [pid 7329] <... symlink resumed>) = 0 [pid 7327] <... mkdir resumed>) = 0 [pid 5826] <... close resumed>) = 0 [pid 7327] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7329] write(1, "executing program\n", 18 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [ 230.420615][ T7327] loop1: detected capacity change from 0 to 128 [ 230.451170][ T7326] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [pid 7328] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0executing program [pid 7329] <... write resumed>) = 18 [pid 7329] memfd_create("syzkaller", 0) = 3 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7330 [pid 7329] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7329] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7328] <... mmap resumed>) = 0x7f957a000000 [pid 7329] <... write resumed>) = 65536 [pid 7329] munmap(0x7f957a000000, 138412032 [pid 7328] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536./strace-static-x86_64: Process 7330 attached [pid 7329] <... munmap resumed>) = 0 [pid 7329] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7330] set_robust_list(0x55557eba4660, 24 [pid 7329] <... openat resumed>) = 4 [pid 7328] <... write resumed>) = 65536 [pid 7329] ioctl(4, LOOP_SET_FD, 3 [pid 7328] munmap(0x7f957a000000, 138412032 [pid 7330] <... set_robust_list resumed>) = 0 [pid 7330] chdir("./299" [pid 7328] <... munmap resumed>) = 0 [pid 7330] <... chdir resumed>) = 0 [pid 7328] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7330] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7328] <... openat resumed>) = 4 [pid 7328] ioctl(4, LOOP_SET_FD, 3 [pid 7330] <... prctl resumed>) = 0 [pid 7326] <... mount resumed>) = 0 [pid 7326] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7326] chdir("./file0") = 0 [pid 7326] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7326] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7330] setpgid(0, 0 [pid 7328] <... ioctl resumed>) = 0 [pid 7326] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7330] <... setpgid resumed>) = 0 [pid 7330] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7329] <... ioctl resumed>) = 0 [pid 7329] close(3 [pid 7330] <... openat resumed>) = 3 [pid 7329] <... close resumed>) = 0 [pid 7330] write(3, "1000", 4 [pid 7329] close(4 [pid 7330] <... write resumed>) = 4 [pid 7329] <... close resumed>) = 0 [pid 7330] close(3 [pid 7329] mkdir("./file0", 0777 [pid 7330] <... close resumed>) = 0 [pid 7329] <... mkdir resumed>) = 0 [pid 7327] <... mount resumed>) = 0 [pid 7330] symlink("/dev/binderfs", "./binderfs" [pid 7329] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7327] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7326] <... renameat2 resumed>) = 0 [pid 7330] <... symlink resumed>) = 0 [pid 7327] <... openat resumed>) = 3 [pid 7326] sync( [ 230.475452][ T7327] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 230.495818][ T7329] loop0: detected capacity change from 0 to 128 [ 230.515301][ T7328] loop4: detected capacity change from 0 to 128 [pid 7327] chdir("./file0" [pid 7330] write(1, "executing program\n", 18 [pid 7327] <... chdir resumed>) = 0 [pid 7328] close(3) = 0 [pid 7328] close(4) = 0 [pid 7328] mkdir("./file0", 0777) = 0 executing program [pid 7328] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7330] <... write resumed>) = 18 [pid 7327] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7327] openat(AT_FDCWD, ".", O_RDONLY [pid 7330] memfd_create("syzkaller", 0 [pid 7327] <... openat resumed>) = 4 [pid 7327] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7330] <... memfd_create resumed>) = 3 [pid 7330] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7327] <... renameat2 resumed>) = 0 [pid 7330] <... mmap resumed>) = 0x7f957a000000 [pid 7330] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7327] sync( [pid 7330] <... write resumed>) = 65536 [pid 7330] munmap(0x7f957a000000, 138412032) = 0 [pid 7329] <... mount resumed>) = 0 [pid 7329] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7329] chdir("./file0") = 0 [pid 7329] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7329] openat(AT_FDCWD, ".", O_RDONLY [pid 7330] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7329] <... openat resumed>) = 4 [pid 7330] <... openat resumed>) = 4 [pid 7329] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7330] ioctl(4, LOOP_SET_FD, 3 [ 230.538689][ T7329] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 230.567140][ T7328] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [pid 7329] <... renameat2 resumed>) = 0 [pid 7330] <... ioctl resumed>) = 0 [pid 7329] sync( [pid 7328] <... mount resumed>) = 0 [pid 7328] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7328] chdir("./file0") = 0 [pid 7328] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7328] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7328] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7330] close(3 [pid 7328] <... renameat2 resumed>) = 0 [pid 7330] <... close resumed>) = 0 [pid 7328] sync( [pid 7330] close(4) = 0 [pid 7330] mkdir("./file0", 0777) = 0 [pid 7329] <... sync resumed>) = 0 [pid 7328] <... sync resumed>) = 0 [pid 7327] <... sync resumed>) = 0 [pid 7326] <... sync resumed>) = 0 [pid 7329] exit_group(0 [pid 7328] exit_group(0 [pid 7329] <... exit_group resumed>) = ? [pid 7328] <... exit_group resumed>) = ? [pid 7327] exit_group(0 [pid 7326] exit_group(0 [ 230.594591][ T7330] loop3: detected capacity change from 0 to 128 [pid 7330] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7326] <... exit_group resumed>) = ? [pid 7328] +++ exited with 0 +++ [pid 7327] <... exit_group resumed>) = ? [pid 7326] +++ exited with 0 +++ [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7328, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7326, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5827] restart_syscall(<... resuming interrupted clone ...> [pid 5825] restart_syscall(<... resuming interrupted clone ...> [pid 7329] +++ exited with 0 +++ [pid 7327] +++ exited with 0 +++ [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7329, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7327, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 5827] <... restart_syscall resumed>) = 0 [pid 5825] <... restart_syscall resumed>) = 0 [pid 5827] umount2("./289", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./293", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] openat(AT_FDCWD, "./289", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] openat(AT_FDCWD, "./293", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] <... restart_syscall resumed>) = 0 [pid 5827] <... openat resumed>) = 3 [pid 5825] <... openat resumed>) = 3 [pid 5827] newfstatat(3, "", [pid 5825] newfstatat(3, "", [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] umount2("./301", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] getdents64(3, [pid 5825] getdents64(3, [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] openat(AT_FDCWD, "./301", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] umount2("./289/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./293/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... openat resumed>) = 3 [pid 5824] <... restart_syscall resumed>) = 0 [pid 5823] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] umount2("./301/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5824] umount2("./293", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] umount2("./301/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./293", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./301/file0", [pid 5827] <... umount2 resumed>) = 0 [pid 5824] <... openat resumed>) = 3 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] newfstatat(3, "", [pid 5827] umount2("./289/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] umount2("./301/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] getdents64(3, [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... umount2 resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] umount2("./293/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] newfstatat(AT_FDCWD, "./289/file0", [pid 5825] umount2("./293/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] openat(AT_FDCWD, "./301/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... openat resumed>) = 4 [pid 5827] umount2("./289/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] newfstatat(AT_FDCWD, "./293/file0", [pid 5823] newfstatat(4, "", [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] umount2("./293/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] getdents64(4, [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5827] openat(AT_FDCWD, "./289/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] openat(AT_FDCWD, "./293/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] getdents64(4, [pid 5827] <... openat resumed>) = 4 [pid 5825] <... openat resumed>) = 4 [pid 5824] <... umount2 resumed>) = 0 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5827] newfstatat(4, "", [pid 5824] umount2("./293/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7330] <... mount resumed>) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] close(4 [pid 7330] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5827] getdents64(4, [pid 5824] newfstatat(AT_FDCWD, "./293/file0", [pid 7330] <... openat resumed>) = 3 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] umount2("./293/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] newfstatat(4, "", [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... close resumed>) = 0 [pid 5827] getdents64(4, [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] openat(AT_FDCWD, "./293/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5825] getdents64(4, [pid 5824] <... openat resumed>) = 4 [pid 5823] rmdir("./301/file0" [pid 5827] close(4 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] newfstatat(4, "", [pid 5827] <... close resumed>) = 0 [ 230.671547][ T7330] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [pid 5825] getdents64(4, [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... rmdir resumed>) = 0 [pid 7330] chdir("./file0" [pid 5827] rmdir("./289/file0" [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] getdents64(4, [pid 7330] <... chdir resumed>) = 0 [pid 5827] <... rmdir resumed>) = 0 [pid 5825] close(4 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] umount2("./301/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7330] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5825] <... close resumed>) = 0 [pid 5824] getdents64(4, [pid 7330] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5825] rmdir("./293/file0" [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7330] openat(AT_FDCWD, ".", O_RDONLY [pid 5827] umount2("./289/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... rmdir resumed>) = 0 [pid 5824] close(4 [pid 7330] <... openat resumed>) = 4 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... close resumed>) = 0 [pid 5823] newfstatat(AT_FDCWD, "./301/binderfs", [pid 7330] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5827] newfstatat(AT_FDCWD, "./289/binderfs", [pid 5824] rmdir("./293/file0" [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7330] <... renameat2 resumed>) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] umount2("./293/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... rmdir resumed>) = 0 [pid 5823] unlink("./301/binderfs" [pid 7330] sync( [pid 5827] unlink("./289/binderfs" [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] umount2("./293/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... unlink resumed>) = 0 [pid 5827] <... unlink resumed>) = 0 [pid 5825] newfstatat(AT_FDCWD, "./293/binderfs", [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] getdents64(3, [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] newfstatat(AT_FDCWD, "./293/binderfs", [pid 5823] getdents64(3, [pid 5825] unlink("./293/binderfs" [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./293/binderfs" [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5827] close(3 [pid 5825] <... unlink resumed>) = 0 [pid 5824] <... unlink resumed>) = 0 [pid 5823] close(3 [pid 5827] <... close resumed>) = 0 [pid 5824] getdents64(3, [pid 5827] rmdir("./289" [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] <... close resumed>) = 0 [pid 5825] getdents64(3, [pid 5824] close(3 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] <... close resumed>) = 0 [pid 5823] rmdir("./301" [pid 7330] <... sync resumed>) = 0 [pid 5827] <... rmdir resumed>) = 0 [pid 5824] rmdir("./293" [pid 5823] <... rmdir resumed>) = 0 [pid 7330] exit_group(0 [pid 5827] mkdir("./290", 0777 [pid 5825] close(3 [pid 5824] <... rmdir resumed>) = 0 [pid 7330] <... exit_group resumed>) = ? [pid 5827] <... mkdir resumed>) = 0 [pid 5824] mkdir("./294", 0777) = 0 [pid 7330] +++ exited with 0 +++ [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5823] mkdir("./302", 0777 [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7330, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5825] <... close resumed>) = 0 [pid 5824] <... openat resumed>) = 3 [pid 5823] <... mkdir resumed>) = 0 [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5826] restart_syscall(<... resuming interrupted clone ...> [pid 5825] rmdir("./293" [pid 5824] ioctl(3, LOOP_CLR_FD [pid 5827] <... openat resumed>) = 3 [pid 5825] <... rmdir resumed>) = 0 [pid 5824] <... ioctl resumed>) = 0 [pid 5827] ioctl(3, LOOP_CLR_FD [pid 5824] close(3 [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5827] <... ioctl resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 5827] close(3 [pid 5826] <... restart_syscall resumed>) = 0 [pid 5825] mkdir("./294", 0777 [pid 5827] <... close resumed>) = 0 [pid 5825] <... mkdir resumed>) = 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7331 attached [pid 5826] umount2("./299", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5826] openat(AT_FDCWD, "./299", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] <... openat resumed>) = 3 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5826] <... openat resumed>) = 3 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 7331] set_robust_list(0x55557eba4660, 24) = 0 [pid 5826] newfstatat(3, "", [pid 5825] <... ioctl resumed>) = 0 [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7331 [pid 5823] <... openat resumed>) = 3 [pid 7331] chdir("./294") = 0 [pid 5823] ioctl(3, LOOP_CLR_FD [pid 7331] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] close(3 [pid 5823] <... ioctl resumed>) = 0 [pid 7331] setpgid(0, 0) = 0 [pid 5826] getdents64(3, [pid 5825] <... close resumed>) = 0 [pid 5823] close(3 [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7332 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] <... close resumed>) = 0 [pid 7331] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5826] umount2("./299/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7331] write(3, "1000", 4./strace-static-x86_64: Process 7332 attached ) = 4 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7331] close(3) = 0 [pid 5826] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 7334 attached [pid 7331] symlink("/dev/binderfs", "./binderfs" [pid 5826] umount2("./299/file0", MNT_FORCE|UMOUNT_NOFOLLOWexecuting program [pid 7334] set_robust_list(0x55557eba4660, 24 [pid 7332] set_robust_list(0x55557eba4660, 24 [pid 7331] <... symlink resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 7333 attached [pid 7334] <... set_robust_list resumed>) = 0 [pid 7332] <... set_robust_list resumed>) = 0 [pid 7331] write(1, "executing program\n", 18 [pid 5826] newfstatat(AT_FDCWD, "./299/file0", [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7333 [pid 7331] <... write resumed>) = 18 [pid 7334] chdir("./294" [pid 7333] set_robust_list(0x55557eba4660, 24 [pid 7332] chdir("./290" [pid 7331] memfd_create("syzkaller", 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] umount2("./299/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7334] <... chdir resumed>) = 0 [pid 7333] <... set_robust_list resumed>) = 0 [pid 7332] <... chdir resumed>) = 0 [pid 7331] <... memfd_create resumed>) = 3 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7334 [pid 5826] openat(AT_FDCWD, "./299/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7331] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7334] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7332] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5826] <... openat resumed>) = 4 [pid 7331] <... mmap resumed>) = 0x7f957a000000 [pid 5826] newfstatat(4, "", [pid 7334] <... prctl resumed>) = 0 [pid 7332] <... prctl resumed>) = 0 [pid 7334] setpgid(0, 0 [pid 7332] setpgid(0, 0 [pid 7331] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7334] <... setpgid resumed>) = 0 [pid 7333] chdir("./302" [pid 7332] <... setpgid resumed>) = 0 [pid 5826] getdents64(4, [pid 7334] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7332] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7334] <... openat resumed>) = 3 [pid 7332] <... openat resumed>) = 3 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 7331] <... write resumed>) = 65536 [pid 5826] getdents64(4, [pid 7333] <... chdir resumed>) = 0 [pid 7332] write(3, "1000", 4 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 7334] write(3, "1000", 4 [pid 7333] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7332] <... write resumed>) = 4 [pid 5826] close(4 [pid 7334] <... write resumed>) = 4 [pid 7332] close(3 [pid 5826] <... close resumed>) = 0 [pid 7334] close(3 [pid 7333] <... prctl resumed>) = 0 [pid 7332] <... close resumed>) = 0 [pid 7331] munmap(0x7f957a000000, 138412032 [pid 5826] rmdir("./299/file0" [pid 7334] <... close resumed>) = 0 [pid 7332] symlink("/dev/binderfs", "./binderfs" [pid 7334] symlink("/dev/binderfs", "./binderfs" [pid 7333] setpgid(0, 0 [pid 7332] <... symlink resumed>) = 0 [pid 7331] <... munmap resumed>) = 0 [pid 5826] <... rmdir resumed>) = 0 executing program [pid 7334] <... symlink resumed>) = 0 [pid 7332] write(1, "executing program\n", 18) = 18 [pid 7333] <... setpgid resumed>) = 0 [pid 7332] memfd_create("syzkaller", 0 [pid 7331] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5826] umount2("./299/binderfs", MNT_FORCE|UMOUNT_NOFOLLOWexecuting program [pid 7334] write(1, "executing program\n", 18 [pid 7333] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7334] <... write resumed>) = 18 [pid 7332] <... memfd_create resumed>) = 3 [pid 7331] <... openat resumed>) = 4 [pid 7333] <... openat resumed>) = 3 [pid 7331] ioctl(4, LOOP_SET_FD, 3 [pid 5826] newfstatat(AT_FDCWD, "./299/binderfs", [pid 7334] memfd_create("syzkaller", 0 [pid 7332] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7334] <... memfd_create resumed>) = 3 [pid 7332] <... mmap resumed>) = 0x7f957a000000 [pid 7334] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7332] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7334] <... mmap resumed>) = 0x7f957a000000 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7334] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7333] write(3, "1000", 4 [pid 5826] unlink("./299/binderfs" [pid 7331] <... ioctl resumed>) = 0 [pid 7334] <... write resumed>) = 65536 [pid 7333] <... write resumed>) = 4 [pid 7332] <... write resumed>) = 65536 [pid 5826] <... unlink resumed>) = 0 [pid 7333] close(3 [pid 5826] getdents64(3, [pid 7333] <... close resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7331] close(3 [ 230.839941][ T7331] loop1: detected capacity change from 0 to 128 [ 230.876146][ T7332] loop4: detected capacity change from 0 to 128 [pid 7333] symlink("/dev/binderfs", "./binderfs"executing program [pid 7334] munmap(0x7f957a000000, 138412032 [pid 7333] <... symlink resumed>) = 0 [pid 7332] munmap(0x7f957a000000, 138412032 [pid 7331] <... close resumed>) = 0 [pid 5826] close(3 [pid 7334] <... munmap resumed>) = 0 [pid 7332] <... munmap resumed>) = 0 [pid 7334] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7332] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7334] <... openat resumed>) = 4 [pid 7333] write(1, "executing program\n", 18 [pid 7332] <... openat resumed>) = 4 [pid 7331] close(4 [pid 5826] <... close resumed>) = 0 [pid 7334] ioctl(4, LOOP_SET_FD, 3 [pid 7332] ioctl(4, LOOP_SET_FD, 3 [pid 7333] <... write resumed>) = 18 [pid 7331] <... close resumed>) = 0 [pid 5826] rmdir("./299") = 0 [pid 7331] mkdir("./file0", 0777 [pid 7333] memfd_create("syzkaller", 0 [pid 7334] <... ioctl resumed>) = 0 [pid 7333] <... memfd_create resumed>) = 3 [pid 7331] <... mkdir resumed>) = 0 [pid 5826] mkdir("./300", 0777) = 0 [pid 7333] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7331] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7333] <... mmap resumed>) = 0x7f957a000000 [pid 7333] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7332] <... ioctl resumed>) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7332] close(3 [pid 7333] <... write resumed>) = 65536 [pid 5826] <... openat resumed>) = 3 [pid 7332] <... close resumed>) = 0 [pid 7334] close(3 [pid 7332] close(4 [pid 7334] <... close resumed>) = 0 [pid 7332] <... close resumed>) = 0 [pid 7334] close(4 [pid 7332] mkdir("./file0", 0777 [pid 7334] <... close resumed>) = 0 [pid 7332] <... mkdir resumed>) = 0 [pid 7334] mkdir("./file0", 0777 [pid 7332] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7334] <... mkdir resumed>) = 0 [ 230.885958][ T7334] loop2: detected capacity change from 0 to 128 [ 230.908201][ T7331] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 230.925409][ T7332] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [pid 5826] ioctl(3, LOOP_CLR_FD [pid 7334] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7333] munmap(0x7f957a000000, 138412032 [pid 5826] <... ioctl resumed>) = 0 [pid 7333] <... munmap resumed>) = 0 [pid 5826] close(3 [pid 7333] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5826] <... close resumed>) = 0 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7333] <... openat resumed>) = 4 [pid 7333] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 7335 attached [pid 7331] <... mount resumed>) = 0 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7335 [pid 7335] set_robust_list(0x55557eba4660, 24 [pid 7331] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7335] <... set_robust_list resumed>) = 0 [pid 7335] chdir("./300" [pid 7331] chdir("./file0" [pid 7335] <... chdir resumed>) = 0 [pid 7331] <... chdir resumed>) = 0 [pid 7335] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7331] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7335] <... prctl resumed>) = 0 [pid 7331] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7333] <... ioctl resumed>) = 0 [pid 7335] setpgid(0, 0 [pid 7333] close(3 [pid 7331] openat(AT_FDCWD, ".", O_RDONLY [pid 7335] <... setpgid resumed>) = 0 [pid 7333] <... close resumed>) = 0 [pid 7331] <... openat resumed>) = 4 [pid 7335] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7331] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7335] <... openat resumed>) = 3 [pid 7333] close(4 [pid 7335] write(3, "1000", 4 [pid 7333] <... close resumed>) = 0 [pid 7335] <... write resumed>) = 4 [pid 7333] mkdir("./file0", 0777 [pid 7335] close(3) = 0 [pid 7333] <... mkdir resumed>) = 0 [pid 7332] <... mount resumed>) = 0 [pid 7331] <... renameat2 resumed>) = 0 [pid 7335] symlink("/dev/binderfs", "./binderfs" [pid 7332] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7333] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7335] <... symlink resumed>) = 0 [pid 7332] <... openat resumed>) = 3 [ 230.945126][ T7334] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 230.961095][ T7333] loop0: detected capacity change from 0 to 128 [pid 7335] write(1, "executing program\n", 18 [pid 7332] chdir("./file0" [pid 7331] sync( [pid 7332] <... chdir resumed>) = 0 [pid 7332] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7332] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7332] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0executing program [pid 7335] <... write resumed>) = 18 [pid 7335] memfd_create("syzkaller", 0) = 3 [pid 7334] <... mount resumed>) = 0 [pid 7335] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7334] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7335] <... mmap resumed>) = 0x7f957a000000 [pid 7335] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7334] <... openat resumed>) = 3 [pid 7332] <... renameat2 resumed>) = 0 [pid 7335] <... write resumed>) = 65536 [pid 7334] chdir("./file0" [pid 7335] munmap(0x7f957a000000, 138412032 [pid 7334] <... chdir resumed>) = 0 [pid 7334] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7335] <... munmap resumed>) = 0 [pid 7334] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7335] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7332] sync( [pid 7335] <... openat resumed>) = 4 [pid 7334] openat(AT_FDCWD, ".", O_RDONLY [pid 7335] ioctl(4, LOOP_SET_FD, 3 [pid 7334] <... openat resumed>) = 4 [ 231.002697][ T7333] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [pid 7334] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = 0 [pid 7334] sync( [pid 7333] <... mount resumed>) = 0 [pid 7333] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7333] chdir("./file0") = 0 [pid 7333] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7333] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7333] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = 0 [pid 7335] <... ioctl resumed>) = 0 [pid 7335] close(3) = 0 [pid 7335] close(4) = 0 [pid 7333] sync( [pid 7335] mkdir("./file0", 0777) = 0 [ 231.048797][ T7335] loop3: detected capacity change from 0 to 128 [pid 7335] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7332] <... sync resumed>) = 0 [pid 7331] <... sync resumed>) = 0 [pid 7332] exit_group(0 [pid 7334] <... sync resumed>) = 0 [pid 7334] exit_group(0 [pid 7332] <... exit_group resumed>) = ? [pid 7334] <... exit_group resumed>) = ? [pid 7331] exit_group(0) = ? [pid 7331] +++ exited with 0 +++ [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7331, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7334] +++ exited with 0 +++ [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 7332] +++ exited with 0 +++ [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7334, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5824] <... restart_syscall resumed>) = 0 [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7332, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5825] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5824] umount2("./294", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] umount2("./294", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./294", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] openat(AT_FDCWD, "./294", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] <... openat resumed>) = 3 [pid 5827] umount2("./290", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... openat resumed>) = 3 [pid 5824] newfstatat(3, "", [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] openat(AT_FDCWD, "./290", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] newfstatat(3, "", [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] <... openat resumed>) = 3 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] newfstatat(3, "", [pid 5824] getdents64(3, [pid 7335] <... mount resumed>) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(3, [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 7335] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5827] getdents64(3, [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [ 231.107655][ T7335] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [pid 5824] umount2("./294/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7335] <... openat resumed>) = 3 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5825] umount2("./294/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... umount2 resumed>) = 0 [pid 7335] chdir("./file0" [pid 5827] umount2("./290/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7335] <... chdir resumed>) = 0 [pid 5824] umount2("./294/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7335] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./294/file0", [pid 7335] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7335] openat(AT_FDCWD, ".", O_RDONLY [pid 5824] umount2("./294/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7335] <... openat resumed>) = 4 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7335] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5824] openat(AT_FDCWD, "./294/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 7335] <... renameat2 resumed>) = 0 [pid 7333] <... sync resumed>) = 0 [pid 5824] newfstatat(4, "", [pid 7333] exit_group(0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7333] <... exit_group resumed>) = ? [pid 5824] getdents64(4, [pid 7335] sync( [pid 7333] +++ exited with 0 +++ [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] getdents64(4, [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7333, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] close(4) = 0 [pid 5824] rmdir("./294/file0" [pid 5823] umount2("./302", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... rmdir resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./302", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5823] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] umount2("./294/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] getdents64(3, [pid 5824] newfstatat(AT_FDCWD, "./294/binderfs", [pid 7335] <... sync resumed>) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] unlink("./294/binderfs" [pid 5823] umount2("./302/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7335] exit_group(0 [pid 5824] <... unlink resumed>) = 0 [pid 5824] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] close(3) = 0 [pid 7335] <... exit_group resumed>) = ? [pid 5824] rmdir("./294") = 0 [pid 5824] mkdir("./295", 0777) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5824] ioctl(3, LOOP_CLR_FD) = 0 [pid 5824] close(3) = 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557eba4650) = 7336 ./strace-static-x86_64: Process 7336 attached [pid 7336] set_robust_list(0x55557eba4660, 24) = 0 [pid 7336] chdir("./295" [pid 7335] +++ exited with 0 +++ [pid 7336] <... chdir resumed>) = 0 [pid 7336] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7335, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7336] <... prctl resumed>) = 0 [pid 5826] restart_syscall(<... resuming interrupted clone ...> [pid 7336] setpgid(0, 0) = 0 [pid 7336] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5825] <... umount2 resumed>) = 0 [pid 7336] write(3, "1000", 4) = 4 [pid 7336] close(3 [pid 5825] umount2("./294/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7336] <... close resumed>) = 0 [pid 7336] symlink("/dev/binderfs", "./binderfs" [pid 5826] <... restart_syscall resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./294/file0", [pid 5826] umount2("./300", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7336] <... symlink resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) executing program [pid 7336] write(1, "executing program\n", 18 [pid 5826] openat(AT_FDCWD, "./300", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7336] <... write resumed>) = 18 [pid 5826] <... openat resumed>) = 3 [pid 7336] memfd_create("syzkaller", 0 [pid 5826] newfstatat(3, "", [pid 7336] <... memfd_create resumed>) = 3 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7336] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5826] getdents64(3, [pid 7336] <... mmap resumed>) = 0x7f957a000000 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5826] umount2("./300/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7336] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5827] <... umount2 resumed>) = 0 [pid 5825] umount2("./294/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... umount2 resumed>) = 0 [pid 5827] umount2("./290/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] newfstatat(AT_FDCWD, "./290/file0", [pid 5826] <... umount2 resumed>) = 0 [pid 5825] openat(AT_FDCWD, "./294/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... openat resumed>) = 4 [pid 5826] umount2("./300/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] newfstatat(4, "", [pid 5827] umount2("./290/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] umount2("./302/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] getdents64(4, [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] getdents64(4, [pid 5827] openat(AT_FDCWD, "./290/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] newfstatat(AT_FDCWD, "./302/file0", [pid 5827] <... openat resumed>) = 4 [pid 5825] close(4 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] newfstatat(4, "", [pid 5823] umount2("./302/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7336] <... write resumed>) = 65536 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... close resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7336] munmap(0x7f957a000000, 138412032 [pid 5827] getdents64(4, [pid 5826] newfstatat(AT_FDCWD, "./300/file0", [pid 5825] rmdir("./294/file0" [pid 5823] openat(AT_FDCWD, "./302/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7336] <... munmap resumed>) = 0 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] <... openat resumed>) = 4 [pid 7336] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5827] getdents64(4, [pid 5823] newfstatat(4, "", [pid 7336] <... openat resumed>) = 4 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7336] ioctl(4, LOOP_SET_FD, 3 [pid 5827] close(4 [pid 5823] getdents64(4, [pid 7336] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5827] <... close resumed>) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... rmdir resumed>) = 0 [pid 5827] rmdir("./290/file0" [pid 5825] umount2("./294/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5827] <... rmdir resumed>) = 0 [pid 5826] umount2("./300/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7336] ioctl(4, LOOP_CLR_FD [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./294/binderfs", [pid 5823] getdents64(4, [pid 7336] <... ioctl resumed>) = 0 [pid 5827] umount2("./290/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./300/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] unlink("./294/binderfs" [pid 5823] close(4 [pid 5827] newfstatat(AT_FDCWD, "./290/binderfs", [pid 5825] <... unlink resumed>) = 0 [pid 5823] <... close resumed>) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] <... openat resumed>) = 4 [pid 7336] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 7336] close(4 [pid 5827] unlink("./290/binderfs" [pid 5823] rmdir("./302/file0" [pid 7336] <... close resumed>) = 0 [pid 5827] <... unlink resumed>) = 0 [pid 5823] <... rmdir resumed>) = 0 [pid 7336] close(3 [pid 5827] getdents64(3, [pid 5823] umount2("./302/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7336] <... close resumed>) = 0 [pid 5827] close(3 [pid 5823] newfstatat(AT_FDCWD, "./302/binderfs", [pid 5827] <... close resumed>) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] rmdir("./290" [pid 5823] unlink("./302/binderfs" [pid 7336] openat(AT_FDCWD, ".", O_RDONLY [pid 5827] <... rmdir resumed>) = 0 [pid 5823] <... unlink resumed>) = 0 [pid 7336] <... openat resumed>) = 3 [pid 5823] getdents64(3, [pid 7336] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7336] <... renameat2 resumed>) = -1 ENOENT (No such file or directory) [pid 5827] mkdir("./291", 0777 [pid 5823] close(3 [pid 7336] sync( [pid 5827] <... mkdir resumed>) = 0 [pid 5826] newfstatat(4, "", [pid 5825] getdents64(3, [pid 5823] <... close resumed>) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] rmdir("./302" [pid 5826] getdents64(4, [pid 5825] close(3) = 0 [pid 5825] rmdir("./294" [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5827] ioctl(3, LOOP_CLR_FD) = 0 [pid 5827] close(3) = 0 [pid 5823] <... rmdir resumed>) = 0 [pid 5823] mkdir("./303", 0777 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] <... rmdir resumed>) = 0 [pid 5823] <... mkdir resumed>) = 0 [pid 5825] mkdir("./295", 0777 [pid 5826] getdents64(4, [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5823] ioctl(3, LOOP_CLR_FD [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5825] <... mkdir resumed>) = 0 [pid 5826] close(4 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5826] <... close resumed>) = 0 [pid 5826] rmdir("./300/file0" [pid 5825] <... openat resumed>) = 3 [pid 5823] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 7337 attached [pid 5826] <... rmdir resumed>) = 0 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 5823] close(3 [pid 5826] umount2("./300/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... ioctl resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] close(3 [pid 5823] <... close resumed>) = 0 [pid 7337] set_robust_list(0x55557eba4660, 24) = 0 [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7337 [pid 7337] chdir("./291" [pid 5825] <... close resumed>) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7338 attached [pid 7336] <... sync resumed>) = 0 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7337] <... chdir resumed>) = 0 [pid 5826] newfstatat(AT_FDCWD, "./300/binderfs", [pid 7338] set_robust_list(0x55557eba4660, 24 [pid 7337] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7338] <... set_robust_list resumed>) = 0 [pid 7337] <... prctl resumed>) = 0 [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7338 [pid 7338] chdir("./303" [pid 7337] setpgid(0, 0) = 0 [pid 7337] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 7339 attached [pid 7338] <... chdir resumed>) = 0 [pid 5826] unlink("./300/binderfs" [pid 7336] exit_group(0 [pid 7339] set_robust_list(0x55557eba4660, 24 [pid 7338] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7337] <... openat resumed>) = 3 [pid 7336] <... exit_group resumed>) = ? [pid 5826] <... unlink resumed>) = 0 [pid 7339] <... set_robust_list resumed>) = 0 [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7339 [pid 7338] <... prctl resumed>) = 0 [pid 7338] setpgid(0, 0 [pid 7337] write(3, "1000", 4 [pid 7338] <... setpgid resumed>) = 0 [pid 7337] <... write resumed>) = 4 [pid 7339] chdir("./295" [pid 7338] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7337] close(3 [pid 7336] +++ exited with 0 +++ [pid 5826] getdents64(3, [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7336, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 7339] <... chdir resumed>) = 0 [pid 7337] <... close resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7339] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7338] <... openat resumed>) = 3 [pid 7337] symlink("/dev/binderfs", "./binderfs" [pid 7339] <... prctl resumed>) = 0 [pid 5826] close(3 [pid 7339] setpgid(0, 0 [pid 7337] <... symlink resumed>) = 0 [pid 5826] <... close resumed>) = 0 [pid 5824] umount2("./295", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7339] <... setpgid resumed>) = 0 [pid 7338] write(3, "1000", 4 [pid 5826] rmdir("./300" [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7339] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXECexecuting program [pid 7338] <... write resumed>) = 4 [pid 7337] write(1, "executing program\n", 18 [pid 5824] openat(AT_FDCWD, "./295", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7339] <... openat resumed>) = 3 [pid 7338] close(3 [pid 7337] <... write resumed>) = 18 [pid 5826] <... rmdir resumed>) = 0 [pid 5824] <... openat resumed>) = 3 [pid 7339] write(3, "1000", 4 [pid 7338] <... close resumed>) = 0 [pid 5826] mkdir("./301", 0777 [pid 7339] <... write resumed>) = 4 [pid 7338] symlink("/dev/binderfs", "./binderfs" [pid 5824] newfstatat(3, "", [pid 7339] close(3 [pid 7338] <... symlink resumed>) = 0 [pid 7337] memfd_create("syzkaller", 0 [pid 5826] <... mkdir resumed>) = 0 [pid 7339] <... close resumed>) = 0 executing program [pid 7339] symlink("/dev/binderfs", "./binderfs" [pid 7338] write(1, "executing program\n", 18 [pid 7337] <... memfd_create resumed>) = 3 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7339] <... symlink resumed>) = 0 [pid 7338] <... write resumed>) = 18 [pid 7337] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5826] <... openat resumed>) = 3 executing program [pid 7339] write(1, "executing program\n", 18 [pid 7338] memfd_create("syzkaller", 0 [pid 7337] <... mmap resumed>) = 0x7f957a000000 [pid 5826] ioctl(3, LOOP_CLR_FD [pid 5824] getdents64(3, [pid 7339] <... write resumed>) = 18 [pid 7338] <... memfd_create resumed>) = 3 [pid 7337] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5826] <... ioctl resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 7339] memfd_create("syzkaller", 0 [pid 7338] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7337] <... write resumed>) = 65536 [pid 5826] close(3 [pid 5824] umount2("./295/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... close resumed>) = 0 [pid 7338] <... mmap resumed>) = 0x7f957a000000 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7338] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7337] munmap(0x7f957a000000, 138412032 [pid 5824] newfstatat(AT_FDCWD, "./295/binderfs", ./strace-static-x86_64: Process 7340 attached [pid 7339] <... memfd_create resumed>) = 3 [pid 7337] <... munmap resumed>) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7340] set_robust_list(0x55557eba4660, 24 [pid 7339] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5824] unlink("./295/binderfs" [pid 7340] <... set_robust_list resumed>) = 0 [pid 7339] <... mmap resumed>) = 0x7f957a000000 [pid 5824] <... unlink resumed>) = 0 [pid 7339] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7338] <... write resumed>) = 65536 [pid 7337] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7340] chdir("./301" [pid 5824] getdents64(3, [pid 7337] <... openat resumed>) = 4 [pid 7339] <... write resumed>) = 65536 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7340] <... chdir resumed>) = 0 [pid 7337] ioctl(4, LOOP_SET_FD, 3 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7340 [pid 5824] close(3 [pid 7340] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7339] munmap(0x7f957a000000, 138412032 [pid 7337] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5824] <... close resumed>) = 0 [pid 5824] rmdir("./295") = 0 [pid 7338] munmap(0x7f957a000000, 138412032 [pid 7340] <... prctl resumed>) = 0 [pid 7338] <... munmap resumed>) = 0 [pid 7339] <... munmap resumed>) = 0 [pid 7337] ioctl(4, LOOP_CLR_FD [pid 5824] mkdir("./296", 0777 [pid 7340] setpgid(0, 0 [pid 7339] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7338] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7337] <... ioctl resumed>) = 0 [pid 7340] <... setpgid resumed>) = 0 [pid 7339] <... openat resumed>) = 4 [pid 7338] <... openat resumed>) = 4 [pid 5824] <... mkdir resumed>) = 0 [pid 7340] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7339] ioctl(4, LOOP_SET_FD, 3 [pid 7338] ioctl(4, LOOP_SET_FD, 3 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7340] <... openat resumed>) = 3 [pid 5824] <... openat resumed>) = 3 [pid 7340] write(3, "1000", 4 [pid 7339] <... ioctl resumed>) = 0 [pid 7337] ioctl(4, LOOP_SET_FD, 3 [pid 5824] ioctl(3, LOOP_CLR_FD [pid 7340] <... write resumed>) = 4 [pid 7339] close(3 [pid 7337] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5824] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7340] close(3 [pid 7339] <... close resumed>) = 0 [pid 7339] close(4 [pid 7340] <... close resumed>) = 0 [pid 7339] <... close resumed>) = 0 [pid 7337] close(4 [pid 5824] close(3 [pid 7339] mkdir("./file0", 0777 [pid 5824] <... close resumed>) = 0 [pid 7340] symlink("/dev/binderfs", "./binderfs" [pid 7337] <... close resumed>) = 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7341 attached [pid 7340] <... symlink resumed>) = 0 [pid 7339] <... mkdir resumed>) = 0 [pid 7337] close(3executing program [pid 7340] write(1, "executing program\n", 18 [pid 7339] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7337] <... close resumed>) = 0 [pid 7340] <... write resumed>) = 18 [pid 7337] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 7340] memfd_create("syzkaller", 0 [pid 7337] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = -1 ENOENT (No such file or directory) [pid 7337] sync( [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7341 [pid 7341] set_robust_list(0x55557eba4660, 24 [pid 7340] <... memfd_create resumed>) = 3 [pid 7341] <... set_robust_list resumed>) = 0 [pid 7340] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7338] <... ioctl resumed>) = 0 [pid 7341] chdir("./296" [pid 7340] <... mmap resumed>) = 0x7f957a000000 [pid 7338] close(3) = 0 [pid 7338] close(4) = 0 [pid 7338] mkdir("./file0", 0777 [pid 7341] <... chdir resumed>) = 0 [pid 7340] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7341] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7340] <... write resumed>) = 65536 [pid 7338] <... mkdir resumed>) = 0 [pid 7341] <... prctl resumed>) = 0 [pid 7340] munmap(0x7f957a000000, 138412032 [pid 7341] setpgid(0, 0 [pid 7338] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7341] <... setpgid resumed>) = 0 [pid 7340] <... munmap resumed>) = 0 [pid 7340] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7341] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7340] <... openat resumed>) = 4 [ 231.425111][ T7339] loop2: detected capacity change from 0 to 128 [ 231.428856][ T7338] loop0: detected capacity change from 0 to 128 [ 231.457814][ T7339] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [pid 7341] <... openat resumed>) = 3 [pid 7340] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 7340] ioctl(4, LOOP_CLR_FD [pid 7341] write(3, "1000", 4 [pid 7340] <... ioctl resumed>) = 0 [pid 7339] <... mount resumed>) = 0 [pid 7339] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7341] <... write resumed>) = 4 executing program [pid 7341] close(3 [pid 7339] <... openat resumed>) = 3 [pid 7341] <... close resumed>) = 0 [pid 7340] ioctl(4, LOOP_SET_FD, 3 [pid 7339] chdir("./file0" [pid 7341] symlink("/dev/binderfs", "./binderfs" [pid 7339] <... chdir resumed>) = 0 [pid 7341] <... symlink resumed>) = 0 [pid 7339] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7341] write(1, "executing program\n", 18 [pid 7339] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7341] <... write resumed>) = 18 [pid 7340] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 7339] openat(AT_FDCWD, ".", O_RDONLY [pid 7341] memfd_create("syzkaller", 0 [pid 7340] close(4 [pid 7339] <... openat resumed>) = 4 [pid 7339] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7341] <... memfd_create resumed>) = 3 [pid 7340] <... close resumed>) = 0 [pid 7339] <... renameat2 resumed>) = 0 [pid 7341] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7340] close(3 [pid 7341] <... mmap resumed>) = 0x7f957a000000 [pid 7340] <... close resumed>) = 0 [pid 7341] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7340] openat(AT_FDCWD, ".", O_RDONLY [pid 7339] sync( [pid 7340] <... openat resumed>) = 3 [pid 7340] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7341] <... write resumed>) = 65536 [pid 7340] <... renameat2 resumed>) = -1 ENOENT (No such file or directory) [pid 7340] sync( [pid 7341] munmap(0x7f957a000000, 138412032 [pid 7338] <... mount resumed>) = 0 [pid 7338] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 231.496464][ T7338] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [pid 7341] <... munmap resumed>) = 0 [pid 7338] chdir("./file0" [pid 7337] <... sync resumed>) = 0 [pid 7339] <... sync resumed>) = 0 [pid 7341] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7340] <... sync resumed>) = 0 [pid 7337] exit_group(0) = ? [pid 7341] <... openat resumed>) = 4 [pid 7338] <... chdir resumed>) = 0 [pid 7338] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7337] +++ exited with 0 +++ [pid 7338] openat(AT_FDCWD, ".", O_RDONLY [pid 7341] ioctl(4, LOOP_SET_FD, 3 [pid 7340] exit_group(0 [pid 7339] exit_group(0 [pid 7338] <... openat resumed>) = 4 [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7337, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 7338] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5827] restart_syscall(<... resuming interrupted clone ...> [pid 7339] <... exit_group resumed>) = ? [pid 7341] <... ioctl resumed>) = 0 [pid 7340] <... exit_group resumed>) = ? [pid 7338] <... renameat2 resumed>) = 0 [pid 5827] <... restart_syscall resumed>) = 0 [pid 7338] sync( [pid 5827] umount2("./291", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7341] close(3 [pid 7340] +++ exited with 0 +++ [pid 7339] +++ exited with 0 +++ [pid 7338] <... sync resumed>) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] openat(AT_FDCWD, "./291", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7338] exit_group(0 [pid 5827] <... openat resumed>) = 3 [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7340, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7339, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5827] newfstatat(3, "", [pid 5826] restart_syscall(<... resuming interrupted clone ...> [pid 5825] restart_syscall(<... resuming interrupted clone ...> [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] getdents64(3, 0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 5827] umount2("./291/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] newfstatat(AT_FDCWD, "./291/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] unlink("./291/binderfs" [pid 7341] <... close resumed>) = 0 [pid 5827] <... unlink resumed>) = 0 [pid 5826] <... restart_syscall resumed>) = 0 [pid 5825] <... restart_syscall resumed>) = 0 [pid 7341] close(4 [pid 7338] <... exit_group resumed>) = ? [pid 5827] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5827] close(3 [pid 5826] umount2("./301", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... close resumed>) = 0 [pid 5827] rmdir("./291") = 0 [pid 5827] mkdir("./292", 0777 [pid 7338] +++ exited with 0 +++ [pid 5825] umount2("./295", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7341] <... close resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7341] mkdir("./file0", 0777 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./295", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7338, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 7341] <... mkdir resumed>) = 0 [pid 5827] <... mkdir resumed>) = 0 [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 7341] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5826] openat(AT_FDCWD, "./301", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] <... openat resumed>) = 3 [pid 5826] <... openat resumed>) = 3 [ 231.570122][ T7341] loop1: detected capacity change from 0 to 128 [pid 5825] newfstatat(3, "", [pid 5826] newfstatat(3, "", [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(3, [pid 5823] <... restart_syscall resumed>) = 0 [pid 5823] umount2("./303", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... openat resumed>) = 3 [pid 5827] ioctl(3, LOOP_CLR_FD [pid 5823] openat(AT_FDCWD, "./303", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5823] <... openat resumed>) = 3 [pid 5827] close(3 [pid 5823] newfstatat(3, "", [pid 5827] <... close resumed>) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5823] getdents64(3, [pid 5826] getdents64(3, [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] umount2("./303/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 5825] umount2("./295/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] umount2("./301/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7342 attached [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7342 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... umount2 resumed>) = 0 [pid 5823] <... umount2 resumed>) = 0 [pid 5825] umount2("./295/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] newfstatat(AT_FDCWD, "./301/binderfs", [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7342] set_robust_list(0x55557eba4660, 24 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] newfstatat(AT_FDCWD, "./295/file0", [pid 5823] umount2("./303/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7342] <... set_robust_list resumed>) = 0 [pid 5826] unlink("./301/binderfs" [pid 5825] umount2("./295/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... unlink resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7342] chdir("./292" [pid 5825] openat(AT_FDCWD, "./295/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] newfstatat(AT_FDCWD, "./303/file0", [pid 5825] <... openat resumed>) = 4 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7342] <... chdir resumed>) = 0 [pid 5826] getdents64(3, [pid 5825] newfstatat(4, "", [pid 5823] umount2("./303/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7342] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7342] <... prctl resumed>) = 0 [pid 5826] close(3 [pid 5825] getdents64(4, [pid 5823] openat(AT_FDCWD, "./303/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7342] setpgid(0, 0 [pid 5826] <... close resumed>) = 0 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] <... openat resumed>) = 4 [pid 7342] <... setpgid resumed>) = 0 [pid 5826] rmdir("./301" [pid 5825] getdents64(4, [pid 5823] newfstatat(4, "", [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] <... rmdir resumed>) = 0 [pid 5825] close(4 [pid 5823] getdents64(4, [pid 7342] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5826] mkdir("./302", 0777 [pid 5825] <... close resumed>) = 0 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 7342] <... openat resumed>) = 3 [pid 5825] rmdir("./295/file0" [pid 5823] getdents64(4, [pid 7342] write(3, "1000", 4 [pid 5826] <... mkdir resumed>) = 0 [pid 5825] <... rmdir resumed>) = 0 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 7342] <... write resumed>) = 4 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5825] umount2("./295/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] close(4 [pid 7342] close(3 [pid 5826] <... openat resumed>) = 3 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... close resumed>) = 0 [pid 7342] <... close resumed>) = 0 [pid 5826] ioctl(3, LOOP_CLR_FD [pid 5825] newfstatat(AT_FDCWD, "./295/binderfs", [pid 5823] rmdir("./303/file0" [pid 7342] symlink("/dev/binderfs", "./binderfs" [pid 5826] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] close(3) = 0 [pid 5825] unlink("./295/binderfs" [pid 5823] <... rmdir resumed>) = 0 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5825] <... unlink resumed>) = 0 [pid 5823] umount2("./303/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] getdents64(3, [pid 5823] newfstatat(AT_FDCWD, "./303/binderfs", [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] close(3./strace-static-x86_64: Process 7343 attached [pid 7342] <... symlink resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 5823] unlink("./303/binderfs"executing program [pid 7343] set_robust_list(0x55557eba4660, 24 [pid 7342] write(1, "executing program\n", 18 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7343 [pid 5825] rmdir("./295" [pid 5823] <... unlink resumed>) = 0 [pid 7343] <... set_robust_list resumed>) = 0 [pid 7342] <... write resumed>) = 18 [pid 7341] <... mount resumed>) = 0 [pid 5825] <... rmdir resumed>) = 0 [ 231.626616][ T7341] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [pid 7343] chdir("./302" [pid 7342] memfd_create("syzkaller", 0 [pid 7341] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5825] mkdir("./296", 0777 [pid 5823] getdents64(3, [pid 7343] <... chdir resumed>) = 0 [pid 7342] <... memfd_create resumed>) = 3 [pid 7341] <... openat resumed>) = 3 [pid 7343] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7342] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7343] <... prctl resumed>) = 0 [pid 7341] chdir("./file0" [pid 7343] setpgid(0, 0 [pid 7342] <... mmap resumed>) = 0x7f957a000000 [pid 7341] <... chdir resumed>) = 0 [pid 5825] <... mkdir resumed>) = 0 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7343] <... setpgid resumed>) = 0 [pid 7341] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5823] close(3 [pid 7341] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7343] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7341] openat(AT_FDCWD, ".", O_RDONLY [pid 5825] <... openat resumed>) = 3 [pid 5823] <... close resumed>) = 0 [pid 7342] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 7341] <... openat resumed>) = 4 [pid 5823] rmdir("./303" [pid 7343] <... openat resumed>) = 3 [pid 7342] <... write resumed>) = 65536 [pid 7341] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5825] <... ioctl resumed>) = 0 [pid 5823] <... rmdir resumed>) = 0 [pid 7343] write(3, "1000", 4 [pid 7342] munmap(0x7f957a000000, 138412032 [pid 5825] close(3 [pid 5823] mkdir("./304", 0777 [pid 5825] <... close resumed>) = 0 [pid 5823] <... mkdir resumed>) = 0 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR./strace-static-x86_64: Process 7344 attached [pid 7343] <... write resumed>) = 4 [pid 7342] <... munmap resumed>) = 0 [pid 7341] <... renameat2 resumed>) = 0 [pid 5823] <... openat resumed>) = 3 [pid 7343] close(3 [pid 7342] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7341] sync( [pid 5823] ioctl(3, LOOP_CLR_FD [pid 7344] set_robust_list(0x55557eba4660, 24 [pid 7343] <... close resumed>) = 0 [pid 7344] <... set_robust_list resumed>) = 0 [pid 7342] <... openat resumed>) = 4 [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7344 [pid 5823] <... ioctl resumed>) = 0 [pid 7343] symlink("/dev/binderfs", "./binderfs" [pid 7342] ioctl(4, LOOP_SET_FD, 3 [pid 5823] close(3) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7343] <... symlink resumed>) = 0 ./strace-static-x86_64: Process 7345 attached [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7345 [pid 7345] set_robust_list(0x55557eba4660, 24) = 0 [pid 7345] chdir("./304" [pid 7341] <... sync resumed>) = 0 [pid 7344] chdir("./296" [pid 7341] exit_group(0 [pid 7343] write(1, "executing program\n", 18 [pid 7341] <... exit_group resumed>) = ? [pid 7344] <... chdir resumed>) = 0 executing program [pid 7345] <... chdir resumed>) = 0 [pid 7345] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7344] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7343] <... write resumed>) = 18 [pid 7341] +++ exited with 0 +++ [pid 7344] <... prctl resumed>) = 0 [pid 7345] setpgid(0, 0 [pid 7343] memfd_create("syzkaller", 0 [pid 7345] <... setpgid resumed>) = 0 [pid 7344] setpgid(0, 0 [pid 7343] <... memfd_create resumed>) = 3 [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7341, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7345] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7344] <... setpgid resumed>) = 0 [pid 7343] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 7344] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7343] <... mmap resumed>) = 0x7f957a000000 [pid 7342] <... ioctl resumed>) = 0 [pid 7345] <... openat resumed>) = 3 [pid 7343] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5824] <... restart_syscall resumed>) = 0 [pid 7345] write(3, "1000", 4 [pid 7344] <... openat resumed>) = 3 [pid 7343] <... write resumed>) = 65536 [pid 7342] close(3 [pid 7345] <... write resumed>) = 4 [pid 7345] close(3 [pid 5824] umount2("./296", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7345] <... close resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7345] symlink("/dev/binderfs", "./binderfs" [pid 5824] openat(AT_FDCWD, "./296", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7345] <... symlink resumed>) = 0 [pid 7344] write(3, "1000", 4executing program [pid 7343] munmap(0x7f957a000000, 138412032 [pid 7342] <... close resumed>) = 0 [pid 5824] <... openat resumed>) = 3 [pid 7345] write(1, "executing program\n", 18) = 18 [pid 7342] close(4 [pid 5824] newfstatat(3, "", [pid 7345] memfd_create("syzkaller", 0 [pid 7344] <... write resumed>) = 4 [pid 7343] <... munmap resumed>) = 0 [pid 7342] <... close resumed>) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7344] close(3 [pid 7343] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7342] mkdir("./file0", 0777 [pid 5824] getdents64(3, [pid 7345] <... memfd_create resumed>) = 3 [pid 7344] <... close resumed>) = 0 [pid 7343] <... openat resumed>) = 4 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 7345] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7344] symlink("/dev/binderfs", "./binderfs" [pid 7342] <... mkdir resumed>) = 0 [pid 5824] umount2("./296/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7345] <... mmap resumed>) = 0x7f957a000000 [ 231.730058][ T7342] loop4: detected capacity change from 0 to 128 [pid 7344] <... symlink resumed>) = 0 [pid 7343] ioctl(4, LOOP_SET_FD, 3 [pid 7342] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7345] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7344] write(1, "executing program\n", 18 [pid 7343] <... ioctl resumed>) = 0 [pid 5824] <... umount2 resumed>) = 0 [pid 7345] <... write resumed>) = 65536 [pid 7343] close(3) = 0 [pid 7345] munmap(0x7f957a000000, 138412032) = 0 [pid 5824] umount2("./296/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7343] close(4 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7343] <... close resumed>) = 0 [pid 5824] newfstatat(AT_FDCWD, "./296/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] umount2("./296/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7345] openat(AT_FDCWD, "/dev/loop0", O_RDWRexecuting program ) = 4 [pid 5824] openat(AT_FDCWD, "./296/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7345] ioctl(4, LOOP_SET_FD, 3 [pid 5824] <... openat resumed>) = 4 [pid 7344] <... write resumed>) = 18 [pid 7343] mkdir("./file0", 0777 [pid 5824] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7344] memfd_create("syzkaller", 0 [pid 7343] <... mkdir resumed>) = 0 [pid 5824] getdents64(4, [pid 7343] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7344] <... memfd_create resumed>) = 3 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] getdents64(4, [pid 7344] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [ 231.776413][ T7343] loop3: detected capacity change from 0 to 128 [ 231.798406][ T7342] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 231.800095][ T7345] loop0: detected capacity change from 0 to 128 [pid 7344] <... mmap resumed>) = 0x7f957a000000 [pid 5824] close(4) = 0 [pid 5824] rmdir("./296/file0") = 0 [pid 5824] umount2("./296/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./296/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./296/binderfs") = 0 [pid 5824] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] close(3) = 0 [pid 5824] rmdir("./296") = 0 [pid 5824] mkdir("./297", 0777) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5824] ioctl(3, LOOP_CLR_FD) = 0 [pid 7344] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5824] close(3) = 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7344] <... write resumed>) = 65536 [pid 7344] munmap(0x7f957a000000, 138412032) = 0 [pid 7344] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7346 ./strace-static-x86_64: Process 7346 attached [pid 7346] set_robust_list(0x55557eba4660, 24) = 0 [pid 7346] chdir("./297" [pid 7344] <... openat resumed>) = 4 [pid 7344] ioctl(4, LOOP_SET_FD, 3 [pid 7346] <... chdir resumed>) = 0 [pid 7346] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7346] setpgid(0, 0) = 0 [pid 7346] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7346] write(3, "1000", 4) = 4 [pid 7345] <... ioctl resumed>) = 0 [pid 7346] close(3executing program ) = 0 [pid 7345] close(3 [pid 7342] <... mount resumed>) = 0 [pid 7345] <... close resumed>) = 0 [pid 7346] symlink("/dev/binderfs", "./binderfs" [pid 7345] close(4 [pid 7346] <... symlink resumed>) = 0 [pid 7345] <... close resumed>) = 0 [pid 7345] mkdir("./file0", 0777 [pid 7346] write(1, "executing program\n", 18 [pid 7345] <... mkdir resumed>) = 0 [pid 7346] <... write resumed>) = 18 [pid 7346] memfd_create("syzkaller", 0 [pid 7345] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7346] <... memfd_create resumed>) = 3 [pid 7346] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [ 231.824970][ T7343] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 231.861900][ T7344] loop2: detected capacity change from 0 to 128 [pid 7346] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 7344] <... ioctl resumed>) = 0 [pid 7343] <... mount resumed>) = 0 [pid 7342] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7343] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7343] chdir("./file0" [pid 7342] <... openat resumed>) = 3 [pid 7343] <... chdir resumed>) = 0 [pid 7344] close(3 [pid 7343] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7342] chdir("./file0" [pid 7344] <... close resumed>) = 0 [pid 7343] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7342] <... chdir resumed>) = 0 [pid 7344] close(4 [pid 7343] openat(AT_FDCWD, ".", O_RDONLY [pid 7342] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7346] munmap(0x7f957a000000, 138412032 [pid 7344] <... close resumed>) = 0 [pid 7343] <... openat resumed>) = 4 [pid 7342] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7346] <... munmap resumed>) = 0 [pid 7344] mkdir("./file0", 0777 [pid 7343] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7342] openat(AT_FDCWD, ".", O_RDONLY [pid 7346] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 7346] ioctl(4, LOOP_SET_FD, 3 [pid 7344] <... mkdir resumed>) = 0 [pid 7343] <... renameat2 resumed>) = 0 [pid 7342] <... openat resumed>) = 4 [pid 7342] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7343] sync( [pid 7342] <... renameat2 resumed>) = 0 [pid 7344] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7342] sync( [pid 7345] <... mount resumed>) = 0 [pid 7345] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7345] chdir("./file0") = 0 [ 231.898286][ T7345] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 231.925807][ T7346] loop1: detected capacity change from 0 to 128 [pid 7345] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7346] <... ioctl resumed>) = 0 [pid 7345] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7346] close(3 [pid 7345] openat(AT_FDCWD, ".", O_RDONLY [pid 7346] <... close resumed>) = 0 [pid 7346] close(4 [pid 7345] <... openat resumed>) = 4 [pid 7346] <... close resumed>) = 0 [pid 7346] mkdir("./file0", 0777 [pid 7345] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7346] <... mkdir resumed>) = 0 [pid 7345] <... renameat2 resumed>) = 0 [pid 7346] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7345] sync( [pid 7344] <... mount resumed>) = 0 [pid 7344] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7344] chdir("./file0") = 0 [pid 7344] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7344] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7344] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = 0 [ 231.956679][ T7344] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 231.987174][ T7346] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [pid 7346] <... mount resumed>) = 0 [pid 7346] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7344] sync( [pid 7346] chdir("./file0") = 0 [pid 7346] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7346] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7346] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = 0 [pid 7346] sync( [pid 7344] <... sync resumed>) = 0 [pid 7342] <... sync resumed>) = 0 [pid 7342] exit_group(0) = ? [pid 7346] <... sync resumed>) = 0 [pid 7345] <... sync resumed>) = 0 [pid 7345] exit_group(0) = ? [pid 7345] +++ exited with 0 +++ [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7345, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7346] exit_group(0 [pid 7343] <... sync resumed>) = 0 [pid 7342] +++ exited with 0 +++ [pid 7346] <... exit_group resumed>) = ? [pid 7344] exit_group(0 [pid 7343] exit_group(0 [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7342, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7346] +++ exited with 0 +++ [pid 7344] <... exit_group resumed>) = ? [pid 7343] <... exit_group resumed>) = ? [pid 5827] restart_syscall(<... resuming interrupted clone ...> [pid 7343] +++ exited with 0 +++ [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7346, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5824] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5824] umount2("./297", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./297", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5824] newfstatat(3, "", [pid 7344] +++ exited with 0 +++ [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7343, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5827] <... restart_syscall resumed>) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] restart_syscall(<... resuming interrupted clone ...> [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7344, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5824] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5827] umount2("./292", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... restart_syscall resumed>) = 0 [pid 5824] umount2("./297/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] umount2("./304", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] openat(AT_FDCWD, "./292", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] openat(AT_FDCWD, "./304", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] <... openat resumed>) = 3 [pid 5825] umount2("./296", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... openat resumed>) = 3 [pid 5827] newfstatat(3, "", [pid 5826] umount2("./302", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(3, "", [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./296", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] <... umount2 resumed>) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] getdents64(3, [pid 5826] openat(AT_FDCWD, "./302", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] umount2("./297/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] getdents64(3, [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5826] <... openat resumed>) = 3 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5827] umount2("./292/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] newfstatat(3, "", [pid 5825] <... openat resumed>) = 3 [pid 5824] newfstatat(AT_FDCWD, "./297/file0", [pid 5823] umount2("./304/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] newfstatat(3, "", [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] getdents64(3, [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] umount2("./297/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5825] getdents64(3, [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... umount2 resumed>) = 0 [pid 5826] umount2("./302/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] openat(AT_FDCWD, "./297/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] <... umount2 resumed>) = 0 [pid 5827] umount2("./292/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./296/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... openat resumed>) = 4 [pid 5823] umount2("./304/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(4, "", [pid 5827] newfstatat(AT_FDCWD, "./292/file0", [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] getdents64(4, [pid 5823] newfstatat(AT_FDCWD, "./304/file0", [pid 5827] umount2("./292/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... umount2 resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] umount2("./296/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] getdents64(4, [pid 5823] umount2("./304/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] openat(AT_FDCWD, "./292/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... openat resumed>) = 4 [pid 5826] <... umount2 resumed>) = 0 [pid 5826] umount2("./302/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] newfstatat(AT_FDCWD, "./296/file0", [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] newfstatat(AT_FDCWD, "./302/file0", [pid 5825] umount2("./296/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] umount2("./302/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./304/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... openat resumed>) = 4 [pid 5826] openat(AT_FDCWD, "./302/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] newfstatat(4, "", [pid 5825] openat(AT_FDCWD, "./296/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] close(4 [pid 5823] newfstatat(4, "", [pid 5826] <... openat resumed>) = 4 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] newfstatat(4, "", [pid 5825] <... openat resumed>) = 4 [pid 5824] <... close resumed>) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] getdents64(4, [pid 5826] getdents64(4, [pid 5825] newfstatat(4, "", [pid 5824] rmdir("./297/file0" [pid 5823] getdents64(4, [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5826] getdents64(4, [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5827] getdents64(4, [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5825] getdents64(4, [pid 5824] umount2("./297/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] getdents64(4, [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5826] close(4 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5827] close(4 [pid 5826] <... close resumed>) = 0 [pid 5825] getdents64(4, [pid 5824] newfstatat(AT_FDCWD, "./297/binderfs", [pid 5823] close(4 [pid 5827] <... close resumed>) = 0 [pid 5826] rmdir("./302/file0" [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5827] rmdir("./292/file0" [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... close resumed>) = 0 [pid 5827] <... rmdir resumed>) = 0 [pid 5826] <... rmdir resumed>) = 0 [pid 5825] close(4 [pid 5827] umount2("./292/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] umount2("./302/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... close resumed>) = 0 [pid 5823] rmdir("./304/file0" [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] rmdir("./296/file0" [pid 5824] unlink("./297/binderfs" [pid 5827] newfstatat(AT_FDCWD, "./292/binderfs", [pid 5826] newfstatat(AT_FDCWD, "./302/binderfs", [pid 5825] <... rmdir resumed>) = 0 [pid 5824] <... unlink resumed>) = 0 [pid 5823] <... rmdir resumed>) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] umount2("./296/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] getdents64(3, [pid 5823] umount2("./304/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] unlink("./292/binderfs" [pid 5826] unlink("./302/binderfs" [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... unlink resumed>) = 0 [pid 5826] <... unlink resumed>) = 0 [pid 5825] newfstatat(AT_FDCWD, "./296/binderfs", [pid 5824] close(3 [pid 5823] newfstatat(AT_FDCWD, "./304/binderfs", [pid 5827] getdents64(3, [pid 5826] getdents64(3, [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... close resumed>) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5825] unlink("./296/binderfs" [pid 5826] close(3) = 0 [pid 5825] <... unlink resumed>) = 0 [pid 5826] rmdir("./302" [pid 5823] unlink("./304/binderfs") = 0 [pid 5825] getdents64(3, [pid 5827] close(3 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] <... rmdir resumed>) = 0 [pid 5827] <... close resumed>) = 0 [pid 5826] mkdir("./303", 0777 [pid 5825] close(3 [pid 5824] rmdir("./297" [pid 5825] <... close resumed>) = 0 [pid 5826] <... mkdir resumed>) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5827] rmdir("./292") = 0 [pid 5826] <... openat resumed>) = 3 [pid 5823] getdents64(3, [pid 5825] rmdir("./296" [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] ioctl(3, LOOP_CLR_FD [pid 5825] <... rmdir resumed>) = 0 [pid 5823] close(3 [pid 5826] <... ioctl resumed>) = 0 [pid 5823] <... close resumed>) = 0 [pid 5826] close(3 [pid 5823] rmdir("./304") = 0 [pid 5827] mkdir("./293", 0777 [pid 5826] <... close resumed>) = 0 [pid 5825] mkdir("./297", 0777 [pid 5824] mkdir("./298", 0777 [pid 5827] <... mkdir resumed>) = 0 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5825] <... mkdir resumed>) = 0 [pid 5824] <... mkdir resumed>) = 0 [pid 5823] mkdir("./305", 0777) = 0 ./strace-static-x86_64: Process 7347 attached [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7347 [pid 7347] set_robust_list(0x55557eba4660, 24 [pid 5825] <... openat resumed>) = 3 [pid 5824] <... openat resumed>) = 3 [pid 7347] <... set_robust_list resumed>) = 0 [pid 5827] <... openat resumed>) = 3 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 5824] ioctl(3, LOOP_CLR_FD [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7347] chdir("./303" [pid 5827] ioctl(3, LOOP_CLR_FD [pid 5825] <... ioctl resumed>) = 0 [pid 5824] <... ioctl resumed>) = 0 [pid 5827] <... ioctl resumed>) = 0 [pid 5825] close(3 [pid 5824] close(3 [pid 5827] close(3 [pid 5823] <... openat resumed>) = 3 [pid 7347] <... chdir resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 5823] ioctl(3, LOOP_CLR_FD [pid 7347] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7348 attached [pid 5823] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 7349 attached [pid 7347] <... prctl resumed>) = 0 [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7348 [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7349 [pid 5823] close(3 [pid 7348] set_robust_list(0x55557eba4660, 24 [pid 7347] setpgid(0, 0 [pid 7349] set_robust_list(0x55557eba4660, 24 [pid 7348] <... set_robust_list resumed>) = 0 [pid 7347] <... setpgid resumed>) = 0 [pid 7349] <... set_robust_list resumed>) = 0 [pid 7348] chdir("./297" [pid 7347] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5827] <... close resumed>) = 0 [pid 7349] chdir("./298" [pid 7348] <... chdir resumed>) = 0 [pid 7347] write(3, "1000", 4 [pid 7349] <... chdir resumed>) = 0 [pid 7348] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7349] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7348] <... prctl resumed>) = 0 [pid 7349] <... prctl resumed>) = 0 [pid 7348] setpgid(0, 0 [pid 5823] <... close resumed>) = 0 [pid 7349] setpgid(0, 0 [pid 7348] <... setpgid resumed>) = 0 [pid 7347] <... write resumed>) = 4 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7347] close(3 [pid 7348] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7347] <... close resumed>) = 0 ./strace-static-x86_64: Process 7351 attached ./strace-static-x86_64: Process 7350 attached [pid 7349] <... setpgid resumed>) = 0 [pid 7348] <... openat resumed>) = 3 [pid 7347] symlink("/dev/binderfs", "./binderfs" [pid 7351] set_robust_list(0x55557eba4660, 24 [pid 7350] set_robust_list(0x55557eba4660, 24 [pid 7349] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7348] write(3, "1000", 4 [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7351 [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7350 [pid 7351] <... set_robust_list resumed>) = 0 [pid 7351] chdir("./293" [pid 7348] <... write resumed>) = 4 [pid 7351] <... chdir resumed>) = 0 [pid 7350] <... set_robust_list resumed>) = 0 [pid 7349] <... openat resumed>) = 3 [pid 7348] close(3 [pid 7351] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7347] <... symlink resumed>) = 0 [pid 7351] <... prctl resumed>) = 0 [pid 7348] <... close resumed>) = 0 [pid 7351] setpgid(0, 0 [pid 7348] symlink("/dev/binderfs", "./binderfs" [pid 7349] write(3, "1000", 4 [pid 7351] <... setpgid resumed>) = 0 [pid 7350] chdir("./305" [pid 7348] <... symlink resumed>) = 0 [pid 7347] write(1, "executing program\n", 18executing program [pid 7351] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7350] <... chdir resumed>) = 0 [pid 7347] <... write resumed>) = 18 executing program [pid 7348] write(1, "executing program\n", 18 [pid 7351] <... openat resumed>) = 3 [pid 7350] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7348] <... write resumed>) = 18 [pid 7347] memfd_create("syzkaller", 0 [pid 7351] write(3, "1000", 4 [pid 7350] <... prctl resumed>) = 0 [pid 7349] <... write resumed>) = 4 [pid 7348] memfd_create("syzkaller", 0 [pid 7347] <... memfd_create resumed>) = 3 [pid 7351] <... write resumed>) = 4 [pid 7350] setpgid(0, 0 [pid 7349] close(3 [pid 7348] <... memfd_create resumed>) = 3 [pid 7347] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7351] close(3 [pid 7350] <... setpgid resumed>) = 0 [pid 7349] <... close resumed>) = 0 [pid 7347] <... mmap resumed>) = 0x7f957a000000 [pid 7351] <... close resumed>) = 0 [pid 7350] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7348] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7347] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7351] symlink("/dev/binderfs", "./binderfs" [pid 7348] <... mmap resumed>) = 0x7f957a000000 [pid 7351] <... symlink resumed>) = 0 [pid 7350] <... openat resumed>) = 3 [pid 7349] symlink("/dev/binderfs", "./binderfs" executing program [pid 7351] write(1, "executing program\n", 18 [pid 7348] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7347] <... write resumed>) = 65536 [pid 7350] write(3, "1000", 4 [pid 7349] <... symlink resumed>) = 0 [pid 7350] <... write resumed>) = 4 [pid 7350] close(3 [pid 7351] <... write resumed>) = 18 executing program [pid 7350] <... close resumed>) = 0 [pid 7349] write(1, "executing program\n", 18) = 18 [pid 7351] memfd_create("syzkaller", 0 [pid 7350] symlink("/dev/binderfs", "./binderfs" [pid 7349] memfd_create("syzkaller", 0 [pid 7347] munmap(0x7f957a000000, 138412032executing program [pid 7351] <... memfd_create resumed>) = 3 [pid 7350] <... symlink resumed>) = 0 [pid 7348] <... write resumed>) = 65536 [pid 7347] <... munmap resumed>) = 0 [pid 7349] <... memfd_create resumed>) = 3 [pid 7348] munmap(0x7f957a000000, 138412032 [pid 7347] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7349] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7347] <... openat resumed>) = 4 [pid 7351] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7350] write(1, "executing program\n", 18 [pid 7349] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7348] <... munmap resumed>) = 0 [pid 7347] ioctl(4, LOOP_SET_FD, 3 [pid 7351] <... mmap resumed>) = 0x7f957a000000 [pid 7350] <... write resumed>) = 18 [pid 7348] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7349] <... write resumed>) = 65536 [pid 7349] munmap(0x7f957a000000, 138412032 [pid 7350] memfd_create("syzkaller", 0) = 3 [pid 7351] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7350] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7348] <... openat resumed>) = 4 [pid 7350] <... mmap resumed>) = 0x7f957a000000 [pid 7348] ioctl(4, LOOP_SET_FD, 3 [pid 7349] <... munmap resumed>) = 0 [pid 7349] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7351] <... write resumed>) = 65536 [pid 7349] <... openat resumed>) = 4 [pid 7350] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7349] ioctl(4, LOOP_SET_FD, 3 [pid 7351] munmap(0x7f957a000000, 138412032 [pid 7350] <... write resumed>) = 65536 [pid 7349] <... ioctl resumed>) = 0 [pid 7351] <... munmap resumed>) = 0 [pid 7350] munmap(0x7f957a000000, 138412032 [pid 7351] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 7350] <... munmap resumed>) = 0 [pid 7348] <... ioctl resumed>) = 0 [pid 7347] <... ioctl resumed>) = 0 [pid 7351] ioctl(4, LOOP_SET_FD, 3 [pid 7350] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7348] close(3 [pid 7350] <... openat resumed>) = 4 [pid 7350] ioctl(4, LOOP_SET_FD, 3 [pid 7348] <... close resumed>) = 0 [pid 7351] <... ioctl resumed>) = 0 [pid 7348] close(4 [pid 7349] close(3 [pid 7347] close(3 [pid 7348] <... close resumed>) = 0 [pid 7348] mkdir("./file0", 0777 [pid 7347] <... close resumed>) = 0 [pid 7349] <... close resumed>) = 0 [pid 7351] close(3 [pid 7347] close(4 [pid 7349] close(4) = 0 [pid 7347] <... close resumed>) = 0 [pid 7351] <... close resumed>) = 0 [pid 7349] mkdir("./file0", 0777 [pid 7348] <... mkdir resumed>) = 0 [ 232.376864][ T7347] loop3: detected capacity change from 0 to 128 [ 232.388224][ T7348] loop2: detected capacity change from 0 to 128 [ 232.396461][ T7349] loop1: detected capacity change from 0 to 128 [ 232.409497][ T7351] loop4: detected capacity change from 0 to 128 [pid 7347] mkdir("./file0", 0777 [pid 7351] close(4 [pid 7349] <... mkdir resumed>) = 0 [pid 7348] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7347] <... mkdir resumed>) = 0 [pid 7351] <... close resumed>) = 0 [pid 7351] mkdir("./file0", 0777 [pid 7349] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7351] <... mkdir resumed>) = 0 [pid 7351] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [ 232.433025][ T7350] loop0: detected capacity change from 0 to 128 [ 232.455848][ T7349] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 232.468290][ T7351] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [pid 7347] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7350] <... ioctl resumed>) = 0 [pid 7350] close(3) = 0 [pid 7350] close(4) = 0 [pid 7350] mkdir("./file0", 0777) = 0 [ 232.468746][ T7347] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 232.500275][ T7348] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [pid 7350] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7351] <... mount resumed>) = 0 [pid 7350] <... mount resumed>) = 0 [pid 7349] <... mount resumed>) = 0 [pid 7348] <... mount resumed>) = 0 [pid 7347] <... mount resumed>) = 0 [pid 7351] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7350] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7349] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7347] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [ 232.526728][ T7350] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [pid 7348] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7350] <... openat resumed>) = 3 [pid 7351] <... openat resumed>) = 3 [pid 7349] <... openat resumed>) = 3 [pid 7348] <... openat resumed>) = 3 [pid 7347] <... openat resumed>) = 3 [pid 7351] chdir("./file0" [pid 7350] chdir("./file0" [pid 7349] chdir("./file0" [pid 7348] chdir("./file0" [pid 7347] chdir("./file0" [pid 7351] <... chdir resumed>) = 0 [pid 7350] <... chdir resumed>) = 0 [pid 7349] <... chdir resumed>) = 0 [pid 7348] <... chdir resumed>) = 0 [pid 7351] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7350] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7349] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7348] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7347] <... chdir resumed>) = 0 [pid 7348] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7347] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7351] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7350] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7349] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7348] openat(AT_FDCWD, ".", O_RDONLY [pid 7351] openat(AT_FDCWD, ".", O_RDONLY [pid 7350] openat(AT_FDCWD, ".", O_RDONLY [pid 7349] openat(AT_FDCWD, ".", O_RDONLY [pid 7348] <... openat resumed>) = 4 [pid 7347] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7351] <... openat resumed>) = 4 [pid 7350] <... openat resumed>) = 4 [pid 7349] <... openat resumed>) = 4 [pid 7348] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7347] openat(AT_FDCWD, ".", O_RDONLY [pid 7351] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7349] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7347] <... openat resumed>) = 4 [pid 7347] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7348] <... renameat2 resumed>) = 0 [pid 7349] <... renameat2 resumed>) = 0 [pid 7351] <... renameat2 resumed>) = 0 [pid 7348] sync( [pid 7347] <... renameat2 resumed>) = 0 [pid 7347] sync( [pid 7351] sync( [pid 7349] sync( [pid 7350] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = 0 [pid 7350] sync() = 0 [pid 7348] <... sync resumed>) = 0 [pid 7351] <... sync resumed>) = 0 [pid 7350] exit_group(0 [pid 7349] <... sync resumed>) = 0 [pid 7347] <... sync resumed>) = 0 [pid 7351] exit_group(0 [pid 7349] exit_group(0 [pid 7348] exit_group(0 [pid 7351] <... exit_group resumed>) = ? [pid 7350] <... exit_group resumed>) = ? [pid 7349] <... exit_group resumed>) = ? [pid 7348] <... exit_group resumed>) = ? [pid 7347] exit_group(0 [pid 7351] +++ exited with 0 +++ [pid 7350] +++ exited with 0 +++ [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7351, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7350, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5827] umount2("./293", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] openat(AT_FDCWD, "./293", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7348] +++ exited with 0 +++ [pid 7347] <... exit_group resumed>) = ? [pid 5823] umount2("./305", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... openat resumed>) = 3 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7348, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5823] openat(AT_FDCWD, "./305", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] newfstatat(3, "", [pid 5825] restart_syscall(<... resuming interrupted clone ...> [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... openat resumed>) = 3 [pid 5827] getdents64(3, [pid 7349] +++ exited with 0 +++ [pid 5823] newfstatat(3, "", [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] umount2("./293/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7349, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5823] getdents64(3, [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 7347] +++ exited with 0 +++ [pid 5823] umount2("./305/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7347, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5826] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5825] <... restart_syscall resumed>) = 0 [pid 5826] umount2("./303", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./297", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./303", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] openat(AT_FDCWD, "./297", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] <... umount2 resumed>) = 0 [pid 5827] <... umount2 resumed>) = 0 [pid 5826] <... openat resumed>) = 3 [pid 5827] umount2("./293/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] newfstatat(3, "", [pid 5825] <... openat resumed>) = 3 [pid 5823] umount2("./305/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] newfstatat(3, "", [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] newfstatat(AT_FDCWD, "./293/file0", [pid 5826] getdents64(3, [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] <... restart_syscall resumed>) = 0 [pid 5823] newfstatat(AT_FDCWD, "./305/file0", [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5825] getdents64(3, [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] umount2("./303/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] umount2("./293/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] umount2("./298", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] umount2("./305/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] umount2("./297/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] openat(AT_FDCWD, "./293/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] openat(AT_FDCWD, "./298", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] openat(AT_FDCWD, "./305/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] <... openat resumed>) = 4 [pid 5824] <... openat resumed>) = 3 [pid 5823] <... openat resumed>) = 4 [pid 5823] newfstatat(4, "", [pid 5827] newfstatat(4, "", [pid 5826] <... umount2 resumed>) = 0 [pid 5825] <... umount2 resumed>) = 0 [pid 5824] newfstatat(3, "", [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] umount2("./303/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./297/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] getdents64(4, [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] getdents64(3, [pid 5823] getdents64(4, [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] newfstatat(AT_FDCWD, "./297/file0", [pid 5827] getdents64(4, [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5826] newfstatat(AT_FDCWD, "./303/file0", [pid 5825] umount2("./297/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./298/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] getdents64(4, [pid 5827] close(4 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] <... close resumed>) = 0 [pid 5826] umount2("./303/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] rmdir("./293/file0" [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] close(4 [pid 5825] openat(AT_FDCWD, "./297/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] openat(AT_FDCWD, "./303/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] <... close resumed>) = 0 [pid 5827] <... rmdir resumed>) = 0 [pid 5826] <... openat resumed>) = 4 [pid 5825] <... openat resumed>) = 4 [pid 5823] rmdir("./305/file0" [pid 5827] umount2("./293/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] newfstatat(AT_FDCWD, "./293/binderfs", [pid 5826] newfstatat(4, "", [pid 5825] newfstatat(4, "", [pid 5824] <... umount2 resumed>) = 0 [pid 5823] <... rmdir resumed>) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] umount2("./298/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] umount2("./305/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] unlink("./293/binderfs" [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./298/file0", [pid 5823] newfstatat(AT_FDCWD, "./305/binderfs", [pid 5826] getdents64(4, [pid 5825] getdents64(4, [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5827] <... unlink resumed>) = 0 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5826] getdents64(4, [pid 5825] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] umount2("./298/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] unlink("./305/binderfs" [pid 5827] getdents64(3, [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5825] close(4 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... unlink resumed>) = 0 [pid 5826] close(4 [pid 5825] <... close resumed>) = 0 [pid 5824] openat(AT_FDCWD, "./298/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] getdents64(3, [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] <... close resumed>) = 0 [pid 5825] rmdir("./297/file0" [pid 5824] <... openat resumed>) = 4 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5827] close(3 [pid 5826] rmdir("./303/file0" [pid 5824] newfstatat(4, "", [pid 5825] <... rmdir resumed>) = 0 [pid 5823] close(3 [pid 5827] <... close resumed>) = 0 [pid 5825] umount2("./297/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... close resumed>) = 0 [pid 5826] <... rmdir resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] rmdir("./293" [pid 5826] umount2("./303/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] newfstatat(AT_FDCWD, "./297/binderfs", [pid 5824] getdents64(4, [pid 5823] rmdir("./305" [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] <... rmdir resumed>) = 0 [pid 5825] unlink("./297/binderfs" [pid 5824] getdents64(4, [pid 5827] <... rmdir resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... unlink resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] close(4) = 0 [pid 5823] mkdir("./306", 0777 [pid 5824] rmdir("./298/file0" [pid 5827] mkdir("./294", 0777 [pid 5826] newfstatat(AT_FDCWD, "./303/binderfs", [pid 5825] getdents64(3, [pid 5823] <... mkdir resumed>) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5827] <... mkdir resumed>) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 5826] unlink("./303/binderfs" [pid 5825] close(3 [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5824] umount2("./298/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... openat resumed>) = 3 [pid 5827] <... openat resumed>) = 3 [pid 5826] <... unlink resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] ioctl(3, LOOP_CLR_FD [pid 5825] rmdir("./297" [pid 5824] newfstatat(AT_FDCWD, "./298/binderfs", [pid 5823] ioctl(3, LOOP_CLR_FD [pid 5827] <... ioctl resumed>) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... ioctl resumed>) = 0 [pid 5824] unlink("./298/binderfs" [pid 5827] close(3 [pid 5826] getdents64(3, [pid 5825] <... rmdir resumed>) = 0 [pid 5824] <... unlink resumed>) = 0 [pid 5823] close(3 [pid 5827] <... close resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] close(3) = 0 [pid 5825] mkdir("./298", 0777 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5826] rmdir("./303" [pid 5824] getdents64(3, [pid 5823] <... close resumed>) = 0 ./strace-static-x86_64: Process 7352 attached [pid 5826] <... rmdir resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5824] close(3 [pid 5825] <... mkdir resumed>) = 0 [pid 5826] mkdir("./304", 0777./strace-static-x86_64: Process 7353 attached [pid 7352] set_robust_list(0x55557eba4660, 24 [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7352 [pid 5826] <... mkdir resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5825] ioctl(3, LOOP_CLR_FD) = 0 [pid 5825] close(3) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5826] ioctl(3, LOOP_CLR_FD) = 0 [pid 5826] close(3 [pid 7353] set_robust_list(0x55557eba4660, 24 [pid 7352] <... set_robust_list resumed>) = 0 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5824] rmdir("./298" [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7353 [pid 7353] <... set_robust_list resumed>) = 0 [pid 7353] chdir("./306" [pid 5826] <... close resumed>) = 0 [pid 7353] <... chdir resumed>) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7352] chdir("./294" [pid 5824] mkdir("./299", 0777 [pid 7353] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5824] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 7354 attached [pid 7353] setpgid(0, 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7353] <... setpgid resumed>) = 0 [pid 7352] <... chdir resumed>) = 0 [pid 7354] set_robust_list(0x55557eba4660, 24 [pid 5824] <... openat resumed>) = 3 ./strace-static-x86_64: Process 7355 attached [pid 7353] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7352] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7354 [pid 5824] ioctl(3, LOOP_CLR_FD [pid 7354] <... set_robust_list resumed>) = 0 [pid 7354] chdir("./304" [pid 7353] <... openat resumed>) = 3 [pid 7352] <... prctl resumed>) = 0 [pid 5824] <... ioctl resumed>) = 0 [pid 7354] <... chdir resumed>) = 0 [pid 7352] setpgid(0, 0 [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7355 [pid 7354] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7353] write(3, "1000", 4 [pid 7352] <... setpgid resumed>) = 0 [pid 5824] close(3 [pid 7353] <... write resumed>) = 4 [pid 7354] setpgid(0, 0 [pid 7352] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7354] <... setpgid resumed>) = 0 [pid 7354] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7354] write(3, "1000", 4) = 4 [pid 7354] close(3) = 0 [pid 7353] close(3 [pid 5824] <... close resumed>) = 0 [pid 7354] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 7353] <... close resumed>) = 0 [pid 7352] <... openat resumed>) = 3 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7354] write(1, "executing program\n", 18) = 18 [pid 7353] symlink("/dev/binderfs", "./binderfs" [pid 7354] memfd_create("syzkaller", 0) = 3 [pid 7354] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 ./strace-static-x86_64: Process 7356 attached [pid 7354] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7353] <... symlink resumed>) = 0 [pid 7352] write(3, "1000", 4 [pid 7356] set_robust_list(0x55557eba4660, 24executing program [pid 7354] <... write resumed>) = 65536 [pid 7353] write(1, "executing program\n", 18 [pid 7352] <... write resumed>) = 4 [pid 7353] <... write resumed>) = 18 [pid 7352] close(3 [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7356 [pid 7355] set_robust_list(0x55557eba4660, 24 [pid 7354] munmap(0x7f957a000000, 138412032 [pid 7356] <... set_robust_list resumed>) = 0 [pid 7355] <... set_robust_list resumed>) = 0 [pid 7354] <... munmap resumed>) = 0 [pid 7353] memfd_create("syzkaller", 0 [pid 7352] <... close resumed>) = 0 [pid 7355] chdir("./298") = 0 [pid 7352] symlink("/dev/binderfs", "./binderfs" [pid 7355] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7354] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7355] <... prctl resumed>) = 0 [pid 7354] <... openat resumed>) = 4 [pid 7356] chdir("./299" [pid 7355] setpgid(0, 0 [pid 7352] <... symlink resumed>) = 0 [pid 7353] <... memfd_create resumed>) = 3 [pid 7356] <... chdir resumed>) = 0 [pid 7355] <... setpgid resumed>) = 0 [pid 7354] ioctl(4, LOOP_SET_FD, 3 [pid 7353] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0executing program [pid 7356] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7355] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7352] write(1, "executing program\n", 18 [pid 7356] <... prctl resumed>) = 0 [pid 7353] <... mmap resumed>) = 0x7f957a000000 [pid 7356] setpgid(0, 0 [pid 7355] <... openat resumed>) = 3 [pid 7356] <... setpgid resumed>) = 0 [pid 7352] <... write resumed>) = 18 [pid 7355] write(3, "1000", 4 [pid 7356] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7354] <... ioctl resumed>) = 0 [pid 7353] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7355] <... write resumed>) = 4 [pid 7352] memfd_create("syzkaller", 0 [pid 7355] close(3) = 0 [pid 7355] symlink("/dev/binderfs", "./binderfs" [pid 7356] <... openat resumed>) = 3 [pid 7354] close(3 [pid 7352] <... memfd_create resumed>) = 3 [pid 7353] <... write resumed>) = 65536 [pid 7356] write(3, "1000", 4 [pid 7355] <... symlink resumed>) = 0 [pid 7354] <... close resumed>) = 0 [pid 7352] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7354] close(4 [pid 7356] <... write resumed>) = 4 [pid 7354] <... close resumed>) = 0 [pid 7356] close(3) = 0 [pid 7352] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7356] symlink("/dev/binderfs", "./binderfs"executing program [pid 7355] write(1, "executing program\n", 18 [pid 7354] mkdir("./file0", 0777 [pid 7353] munmap(0x7f957a000000, 138412032 executing program [pid 7356] <... symlink resumed>) = 0 [pid 7355] <... write resumed>) = 18 [pid 7354] <... mkdir resumed>) = 0 [pid 7353] <... munmap resumed>) = 0 [pid 7352] <... write resumed>) = 65536 [pid 7356] write(1, "executing program\n", 18) = 18 [pid 7355] memfd_create("syzkaller", 0 [pid 7354] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7353] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7352] munmap(0x7f957a000000, 138412032 [pid 7353] <... openat resumed>) = 4 [pid 7356] memfd_create("syzkaller", 0 [pid 7353] ioctl(4, LOOP_SET_FD, 3 [pid 7352] <... munmap resumed>) = 0 [ 232.866795][ T7354] loop3: detected capacity change from 0 to 128 [pid 7355] <... memfd_create resumed>) = 3 [pid 7356] <... memfd_create resumed>) = 3 [pid 7352] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7356] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7355] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7356] <... mmap resumed>) = 0x7f957a000000 [pid 7355] <... mmap resumed>) = 0x7f957a000000 [pid 7353] <... ioctl resumed>) = 0 [pid 7352] <... openat resumed>) = 4 [pid 7356] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7355] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7353] close(3 [pid 7352] ioctl(4, LOOP_SET_FD, 3 [pid 7356] <... write resumed>) = 65536 [pid 7355] <... write resumed>) = 65536 [pid 7354] <... mount resumed>) = 0 [pid 7353] <... close resumed>) = 0 [pid 7352] <... ioctl resumed>) = 0 [pid 7356] munmap(0x7f957a000000, 138412032 [pid 7355] munmap(0x7f957a000000, 138412032 [pid 7354] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7353] close(4 [pid 7352] close(3 [pid 7356] <... munmap resumed>) = 0 [pid 7355] <... munmap resumed>) = 0 [pid 7353] <... close resumed>) = 0 [pid 7352] <... close resumed>) = 0 [pid 7356] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7355] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7354] <... openat resumed>) = 3 [pid 7353] mkdir("./file0", 0777 [pid 7352] close(4 [pid 7356] <... openat resumed>) = 4 [pid 7355] <... openat resumed>) = 4 [pid 7354] chdir("./file0" [pid 7353] <... mkdir resumed>) = 0 [ 232.922762][ T7353] loop0: detected capacity change from 0 to 128 [ 232.931199][ T7354] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 232.954332][ T7352] loop4: detected capacity change from 0 to 128 [pid 7352] <... close resumed>) = 0 [pid 7356] ioctl(4, LOOP_SET_FD, 3 [pid 7355] ioctl(4, LOOP_SET_FD, 3 [pid 7354] <... chdir resumed>) = 0 [pid 7353] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7352] mkdir("./file0", 0777 [pid 7354] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7352] <... mkdir resumed>) = 0 [pid 7354] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7352] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7354] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7356] <... ioctl resumed>) = 0 [pid 7354] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7356] close(3 [pid 7355] <... ioctl resumed>) = 0 [pid 7356] <... close resumed>) = 0 [pid 7355] close(3 [pid 7354] <... renameat2 resumed>) = 0 [pid 7356] close(4 [pid 7355] <... close resumed>) = 0 [pid 7354] sync( [pid 7356] <... close resumed>) = 0 [pid 7355] close(4 [pid 7356] mkdir("./file0", 0777 [pid 7355] <... close resumed>) = 0 [pid 7356] <... mkdir resumed>) = 0 [pid 7355] mkdir("./file0", 0777) = 0 [pid 7353] <... mount resumed>) = 0 [pid 7356] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7355] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7353] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 232.973948][ T7356] loop1: detected capacity change from 0 to 128 [ 232.988736][ T7353] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 232.999120][ T7355] loop2: detected capacity change from 0 to 128 [ 233.008951][ T7352] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [pid 7353] chdir("./file0") = 0 [pid 7352] <... mount resumed>) = 0 [pid 7353] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7352] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7353] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7352] chdir("./file0" [pid 7353] openat(AT_FDCWD, ".", O_RDONLY [pid 7352] <... chdir resumed>) = 0 [pid 7352] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7353] <... openat resumed>) = 4 [pid 7352] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7352] openat(AT_FDCWD, ".", O_RDONLY [pid 7353] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7352] <... openat resumed>) = 4 [pid 7352] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7356] <... mount resumed>) = 0 [pid 7356] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7356] chdir("./file0" [pid 7353] <... renameat2 resumed>) = 0 [pid 7352] <... renameat2 resumed>) = 0 [pid 7356] <... chdir resumed>) = 0 [pid 7353] sync( [pid 7352] sync( [pid 7356] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7356] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7356] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7355] <... mount resumed>) = 0 [ 233.053705][ T7356] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 233.071552][ T7355] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [pid 7356] <... renameat2 resumed>) = 0 [pid 7355] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7354] <... sync resumed>) = 0 [pid 7353] <... sync resumed>) = 0 [pid 7352] <... sync resumed>) = 0 [pid 7354] exit_group(0 [pid 7353] exit_group(0 [pid 7352] exit_group(0 [pid 7356] sync( [pid 7355] <... openat resumed>) = 3 [pid 7354] <... exit_group resumed>) = ? [pid 7353] <... exit_group resumed>) = ? [pid 7352] <... exit_group resumed>) = ? [pid 7355] chdir("./file0" [pid 7354] +++ exited with 0 +++ [pid 7353] +++ exited with 0 +++ [pid 7352] +++ exited with 0 +++ [pid 7355] <... chdir resumed>) = 0 [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7352, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7354, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 7355] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7353, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 7355] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7355] openat(AT_FDCWD, ".", O_RDONLY [pid 5827] umount2("./294", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] umount2("./304", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7356] <... sync resumed>) = 0 [pid 7355] <... openat resumed>) = 4 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] umount2("./306", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7356] exit_group(0 [pid 7355] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5827] openat(AT_FDCWD, "./294", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] openat(AT_FDCWD, "./304", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7356] <... exit_group resumed>) = ? [pid 5827] <... openat resumed>) = 3 [pid 5826] <... openat resumed>) = 3 [pid 5823] openat(AT_FDCWD, "./306", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] newfstatat(3, "", [pid 5826] newfstatat(3, "", [pid 5823] <... openat resumed>) = 3 [pid 7356] +++ exited with 0 +++ [pid 7355] <... renameat2 resumed>) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] newfstatat(3, "", [pid 5827] getdents64(3, [pid 5826] getdents64(3, [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7356, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7355] sync( [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 5823] getdents64(3, [pid 5827] umount2("./294/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] umount2("./304/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... restart_syscall resumed>) = 0 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5827] <... umount2 resumed>) = 0 [pid 5823] umount2("./306/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./299", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./299", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5826] <... umount2 resumed>) = 0 [pid 5824] newfstatat(3, "", [pid 5823] <... umount2 resumed>) = 0 [pid 5827] umount2("./294/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] umount2("./304/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] getdents64(3, [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5826] newfstatat(AT_FDCWD, "./304/file0", [pid 5824] umount2("./299/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] newfstatat(AT_FDCWD, "./294/file0", [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... umount2 resumed>) = 0 [pid 5823] umount2("./306/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] newfstatat(AT_FDCWD, "./306/file0", [pid 5827] umount2("./294/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] umount2("./304/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./299/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7355] <... sync resumed>) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] umount2("./306/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7355] exit_group(0 [pid 5827] openat(AT_FDCWD, "./294/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] openat(AT_FDCWD, "./304/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] <... openat resumed>) = 4 [pid 5826] <... openat resumed>) = 4 [pid 5824] newfstatat(AT_FDCWD, "./299/file0", [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7355] <... exit_group resumed>) = ? [pid 5827] newfstatat(4, "", [pid 5826] newfstatat(4, "", [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7355] +++ exited with 0 +++ [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] openat(AT_FDCWD, "./306/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] getdents64(4, [pid 5826] getdents64(4, [pid 5824] umount2("./299/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7355, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... openat resumed>) = 4 [pid 5827] getdents64(4, [pid 5826] getdents64(4, [pid 5825] restart_syscall(<... resuming interrupted clone ...> [pid 5824] openat(AT_FDCWD, "./299/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] newfstatat(4, "", [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] <... openat resumed>) = 4 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] close(4 [pid 5826] close(4 [pid 5824] newfstatat(4, "", [pid 5823] getdents64(4, [pid 5827] <... close resumed>) = 0 [pid 5827] rmdir("./294/file0" [pid 5826] <... close resumed>) = 0 [pid 5825] <... restart_syscall resumed>) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5827] <... rmdir resumed>) = 0 [pid 5826] rmdir("./304/file0" [pid 5824] getdents64(4, [pid 5823] getdents64(4, [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5826] <... rmdir resumed>) = 0 [pid 5824] getdents64(4, [pid 5823] close(4 [pid 5825] umount2("./298", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... close resumed>) = 0 [pid 5827] umount2("./294/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] rmdir("./306/file0" [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] umount2("./304/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] openat(AT_FDCWD, "./298", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] close(4 [pid 5827] newfstatat(AT_FDCWD, "./294/binderfs", [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... openat resumed>) = 3 [pid 5824] <... close resumed>) = 0 [pid 5823] <... rmdir resumed>) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] newfstatat(AT_FDCWD, "./304/binderfs", [pid 5825] newfstatat(3, "", [pid 5827] unlink("./294/binderfs" [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] rmdir("./299/file0" [pid 5827] <... unlink resumed>) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 5825] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5826] unlink("./304/binderfs" [pid 5827] getdents64(3, [pid 5826] <... unlink resumed>) = 0 [pid 5825] umount2("./298/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] umount2("./306/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5827] close(3 [pid 5824] umount2("./299/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] <... close resumed>) = 0 [pid 5826] getdents64(3, [pid 5824] newfstatat(AT_FDCWD, "./299/binderfs", [pid 5827] rmdir("./294" [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... rmdir resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] close(3 [pid 5824] unlink("./299/binderfs" [pid 5823] newfstatat(AT_FDCWD, "./306/binderfs", [pid 5827] mkdir("./295", 0777 [pid 5826] <... close resumed>) = 0 [pid 5824] <... unlink resumed>) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] <... mkdir resumed>) = 0 [pid 5826] rmdir("./304" [pid 5824] getdents64(3, [pid 5826] <... rmdir resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] close(3 [pid 5826] mkdir("./305", 0777 [pid 5824] <... close resumed>) = 0 [pid 5823] unlink("./306/binderfs" [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5826] <... mkdir resumed>) = 0 [pid 5824] rmdir("./299" [pid 5823] <... unlink resumed>) = 0 [pid 5827] <... openat resumed>) = 3 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5824] <... rmdir resumed>) = 0 [pid 5823] getdents64(3, [pid 5827] ioctl(3, LOOP_CLR_FD [pid 5826] <... openat resumed>) = 3 [pid 5825] <... umount2 resumed>) = 0 [pid 5824] mkdir("./300", 0777 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5827] <... ioctl resumed>) = 0 [pid 5826] ioctl(3, LOOP_CLR_FD [pid 5825] umount2("./298/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... mkdir resumed>) = 0 [pid 5823] close(3 [pid 5827] close(3 [pid 5826] <... ioctl resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... close resumed>) = 0 [pid 5827] <... close resumed>) = 0 [pid 5826] close(3 [pid 5825] newfstatat(AT_FDCWD, "./298/file0", [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5823] rmdir("./306" [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... openat resumed>) = 3 [pid 5823] <... rmdir resumed>) = 0 [pid 5826] <... close resumed>) = 0 [pid 5825] umount2("./298/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] ioctl(3, LOOP_CLR_FD [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 7357 attached [pid 5825] openat(AT_FDCWD, "./298/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] close(3 [pid 5823] mkdir("./307", 0777 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5825] <... openat resumed>) = 4 [pid 5824] <... close resumed>) = 0 [pid 5823] <... mkdir resumed>) = 0 [pid 7357] set_robust_list(0x55557eba4660, 24 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7358 attached [pid 7357] <... set_robust_list resumed>) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7357] chdir("./305" [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7357 [pid 5823] <... openat resumed>) = 3 [pid 5823] ioctl(3, LOOP_CLR_FD [pid 7358] set_robust_list(0x55557eba4660, 24 [pid 5823] <... ioctl resumed>) = 0 [pid 7358] <... set_robust_list resumed>) = 0 [pid 7357] <... chdir resumed>) = 0 [pid 5823] close(3 [pid 7358] chdir("./300" [pid 5825] newfstatat(4, "", [pid 5823] <... close resumed>) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7360 attached [pid 7357] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7358 [pid 7358] <... chdir resumed>) = 0 [pid 7357] <... prctl resumed>) = 0 [pid 7358] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7357] setpgid(0, 0 [pid 7358] <... prctl resumed>) = 0 [pid 7357] <... setpgid resumed>) = 0 [pid 7358] setpgid(0, 0 [pid 7357] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7358] <... setpgid resumed>) = 0 [pid 7357] <... openat resumed>) = 3 [pid 7358] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7360] set_robust_list(0x55557eba4660, 24 [pid 7358] <... openat resumed>) = 3 [pid 7360] <... set_robust_list resumed>) = 0 [pid 7357] write(3, "1000", 4 [pid 7360] chdir("./307" [pid 7358] write(3, "1000", 4 [pid 7357] <... write resumed>) = 4 [pid 7358] <... write resumed>) = 4 [pid 7357] close(3 [pid 5825] getdents64(4, [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7360 [pid 7360] <... chdir resumed>) = 0 [pid 7358] close(3 [pid 7357] <... close resumed>) = 0 [pid 7358] <... close resumed>) = 0 [pid 7357] symlink("/dev/binderfs", "./binderfs" [pid 7360] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7358] symlink("/dev/binderfs", "./binderfs" [pid 7357] <... symlink resumed>) = 0 [pid 7358] <... symlink resumed>) = 0 [pid 7360] <... prctl resumed>) = 0 [pid 7360] setpgid(0, 0) = 0 [pid 7357] write(1, "executing program\n", 18 [pid 7360] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXECexecuting program executing program [pid 7358] write(1, "executing program\n", 18) = 18 [pid 7360] <... openat resumed>) = 3 [pid 7358] memfd_create("syzkaller", 0 [pid 7357] <... write resumed>) = 18 [pid 7357] memfd_create("syzkaller", 0./strace-static-x86_64: Process 7359 attached [pid 7358] <... memfd_create resumed>) = 3 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 7360] write(3, "1000", 4 [pid 7358] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7357] <... memfd_create resumed>) = 3 [pid 7360] <... write resumed>) = 4 [pid 7359] set_robust_list(0x55557eba4660, 24 [pid 7358] <... mmap resumed>) = 0x7f957a000000 [pid 7357] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7359 [pid 5825] getdents64(4, [pid 7360] close(3 [pid 7358] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7357] <... mmap resumed>) = 0x7f957a000000 [pid 7360] <... close resumed>) = 0 [pid 7359] <... set_robust_list resumed>) = 0 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 7360] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5825] close(4executing program [pid 7359] chdir("./295" [pid 7358] <... write resumed>) = 65536 [pid 7357] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5825] <... close resumed>) = 0 [pid 7360] write(1, "executing program\n", 18 [pid 7359] <... chdir resumed>) = 0 [pid 5825] rmdir("./298/file0" [pid 7359] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7360] <... write resumed>) = 18 [pid 7358] munmap(0x7f957a000000, 138412032 [pid 7360] memfd_create("syzkaller", 0 [pid 7359] <... prctl resumed>) = 0 [pid 7358] <... munmap resumed>) = 0 [pid 7357] <... write resumed>) = 65536 [pid 5825] <... rmdir resumed>) = 0 [pid 7359] setpgid(0, 0 [pid 5825] umount2("./298/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7359] <... setpgid resumed>) = 0 [pid 7360] <... memfd_create resumed>) = 3 [pid 7359] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7358] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7360] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7358] <... openat resumed>) = 4 [pid 7360] <... mmap resumed>) = 0x7f957a000000 [pid 7359] <... openat resumed>) = 3 [pid 7357] munmap(0x7f957a000000, 138412032 [pid 5825] newfstatat(AT_FDCWD, "./298/binderfs", [pid 7360] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7359] write(3, "1000", 4 [pid 7358] ioctl(4, LOOP_SET_FD, 3 [pid 7357] <... munmap resumed>) = 0 [pid 7359] <... write resumed>) = 4 [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7359] close(3 [pid 5825] unlink("./298/binderfs" [pid 7359] <... close resumed>) = 0 [pid 7360] <... write resumed>) = 65536 [pid 7359] symlink("/dev/binderfs", "./binderfs" [pid 7358] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 7357] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5825] <... unlink resumed>) = 0 [pid 7359] <... symlink resumed>) = 0 [pid 7357] <... openat resumed>) = 4 [pid 5825] getdents64(3, [pid 7357] ioctl(4, LOOP_SET_FD, 3 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5825] close(3 [pid 7360] munmap(0x7f957a000000, 138412032 [pid 7358] ioctl(4, LOOP_CLR_FD [pid 5825] <... close resumed>) = 0 [pid 7360] <... munmap resumed>) = 0 [pid 7358] <... ioctl resumed>) = 0 [pid 7360] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7359] write(1, "executing program\n", 18 [pid 5825] rmdir("./298" [pid 7358] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 7358] close(4) = 0 executing program [pid 7360] <... openat resumed>) = 4 [pid 7358] close(3 [pid 7360] ioctl(4, LOOP_SET_FD, 3 [pid 7359] <... write resumed>) = 18 [pid 7358] <... close resumed>) = 0 [pid 5825] <... rmdir resumed>) = 0 [pid 5825] mkdir("./299", 0777 [pid 7359] memfd_create("syzkaller", 0 [pid 7358] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 7359] <... memfd_create resumed>) = 3 [pid 7358] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5825] <... mkdir resumed>) = 0 [pid 7359] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7358] <... renameat2 resumed>) = -1 ENOENT (No such file or directory) [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7357] <... ioctl resumed>) = 0 [pid 5825] <... openat resumed>) = 3 [pid 7359] <... mmap resumed>) = 0x7f957a000000 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 7357] close(3 [pid 7358] sync( [pid 7357] <... close resumed>) = 0 [pid 7357] close(4 [pid 5825] <... ioctl resumed>) = 0 [pid 7357] <... close resumed>) = 0 [pid 5825] close(3 [pid 7359] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7357] mkdir("./file0", 0777 [pid 7360] <... ioctl resumed>) = 0 [pid 7359] <... write resumed>) = 65536 [pid 7358] <... sync resumed>) = 0 [pid 7357] <... mkdir resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 7359] munmap(0x7f957a000000, 138412032 [pid 7358] exit_group(0 [ 233.343051][ T7357] loop3: detected capacity change from 0 to 128 [ 233.367208][ T7360] loop0: detected capacity change from 0 to 128 [pid 7357] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7359] <... munmap resumed>) = 0 [pid 7358] <... exit_group resumed>) = ? [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7360] close(3 [pid 7358] +++ exited with 0 +++ [pid 7360] <... close resumed>) = 0 [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7358, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 7360] close(4 [pid 7359] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7360] <... close resumed>) = 0 [pid 7359] <... openat resumed>) = 4 [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7361 [pid 7359] ioctl(4, LOOP_SET_FD, 3 [pid 7360] mkdir("./file0", 0777./strace-static-x86_64: Process 7361 attached ) = 0 [pid 7361] set_robust_list(0x55557eba4660, 24) = 0 [pid 7361] chdir("./299" [pid 7360] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7361] <... chdir resumed>) = 0 [pid 7359] <... ioctl resumed>) = 0 [pid 7361] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7361] setpgid(0, 0 [pid 5824] umount2("./300", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7361] <... setpgid resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7361] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5824] openat(AT_FDCWD, "./300", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7361] <... openat resumed>) = 3 [pid 5824] <... openat resumed>) = 3 [pid 5824] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(3, [pid 7361] write(3, "1000", 4 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 7361] <... write resumed>) = 4 [pid 5824] umount2("./300/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7361] close(3 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7359] close(3 [pid 7361] <... close resumed>) = 0 [pid 7359] <... close resumed>) = 0 [ 233.396367][ T7357] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 233.414670][ T7359] loop4: detected capacity change from 0 to 128 [pid 5824] newfstatat(AT_FDCWD, "./300/binderfs", [pid 7361] symlink("/dev/binderfs", "./binderfs" [pid 7359] close(4 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7359] <... close resumed>) = 0 [pid 5824] unlink("./300/binderfs"executing program [pid 7361] <... symlink resumed>) = 0 [pid 7359] mkdir("./file0", 0777 [pid 5824] <... unlink resumed>) = 0 [pid 7361] write(1, "executing program\n", 18 [pid 5824] getdents64(3, [pid 7361] <... write resumed>) = 18 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7361] memfd_create("syzkaller", 0 [pid 5824] close(3) = 0 [pid 5824] rmdir("./300" [pid 7361] <... memfd_create resumed>) = 3 [pid 7359] <... mkdir resumed>) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 7361] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7359] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7357] <... mount resumed>) = 0 [pid 7361] <... mmap resumed>) = 0x7f957a000000 [pid 7357] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5824] mkdir("./301", 0777 [pid 7361] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7357] <... openat resumed>) = 3 [pid 5824] <... mkdir resumed>) = 0 [pid 7357] chdir("./file0" [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7357] <... chdir resumed>) = 0 [pid 5824] <... openat resumed>) = 3 [pid 7357] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5824] ioctl(3, LOOP_CLR_FD [pid 7361] <... write resumed>) = 65536 [pid 7357] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5824] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7357] openat(AT_FDCWD, ".", O_RDONLY [pid 5824] close(3 [pid 7357] <... openat resumed>) = 4 [pid 5824] <... close resumed>) = 0 [pid 7357] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557eba4650) = 7362 ./strace-static-x86_64: Process 7362 attached [pid 7361] munmap(0x7f957a000000, 138412032 [pid 7362] set_robust_list(0x55557eba4660, 24 [pid 7361] <... munmap resumed>) = 0 [pid 7362] <... set_robust_list resumed>) = 0 [pid 7361] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7362] chdir("./301" [pid 7361] <... openat resumed>) = 4 [ 233.438799][ T7360] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 233.476325][ T7359] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [pid 7362] <... chdir resumed>) = 0 [pid 7361] ioctl(4, LOOP_SET_FD, 3 [pid 7362] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7362] setpgid(0, 0) = 0 [pid 7362] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7362] write(3, "1000", 4) = 4 [pid 7357] <... renameat2 resumed>) = 0 [pid 7362] close(3 [pid 7357] sync( [pid 7362] <... close resumed>) = 0 [pid 7362] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 7362] write(1, "executing program\n", 18) = 18 [pid 7362] memfd_create("syzkaller", 0) = 3 [pid 7360] <... mount resumed>) = 0 [pid 7362] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7362] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7360] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7360] chdir("./file0" [pid 7362] <... write resumed>) = 65536 [pid 7360] <... chdir resumed>) = 0 [pid 7360] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7360] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7362] munmap(0x7f957a000000, 138412032) = 0 [pid 7360] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7362] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7361] <... ioctl resumed>) = 0 [pid 7362] <... openat resumed>) = 4 [ 233.484489][ T7361] loop2: detected capacity change from 0 to 128 [pid 7362] ioctl(4, LOOP_SET_FD, 3 [pid 7361] close(3) = 0 [pid 7360] <... renameat2 resumed>) = 0 [pid 7361] close(4) = 0 [pid 7361] mkdir("./file0", 0777) = 0 [pid 7360] sync( [pid 7361] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7359] <... mount resumed>) = 0 [pid 7359] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7362] <... ioctl resumed>) = 0 [pid 7359] <... openat resumed>) = 3 [pid 7362] close(3) = 0 [pid 7359] chdir("./file0" [pid 7362] close(4) = 0 [pid 7362] mkdir("./file0", 0777) = 0 [pid 7359] <... chdir resumed>) = 0 [pid 7362] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7359] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7359] openat(AT_FDCWD, ".", O_RDONLY) = 4 [ 233.525933][ T7362] loop1: detected capacity change from 0 to 128 [ 233.563948][ T7362] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [pid 7359] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = 0 [pid 7359] sync( [pid 7362] <... mount resumed>) = 0 [pid 7362] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7362] chdir("./file0") = 0 [pid 7362] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7362] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7362] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = 0 [pid 7362] sync( [pid 7361] <... mount resumed>) = 0 [pid 7361] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 233.580556][ T7361] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [pid 7361] chdir("./file0") = 0 [pid 7361] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7361] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7361] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = 0 [pid 7362] <... sync resumed>) = 0 [pid 7360] <... sync resumed>) = 0 [pid 7359] <... sync resumed>) = 0 [pid 7357] <... sync resumed>) = 0 [pid 7362] exit_group(0 [pid 7360] exit_group(0 [pid 7359] exit_group(0 [pid 7362] <... exit_group resumed>) = ? [pid 7361] sync( [pid 7360] <... exit_group resumed>) = ? [pid 7359] <... exit_group resumed>) = ? [pid 7357] exit_group(0 [pid 7362] +++ exited with 0 +++ [pid 7359] +++ exited with 0 +++ [pid 7361] <... sync resumed>) = 0 [pid 7360] +++ exited with 0 +++ [pid 7357] <... exit_group resumed>) = ? [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7359, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7357] +++ exited with 0 +++ [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7362, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7360, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7357, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 5826] restart_syscall(<... resuming interrupted clone ...> [pid 7361] exit_group(0 [pid 5826] <... restart_syscall resumed>) = 0 [pid 7361] <... exit_group resumed>) = ? [pid 5826] umount2("./305", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./305", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] <... restart_syscall resumed>) = 0 [pid 5823] <... restart_syscall resumed>) = 0 [pid 5824] umount2("./301", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] umount2("./307", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./301", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] openat(AT_FDCWD, "./307", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] <... openat resumed>) = 3 [pid 5823] <... openat resumed>) = 3 [pid 5824] newfstatat(3, "", [pid 5823] newfstatat(3, "", [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(3, [pid 5823] getdents64(3, [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 7361] +++ exited with 0 +++ [pid 5824] umount2("./301/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] umount2("./307/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... openat resumed>) = 3 [pid 5826] newfstatat(3, "", [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7361, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] umount2("./299", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... umount2 resumed>) = 0 [pid 5826] getdents64(3, [pid 5824] umount2("./301/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... umount2 resumed>) = 0 [pid 5827] umount2("./295", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] umount2("./307/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] umount2("./305/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] newfstatat(AT_FDCWD, "./301/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] umount2("./301/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./301/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] newfstatat(AT_FDCWD, "./307/file0", [pid 5824] <... openat resumed>) = 4 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] openat(AT_FDCWD, "./295", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] openat(AT_FDCWD, "./299", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] newfstatat(4, "", [pid 5823] umount2("./307/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... openat resumed>) = 3 [pid 5825] <... openat resumed>) = 3 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] newfstatat(3, "", [pid 5825] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(4, [pid 5825] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5825] umount2("./299/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] getdents64(4, [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] openat(AT_FDCWD, "./307/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] <... umount2 resumed>) = 0 [pid 5824] close(4 [pid 5823] <... openat resumed>) = 4 [pid 5824] <... close resumed>) = 0 [pid 5824] rmdir("./301/file0") = 0 [pid 5823] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] close(4 [pid 5826] umount2("./305/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./301/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... close resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] rmdir("./307/file0" [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] newfstatat(AT_FDCWD, "./305/file0", [pid 5824] newfstatat(AT_FDCWD, "./301/binderfs", [pid 5823] <... rmdir resumed>) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] umount2("./305/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] unlink("./301/binderfs" [pid 5823] umount2("./307/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] getdents64(3, [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... umount2 resumed>) = 0 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5825] umount2("./299/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] umount2("./295/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] openat(AT_FDCWD, "./305/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... unlink resumed>) = 0 [pid 5826] <... openat resumed>) = 4 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(4, "", [pid 5825] newfstatat(AT_FDCWD, "./299/file0", [pid 5823] newfstatat(AT_FDCWD, "./307/binderfs", [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(3, [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] getdents64(4, [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] close(3 [pid 5823] unlink("./307/binderfs" [pid 5826] getdents64(4, [pid 5825] umount2("./299/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... close resumed>) = 0 [pid 5823] <... unlink resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5825] openat(AT_FDCWD, "./299/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] rmdir("./301" [pid 5826] close(4 [pid 5825] <... openat resumed>) = 4 [pid 5824] <... rmdir resumed>) = 0 [pid 5825] newfstatat(4, "", [pid 5826] <... close resumed>) = 0 [pid 5823] getdents64(3, [pid 5826] rmdir("./305/file0" [pid 5827] <... umount2 resumed>) = 0 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] <... rmdir resumed>) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] mkdir("./302", 0777 [pid 5823] close(3 [pid 5825] getdents64(4, [pid 5824] <... mkdir resumed>) = 0 [pid 5823] <... close resumed>) = 0 [pid 5827] umount2("./295/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] umount2("./305/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] rmdir("./307" [pid 5825] getdents64(4, [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] <... rmdir resumed>) = 0 [pid 5827] newfstatat(AT_FDCWD, "./295/file0", [pid 5826] newfstatat(AT_FDCWD, "./305/binderfs", [pid 5825] close(4 [pid 5823] mkdir("./308", 0777 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... mkdir resumed>) = 0 [pid 5826] unlink("./305/binderfs") = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5826] getdents64(3, [pid 5824] ioctl(3, LOOP_CLR_FD [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] <... ioctl resumed>) = 0 [pid 5826] close(3 [pid 5824] close(3 [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5824] <... close resumed>) = 0 [pid 5823] <... openat resumed>) = 3 [pid 5826] <... close resumed>) = 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5823] ioctl(3, LOOP_CLR_FD [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] rmdir("./305" [pid 5825] <... close resumed>) = 0 [pid 5827] umount2("./295/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] rmdir("./299/file0" [pid 5823] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 7363 attached [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... rmdir resumed>) = 0 [pid 5827] openat(AT_FDCWD, "./295/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] umount2("./299/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7363] set_robust_list(0x55557eba4660, 24 [pid 5827] <... openat resumed>) = 4 [pid 5826] <... rmdir resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] close(3 [pid 7363] <... set_robust_list resumed>) = 0 [pid 5825] newfstatat(AT_FDCWD, "./299/binderfs", [pid 7363] chdir("./302" [pid 5826] mkdir("./306", 0777 [pid 5827] newfstatat(4, "", [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7363 [pid 7363] <... chdir resumed>) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] <... mkdir resumed>) = 0 [pid 5825] unlink("./299/binderfs" [pid 5823] <... close resumed>) = 0 [pid 7363] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5825] <... unlink resumed>) = 0 [pid 7363] <... prctl resumed>) = 0 [pid 5825] getdents64(3, [pid 7363] setpgid(0, 0 [pid 5827] getdents64(4, [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7363] <... setpgid resumed>) = 0 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5826] <... openat resumed>) = 3 [pid 5825] close(3 [pid 7363] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5827] getdents64(4, [pid 5825] <... close resumed>) = 0 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5825] rmdir("./299" [pid 5827] close(4 [pid 7363] <... openat resumed>) = 3 [pid 5826] ioctl(3, LOOP_CLR_FD [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7363] write(3, "1000", 4 [pid 5827] <... close resumed>) = 0 [pid 5825] <... rmdir resumed>) = 0 [pid 5827] rmdir("./295/file0" [pid 5825] mkdir("./300", 0777executing program ./strace-static-x86_64: Process 7364 attached [pid 7363] <... write resumed>) = 4 [pid 5827] <... rmdir resumed>) = 0 [pid 5826] <... ioctl resumed>) = 0 [pid 5825] <... mkdir resumed>) = 0 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7363] close(3) = 0 [pid 7363] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7364 [pid 7363] write(1, "executing program\n", 18 [pid 5825] <... openat resumed>) = 3 [pid 5826] close(3 [pid 7364] set_robust_list(0x55557eba4660, 24 [pid 7363] <... write resumed>) = 18 [pid 5827] umount2("./295/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... close resumed>) = 0 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 7363] memfd_create("syzkaller", 0) = 3 [pid 7363] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7363] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 7363] munmap(0x7f957a000000, 138412032) = 0 [pid 7363] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 7363] ioctl(4, LOOP_SET_FD, 3 [pid 7364] <... set_robust_list resumed>) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5825] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 7365 attached [pid 7364] chdir("./308" [pid 5827] newfstatat(AT_FDCWD, "./295/binderfs", [pid 5825] close(3 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7365 [pid 5825] <... close resumed>) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7366 attached [pid 7365] set_robust_list(0x55557eba4660, 24 [pid 7364] <... chdir resumed>) = 0 [pid 7363] <... ioctl resumed>) = 0 [pid 5827] unlink("./295/binderfs" [pid 7365] <... set_robust_list resumed>) = 0 [pid 7364] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7366 [pid 5827] <... unlink resumed>) = 0 [pid 7364] <... prctl resumed>) = 0 [pid 7363] close(3) = 0 [pid 7365] chdir("./306") = 0 [pid 7364] setpgid(0, 0 [pid 7363] close(4 [pid 7365] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7364] <... setpgid resumed>) = 0 [pid 7365] <... prctl resumed>) = 0 [pid 7365] setpgid(0, 0 [pid 7364] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7363] <... close resumed>) = 0 [pid 7366] set_robust_list(0x55557eba4660, 24 [pid 7365] <... setpgid resumed>) = 0 [pid 7363] mkdir("./file0", 0777 [pid 7366] <... set_robust_list resumed>) = 0 [pid 7365] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7364] <... openat resumed>) = 3 [pid 7363] <... mkdir resumed>) = 0 [pid 7366] chdir("./300" [pid 7365] <... openat resumed>) = 3 [pid 7364] write(3, "1000", 4 [pid 7363] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5827] getdents64(3, [pid 7365] write(3, "1000", 4 [pid 7364] <... write resumed>) = 4 [pid 7365] <... write resumed>) = 4 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7364] close(3 [pid 7365] close(3 [pid 5827] close(3 [pid 7364] <... close resumed>) = 0 [pid 7365] <... close resumed>) = 0 [pid 7366] <... chdir resumed>) = 0 [pid 7365] symlink("/dev/binderfs", "./binderfs" [pid 7364] symlink("/dev/binderfs", "./binderfs" [pid 5827] <... close resumed>) = 0 [pid 7366] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7366] setpgid(0, 0) = 0 [pid 7366] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7365] <... symlink resumed>) = 0 [pid 7364] <... symlink resumed>) = 0 [pid 5827] rmdir("./295" [pid 7366] <... openat resumed>) = 3 [pid 7366] write(3, "1000", 4) = 4 [pid 7366] close(3 [pid 5827] <... rmdir resumed>) = 0 [pid 7364] write(1, "executing program\n", 18 [pid 7366] <... close resumed>) = 0 [pid 7366] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 7366] write(1, "executing program\n", 18) = 18 executing program [pid 7366] memfd_create("syzkaller", 0) = 3 [pid 7366] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7366] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7364] <... write resumed>) = 18 [pid 5827] mkdir("./296", 0777 [pid 7364] memfd_create("syzkaller", 0executing program [pid 7366] <... write resumed>) = 65536 [pid 5827] <... mkdir resumed>) = 0 [pid 7365] write(1, "executing program\n", 18 [pid 7364] <... memfd_create resumed>) = 3 [pid 7365] <... write resumed>) = 18 [pid 7366] munmap(0x7f957a000000, 138412032) = 0 [pid 7366] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 7366] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 7366] ioctl(4, LOOP_CLR_FD) = 0 [pid 7365] memfd_create("syzkaller", 0 [pid 7364] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7366] ioctl(4, LOOP_SET_FD, 3 [pid 5827] <... openat resumed>) = 3 [pid 7364] <... mmap resumed>) = 0x7f957a000000 [pid 7366] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 7366] close(4) = 0 [pid 7366] close(3 [pid 7365] <... memfd_create resumed>) = 3 [pid 7364] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5827] ioctl(3, LOOP_CLR_FD [pid 7366] <... close resumed>) = 0 [pid 7365] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7364] <... write resumed>) = 65536 [pid 5827] <... ioctl resumed>) = 0 [pid 7366] openat(AT_FDCWD, ".", O_RDONLY [pid 7365] <... mmap resumed>) = 0x7f957a000000 [pid 5827] close(3 [pid 7366] <... openat resumed>) = 3 [pid 7366] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = -1 ENOENT (No such file or directory) [pid 7366] sync( [pid 7364] munmap(0x7f957a000000, 138412032 [pid 5827] <... close resumed>) = 0 [pid 7364] <... munmap resumed>) = 0 [ 233.831687][ T7363] loop1: detected capacity change from 0 to 128 [ 233.861403][ T7363] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [pid 7365] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7364] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7365] <... write resumed>) = 65536 [pid 7365] munmap(0x7f957a000000, 138412032 [pid 7364] <... openat resumed>) = 4 ./strace-static-x86_64: Process 7367 attached [pid 7365] <... munmap resumed>) = 0 [pid 7364] ioctl(4, LOOP_SET_FD, 3 [pid 7363] <... mount resumed>) = 0 [pid 7363] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7363] chdir("./file0") = 0 [pid 7363] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7363] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7363] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7365] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7367 [pid 7365] <... openat resumed>) = 4 [pid 7367] set_robust_list(0x55557eba4660, 24 [pid 7365] ioctl(4, LOOP_SET_FD, 3 [pid 7363] <... renameat2 resumed>) = 0 [pid 7367] <... set_robust_list resumed>) = 0 [pid 7366] <... sync resumed>) = 0 [pid 7367] chdir("./296" [pid 7366] exit_group(0 [pid 7363] sync( [pid 7367] <... chdir resumed>) = 0 [pid 7366] <... exit_group resumed>) = ? [pid 7363] <... sync resumed>) = 0 [pid 7367] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7366] +++ exited with 0 +++ [pid 7365] <... ioctl resumed>) = 0 [pid 7364] <... ioctl resumed>) = 0 [pid 7363] exit_group(0 [pid 7367] <... prctl resumed>) = 0 [pid 7365] close(3 [pid 7364] close(3 [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7366, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 7367] setpgid(0, 0) = 0 [pid 7364] <... close resumed>) = 0 [pid 7365] <... close resumed>) = 0 [pid 7364] close(4 [pid 7365] close(4 [pid 7364] <... close resumed>) = 0 [pid 7367] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7365] <... close resumed>) = 0 [pid 7363] <... exit_group resumed>) = ? [pid 5825] umount2("./300", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7365] mkdir("./file0", 0777 [pid 7364] mkdir("./file0", 0777 [pid 7367] <... openat resumed>) = 3 [pid 7365] <... mkdir resumed>) = 0 [pid 7364] <... mkdir resumed>) = 0 [pid 7363] +++ exited with 0 +++ [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7365] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7364] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5825] openat(AT_FDCWD, "./300", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7363, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 5825] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 233.917007][ T7364] loop0: detected capacity change from 0 to 128 [ 233.931193][ T7365] loop3: detected capacity change from 0 to 128 [pid 5825] getdents64(3, [pid 5824] <... restart_syscall resumed>) = 0 [pid 5824] umount2("./302", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./302", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5824] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] umount2("./302/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 5825] umount2("./300/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] <... umount2 resumed>) = 0 [pid 5824] umount2("./302/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./302/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] umount2("./302/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./302/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5824] newfstatat(4, "", [pid 5825] newfstatat(AT_FDCWD, "./300/binderfs", [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7367] write(3, "1000", 4 [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] getdents64(4, [pid 7367] <... write resumed>) = 4 [pid 5825] unlink("./300/binderfs" [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 7367] close(3) = 0 [pid 5825] <... unlink resumed>) = 0 [pid 5824] getdents64(4, [pid 7367] symlink("/dev/binderfs", "./binderfs" [pid 5825] getdents64(3, [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 executing program [pid 7367] <... symlink resumed>) = 0 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] close(4 [pid 5825] close(3 [pid 7367] write(1, "executing program\n", 18) = 18 [pid 5825] <... close resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 7367] memfd_create("syzkaller", 0 [pid 5825] rmdir("./300" [pid 5824] rmdir("./302/file0" [pid 7367] <... memfd_create resumed>) = 3 [pid 7367] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5825] <... rmdir resumed>) = 0 [pid 7367] <... mmap resumed>) = 0x7f957a000000 [pid 7364] <... mount resumed>) = 0 [pid 5825] mkdir("./301", 0777 [pid 5824] <... rmdir resumed>) = 0 [pid 7364] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5824] umount2("./302/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... mkdir resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7364] <... openat resumed>) = 3 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5824] newfstatat(AT_FDCWD, "./302/binderfs", [pid 7367] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7365] <... mount resumed>) = 0 [pid 7364] chdir("./file0" [pid 5825] <... openat resumed>) = 3 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7365] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5825] ioctl(3, LOOP_CLR_FD [pid 7364] <... chdir resumed>) = 0 [ 233.975657][ T7365] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 233.991233][ T7364] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [pid 7367] <... write resumed>) = 65536 [pid 7365] <... openat resumed>) = 3 [pid 7364] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5825] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5824] unlink("./302/binderfs" [pid 5825] close(3 [pid 7364] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5825] <... close resumed>) = 0 [pid 5824] <... unlink resumed>) = 0 [pid 7364] openat(AT_FDCWD, ".", O_RDONLY [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7368 attached [pid 7364] <... openat resumed>) = 4 [pid 5824] getdents64(3, [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7368 [pid 7367] munmap(0x7f957a000000, 138412032 [pid 7365] chdir("./file0") = 0 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] close(3 [pid 7367] <... munmap resumed>) = 0 [pid 7365] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5824] <... close resumed>) = 0 [pid 5824] rmdir("./302" [pid 7368] set_robust_list(0x55557eba4660, 24 [pid 7367] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7365] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7364] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5824] <... rmdir resumed>) = 0 [pid 7368] <... set_robust_list resumed>) = 0 [pid 7367] <... openat resumed>) = 4 [pid 7368] chdir("./301" [pid 7367] ioctl(4, LOOP_SET_FD, 3 [pid 7365] openat(AT_FDCWD, ".", O_RDONLY [pid 7364] <... renameat2 resumed>) = 0 [pid 5824] mkdir("./303", 0777 [pid 7368] <... chdir resumed>) = 0 [pid 5824] <... mkdir resumed>) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5824] ioctl(3, LOOP_CLR_FD) = 0 [pid 5824] close(3) = 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7369 attached [pid 7368] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7367] <... ioctl resumed>) = 0 [pid 7365] <... openat resumed>) = 4 [pid 7364] sync( [pid 7369] set_robust_list(0x55557eba4660, 24 [pid 7368] <... prctl resumed>) = 0 [pid 7367] close(3 [pid 7365] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7369 [pid 7369] <... set_robust_list resumed>) = 0 [pid 7368] setpgid(0, 0 [pid 7367] <... close resumed>) = 0 [pid 7368] <... setpgid resumed>) = 0 [pid 7369] chdir("./303" [pid 7367] close(4 [pid 7369] <... chdir resumed>) = 0 [pid 7368] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7367] <... close resumed>) = 0 [pid 7369] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7367] mkdir("./file0", 0777 [pid 7369] setpgid(0, 0 [pid 7368] <... openat resumed>) = 3 [pid 7367] <... mkdir resumed>) = 0 [pid 7365] <... renameat2 resumed>) = 0 [pid 7369] <... setpgid resumed>) = 0 [pid 7368] write(3, "1000", 4 [pid 7367] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7365] sync( [pid 7368] <... write resumed>) = 4 [pid 7369] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7368] close(3 [pid 7364] <... sync resumed>) = 0 [ 234.060011][ T7367] loop4: detected capacity change from 0 to 128 [pid 7364] exit_group(0 [pid 7368] <... close resumed>) = 0 [pid 7369] write(3, "1000", 4 [pid 7364] <... exit_group resumed>) = ? [pid 7369] <... write resumed>) = 4 [pid 7368] symlink("/dev/binderfs", "./binderfs" [pid 7369] close(3) = 0 [pid 7369] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7368] <... symlink resumed>) = 0 executing program [pid 7369] write(1, "executing program\n", 18) = 18 [pid 7368] write(1, "executing program\n", 18 [pid 7369] memfd_create("syzkaller", 0executing program ) = 3 [pid 7368] <... write resumed>) = 18 [pid 7369] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7368] memfd_create("syzkaller", 0 [pid 7369] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7368] <... memfd_create resumed>) = 3 [pid 7368] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7369] <... write resumed>) = 65536 [pid 7368] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7364] +++ exited with 0 +++ [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7364, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7368] <... write resumed>) = 65536 [pid 7368] munmap(0x7f957a000000, 138412032 [pid 7369] munmap(0x7f957a000000, 138412032 [pid 7368] <... munmap resumed>) = 0 [pid 7369] <... munmap resumed>) = 0 [pid 7368] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5823] umount2("./308", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7368] <... openat resumed>) = 4 [pid 5823] openat(AT_FDCWD, "./308", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 234.103860][ T7367] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [pid 7368] ioctl(4, LOOP_SET_FD, 3 [pid 7369] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5823] newfstatat(3, "", [pid 7369] <... openat resumed>) = 4 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(3, [pid 7369] ioctl(4, LOOP_SET_FD, 3 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 7367] <... mount resumed>) = 0 [pid 5823] umount2("./308/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7367] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7367] chdir("./file0") = 0 [pid 5823] <... umount2 resumed>) = 0 [pid 7367] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5823] umount2("./308/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7367] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7367] openat(AT_FDCWD, ".", O_RDONLY [pid 5823] newfstatat(AT_FDCWD, "./308/file0", [pid 7367] <... openat resumed>) = 4 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7367] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5823] umount2("./308/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./308/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5823] newfstatat(4, "", [pid 7367] <... renameat2 resumed>) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7367] sync( [pid 5823] getdents64(4, [pid 7368] <... ioctl resumed>) = 0 [pid 7368] close(3 [pid 7369] <... ioctl resumed>) = 0 [pid 7369] close(3) = 0 [pid 7369] close(4) = 0 [pid 7369] mkdir("./file0", 0777 [pid 7368] <... close resumed>) = 0 [pid 7368] close(4) = 0 [pid 7368] mkdir("./file0", 0777 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 7369] <... mkdir resumed>) = 0 [pid 5823] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 7368] <... mkdir resumed>) = 0 [pid 5823] close(4 [pid 7368] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5823] <... close resumed>) = 0 [pid 5823] rmdir("./308/file0") = 0 [pid 7369] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5823] umount2("./308/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 234.161618][ T7368] loop2: detected capacity change from 0 to 128 [ 234.166666][ T7369] loop1: detected capacity change from 0 to 128 [pid 5823] newfstatat(AT_FDCWD, "./308/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./308/binderfs") = 0 [pid 5823] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] close(3) = 0 [pid 5823] rmdir("./308") = 0 [pid 5823] mkdir("./309", 0777) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5823] ioctl(3, LOOP_CLR_FD) = 0 [pid 5823] close(3) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7370 attached [pid 7370] set_robust_list(0x55557eba4660, 24) = 0 [pid 7370] chdir("./309") = 0 [pid 7370] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7370 [pid 7370] setpgid(0, 0) = 0 [pid 7370] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7370] write(3, "1000", 4) = 4 [pid 7370] close(3) = 0 [pid 7370] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 7370] write(1, "executing program\n", 18 [pid 7368] <... mount resumed>) = 0 [pid 7370] <... write resumed>) = 18 [pid 7368] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7370] memfd_create("syzkaller", 0 [pid 7368] <... openat resumed>) = 3 [pid 7368] chdir("./file0") = 0 [pid 7368] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7370] <... memfd_create resumed>) = 3 [pid 7368] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7368] openat(AT_FDCWD, ".", O_RDONLY [pid 7370] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7368] <... openat resumed>) = 4 [ 234.221849][ T7369] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 234.236243][ T7368] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [pid 7370] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7368] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7370] <... write resumed>) = 65536 [pid 7368] <... renameat2 resumed>) = 0 [pid 7370] munmap(0x7f957a000000, 138412032) = 0 [pid 7370] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7370] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 7370] ioctl(4, LOOP_CLR_FD) = 0 [pid 7368] sync( [pid 7370] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 7370] close(4) = 0 [pid 7370] close(3) = 0 [pid 7370] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 7370] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = -1 ENOENT (No such file or directory) [pid 7370] sync( [pid 7369] <... mount resumed>) = 0 [pid 7367] <... sync resumed>) = 0 [pid 7365] <... sync resumed>) = 0 [pid 7365] exit_group(0 [pid 7367] exit_group(0 [pid 7365] <... exit_group resumed>) = ? [pid 7367] <... exit_group resumed>) = ? [pid 7369] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7369] chdir("./file0") = 0 [pid 7369] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7369] openat(AT_FDCWD, ".", O_RDONLY [pid 7367] +++ exited with 0 +++ [pid 7365] +++ exited with 0 +++ [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7365, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7367, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5827] restart_syscall(<... resuming interrupted clone ...> [pid 7369] <... openat resumed>) = 4 [pid 7369] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = 0 [pid 5827] <... restart_syscall resumed>) = 0 [pid 7369] sync( [pid 5827] umount2("./296", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7369] <... sync resumed>) = 0 [pid 7368] <... sync resumed>) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] umount2("./306", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7370] <... sync resumed>) = 0 [pid 7369] exit_group(0 [pid 7368] exit_group(0 [pid 5827] openat(AT_FDCWD, "./296", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7370] exit_group(0 [pid 7369] <... exit_group resumed>) = ? [pid 7368] <... exit_group resumed>) = ? [pid 5827] <... openat resumed>) = 3 [pid 5826] openat(AT_FDCWD, "./306", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7370] <... exit_group resumed>) = ? [pid 7369] +++ exited with 0 +++ [pid 5826] <... openat resumed>) = 3 [pid 5826] newfstatat(3, "", [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7369, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5827] newfstatat(3, "", [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 7370] +++ exited with 0 +++ [pid 7368] +++ exited with 0 +++ [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] <... restart_syscall resumed>) = 0 [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7368, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5826] getdents64(3, [pid 5827] getdents64(3, [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7370, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5826] umount2("./306/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] umount2("./296/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./301", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./303", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./301", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] openat(AT_FDCWD, "./303", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5823] umount2("./309", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... openat resumed>) = 3 [pid 5824] newfstatat(3, "", [pid 5825] newfstatat(3, "", [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(3, [pid 5824] getdents64(3, [pid 5823] openat(AT_FDCWD, "./309", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] <... openat resumed>) = 3 [pid 5825] umount2("./301/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... umount2 resumed>) = 0 [pid 5826] <... umount2 resumed>) = 0 [pid 5824] umount2("./303/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] newfstatat(3, "", [pid 5827] umount2("./296/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] getdents64(3, [pid 5827] newfstatat(AT_FDCWD, "./296/file0", [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] umount2("./309/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] umount2("./306/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] umount2("./296/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] openat(AT_FDCWD, "./296/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5827] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] getdents64(4, [pid 5823] newfstatat(AT_FDCWD, "./309/binderfs", [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... umount2 resumed>) = 0 [pid 5827] getdents64(4, [pid 5825] umount2("./301/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] unlink("./309/binderfs" [pid 5826] newfstatat(AT_FDCWD, "./306/file0", [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... unlink resumed>) = 0 [pid 5825] newfstatat(AT_FDCWD, "./301/file0", [pid 5824] <... umount2 resumed>) = 0 [pid 5826] umount2("./306/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] close(4 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] umount2("./303/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] getdents64(3, [pid 5827] <... close resumed>) = 0 [pid 5826] openat(AT_FDCWD, "./306/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] umount2("./301/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5827] rmdir("./296/file0" [pid 5826] <... openat resumed>) = 4 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./303/file0", [pid 5823] close(3 [pid 5827] <... rmdir resumed>) = 0 [pid 5826] newfstatat(4, "", [pid 5825] openat(AT_FDCWD, "./301/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... close resumed>) = 0 [pid 5827] umount2("./296/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... openat resumed>) = 4 [pid 5824] umount2("./303/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] rmdir("./309" [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] newfstatat(4, "", [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... rmdir resumed>) = 0 [pid 5827] newfstatat(AT_FDCWD, "./296/binderfs", [pid 5826] getdents64(4, [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] openat(AT_FDCWD, "./303/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] mkdir("./310", 0777 [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] getdents64(4, [pid 5824] <... openat resumed>) = 4 [pid 5823] <... mkdir resumed>) = 0 [pid 5827] unlink("./296/binderfs" [pid 5826] getdents64(4, [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] newfstatat(4, "", [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5827] <... unlink resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5825] getdents64(4, [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... openat resumed>) = 3 [pid 5827] getdents64(3, [pid 5826] close(4 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] getdents64(4, [pid 5823] ioctl(3, LOOP_CLR_FD [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] <... close resumed>) = 0 [pid 5825] close(4 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5827] close(3 [pid 5826] rmdir("./306/file0" [pid 5825] <... close resumed>) = 0 [pid 5824] getdents64(4, [pid 5823] close(3 [pid 5827] <... close resumed>) = 0 [pid 5825] rmdir("./301/file0" [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] <... close resumed>) = 0 [pid 5827] rmdir("./296" [pid 5826] <... rmdir resumed>) = 0 [pid 5824] close(4 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5827] <... rmdir resumed>) = 0 [pid 5826] umount2("./306/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... rmdir resumed>) = 0 [pid 5824] <... close resumed>) = 0 ./strace-static-x86_64: Process 7371 attached [pid 5827] mkdir("./297", 0777 [pid 5824] rmdir("./303/file0" [pid 5827] <... mkdir resumed>) = 0 [pid 5825] umount2("./301/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7371] set_robust_list(0x55557eba4660, 24 [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7371 [pid 7371] <... set_robust_list resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... rmdir resumed>) = 0 [pid 5825] newfstatat(AT_FDCWD, "./301/binderfs", [pid 5824] umount2("./303/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7371] chdir("./310" [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... openat resumed>) = 3 [pid 5824] newfstatat(AT_FDCWD, "./303/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./301/binderfs" [pid 7371] <... chdir resumed>) = 0 [pid 5827] ioctl(3, LOOP_CLR_FD [pid 5824] unlink("./303/binderfs" [pid 7371] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5827] <... ioctl resumed>) = 0 [pid 5825] <... unlink resumed>) = 0 [pid 7371] <... prctl resumed>) = 0 [pid 5827] close(3 [pid 7371] setpgid(0, 0 [pid 5827] <... close resumed>) = 0 [pid 7371] <... setpgid resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] getdents64(3, [pid 5824] <... unlink resumed>) = 0 [pid 7371] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] getdents64(3, [pid 5825] close(3 [pid 7371] <... openat resumed>) = 3 [pid 5825] <... close resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5826] newfstatat(AT_FDCWD, "./306/binderfs", [pid 7371] write(3, "1000", 4 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] rmdir("./301" [pid 5824] close(3./strace-static-x86_64: Process 7372 attached [pid 7371] <... write resumed>) = 4 [pid 5826] unlink("./306/binderfs" [pid 5825] <... rmdir resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 5825] mkdir("./302", 0777 [pid 5824] rmdir("./303" [pid 7372] set_robust_list(0x55557eba4660, 24 [pid 7371] close(3 [pid 5826] <... unlink resumed>) = 0 [pid 7372] <... set_robust_list resumed>) = 0 [pid 7371] <... close resumed>) = 0 [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7372 [pid 5826] getdents64(3, [pid 5824] <... rmdir resumed>) = 0 [pid 7371] symlink("/dev/binderfs", "./binderfs" [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7372] chdir("./297" [pid 5824] mkdir("./304", 0777 [pid 7372] <... chdir resumed>) = 0 [pid 7371] <... symlink resumed>) = 0 [pid 5826] close(3 [pid 5824] <... mkdir resumed>) = 0 executing program [pid 7372] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7371] write(1, "executing program\n", 18 [pid 5826] <... close resumed>) = 0 [pid 5825] <... mkdir resumed>) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7372] <... prctl resumed>) = 0 [pid 7371] <... write resumed>) = 18 [pid 5826] rmdir("./306" [pid 7372] setpgid(0, 0 [pid 7371] memfd_create("syzkaller", 0 [pid 5826] <... rmdir resumed>) = 0 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5824] <... openat resumed>) = 3 [pid 7372] <... setpgid resumed>) = 0 [pid 5824] ioctl(3, LOOP_CLR_FD [pid 7371] <... memfd_create resumed>) = 3 [pid 5826] mkdir("./307", 0777 [pid 7372] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5824] <... ioctl resumed>) = 0 [pid 7372] <... openat resumed>) = 3 [pid 7371] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5826] <... mkdir resumed>) = 0 [pid 5825] <... openat resumed>) = 3 [pid 5824] close(3 [pid 7371] <... mmap resumed>) = 0x7f957a000000 [pid 7371] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5826] ioctl(3, LOOP_CLR_FD) = 0 [pid 5826] close(3 [pid 7371] <... write resumed>) = 65536 [pid 5826] <... close resumed>) = 0 [pid 7371] munmap(0x7f957a000000, 138412032 [pid 7372] write(3, "1000", 4 [pid 7371] <... munmap resumed>) = 0 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 7371] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5825] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 7373 attached [pid 7372] <... write resumed>) = 4 [pid 7371] <... openat resumed>) = 4 [pid 5825] close(3 [pid 7372] close(3 [pid 7371] ioctl(4, LOOP_SET_FD, 3 [pid 7373] set_robust_list(0x55557eba4660, 24) = 0 [pid 7373] chdir("./307" [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7373 [pid 7373] <... chdir resumed>) = 0 [pid 7372] <... close resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 7373] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7373] setpgid(0, 0) = 0 [pid 7373] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7372] symlink("/dev/binderfs", "./binderfs" [pid 7373] <... openat resumed>) = 3 [pid 7373] write(3, "1000", 4 [pid 7372] <... symlink resumed>) = 0 [pid 7373] <... write resumed>) = 4 [pid 7373] close(3) = 0 [pid 7373] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7372] write(1, "executing program\n", 18executing program executing program [pid 7371] <... ioctl resumed>) = 0 [pid 7372] <... write resumed>) = 18 [pid 5825] <... close resumed>) = 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7372] memfd_create("syzkaller", 0 [pid 7373] write(1, "executing program\n", 18 [pid 7371] close(3 [pid 7373] <... write resumed>) = 18 [pid 7371] <... close resumed>) = 0 [pid 7373] memfd_create("syzkaller", 0 [pid 7371] close(4 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7374 attached [pid 7372] <... memfd_create resumed>) = 3 [pid 7371] <... close resumed>) = 0 [pid 7372] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7374 ./strace-static-x86_64: Process 7375 attached [pid 7374] set_robust_list(0x55557eba4660, 24 [pid 7372] <... mmap resumed>) = 0x7f957a000000 [pid 7374] <... set_robust_list resumed>) = 0 [pid 7373] <... memfd_create resumed>) = 3 [pid 7371] mkdir("./file0", 0777 [pid 7374] chdir("./304" [pid 7373] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7372] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7371] <... mkdir resumed>) = 0 [pid 7374] <... chdir resumed>) = 0 [pid 7374] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7373] <... mmap resumed>) = 0x7f957a000000 [pid 7371] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7373] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7375 [pid 7375] set_robust_list(0x55557eba4660, 24 [pid 7374] <... prctl resumed>) = 0 [pid 7372] <... write resumed>) = 65536 [pid 7375] <... set_robust_list resumed>) = 0 [pid 7374] setpgid(0, 0 [pid 7373] <... write resumed>) = 65536 [pid 7372] munmap(0x7f957a000000, 138412032 [pid 7375] chdir("./302" [pid 7374] <... setpgid resumed>) = 0 [pid 7372] <... munmap resumed>) = 0 [pid 7372] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7374] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7372] <... openat resumed>) = 4 [pid 7373] munmap(0x7f957a000000, 138412032) = 0 [ 234.485938][ T7371] loop0: detected capacity change from 0 to 128 [ 234.519739][ T7371] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [pid 7373] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 7372] ioctl(4, LOOP_SET_FD, 3 [pid 7373] ioctl(4, LOOP_SET_FD, 3 [pid 7375] <... chdir resumed>) = 0 [pid 7374] write(3, "1000", 4 [pid 7372] <... ioctl resumed>) = 0 [pid 7375] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7374] <... write resumed>) = 4 [pid 7372] close(3 [pid 7374] close(3 [pid 7375] <... prctl resumed>) = 0 [pid 7372] <... close resumed>) = 0 [pid 7374] <... close resumed>) = 0 [pid 7375] setpgid(0, 0 [pid 7374] symlink("/dev/binderfs", "./binderfs" [pid 7372] close(4executing program [pid 7375] <... setpgid resumed>) = 0 [pid 7374] <... symlink resumed>) = 0 [pid 7372] <... close resumed>) = 0 [pid 7374] write(1, "executing program\n", 18 [pid 7372] mkdir("./file0", 0777 [pid 7375] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7374] <... write resumed>) = 18 [pid 7372] <... mkdir resumed>) = 0 [pid 7374] memfd_create("syzkaller", 0 [pid 7372] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7374] <... memfd_create resumed>) = 3 [pid 7375] <... openat resumed>) = 3 [pid 7374] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7373] <... ioctl resumed>) = 0 [pid 7371] <... mount resumed>) = 0 [pid 7375] write(3, "1000", 4 [pid 7374] <... mmap resumed>) = 0x7f957a000000 [pid 7373] close(3 [pid 7371] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7375] <... write resumed>) = 4 [pid 7374] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7373] <... close resumed>) = 0 [pid 7372] <... mount resumed>) = 0 [pid 7371] <... openat resumed>) = 3 [pid 7375] close(3 [pid 7374] <... write resumed>) = 65536 [pid 7373] close(4 [pid 7372] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7375] <... close resumed>) = 0 [pid 7373] <... close resumed>) = 0 [pid 7372] <... openat resumed>) = 3 [pid 7371] chdir("./file0" [pid 7375] symlink("/dev/binderfs", "./binderfs" [pid 7373] mkdir("./file0", 0777 [pid 7372] chdir("./file0" [pid 7375] <... symlink resumed>) = 0 executing program [pid 7374] munmap(0x7f957a000000, 138412032 [pid 7373] <... mkdir resumed>) = 0 [pid 7372] <... chdir resumed>) = 0 [pid 7371] <... chdir resumed>) = 0 [pid 7375] write(1, "executing program\n", 18 [pid 7374] <... munmap resumed>) = 0 [ 234.554304][ T7372] loop4: detected capacity change from 0 to 128 [ 234.554427][ T7373] loop3: detected capacity change from 0 to 128 [ 234.584282][ T7372] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [pid 7373] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7372] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7375] <... write resumed>) = 18 [pid 7374] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7372] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7371] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7375] memfd_create("syzkaller", 0 [pid 7372] openat(AT_FDCWD, ".", O_RDONLY [pid 7375] <... memfd_create resumed>) = 3 [pid 7374] <... openat resumed>) = 4 [pid 7372] <... openat resumed>) = 4 [pid 7371] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7375] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7374] ioctl(4, LOOP_SET_FD, 3 [pid 7372] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7371] openat(AT_FDCWD, ".", O_RDONLY [pid 7375] <... mmap resumed>) = 0x7f957a000000 [pid 7375] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7371] <... openat resumed>) = 4 [pid 7371] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7372] <... renameat2 resumed>) = 0 [pid 7372] sync( [pid 7375] <... write resumed>) = 65536 [pid 7375] munmap(0x7f957a000000, 138412032) = 0 [pid 7375] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 7375] ioctl(4, LOOP_SET_FD, 3 [pid 7371] <... renameat2 resumed>) = 0 [pid 7371] sync( [pid 7374] <... ioctl resumed>) = 0 [pid 7374] close(3) = 0 [pid 7375] <... ioctl resumed>) = 0 [pid 7374] close(4 [pid 7375] close(3 [pid 7374] <... close resumed>) = 0 [pid 7375] <... close resumed>) = 0 [pid 7374] mkdir("./file0", 0777 [pid 7375] close(4 [pid 7374] <... mkdir resumed>) = 0 [pid 7375] <... close resumed>) = 0 [pid 7374] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7375] mkdir("./file0", 0777) = 0 [ 234.642917][ T7374] loop1: detected capacity change from 0 to 128 [ 234.651187][ T7373] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 234.675482][ T7375] loop2: detected capacity change from 0 to 128 [pid 7375] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7373] <... mount resumed>) = 0 [pid 7373] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7373] chdir("./file0") = 0 [pid 7373] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7373] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7373] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = 0 [pid 7375] <... mount resumed>) = 0 [pid 7374] <... mount resumed>) = 0 [pid 7375] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7374] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7373] sync( [pid 7375] <... openat resumed>) = 3 [pid 7374] <... openat resumed>) = 3 [pid 7375] chdir("./file0" [pid 7374] chdir("./file0" [pid 7375] <... chdir resumed>) = 0 [pid 7374] <... chdir resumed>) = 0 [pid 7375] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7374] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7375] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7374] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7375] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7374] openat(AT_FDCWD, ".", O_RDONLY [pid 7375] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7374] <... openat resumed>) = 4 [pid 7374] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7375] <... renameat2 resumed>) = 0 [pid 7374] <... renameat2 resumed>) = 0 [pid 7375] sync( [ 234.705272][ T7374] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 234.723537][ T7375] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [pid 7374] sync( [pid 7372] <... sync resumed>) = 0 [pid 7371] <... sync resumed>) = 0 [pid 7371] exit_group(0 [pid 7373] <... sync resumed>) = 0 [pid 7371] <... exit_group resumed>) = ? [pid 7371] +++ exited with 0 +++ [pid 7375] <... sync resumed>) = 0 [pid 7374] <... sync resumed>) = 0 [pid 7373] exit_group(0 [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7371, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 7373] <... exit_group resumed>) = ? [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 7373] +++ exited with 0 +++ [pid 5823] <... restart_syscall resumed>) = 0 [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7373, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 7374] exit_group(0 [pid 7375] exit_group(0 [pid 7372] exit_group(0 [pid 5823] umount2("./310", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7374] <... exit_group resumed>) = ? [pid 7372] <... exit_group resumed>) = ? [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./310", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5823] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7375] <... exit_group resumed>) = ? [pid 7372] +++ exited with 0 +++ [pid 5823] getdents64(3, [pid 7375] +++ exited with 0 +++ [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7372, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] umount2("./310/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7375, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 7374] +++ exited with 0 +++ [pid 5827] umount2("./297", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] umount2("./307", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./302", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] openat(AT_FDCWD, "./297", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] openat(AT_FDCWD, "./307", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] <... umount2 resumed>) = 0 [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7374, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5827] <... openat resumed>) = 3 [pid 5826] <... openat resumed>) = 3 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 5826] newfstatat(3, "", [pid 5825] openat(AT_FDCWD, "./302", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] newfstatat(3, "", [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(3, [pid 5827] getdents64(3, [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5825] <... openat resumed>) = 3 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5826] umount2("./307/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] newfstatat(3, "", [pid 5827] umount2("./297/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... umount2 resumed>) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] <... restart_syscall resumed>) = 0 [pid 5823] umount2("./310/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] umount2("./307/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] getdents64(3, [pid 5827] <... umount2 resumed>) = 0 [pid 5826] newfstatat(AT_FDCWD, "./307/file0", [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] umount2("./297/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] umount2("./302/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] newfstatat(AT_FDCWD, "./310/file0", [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] umount2("./307/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] newfstatat(AT_FDCWD, "./297/file0", [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] umount2("./310/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] umount2("./297/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] openat(AT_FDCWD, "./307/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./310/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] openat(AT_FDCWD, "./297/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5823] <... openat resumed>) = 4 [pid 5827] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] newfstatat(4, "", [pid 5827] getdents64(4, [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5827] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] getdents64(4, [pid 5827] close(4 [pid 5826] <... openat resumed>) = 4 [pid 5824] umount2("./304", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] newfstatat(4, "", [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... close resumed>) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] openat(AT_FDCWD, "./304", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5827] rmdir("./297/file0" [pid 5826] getdents64(4, [pid 5823] close(4 [pid 5827] <... rmdir resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] <... openat resumed>) = 3 [pid 5823] <... close resumed>) = 0 [pid 5824] newfstatat(3, "", [pid 5823] rmdir("./310/file0" [pid 5826] getdents64(4, [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... rmdir resumed>) = 0 [pid 5827] umount2("./297/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] close(4 [pid 5824] getdents64(3, [pid 5827] newfstatat(AT_FDCWD, "./297/binderfs", [pid 5826] <... close resumed>) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] rmdir("./307/file0" [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5827] unlink("./297/binderfs" [pid 5824] umount2("./304/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... unlink resumed>) = 0 [pid 5823] umount2("./310/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] getdents64(3, [pid 5823] newfstatat(AT_FDCWD, "./310/binderfs", [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] <... rmdir resumed>) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] close(3) = 0 [pid 5827] rmdir("./297") = 0 [pid 5823] unlink("./310/binderfs") = 0 [pid 5827] mkdir("./298", 0777 [pid 5826] umount2("./307/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... umount2 resumed>) = 0 [pid 5824] <... umount2 resumed>) = 0 [pid 5823] getdents64(3, [pid 5827] <... mkdir resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] umount2("./302/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./304/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5826] newfstatat(AT_FDCWD, "./307/binderfs", [pid 5825] newfstatat(AT_FDCWD, "./302/file0", [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] close(3 [pid 5827] <... openat resumed>) = 3 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] newfstatat(AT_FDCWD, "./304/file0", [pid 5823] <... close resumed>) = 0 [pid 5827] ioctl(3, LOOP_CLR_FD [pid 5826] unlink("./307/binderfs" [pid 5825] umount2("./302/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] rmdir("./310" [pid 5827] <... ioctl resumed>) = 0 [pid 5826] <... unlink resumed>) = 0 [pid 5823] <... rmdir resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] umount2("./304/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] getdents64(3, [pid 5827] close(3 [pid 5825] openat(AT_FDCWD, "./302/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] mkdir("./311", 0777 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... close resumed>) = 0 [pid 5825] <... openat resumed>) = 4 [pid 5823] <... mkdir resumed>) = 0 [pid 5826] close(3 [pid 5824] openat(AT_FDCWD, "./304/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5825] newfstatat(4, "", [pid 5826] <... close resumed>) = 0 [pid 5824] newfstatat(4, "", [pid 5826] rmdir("./307" [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] <... rmdir resumed>) = 0 [pid 5825] getdents64(4, [pid 5824] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5824] getdents64(4, [pid 5825] getdents64(4, [pid 5823] <... openat resumed>) = 3 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5825] close(4 [pid 5824] close(4 [pid 5825] <... close resumed>) = 0 [pid 5824] <... close resumed>) = 0 ./strace-static-x86_64: Process 7376 attached [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7376 [pid 5826] mkdir("./308", 0777 [pid 5825] rmdir("./302/file0" [pid 5824] rmdir("./304/file0" [pid 5823] ioctl(3, LOOP_CLR_FD) = 0 [pid 7376] set_robust_list(0x55557eba4660, 24) = 0 [pid 5826] <... mkdir resumed>) = 0 [pid 5825] <... rmdir resumed>) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 5823] close(3 [pid 7376] chdir("./298" [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5825] umount2("./302/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./304/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... close resumed>) = 0 [pid 7376] <... chdir resumed>) = 0 [pid 5826] <... openat resumed>) = 3 [pid 5826] ioctl(3, LOOP_CLR_FD [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5826] <... ioctl resumed>) = 0 [pid 5826] close(3 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... close resumed>) = 0 [pid 7376] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5824] newfstatat(AT_FDCWD, "./304/binderfs", ./strace-static-x86_64: Process 7378 attached ./strace-static-x86_64: Process 7377 attached [pid 7376] <... prctl resumed>) = 0 [pid 5825] newfstatat(AT_FDCWD, "./302/binderfs", [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7378] set_robust_list(0x55557eba4660, 24 [pid 7377] set_robust_list(0x55557eba4660, 24 [pid 7378] <... set_robust_list resumed>) = 0 [pid 7377] <... set_robust_list resumed>) = 0 [pid 7376] setpgid(0, 0 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7378 [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./304/binderfs" [pid 7378] chdir("./308" [pid 7377] chdir("./311" [pid 5824] <... unlink resumed>) = 0 [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7377 [pid 7378] <... chdir resumed>) = 0 [pid 7377] <... chdir resumed>) = 0 [pid 7376] <... setpgid resumed>) = 0 [pid 5825] unlink("./302/binderfs" [pid 5824] getdents64(3, [pid 7378] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7377] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5825] <... unlink resumed>) = 0 [pid 7377] <... prctl resumed>) = 0 [pid 7376] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7378] <... prctl resumed>) = 0 [pid 7377] setpgid(0, 0 [pid 7376] <... openat resumed>) = 3 [pid 5825] getdents64(3, [pid 5824] close(3) = 0 [pid 5824] rmdir("./304" [pid 7378] setpgid(0, 0 [pid 7377] <... setpgid resumed>) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 7378] <... setpgid resumed>) = 0 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7377] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5825] close(3 [pid 7378] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5825] <... close resumed>) = 0 [pid 7376] write(3, "1000", 4 [pid 5825] rmdir("./302" [pid 7377] <... openat resumed>) = 3 [pid 7378] <... openat resumed>) = 3 [pid 7376] <... write resumed>) = 4 [pid 5825] <... rmdir resumed>) = 0 [pid 7378] write(3, "1000", 4 [pid 7377] write(3, "1000", 4 [pid 7378] <... write resumed>) = 4 [pid 7377] <... write resumed>) = 4 [pid 7378] close(3 [pid 7377] close(3 [pid 7378] <... close resumed>) = 0 [pid 7377] <... close resumed>) = 0 [pid 7378] symlink("/dev/binderfs", "./binderfs" [pid 7376] close(3 [pid 5824] mkdir("./305", 0777 [pid 7378] <... symlink resumed>) = 0 executing program [pid 7377] symlink("/dev/binderfs", "./binderfs" [pid 7376] <... close resumed>) = 0 [pid 5824] <... mkdir resumed>) = 0 [pid 7378] write(1, "executing program\n", 18 [pid 7376] symlink("/dev/binderfs", "./binderfs" [pid 5825] mkdir("./303", 0777 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7378] <... write resumed>) = 18 [pid 7377] <... symlink resumed>) = 0 [pid 7376] <... symlink resumed>) = 0 [pid 5825] <... mkdir resumed>) = 0 [pid 5824] <... openat resumed>) = 3 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5824] ioctl(3, LOOP_CLR_FD [pid 7378] memfd_create("syzkaller", 0 [pid 7377] write(1, "executing program\n", 18 [pid 7376] write(1, "executing program\n", 18 [pid 5824] <... ioctl resumed>) = 0 executing program executing program [pid 7377] <... write resumed>) = 18 [pid 7376] <... write resumed>) = 18 [pid 5824] close(3 [pid 7377] memfd_create("syzkaller", 0 [pid 7376] memfd_create("syzkaller", 0 [pid 5825] <... openat resumed>) = 3 [pid 7376] <... memfd_create resumed>) = 3 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 7376] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5825] <... ioctl resumed>) = 0 [pid 7376] <... mmap resumed>) = 0x7f957a000000 [pid 5825] close(3 [pid 7378] <... memfd_create resumed>) = 3 [pid 7377] <... memfd_create resumed>) = 3 [pid 7376] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7378] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7377] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7378] <... mmap resumed>) = 0x7f957a000000 [pid 7377] <... mmap resumed>) = 0x7f957a000000 [pid 7376] <... write resumed>) = 65536 [pid 7376] munmap(0x7f957a000000, 138412032 [pid 7378] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7377] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5825] <... close resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7379 attached [pid 7378] <... write resumed>) = 65536 [pid 7377] <... write resumed>) = 65536 [pid 7376] <... munmap resumed>) = 0 [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7379 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7378] munmap(0x7f957a000000, 138412032 [pid 7377] munmap(0x7f957a000000, 138412032 [pid 7379] set_robust_list(0x55557eba4660, 24 [pid 7378] <... munmap resumed>) = 0 [pid 7377] <... munmap resumed>) = 0 [pid 7378] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 ./strace-static-x86_64: Process 7380 attached [pid 7379] <... set_robust_list resumed>) = 0 [pid 7377] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7380] set_robust_list(0x55557eba4660, 24 [pid 7378] ioctl(4, LOOP_SET_FD, 3 [pid 7377] <... openat resumed>) = 4 [pid 7380] <... set_robust_list resumed>) = 0 [pid 7379] chdir("./303" [pid 7377] ioctl(4, LOOP_SET_FD, 3 [pid 7376] <... openat resumed>) = 4 [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7380 [pid 7379] <... chdir resumed>) = 0 [pid 7376] ioctl(4, LOOP_SET_FD, 3 [pid 7379] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7379] setpgid(0, 0) = 0 [pid 7379] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7379] write(3, "1000", 4) = 4 [pid 7379] close(3) = 0 [pid 7379] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 7380] chdir("./305" [pid 7379] write(1, "executing program\n", 18) = 18 [pid 7380] <... chdir resumed>) = 0 [pid 7379] memfd_create("syzkaller", 0 [pid 7377] <... ioctl resumed>) = 0 [pid 7380] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7379] <... memfd_create resumed>) = 3 [pid 7377] close(3 [pid 7380] <... prctl resumed>) = 0 [pid 7380] setpgid(0, 0 [pid 7379] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7378] <... ioctl resumed>) = 0 [pid 7377] <... close resumed>) = 0 [pid 7380] <... setpgid resumed>) = 0 [pid 7377] close(4 [pid 7378] close(3 [pid 7380] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7378] <... close resumed>) = 0 [pid 7377] <... close resumed>) = 0 [pid 7378] close(4 [pid 7377] mkdir("./file0", 0777 [pid 7379] <... mmap resumed>) = 0x7f957a000000 [pid 7378] <... close resumed>) = 0 [pid 7377] <... mkdir resumed>) = 0 [pid 7376] <... ioctl resumed>) = 0 [pid 7380] <... openat resumed>) = 3 [pid 7378] mkdir("./file0", 0777 [pid 7377] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7380] write(3, "1000", 4 [pid 7379] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7376] close(3 [pid 7380] <... write resumed>) = 4 [pid 7378] <... mkdir resumed>) = 0 [pid 7376] <... close resumed>) = 0 [pid 7379] <... write resumed>) = 65536 [pid 7376] close(4 [pid 7379] munmap(0x7f957a000000, 138412032 [pid 7376] <... close resumed>) = 0 [ 235.008207][ T7378] loop3: detected capacity change from 0 to 128 [ 235.018053][ T7376] loop4: detected capacity change from 0 to 128 [ 235.023740][ T7377] loop0: detected capacity change from 0 to 128 [ 235.046658][ T7377] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [pid 7380] close(3 [pid 7379] <... munmap resumed>) = 0 [pid 7378] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7376] mkdir("./file0", 0777 [pid 7380] <... close resumed>) = 0 [pid 7380] symlink("/dev/binderfs", "./binderfs" [pid 7379] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7376] <... mkdir resumed>) = 0 [pid 7379] <... openat resumed>) = 4 [pid 7379] ioctl(4, LOOP_SET_FD, 3 [pid 7380] <... symlink resumed>) = 0 executing program [pid 7376] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7380] write(1, "executing program\n", 18) = 18 [pid 7380] memfd_create("syzkaller", 0 [pid 7379] <... ioctl resumed>) = 0 [pid 7380] <... memfd_create resumed>) = 3 [pid 7380] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7379] close(3 [pid 7380] <... mmap resumed>) = 0x7f957a000000 [pid 7379] <... close resumed>) = 0 [pid 7379] close(4) = 0 [pid 7379] mkdir("./file0", 0777) = 0 [pid 7380] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [ 235.060282][ T7379] loop2: detected capacity change from 0 to 128 [ 235.075435][ T7378] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 235.096019][ T7376] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [pid 7380] munmap(0x7f957a000000, 138412032 [pid 7378] <... mount resumed>) = 0 [pid 7380] <... munmap resumed>) = 0 [pid 7380] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7379] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7378] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7380] <... openat resumed>) = 4 [pid 7378] <... openat resumed>) = 3 [pid 7378] chdir("./file0" [pid 7380] ioctl(4, LOOP_SET_FD, 3 [pid 7378] <... chdir resumed>) = 0 [pid 7378] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7378] openat(AT_FDCWD, ".", O_RDONLY [pid 7377] <... mount resumed>) = 0 [pid 7377] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7378] <... openat resumed>) = 4 [pid 7377] <... openat resumed>) = 3 [pid 7380] <... ioctl resumed>) = 0 [pid 7378] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7376] <... mount resumed>) = 0 [pid 7376] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7377] chdir("./file0" [pid 7376] <... openat resumed>) = 3 [pid 7378] <... renameat2 resumed>) = 0 [pid 7377] <... chdir resumed>) = 0 [pid 7376] chdir("./file0" [pid 7380] close(3 [pid 7378] sync( [pid 7377] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7376] <... chdir resumed>) = 0 [pid 7380] <... close resumed>) = 0 [pid 7376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7377] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7376] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7380] close(4 [pid 7376] openat(AT_FDCWD, ".", O_RDONLY [pid 7380] <... close resumed>) = 0 [pid 7377] openat(AT_FDCWD, ".", O_RDONLY [pid 7376] <... openat resumed>) = 4 [pid 7380] mkdir("./file0", 0777 [pid 7377] <... openat resumed>) = 4 [pid 7376] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7380] <... mkdir resumed>) = 0 [pid 7377] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7380] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7376] <... renameat2 resumed>) = 0 [ 235.117222][ T7380] loop1: detected capacity change from 0 to 128 [ 235.124888][ T7379] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [pid 7379] <... mount resumed>) = 0 [pid 7377] <... renameat2 resumed>) = 0 [pid 7376] sync( [pid 7379] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7379] chdir("./file0") = 0 [pid 7377] sync( [pid 7379] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7379] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7379] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = 0 [ 235.205475][ T7380] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [pid 7379] sync( [pid 7380] <... mount resumed>) = 0 [pid 7380] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7380] chdir("./file0") = 0 [pid 7380] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7379] <... sync resumed>) = 0 [pid 7378] <... sync resumed>) = 0 [pid 7377] <... sync resumed>) = 0 [pid 7376] <... sync resumed>) = 0 [pid 7380] openat(AT_FDCWD, ".", O_RDONLY [pid 7379] exit_group(0 [pid 7378] exit_group(0 [pid 7377] exit_group(0 [pid 7376] exit_group(0 [pid 7380] <... openat resumed>) = 4 [pid 7379] <... exit_group resumed>) = ? [pid 7378] <... exit_group resumed>) = ? [pid 7377] <... exit_group resumed>) = ? [pid 7376] <... exit_group resumed>) = ? [pid 7378] +++ exited with 0 +++ [pid 7380] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7378, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7380] <... renameat2 resumed>) = 0 [pid 7379] +++ exited with 0 +++ [pid 7377] +++ exited with 0 +++ [pid 7380] sync( [pid 7376] +++ exited with 0 +++ [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7379, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7377, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7376, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5827] restart_syscall(<... resuming interrupted clone ...> [pid 5826] umount2("./308", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./308", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5826] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5826] umount2("./308/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7380] <... sync resumed>) = 0 [pid 7380] exit_group(0) = ? [pid 5826] <... umount2 resumed>) = 0 [pid 5826] umount2("./308/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./308/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] umount2("./308/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./308/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 7380] +++ exited with 0 +++ [pid 5827] <... restart_syscall resumed>) = 0 [pid 5826] newfstatat(4, "", [pid 5827] umount2("./298", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7380, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] openat(AT_FDCWD, "./298", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] getdents64(4, [pid 5827] <... openat resumed>) = 3 [pid 5827] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] getdents64(3, [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] umount2("./303", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./305", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] umount2("./311", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5827] umount2("./298/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] getdents64(4, [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5825] openat(AT_FDCWD, "./303", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] openat(AT_FDCWD, "./305", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] openat(AT_FDCWD, "./311", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] close(4 [pid 5825] <... openat resumed>) = 3 [pid 5825] newfstatat(3, "", [pid 5826] <... close resumed>) = 0 [pid 5823] <... openat resumed>) = 3 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] rmdir("./308/file0" [pid 5824] <... openat resumed>) = 3 [pid 5823] newfstatat(3, "", [pid 5827] <... umount2 resumed>) = 0 [pid 5826] <... rmdir resumed>) = 0 [pid 5825] getdents64(3, [pid 5824] newfstatat(3, "", [pid 5827] umount2("./298/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] umount2("./308/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] newfstatat(AT_FDCWD, "./298/file0", [pid 5826] newfstatat(AT_FDCWD, "./308/binderfs", [pid 5825] umount2("./303/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] getdents64(3, [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] getdents64(3, [pid 5827] umount2("./298/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] openat(AT_FDCWD, "./298/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] umount2("./311/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5827] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5827] close(4) = 0 [pid 5827] rmdir("./298/file0") = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... umount2 resumed>) = 0 [pid 5824] umount2("./305/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... umount2 resumed>) = 0 [pid 5827] umount2("./298/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] newfstatat(AT_FDCWD, "./298/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] unlink("./298/binderfs") = 0 [pid 5827] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5827] close(3) = 0 [pid 5827] rmdir("./298") = 0 [pid 5827] mkdir("./299", 0777) = 0 [pid 5826] unlink("./308/binderfs" [pid 5825] umount2("./303/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] umount2("./311/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5826] <... unlink resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... umount2 resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] getdents64(3, [pid 5825] newfstatat(AT_FDCWD, "./303/file0", [pid 5823] newfstatat(AT_FDCWD, "./311/file0", [pid 5827] <... openat resumed>) = 3 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5825] umount2("./303/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./305/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] umount2("./311/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] close(3 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... close resumed>) = 0 [pid 5825] openat(AT_FDCWD, "./303/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] newfstatat(AT_FDCWD, "./305/file0", [pid 5823] openat(AT_FDCWD, "./311/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] ioctl(3, LOOP_CLR_FD) = 0 [pid 5827] close(3 [pid 5825] <... openat resumed>) = 4 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] rmdir("./308" [pid 5823] <... openat resumed>) = 4 [pid 5827] <... close resumed>) = 0 [pid 5825] newfstatat(4, "", [pid 5824] umount2("./305/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] newfstatat(4, "", [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5826] <... rmdir resumed>) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] openat(AT_FDCWD, "./305/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] getdents64(4, ./strace-static-x86_64: Process 7381 attached [pid 5825] getdents64(4, [pid 5824] <... openat resumed>) = 4 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] close(4) = 0 [pid 5823] rmdir("./311/file0") = 0 [pid 5826] mkdir("./309", 0777 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] newfstatat(4, "", [pid 7381] set_robust_list(0x55557eba4660, 24 [pid 5826] <... mkdir resumed>) = 0 [pid 5825] getdents64(4, [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7381] <... set_robust_list resumed>) = 0 [pid 7381] chdir("./299" [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] getdents64(4, [pid 5823] umount2("./311/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7381] <... chdir resumed>) = 0 [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7381 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5825] close(4 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7381] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5826] <... openat resumed>) = 3 [pid 5825] <... close resumed>) = 0 [pid 5824] getdents64(4, [pid 7381] <... prctl resumed>) = 0 [pid 5825] rmdir("./303/file0" [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] newfstatat(AT_FDCWD, "./311/binderfs", [pid 7381] setpgid(0, 0 [pid 5826] ioctl(3, LOOP_CLR_FD [pid 5825] <... rmdir resumed>) = 0 [pid 5824] close(4 [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7381] <... setpgid resumed>) = 0 [pid 5826] <... ioctl resumed>) = 0 [pid 7381] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5826] close(3 [pid 5824] <... close resumed>) = 0 [pid 5823] unlink("./311/binderfs" [pid 7381] <... openat resumed>) = 3 [pid 5826] <... close resumed>) = 0 [pid 5825] umount2("./303/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] rmdir("./305/file0" [pid 5823] <... unlink resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... rmdir resumed>) = 0 [pid 5823] getdents64(3, [pid 7381] write(3, "1000", 4 [pid 5825] newfstatat(AT_FDCWD, "./303/binderfs", [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7381] <... write resumed>) = 4 [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] close(3 [pid 7381] close(3 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5825] unlink("./303/binderfs" [pid 5824] umount2("./305/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... close resumed>) = 0 ./strace-static-x86_64: Process 7382 attached [pid 7381] <... close resumed>) = 0 [pid 5825] <... unlink resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] rmdir("./311" [pid 7382] set_robust_list(0x55557eba4660, 24 [pid 7381] symlink("/dev/binderfs", "./binderfs" [pid 7382] <... set_robust_list resumed>) = 0 [pid 7381] <... symlink resumed>) = 0 [pid 5824] newfstatat(AT_FDCWD, "./305/binderfs", executing program [pid 7382] chdir("./309" [pid 7381] write(1, "executing program\n", 18 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7382] <... chdir resumed>) = 0 [pid 7381] <... write resumed>) = 18 [pid 5823] <... rmdir resumed>) = 0 [pid 7381] memfd_create("syzkaller", 0 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7382 [pid 5825] getdents64(3, [pid 5824] unlink("./305/binderfs" [pid 5823] mkdir("./312", 0777 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] <... unlink resumed>) = 0 [pid 5825] close(3 [pid 7382] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5825] <... close resumed>) = 0 [pid 7382] <... prctl resumed>) = 0 [pid 7382] setpgid(0, 0 [pid 7381] <... memfd_create resumed>) = 3 [pid 5825] rmdir("./303" [pid 5824] getdents64(3, [pid 7382] <... setpgid resumed>) = 0 [pid 7381] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5825] <... rmdir resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] <... mkdir resumed>) = 0 [pid 7382] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7381] <... mmap resumed>) = 0x7f957a000000 [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5824] close(3) = 0 [pid 7381] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5823] <... openat resumed>) = 3 [pid 7382] <... openat resumed>) = 3 [pid 7381] <... write resumed>) = 65536 [pid 5825] mkdir("./304", 0777 [pid 5824] rmdir("./305" [pid 5823] ioctl(3, LOOP_CLR_FD [pid 7382] write(3, "1000", 4 [pid 7381] munmap(0x7f957a000000, 138412032 [pid 5825] <... mkdir resumed>) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 5823] <... ioctl resumed>) = 0 [pid 7382] <... write resumed>) = 4 [pid 7381] <... munmap resumed>) = 0 [pid 7382] close(3) = 0 [pid 7382] symlink("/dev/binderfs", "./binderfs" [pid 5823] close(3executing program [pid 7382] <... symlink resumed>) = 0 [pid 7381] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5824] mkdir("./306", 0777 [pid 5823] <... close resumed>) = 0 [pid 7382] write(1, "executing program\n", 18 [pid 7381] <... openat resumed>) = 4 [pid 7382] <... write resumed>) = 18 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7382] memfd_create("syzkaller", 0 [pid 7381] ioctl(4, LOOP_SET_FD, 3 [pid 5825] <... openat resumed>) = 3 [pid 5824] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 7383 attached [pid 7382] <... memfd_create resumed>) = 3 [pid 7382] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7382] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7383 [pid 7382] <... write resumed>) = 65536 [pid 7382] munmap(0x7f957a000000, 138412032) = 0 [pid 7383] set_robust_list(0x55557eba4660, 24 [pid 7382] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 7382] ioctl(4, LOOP_SET_FD, 3 [pid 7383] <... set_robust_list resumed>) = 0 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 7383] chdir("./312" [pid 5825] <... ioctl resumed>) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5824] ioctl(3, LOOP_CLR_FD) = 0 [pid 5824] close(3) = 0 [pid 7383] <... chdir resumed>) = 0 [pid 7382] <... ioctl resumed>) = 0 [pid 7381] <... ioctl resumed>) = 0 [pid 5825] close(3 [pid 7383] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7383] <... prctl resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 7383] setpgid(0, 0) = 0 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7383] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 7385 attached ) = 3 [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7384 [pid 7383] write(3, "1000", 4 [pid 7385] set_robust_list(0x55557eba4660, 24 [pid 7383] <... write resumed>) = 4 [pid 7382] close(3 [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7385 [pid 7385] <... set_robust_list resumed>) = 0 [pid 7383] close(3 [pid 7382] <... close resumed>) = 0 [pid 7381] close(3 [pid 7385] chdir("./304" [pid 7383] <... close resumed>) = 0 [pid 7382] close(4 [pid 7381] <... close resumed>) = 0 [pid 7383] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 7384 attached ) = 0 executing program [pid 7385] <... chdir resumed>) = 0 [pid 7383] write(1, "executing program\n", 18 [pid 7384] set_robust_list(0x55557eba4660, 24 [pid 7382] <... close resumed>) = 0 [pid 7381] close(4 [pid 7385] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7383] <... write resumed>) = 18 [pid 7382] mkdir("./file0", 0777 [pid 7381] <... close resumed>) = 0 [pid 7384] <... set_robust_list resumed>) = 0 [pid 7385] <... prctl resumed>) = 0 [pid 7383] memfd_create("syzkaller", 0 [pid 7385] setpgid(0, 0 [pid 7384] chdir("./306" [pid 7383] <... memfd_create resumed>) = 3 [pid 7382] <... mkdir resumed>) = 0 [pid 7381] mkdir("./file0", 0777 [pid 7385] <... setpgid resumed>) = 0 [pid 7384] <... chdir resumed>) = 0 [pid 7383] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7381] <... mkdir resumed>) = 0 [pid 7385] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7384] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7383] <... mmap resumed>) = 0x7f957a000000 [pid 7382] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7384] <... prctl resumed>) = 0 [pid 7385] <... openat resumed>) = 3 [pid 7384] setpgid(0, 0) = 0 [pid 7384] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7385] write(3, "1000", 4 [pid 7383] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7385] <... write resumed>) = 4 [pid 7385] close(3 [pid 7384] <... openat resumed>) = 3 [pid 7383] <... write resumed>) = 65536 [pid 7381] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7385] <... close resumed>) = 0 [ 235.459930][ T7381] loop4: detected capacity change from 0 to 128 [ 235.469638][ T7382] loop3: detected capacity change from 0 to 128 [pid 7384] write(3, "1000", 4executing program [pid 7385] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7383] munmap(0x7f957a000000, 138412032) = 0 [pid 7385] write(1, "executing program\n", 18) = 18 [pid 7383] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7385] memfd_create("syzkaller", 0 [pid 7383] <... openat resumed>) = 4 [pid 7385] <... memfd_create resumed>) = 3 [pid 7383] ioctl(4, LOOP_SET_FD, 3 [pid 7385] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7384] <... write resumed>) = 4 [pid 7384] close(3) = 0 [pid 7383] <... ioctl resumed>) = 0 [pid 7385] <... mmap resumed>) = 0x7f957a000000 [pid 7384] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7383] close(3) = 0 [pid 7383] close(4) = 0 [pid 7383] mkdir("./file0", 0777 [pid 7385] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 7383] <... mkdir resumed>) = 0 [pid 7385] munmap(0x7f957a000000, 138412032 [pid 7383] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, ""executing program [pid 7385] <... munmap resumed>) = 0 [pid 7384] write(1, "executing program\n", 18 [pid 7382] <... mount resumed>) = 0 [pid 7381] <... mount resumed>) = 0 [pid 7385] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7384] <... write resumed>) = 18 [pid 7385] <... openat resumed>) = 4 [pid 7384] memfd_create("syzkaller", 0 [pid 7385] ioctl(4, LOOP_SET_FD, 3 [pid 7382] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [ 235.524325][ T7382] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 235.534324][ T7383] loop0: detected capacity change from 0 to 128 [ 235.541818][ T7381] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [pid 7381] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7384] <... memfd_create resumed>) = 3 [pid 7382] <... openat resumed>) = 3 [pid 7381] <... openat resumed>) = 3 [pid 7382] chdir("./file0" [pid 7381] chdir("./file0" [pid 7382] <... chdir resumed>) = 0 [pid 7381] <... chdir resumed>) = 0 [pid 7382] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7381] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7382] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7381] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7382] openat(AT_FDCWD, ".", O_RDONLY [pid 7381] openat(AT_FDCWD, ".", O_RDONLY [pid 7382] <... openat resumed>) = 4 [pid 7381] <... openat resumed>) = 4 [pid 7382] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7381] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7384] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7382] <... renameat2 resumed>) = 0 [pid 7381] <... renameat2 resumed>) = 0 [pid 7382] sync( [pid 7381] sync( [pid 7384] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 7384] munmap(0x7f957a000000, 138412032) = 0 [ 235.571100][ T7383] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 235.573373][ T7385] loop2: detected capacity change from 0 to 128 [pid 7384] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7383] <... mount resumed>) = 0 [pid 7385] <... ioctl resumed>) = 0 [pid 7384] <... openat resumed>) = 4 [pid 7384] ioctl(4, LOOP_SET_FD, 3 [pid 7381] <... sync resumed>) = 0 [pid 7383] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7381] exit_group(0 [pid 7385] close(3 [pid 7383] <... openat resumed>) = 3 [pid 7382] <... sync resumed>) = 0 [pid 7381] <... exit_group resumed>) = ? [pid 7385] <... close resumed>) = 0 [pid 7383] chdir("./file0" [pid 7382] exit_group(0 [pid 7381] +++ exited with 0 +++ [pid 7385] close(4 [pid 7383] <... chdir resumed>) = 0 [pid 7382] <... exit_group resumed>) = ? [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7381, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 7385] <... close resumed>) = 0 [pid 7383] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7382] +++ exited with 0 +++ [pid 5827] restart_syscall(<... resuming interrupted clone ...> [pid 7385] mkdir("./file0", 0777 [pid 7383] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7382, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7385] <... mkdir resumed>) = 0 [pid 7383] openat(AT_FDCWD, ".", O_RDONLY [pid 5827] <... restart_syscall resumed>) = 0 [pid 5826] restart_syscall(<... resuming interrupted clone ...> [pid 7383] <... openat resumed>) = 4 [pid 5826] <... restart_syscall resumed>) = 0 [pid 7385] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7383] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5827] umount2("./299", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] umount2("./309", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] openat(AT_FDCWD, "./299", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... openat resumed>) = 3 [pid 5826] openat(AT_FDCWD, "./309", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] newfstatat(3, "", [pid 5826] <... openat resumed>) = 3 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] newfstatat(3, "", [pid 5827] getdents64(3, [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 7383] <... renameat2 resumed>) = 0 [pid 5826] getdents64(3, [pid 5827] umount2("./299/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5826] umount2("./309/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7383] sync( [pid 7384] <... ioctl resumed>) = 0 [pid 5827] <... umount2 resumed>) = 0 [pid 5826] <... umount2 resumed>) = 0 [pid 5826] umount2("./309/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] umount2("./299/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] newfstatat(AT_FDCWD, "./299/file0", [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] newfstatat(AT_FDCWD, "./309/file0", [pid 7384] close(3) = 0 [pid 7384] close(4) = 0 [pid 7384] mkdir("./file0", 0777 [pid 5827] umount2("./299/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7384] <... mkdir resumed>) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] umount2("./309/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] openat(AT_FDCWD, "./299/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./309/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] <... openat resumed>) = 4 [pid 5826] <... openat resumed>) = 4 [pid 7384] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5826] newfstatat(4, "", [ 235.618683][ T7384] loop1: detected capacity change from 0 to 128 [ 235.651647][ T7385] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [pid 5827] newfstatat(4, "", [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(4, [pid 5827] getdents64(4, [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5826] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5826] close(4) = 0 [pid 5826] rmdir("./309/file0") = 0 [pid 5826] umount2("./309/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./309/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./309/binderfs" [pid 7385] <... mount resumed>) = 0 [pid 5826] <... unlink resumed>) = 0 [pid 7385] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7385] chdir("./file0") = 0 [pid 7385] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7385] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7385] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5827] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5827] close(4) = 0 [pid 5827] rmdir("./299/file0") = 0 [pid 5826] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] close(3 [pid 7385] <... renameat2 resumed>) = 0 [pid 5826] <... close resumed>) = 0 [pid 7385] sync( [pid 5827] umount2("./299/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] newfstatat(AT_FDCWD, "./299/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] unlink("./299/binderfs") = 0 [pid 5827] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] rmdir("./309" [pid 5827] close(3) = 0 [pid 5827] rmdir("./299") = 0 [pid 5826] <... rmdir resumed>) = 0 [pid 7384] <... mount resumed>) = 0 [pid 7384] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7384] chdir("./file0") = 0 [ 235.679067][ T7384] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [pid 7384] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5827] mkdir("./300", 0777 [pid 7384] openat(AT_FDCWD, ".", O_RDONLY [pid 5827] <... mkdir resumed>) = 0 [pid 7384] <... openat resumed>) = 4 [pid 7384] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5826] mkdir("./310", 0777 [pid 5827] ioctl(3, LOOP_CLR_FD [pid 5826] <... mkdir resumed>) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 7384] <... renameat2 resumed>) = 0 [pid 5827] <... ioctl resumed>) = 0 [pid 7384] sync( [pid 7383] <... sync resumed>) = 0 [pid 5826] ioctl(3, LOOP_CLR_FD [pid 7385] <... sync resumed>) = 0 [pid 7384] <... sync resumed>) = 0 [pid 7383] exit_group(0 [pid 5826] <... ioctl resumed>) = 0 [pid 7384] exit_group(0 [pid 5827] close(3 [pid 5826] close(3 [pid 7385] exit_group(0 [pid 7384] <... exit_group resumed>) = ? [pid 7383] <... exit_group resumed>) = ? [pid 5827] <... close resumed>) = 0 [pid 7385] <... exit_group resumed>) = ? [pid 7384] +++ exited with 0 +++ [pid 7383] +++ exited with 0 +++ [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5826] <... close resumed>) = 0 [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7384, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5824] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 7386 attached [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7383, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- ./strace-static-x86_64: Process 7387 attached [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 7386] set_robust_list(0x55557eba4660, 24 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7387 [pid 7387] set_robust_list(0x55557eba4660, 24 [pid 7386] <... set_robust_list resumed>) = 0 [pid 7385] +++ exited with 0 +++ [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7386 [pid 5824] <... restart_syscall resumed>) = 0 [pid 7386] chdir("./300" [pid 7387] <... set_robust_list resumed>) = 0 [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7385, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5823] <... restart_syscall resumed>) = 0 [pid 5824] umount2("./306", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7387] chdir("./310" [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./306", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5824] newfstatat(3, "", [pid 7387] <... chdir resumed>) = 0 [pid 5825] umount2("./304", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] umount2("./312", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7387] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7386] <... chdir resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] getdents64(3, [pid 7387] <... prctl resumed>) = 0 [pid 7386] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5825] openat(AT_FDCWD, "./304", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7386] <... prctl resumed>) = 0 [pid 5824] umount2("./306/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7386] setpgid(0, 0 [pid 5825] <... openat resumed>) = 3 [pid 5823] openat(AT_FDCWD, "./312", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] newfstatat(3, "", [pid 7387] setpgid(0, 0 [pid 7386] <... setpgid resumed>) = 0 [pid 7387] <... setpgid resumed>) = 0 [pid 7386] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] <... umount2 resumed>) = 0 [pid 5823] <... openat resumed>) = 3 [pid 7387] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5825] getdents64(3, [pid 5824] umount2("./306/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] newfstatat(3, "", [pid 7386] <... openat resumed>) = 3 [pid 7386] write(3, "1000", 4 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7386] <... write resumed>) = 4 [pid 5824] newfstatat(AT_FDCWD, "./306/file0", [pid 7386] close(3 [pid 5825] umount2("./304/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] getdents64(3, [pid 7387] <... openat resumed>) = 3 [pid 5824] umount2("./306/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7386] <... close resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 7386] symlink("/dev/binderfs", "./binderfs" [pid 5824] openat(AT_FDCWD, "./306/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7387] write(3, "1000", 4 [pid 5823] umount2("./312/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7386] <... symlink resumed>) = 0 executing program [pid 5824] <... openat resumed>) = 4 [pid 7387] <... write resumed>) = 4 [pid 7386] write(1, "executing program\n", 18 [pid 5825] <... umount2 resumed>) = 0 [pid 5824] newfstatat(4, "", [pid 5823] <... umount2 resumed>) = 0 [pid 7387] close(3 [pid 7386] <... write resumed>) = 18 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] umount2("./312/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7387] <... close resumed>) = 0 [pid 7386] memfd_create("syzkaller", 0 [pid 5825] umount2("./304/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] getdents64(4, [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7387] symlink("/dev/binderfs", "./binderfs" [pid 5823] newfstatat(AT_FDCWD, "./312/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7386] <... memfd_create resumed>) = 3 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] umount2("./312/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7386] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5824] getdents64(4, [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7386] <... mmap resumed>) = 0x7f957a000000 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] openat(AT_FDCWD, "./312/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7387] <... symlink resumed>) = 0 [pid 7386] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] close(4 [pid 5823] <... openat resumed>) = 4 [pid 7387] write(1, "executing program\n", 18executing program [pid 5825] newfstatat(AT_FDCWD, "./304/file0", [pid 5824] <... close resumed>) = 0 [pid 5823] newfstatat(4, "", [pid 7387] <... write resumed>) = 18 [pid 7386] <... write resumed>) = 65536 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] rmdir("./306/file0" [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] umount2("./304/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... rmdir resumed>) = 0 [pid 7386] munmap(0x7f957a000000, 138412032 [pid 5823] getdents64(4, [pid 7387] memfd_create("syzkaller", 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7387] <... memfd_create resumed>) = 3 [pid 7386] <... munmap resumed>) = 0 [pid 5825] openat(AT_FDCWD, "./304/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] umount2("./306/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 7387] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] getdents64(4, [pid 5824] newfstatat(AT_FDCWD, "./306/binderfs", [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] close(4 [pid 5824] unlink("./306/binderfs" [pid 5823] <... close resumed>) = 0 [pid 7386] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5824] <... unlink resumed>) = 0 [pid 5823] rmdir("./312/file0" [pid 7387] <... mmap resumed>) = 0x7f957a000000 [pid 7386] <... openat resumed>) = 4 [pid 5825] <... openat resumed>) = 4 [pid 5823] <... rmdir resumed>) = 0 [pid 7386] ioctl(4, LOOP_SET_FD, 3 [pid 5824] getdents64(3, [pid 5823] umount2("./312/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7387] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5825] newfstatat(4, "", [pid 7387] <... write resumed>) = 65536 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./312/binderfs", [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] close(3) = 0 [pid 5823] unlink("./312/binderfs") = 0 [pid 5823] getdents64(3, [pid 5824] rmdir("./306" [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 5823] close(3) = 0 [pid 5823] rmdir("./312" [pid 5825] getdents64(4, [pid 5823] <... rmdir resumed>) = 0 [pid 5824] mkdir("./307", 0777) = 0 [pid 5823] mkdir("./313", 0777 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5823] <... mkdir resumed>) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5825] getdents64(4, [pid 5824] <... openat resumed>) = 3 [pid 5823] <... openat resumed>) = 3 [pid 7387] munmap(0x7f957a000000, 138412032 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5825] close(4 [pid 5823] ioctl(3, LOOP_CLR_FD [pid 7387] <... munmap resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 5824] ioctl(3, LOOP_CLR_FD [pid 5823] <... ioctl resumed>) = 0 [pid 5825] rmdir("./304/file0" [pid 5824] <... ioctl resumed>) = 0 [pid 5823] close(3 [pid 7387] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5825] <... rmdir resumed>) = 0 [pid 5825] umount2("./304/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] close(3 [pid 5823] <... close resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... close resumed>) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7387] <... openat resumed>) = 4 [pid 5825] newfstatat(AT_FDCWD, "./304/binderfs", [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7389 attached ./strace-static-x86_64: Process 7388 attached [pid 7387] ioctl(4, LOOP_SET_FD, 3 [pid 7386] <... ioctl resumed>) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7386] close(3 [pid 7388] set_robust_list(0x55557eba4660, 24 [pid 7386] <... close resumed>) = 0 [ 235.849785][ T7386] loop4: detected capacity change from 0 to 128 [pid 7388] <... set_robust_list resumed>) = 0 [pid 7386] close(4 [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7388 [pid 7388] chdir("./313" [pid 7386] <... close resumed>) = 0 [pid 7386] mkdir("./file0", 0777) = 0 [pid 5825] unlink("./304/binderfs" [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7389 [pid 7388] <... chdir resumed>) = 0 [pid 7388] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7388] setpgid(0, 0) = 0 [pid 7388] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7386] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7388] write(3, "1000", 4 [pid 5825] <... unlink resumed>) = 0 [pid 7389] set_robust_list(0x55557eba4660, 24 [pid 5825] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7389] <... set_robust_list resumed>) = 0 [pid 7388] <... write resumed>) = 4 [pid 7388] close(3) = 0 [pid 7388] symlink("/dev/binderfs", "./binderfs" [pid 7389] chdir("./307" [pid 7388] <... symlink resumed>) = 0 [pid 5825] close(3 [pid 7389] <... chdir resumed>) = 0 [pid 7389] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5825] <... close resumed>) = 0 [pid 7389] <... prctl resumed>) = 0 [pid 5825] rmdir("./304" [pid 7389] setpgid(0, 0executing program [pid 7388] write(1, "executing program\n", 18) = 18 [pid 5825] <... rmdir resumed>) = 0 [pid 7389] <... setpgid resumed>) = 0 [pid 7388] memfd_create("syzkaller", 0 [pid 5825] mkdir("./305", 0777) = 0 [pid 7389] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7389] <... openat resumed>) = 3 [pid 7388] <... memfd_create resumed>) = 3 [pid 5825] <... openat resumed>) = 3 [pid 7389] write(3, "1000", 4) = 4 [pid 7388] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 7389] close(3 [pid 7388] <... mmap resumed>) = 0x7f957a000000 [pid 5825] <... ioctl resumed>) = 0 [pid 7389] <... close resumed>) = 0 [pid 7387] <... ioctl resumed>) = 0 [pid 7389] symlink("/dev/binderfs", "./binderfs" [pid 7388] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7387] close(3 [pid 5825] close(3 [pid 7387] <... close resumed>) = 0 executing program [pid 7389] <... symlink resumed>) = 0 [pid 7387] close(4 [pid 5825] <... close resumed>) = 0 [pid 7389] write(1, "executing program\n", 18 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7389] <... write resumed>) = 18 [pid 7387] <... close resumed>) = 0 [pid 7389] memfd_create("syzkaller", 0 [pid 7388] <... write resumed>) = 65536 [pid 7387] mkdir("./file0", 0777 [pid 7388] munmap(0x7f957a000000, 138412032./strace-static-x86_64: Process 7390 attached [pid 7389] <... memfd_create resumed>) = 3 [pid 7388] <... munmap resumed>) = 0 [pid 7387] <... mkdir resumed>) = 0 [pid 7388] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7388] ioctl(4, LOOP_SET_FD, 3 [pid 7390] set_robust_list(0x55557eba4660, 24 [pid 7389] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7388] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 7387] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7390 [pid 7388] ioctl(4, LOOP_CLR_FD [pid 7390] <... set_robust_list resumed>) = 0 [pid 7389] <... mmap resumed>) = 0x7f957a000000 [pid 7388] <... ioctl resumed>) = 0 [pid 7389] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7390] chdir("./305") = 0 [pid 7390] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7389] <... write resumed>) = 65536 [pid 7388] ioctl(4, LOOP_SET_FD, 3 [pid 7390] <... prctl resumed>) = 0 [pid 7389] munmap(0x7f957a000000, 138412032 [pid 7390] setpgid(0, 0 [pid 7388] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 7390] <... setpgid resumed>) = 0 [pid 7389] <... munmap resumed>) = 0 [pid 7388] close(4) = 0 [pid 7390] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7388] close(3 [pid 7389] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7390] <... openat resumed>) = 3 [pid 7388] <... close resumed>) = 0 [pid 7390] write(3, "1000", 4 [pid 7388] openat(AT_FDCWD, ".", O_RDONLY [pid 7390] <... write resumed>) = 4 [pid 7388] <... openat resumed>) = 3 [pid 7390] close(3 [pid 7388] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7390] <... close resumed>) = 0 [pid 7388] <... renameat2 resumed>) = -1 ENOENT (No such file or directory) [pid 7388] sync( [ 235.891959][ T7387] loop3: detected capacity change from 0 to 128 [ 235.912214][ T7386] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [pid 7390] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7386] <... mount resumed>) = 0 [pid 7386] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7390] write(1, "executing program\n", 18 [pid 7386] <... openat resumed>) = 3 [pid 7386] chdir("./file0") = 0 [pid 7386] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7386] openat(AT_FDCWD, ".", O_RDONLY) = 4 executing program [pid 7390] <... write resumed>) = 18 [pid 7389] <... openat resumed>) = 4 [pid 7386] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7389] ioctl(4, LOOP_SET_FD, 3 [pid 7390] memfd_create("syzkaller", 0) = 3 [pid 7386] <... renameat2 resumed>) = 0 [pid 7390] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7386] sync( [pid 7390] <... mmap resumed>) = 0x7f957a000000 [pid 7390] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 7389] <... ioctl resumed>) = 0 [pid 7389] close(3) = 0 [pid 7390] munmap(0x7f957a000000, 138412032 [pid 7389] close(4 [pid 7390] <... munmap resumed>) = 0 [pid 7389] <... close resumed>) = 0 [pid 7390] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7389] mkdir("./file0", 0777) = 0 [ 235.958874][ T7387] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 235.977251][ T7389] loop1: detected capacity change from 0 to 128 [pid 7389] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7390] <... openat resumed>) = 4 [pid 7390] ioctl(4, LOOP_SET_FD, 3 [pid 7387] <... mount resumed>) = 0 [pid 7387] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7387] chdir("./file0") = 0 [pid 7387] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7389] <... mount resumed>) = 0 [pid 7387] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7387] openat(AT_FDCWD, ".", O_RDONLY [pid 7389] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7389] chdir("./file0") = 0 [pid 7390] <... ioctl resumed>) = 0 [pid 7387] <... openat resumed>) = 4 [pid 7390] close(3 [pid 7389] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7387] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7390] <... close resumed>) = 0 [pid 7390] close(4 [pid 7389] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7390] <... close resumed>) = 0 [ 236.021101][ T7389] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 236.037444][ T7390] loop2: detected capacity change from 0 to 128 [pid 7390] mkdir("./file0", 0777) = 0 [pid 7389] openat(AT_FDCWD, ".", O_RDONLY [pid 7390] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7389] <... openat resumed>) = 4 [pid 7389] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7388] <... sync resumed>) = 0 [pid 7387] <... renameat2 resumed>) = 0 [pid 7386] <... sync resumed>) = 0 [pid 7388] exit_group(0 [pid 7387] sync( [pid 7386] exit_group(0 [pid 7388] <... exit_group resumed>) = ? [pid 7386] <... exit_group resumed>) = ? [pid 7386] +++ exited with 0 +++ [pid 7389] <... renameat2 resumed>) = 0 [pid 7388] +++ exited with 0 +++ [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7386, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5827] restart_syscall(<... resuming interrupted clone ...> [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7388, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 7389] sync( [pid 5827] <... restart_syscall resumed>) = 0 [pid 5823] <... restart_syscall resumed>) = 0 [pid 5827] umount2("./300", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] openat(AT_FDCWD, "./300", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] umount2("./313", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... openat resumed>) = 3 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] newfstatat(3, "", [pid 5823] openat(AT_FDCWD, "./313", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... openat resumed>) = 3 [pid 5827] getdents64(3, [pid 5823] newfstatat(3, "", [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7390] <... mount resumed>) = 0 [pid 5827] umount2("./300/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] getdents64(3, [pid 7390] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 7390] <... openat resumed>) = 3 [pid 5823] umount2("./313/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [ 236.080199][ T7390] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [pid 7390] chdir("./file0" [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7390] <... chdir resumed>) = 0 [pid 7390] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5823] newfstatat(AT_FDCWD, "./313/binderfs", [pid 7390] openat(AT_FDCWD, ".", O_RDONLY [pid 7389] <... sync resumed>) = 0 [pid 7387] <... sync resumed>) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7390] <... openat resumed>) = 4 [pid 7389] exit_group(0 [pid 7387] exit_group(0 [pid 7390] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7389] <... exit_group resumed>) = ? [pid 5827] <... umount2 resumed>) = 0 [pid 5823] unlink("./313/binderfs" [pid 7389] +++ exited with 0 +++ [pid 7387] <... exit_group resumed>) = ? [pid 5827] umount2("./300/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... unlink resumed>) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7389, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5823] getdents64(3, [pid 5827] newfstatat(AT_FDCWD, "./300/file0", [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] close(3 [pid 5827] umount2("./300/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./307", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... close resumed>) = 0 [pid 7387] +++ exited with 0 +++ [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] rmdir("./313" [pid 7390] <... renameat2 resumed>) = 0 [pid 5827] openat(AT_FDCWD, "./300/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7387, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5824] openat(AT_FDCWD, "./307", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] <... rmdir resumed>) = 0 [pid 7390] sync( [pid 5827] <... openat resumed>) = 4 [pid 5826] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5827] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] umount2("./310", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] getdents64(4, [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... openat resumed>) = 3 [pid 5824] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(3, [pid 5823] mkdir("./314", 0777) = 0 [pid 5826] openat(AT_FDCWD, "./310", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] umount2("./307/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5827] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5827] close(4) = 0 [pid 5827] rmdir("./300/file0" [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5827] <... rmdir resumed>) = 0 [pid 5823] <... openat resumed>) = 3 [pid 5823] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5823] close(3 [pid 5826] <... openat resumed>) = 3 [pid 5823] <... close resumed>) = 0 [pid 5826] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(3, [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7390] <... sync resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 ./strace-static-x86_64: Process 7391 attached [pid 7390] exit_group(0 [pid 5826] umount2("./310/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... umount2 resumed>) = 0 [pid 7390] <... exit_group resumed>) = ? [pid 5827] umount2("./300/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./307/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./307/file0", [pid 7391] set_robust_list(0x55557eba4660, 24 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7391 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] umount2("./307/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7391] <... set_robust_list resumed>) = 0 [pid 5827] newfstatat(AT_FDCWD, "./300/binderfs", [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7391] chdir("./314" [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] openat(AT_FDCWD, "./307/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7391] <... chdir resumed>) = 0 [pid 5827] unlink("./300/binderfs" [pid 5824] <... openat resumed>) = 4 [pid 7391] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5827] <... unlink resumed>) = 0 [pid 5824] newfstatat(4, "", [pid 7391] <... prctl resumed>) = 0 [pid 5827] getdents64(3, [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7391] setpgid(0, 0 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] getdents64(4, [pid 7391] <... setpgid resumed>) = 0 [pid 5827] close(3 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 7391] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5827] <... close resumed>) = 0 [pid 5824] getdents64(4, [pid 7391] <... openat resumed>) = 3 [pid 5827] rmdir("./300" [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5827] <... rmdir resumed>) = 0 [pid 5824] close(4) = 0 [pid 5824] rmdir("./307/file0") = 0 [pid 7391] write(3, "1000", 4 [pid 7390] +++ exited with 0 +++ [pid 5826] <... umount2 resumed>) = 0 [pid 5827] mkdir("./301", 0777 [pid 5826] umount2("./310/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7390, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5824] umount2("./307/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7391] <... write resumed>) = 4 [pid 5827] <... mkdir resumed>) = 0 [pid 5826] newfstatat(AT_FDCWD, "./310/file0", [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7391] close(3 [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] umount2("./305", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] newfstatat(AT_FDCWD, "./307/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] umount2("./310/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... openat resumed>) = 3 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./305", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] unlink("./307/binderfs" [pid 5827] ioctl(3, LOOP_CLR_FD [pid 5826] openat(AT_FDCWD, "./310/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] <... openat resumed>) = 3 [pid 5824] <... unlink resumed>) = 0 [pid 7391] <... close resumed>) = 0 [pid 5827] <... ioctl resumed>) = 0 [pid 5826] <... openat resumed>) = 4 [pid 5825] newfstatat(3, "", [pid 5824] getdents64(3, [pid 5826] newfstatat(4, "", [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(3, [pid 5826] getdents64(4, [pid 7391] symlink("/dev/binderfs", "./binderfs" [pid 5827] close(3 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7391] <... symlink resumed>) = 0 [pid 5827] <... close resumed>) = 0 [pid 5826] getdents64(4, [pid 5825] umount2("./305/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] close(3executing program [pid 7391] write(1, "executing program\n", 18 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] <... close resumed>) = 0 ./strace-static-x86_64: Process 7392 attached [pid 7391] <... write resumed>) = 18 [pid 5826] close(4 [pid 5825] <... umount2 resumed>) = 0 [pid 5824] rmdir("./307" [pid 7391] memfd_create("syzkaller", 0 [pid 5826] <... close resumed>) = 0 [pid 5825] umount2("./305/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... rmdir resumed>) = 0 [pid 7392] set_robust_list(0x55557eba4660, 24 [pid 7391] <... memfd_create resumed>) = 3 [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7392 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] mkdir("./308", 0777 [pid 7392] <... set_robust_list resumed>) = 0 [pid 7391] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5826] rmdir("./310/file0" [pid 5825] newfstatat(AT_FDCWD, "./305/file0", [pid 5824] <... mkdir resumed>) = 0 [pid 7392] chdir("./301" [pid 7391] <... mmap resumed>) = 0x7f957a000000 [pid 7391] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5826] <... rmdir resumed>) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7391] <... write resumed>) = 65536 [pid 5824] <... openat resumed>) = 3 [pid 5824] ioctl(3, LOOP_CLR_FD) = 0 [pid 7392] <... chdir resumed>) = 0 [pid 5825] umount2("./305/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7391] munmap(0x7f957a000000, 138412032 [pid 5824] close(3 [pid 7392] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7391] <... munmap resumed>) = 0 [pid 5826] umount2("./310/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... close resumed>) = 0 [pid 7392] <... prctl resumed>) = 0 [pid 7391] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./305/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7391] <... openat resumed>) = 4 [pid 7391] ioctl(4, LOOP_SET_FD, 3 [pid 7392] setpgid(0, 0 [pid 5826] newfstatat(AT_FDCWD, "./310/binderfs", [pid 5825] <... openat resumed>) = 4 [pid 5825] newfstatat(4, "", [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7392] <... setpgid resumed>) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7392] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5825] getdents64(4, [pid 5826] unlink("./310/binderfs" [pid 7392] <... openat resumed>) = 3 [pid 5826] <... unlink resumed>) = 0 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5826] getdents64(3, [pid 7392] write(3, "1000", 4 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5825] getdents64(4, [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7393 [pid 7392] <... write resumed>) = 4 [pid 5826] close(3 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5825] close(4./strace-static-x86_64: Process 7393 attached [pid 7392] close(3 [pid 5826] <... close resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 7392] <... close resumed>) = 0 [pid 5826] rmdir("./310" [pid 5825] rmdir("./305/file0" [pid 7393] set_robust_list(0x55557eba4660, 24 [pid 7391] <... ioctl resumed>) = 0 [pid 5826] <... rmdir resumed>) = 0 [pid 7393] <... set_robust_list resumed>) = 0 [pid 7391] close(3 [pid 7393] chdir("./308" [pid 7392] symlink("/dev/binderfs", "./binderfs" [pid 7391] <... close resumed>) = 0 [pid 5826] mkdir("./311", 0777 [pid 5825] <... rmdir resumed>) = 0 [pid 7393] <... chdir resumed>) = 0 [pid 7391] close(4 [pid 7393] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7391] <... close resumed>) = 0 [pid 5825] umount2("./305/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7393] <... prctl resumed>) = 0 [pid 7392] <... symlink resumed>) = 0 [pid 7391] mkdir("./file0", 0777 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7393] setpgid(0, 0 [pid 7392] write(1, "executing program\n", 18 [pid 7391] <... mkdir resumed>) = 0 [pid 5826] <... mkdir resumed>) = 0 [pid 5825] newfstatat(AT_FDCWD, "./305/binderfs", executing program [pid 7393] <... setpgid resumed>) = 0 [pid 7392] <... write resumed>) = 18 [pid 7391] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7393] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7392] memfd_create("syzkaller", 0 [pid 7393] <... openat resumed>) = 3 [pid 7392] <... memfd_create resumed>) = 3 [pid 5826] <... openat resumed>) = 3 [pid 5825] unlink("./305/binderfs" [pid 7393] write(3, "1000", 4 [pid 5825] <... unlink resumed>) = 0 [pid 7393] <... write resumed>) = 4 [pid 7392] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5826] ioctl(3, LOOP_CLR_FD [pid 5825] getdents64(3, [pid 7393] close(3 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7392] <... mmap resumed>) = 0x7f957a000000 [pid 5826] <... ioctl resumed>) = 0 [pid 5825] close(3 [pid 7393] <... close resumed>) = 0 [pid 7393] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7392] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5826] close(3 [pid 5825] <... close resumed>) = 0 executing program [pid 7393] write(1, "executing program\n", 18) = 18 [pid 7393] memfd_create("syzkaller", 0 [pid 5826] <... close resumed>) = 0 [pid 5825] rmdir("./305" [pid 7393] <... memfd_create resumed>) = 3 [pid 7393] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5825] <... rmdir resumed>) = 0 [pid 7392] <... write resumed>) = 65536 [pid 5825] mkdir("./306", 0777 [pid 7393] <... mmap resumed>) = 0x7f957a000000 [pid 7393] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5825] <... mkdir resumed>) = 0 [pid 7393] <... write resumed>) = 65536 [pid 7392] munmap(0x7f957a000000, 138412032 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7392] <... munmap resumed>) = 0 [pid 7392] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5825] <... openat resumed>) = 3 ./strace-static-x86_64: Process 7394 attached [pid 7393] munmap(0x7f957a000000, 138412032 [pid 7392] <... openat resumed>) = 4 [pid 7391] <... mount resumed>) = 0 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7394 [pid 7394] set_robust_list(0x55557eba4660, 24 [pid 7393] <... munmap resumed>) = 0 [pid 7392] ioctl(4, LOOP_SET_FD, 3 [pid 7391] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5825] <... ioctl resumed>) = 0 [ 236.275478][ T7391] loop0: detected capacity change from 0 to 128 [ 236.300958][ T7391] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [pid 7393] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 7393] ioctl(4, LOOP_SET_FD, 3 [pid 7394] <... set_robust_list resumed>) = 0 [pid 7392] <... ioctl resumed>) = 0 [pid 7391] <... openat resumed>) = 3 [pid 5825] close(3) = 0 [pid 7394] chdir("./311" [pid 7391] chdir("./file0" [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7394] <... chdir resumed>) = 0 [pid 7391] <... chdir resumed>) = 0 [pid 7394] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7391] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7395 [pid 7394] <... prctl resumed>) = 0 [pid 7391] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7394] setpgid(0, 0) = 0 [pid 7391] openat(AT_FDCWD, ".", O_RDONLY [pid 7394] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7391] <... openat resumed>) = 4 [pid 7391] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7394] <... openat resumed>) = 3 ./strace-static-x86_64: Process 7395 attached [pid 7395] set_robust_list(0x55557eba4660, 24) = 0 [pid 7394] write(3, "1000", 4 [pid 7395] chdir("./306") = 0 [pid 7395] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7394] <... write resumed>) = 4 [pid 7394] close(3 [pid 7395] setpgid(0, 0 [pid 7391] <... renameat2 resumed>) = 0 [pid 7394] <... close resumed>) = 0 [pid 7391] sync( [pid 7394] symlink("/dev/binderfs", "./binderfs" [pid 7395] <... setpgid resumed>) = 0 [pid 7395] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXECexecuting program [pid 7394] <... symlink resumed>) = 0 [pid 7395] <... openat resumed>) = 3 [pid 7394] write(1, "executing program\n", 18 [pid 7392] close(3 [pid 7394] <... write resumed>) = 18 [pid 7392] <... close resumed>) = 0 [pid 7395] write(3, "1000", 4 [pid 7394] memfd_create("syzkaller", 0 [pid 7392] close(4 [pid 7395] <... write resumed>) = 4 [pid 7395] close(3 [pid 7392] <... close resumed>) = 0 [pid 7395] <... close resumed>) = 0 [pid 7392] mkdir("./file0", 0777 [pid 7395] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7393] <... ioctl resumed>) = 0 [pid 7392] <... mkdir resumed>) = 0 [pid 7394] <... memfd_create resumed>) = 3 [pid 7392] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, ""executing program [pid 7395] write(1, "executing program\n", 18 [pid 7393] close(3 [pid 7395] <... write resumed>) = 18 [pid 7393] <... close resumed>) = 0 [pid 7395] memfd_create("syzkaller", 0 [pid 7393] close(4 [pid 7394] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7393] <... close resumed>) = 0 [pid 7394] <... mmap resumed>) = 0x7f957a000000 [ 236.354740][ T7392] loop4: detected capacity change from 0 to 128 [ 236.356817][ T7393] loop1: detected capacity change from 0 to 128 [pid 7395] <... memfd_create resumed>) = 3 [pid 7393] mkdir("./file0", 0777 [pid 7395] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7393] <... mkdir resumed>) = 0 [pid 7395] <... mmap resumed>) = 0x7f957a000000 [pid 7393] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7395] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7394] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7395] <... write resumed>) = 65536 [pid 7395] munmap(0x7f957a000000, 138412032) = 0 [pid 7395] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 7395] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 7394] <... write resumed>) = 65536 [pid 7394] munmap(0x7f957a000000, 138412032 [pid 7395] ioctl(4, LOOP_CLR_FD) = 0 [pid 7394] <... munmap resumed>) = 0 [pid 7394] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7395] ioctl(4, LOOP_SET_FD, 3 [pid 7394] <... openat resumed>) = 4 [pid 7395] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 7394] ioctl(4, LOOP_SET_FD, 3 [pid 7395] close(4) = 0 [pid 7395] close(3) = 0 [pid 7395] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 7395] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = -1 ENOENT (No such file or directory) [pid 7395] sync( [pid 7392] <... mount resumed>) = 0 [pid 7394] <... ioctl resumed>) = 0 [pid 7394] close(3 [pid 7393] <... mount resumed>) = 0 [pid 7392] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7391] <... sync resumed>) = 0 [pid 7394] <... close resumed>) = 0 [pid 7393] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7392] <... openat resumed>) = 3 [pid 7391] exit_group(0 [pid 7394] close(4 [pid 7393] <... openat resumed>) = 3 [pid 7392] chdir("./file0" [pid 7391] <... exit_group resumed>) = ? [pid 7394] <... close resumed>) = 0 [pid 7393] chdir("./file0" [pid 7394] mkdir("./file0", 0777 [pid 7393] <... chdir resumed>) = 0 [pid 7392] <... chdir resumed>) = 0 [pid 7391] +++ exited with 0 +++ [pid 7393] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7392] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7391, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [ 236.418471][ T7392] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 236.432655][ T7393] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 236.453551][ T7394] loop3: detected capacity change from 0 to 128 [pid 7393] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7392] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5823] umount2("./314", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7392] openat(AT_FDCWD, ".", O_RDONLY [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7393] openat(AT_FDCWD, ".", O_RDONLY [pid 7392] <... openat resumed>) = 4 [pid 5823] openat(AT_FDCWD, "./314", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7393] <... openat resumed>) = 4 [pid 7392] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7393] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5823] <... openat resumed>) = 3 [pid 7393] <... renameat2 resumed>) = 0 [pid 7392] <... renameat2 resumed>) = 0 [pid 5823] newfstatat(3, "", [pid 7392] sync( [pid 7393] sync( [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 7394] <... mkdir resumed>) = 0 [pid 5823] umount2("./314/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7394] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7395] <... sync resumed>) = 0 [pid 5823] <... umount2 resumed>) = 0 [pid 7395] exit_group(0) = ? [pid 5823] umount2("./314/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7395] +++ exited with 0 +++ [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./314/file0", [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7395, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] umount2("./314/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./314/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5823] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(4, [pid 5825] umount2("./306", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 7394] <... mount resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] getdents64(4, [pid 7394] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5825] openat(AT_FDCWD, "./306", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7393] <... sync resumed>) = 0 [pid 7392] <... sync resumed>) = 0 [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 7394] <... openat resumed>) = 3 [pid 7393] exit_group(0 [pid 7392] exit_group(0 [pid 5825] <... openat resumed>) = 3 [pid 5825] newfstatat(3, "", [pid 7392] <... exit_group resumed>) = ? [pid 7393] <... exit_group resumed>) = ? [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7394] chdir("./file0" [pid 7393] +++ exited with 0 +++ [pid 7392] +++ exited with 0 +++ [pid 5825] getdents64(3, [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7393, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5824] umount2("./308", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./308", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5824] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7392, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5824] umount2("./308/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 5825] umount2("./306/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] umount2("./301", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] openat(AT_FDCWD, "./301", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... openat resumed>) = 3 [pid 7394] <... chdir resumed>) = 0 [pid 5825] newfstatat(AT_FDCWD, "./306/binderfs", [pid 5827] newfstatat(3, "", [pid 5824] <... umount2 resumed>) = 0 [pid 5823] close(4 [pid 7394] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5824] umount2("./308/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... close resumed>) = 0 [pid 7394] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5827] getdents64(3, [pid 5825] unlink("./306/binderfs" [pid 5824] newfstatat(AT_FDCWD, "./308/file0", [pid 5823] rmdir("./314/file0" [pid 7394] openat(AT_FDCWD, ".", O_RDONLY [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5825] <... unlink resumed>) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] umount2("./308/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... rmdir resumed>) = 0 [pid 7394] <... openat resumed>) = 4 [pid 5827] umount2("./301/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] getdents64(3, [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7394] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] openat(AT_FDCWD, "./308/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] close(3 [pid 5824] <... openat resumed>) = 4 [pid 5825] <... close resumed>) = 0 [ 236.523069][ T7394] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [pid 5824] newfstatat(4, "", [pid 5825] rmdir("./306" [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] getdents64(4, [pid 5825] <... rmdir resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5825] mkdir("./307", 0777 [pid 5824] close(4) = 0 [pid 5824] rmdir("./308/file0" [pid 5825] <... mkdir resumed>) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5824] umount2("./308/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./308/binderfs", [pid 5823] umount2("./314/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] ioctl(3, LOOP_CLR_FD [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5824] unlink("./308/binderfs" [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... unlink resumed>) = 0 [pid 7394] <... renameat2 resumed>) = 0 [pid 5827] <... umount2 resumed>) = 0 [pid 5825] close(3 [pid 5823] newfstatat(AT_FDCWD, "./314/binderfs", [pid 5827] umount2("./301/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... close resumed>) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7394] sync( [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] newfstatat(AT_FDCWD, "./301/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] umount2("./301/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] openat(AT_FDCWD, "./301/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] getdents64(3, ./strace-static-x86_64: Process 7396 attached [pid 5827] <... openat resumed>) = 4 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] unlink("./314/binderfs" [pid 5827] newfstatat(4, "", [pid 5824] close(3 [pid 7396] set_robust_list(0x55557eba4660, 24 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7396 [pid 5824] <... close resumed>) = 0 [pid 5823] <... unlink resumed>) = 0 [pid 7396] <... set_robust_list resumed>) = 0 [pid 5823] getdents64(3, [pid 7396] chdir("./307" [pid 5827] getdents64(4, [pid 5824] rmdir("./308" [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7396] <... chdir resumed>) = 0 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] <... rmdir resumed>) = 0 [pid 5823] close(3 [pid 5827] getdents64(4, [pid 5823] <... close resumed>) = 0 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] mkdir("./309", 0777 [pid 5823] rmdir("./314" [pid 7396] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7394] <... sync resumed>) = 0 [pid 5827] close(4 [pid 5824] <... mkdir resumed>) = 0 [pid 5823] <... rmdir resumed>) = 0 [pid 7396] <... prctl resumed>) = 0 [pid 7394] exit_group(0 [pid 5827] <... close resumed>) = 0 [pid 5823] mkdir("./315", 0777 [pid 7396] setpgid(0, 0 [pid 7394] <... exit_group resumed>) = ? [pid 5827] rmdir("./301/file0" [pid 5823] <... mkdir resumed>) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5827] <... rmdir resumed>) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5823] ioctl(3, LOOP_CLR_FD [pid 5827] umount2("./301/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... ioctl resumed>) = 0 [pid 7396] <... setpgid resumed>) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] close(3 [pid 5827] newfstatat(AT_FDCWD, "./301/binderfs", [pid 5823] <... close resumed>) = 0 [pid 7396] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7394] +++ exited with 0 +++ [pid 5827] unlink("./301/binderfs") = 0 ./strace-static-x86_64: Process 7397 attached [pid 7396] <... openat resumed>) = 3 [pid 5827] getdents64(3, [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7394, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7396] write(3, "1000", 4 [pid 5826] restart_syscall(<... resuming interrupted clone ...> [pid 7396] <... write resumed>) = 4 [pid 7397] set_robust_list(0x55557eba4660, 24 [pid 7396] close(3 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7397 [pid 7397] <... set_robust_list resumed>) = 0 [pid 7397] chdir("./315" [pid 7396] <... close resumed>) = 0 [pid 5827] close(3 [pid 7396] symlink("/dev/binderfs", "./binderfs" [pid 5827] <... close resumed>) = 0 [pid 5827] rmdir("./301" [pid 7396] <... symlink resumed>) = 0 [pid 5827] <... rmdir resumed>) = 0 [pid 7397] <... chdir resumed>) = 0 [pid 7397] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 executing program [pid 7396] write(1, "executing program\n", 18 [pid 5827] mkdir("./302", 0777 [pid 5826] <... restart_syscall resumed>) = 0 [pid 7397] setpgid(0, 0 [pid 5824] <... openat resumed>) = 3 [pid 7397] <... setpgid resumed>) = 0 [pid 7396] <... write resumed>) = 18 [pid 5827] <... mkdir resumed>) = 0 [pid 5824] ioctl(3, LOOP_CLR_FD [pid 7397] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7396] memfd_create("syzkaller", 0 [pid 5824] <... ioctl resumed>) = 0 [pid 5824] close(3) = 0 [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7398 attached [pid 7396] <... memfd_create resumed>) = 3 [pid 5827] <... openat resumed>) = 3 [pid 5826] umount2("./311", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7397] <... openat resumed>) = 3 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7397] write(3, "1000", 4 [pid 7396] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5826] openat(AT_FDCWD, "./311", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7398] set_robust_list(0x55557eba4660, 24 [pid 7397] <... write resumed>) = 4 [pid 7396] <... mmap resumed>) = 0x7f957a000000 [pid 5827] ioctl(3, LOOP_CLR_FD [pid 5826] <... openat resumed>) = 3 [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7398 [pid 7398] <... set_robust_list resumed>) = 0 [pid 7397] close(3 [pid 7396] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5827] <... ioctl resumed>) = 0 [pid 5826] newfstatat(3, "", [pid 7398] chdir("./309" [pid 7397] <... close resumed>) = 0 [pid 7396] <... write resumed>) = 65536 [pid 5827] close(3 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7397] symlink("/dev/binderfs", "./binderfs" [pid 7396] munmap(0x7f957a000000, 138412032 [pid 5826] getdents64(3, [pid 5827] <... close resumed>) = 0 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7397] <... symlink resumed>) = 0 [pid 7398] <... chdir resumed>) = 0 [pid 7396] <... munmap resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 7398] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7396] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5826] umount2("./311/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7398] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 7399 attached [pid 7398] setpgid(0, 0 [pid 7396] <... openat resumed>) = 4 [pid 7398] <... setpgid resumed>) = 0 [pid 7398] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7398] write(3, "1000", 4 [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7399 [pid 7398] <... write resumed>) = 4 [pid 7398] close(3) = 0 [pid 7398] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 7399] set_robust_list(0x55557eba4660, 24 [pid 7398] write(1, "executing program\n", 18 [pid 7397] write(1, "executing program\n", 18 [pid 7396] ioctl(4, LOOP_SET_FD, 3 [pid 5826] <... umount2 resumed>) = 0 [pid 7399] <... set_robust_list resumed>) = 0 [pid 7398] <... write resumed>) = 18 [pid 5826] umount2("./311/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7398] memfd_create("syzkaller", 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./311/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 executing program [pid 5826] umount2("./311/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7398] <... memfd_create resumed>) = 3 [pid 7399] chdir("./302" [pid 7397] <... write resumed>) = 18 [pid 7398] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7399] <... chdir resumed>) = 0 [pid 7398] <... mmap resumed>) = 0x7f957a000000 [pid 7397] memfd_create("syzkaller", 0 [pid 5826] openat(AT_FDCWD, "./311/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7398] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5826] <... openat resumed>) = 4 [pid 5826] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(4, [pid 7398] <... write resumed>) = 65536 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 7398] munmap(0x7f957a000000, 138412032 [pid 5826] getdents64(4, [pid 7398] <... munmap resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5826] close(4 [pid 7399] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7398] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7397] <... memfd_create resumed>) = 3 [pid 5826] <... close resumed>) = 0 [pid 7397] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7399] <... prctl resumed>) = 0 [pid 7399] setpgid(0, 0 [pid 7398] <... openat resumed>) = 4 [pid 7397] <... mmap resumed>) = 0x7f957a000000 [pid 7398] ioctl(4, LOOP_SET_FD, 3 [pid 5826] rmdir("./311/file0" [pid 7399] <... setpgid resumed>) = 0 [pid 7398] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 7397] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5826] <... rmdir resumed>) = 0 [pid 7399] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7398] ioctl(4, LOOP_CLR_FD [pid 7397] <... write resumed>) = 65536 [pid 5826] umount2("./311/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7399] <... openat resumed>) = 3 [pid 7398] <... ioctl resumed>) = 0 [pid 7397] munmap(0x7f957a000000, 138412032 [pid 7396] <... ioctl resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./311/binderfs", [pid 7399] write(3, "1000", 4 [pid 7397] <... munmap resumed>) = 0 [pid 7396] close(3 [pid 7399] <... write resumed>) = 4 [pid 7397] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7396] <... close resumed>) = 0 [pid 7399] close(3 [pid 7397] <... openat resumed>) = 4 [pid 7396] close(4 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7399] <... close resumed>) = 0 [pid 7397] ioctl(4, LOOP_SET_FD, 3 [pid 7399] symlink("/dev/binderfs", "./binderfs" [pid 7396] <... close resumed>) = 0 [pid 7398] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [ 236.710043][ T7396] loop2: detected capacity change from 0 to 128 [pid 7398] close(4) = 0 [pid 7398] close(3 [pid 5826] unlink("./311/binderfs" [pid 7398] <... close resumed>) = 0 [pid 5826] <... unlink resumed>) = 0 [pid 7398] openat(AT_FDCWD, ".", O_RDONLY [pid 5826] getdents64(3, [pid 7398] <... openat resumed>) = 3 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] close(3 [pid 7398] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5826] <... close resumed>) = 0 [pid 7398] <... renameat2 resumed>) = -1 ENOENT (No such file or directory) [pid 5826] rmdir("./311" [pid 7397] <... ioctl resumed>) = 0 [pid 7396] mkdir("./file0", 0777 [pid 7399] <... symlink resumed>) = 0 [pid 7398] sync( [pid 7396] <... mkdir resumed>) = 0 [pid 5826] <... rmdir resumed>) = 0 [pid 5826] mkdir("./312", 0777 [pid 7399] write(1, "executing program\n", 18 [pid 7396] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5826] <... mkdir resumed>) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 executing program [pid 5826] ioctl(3, LOOP_CLR_FD) = 0 [pid 5826] close(3 [pid 7399] <... write resumed>) = 18 [pid 5826] <... close resumed>) = 0 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7399] memfd_create("syzkaller", 0./strace-static-x86_64: Process 7400 attached ) = 3 [pid 7399] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7399] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7400] set_robust_list(0x55557eba4660, 24 [pid 7399] <... write resumed>) = 65536 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7400 [pid 7399] munmap(0x7f957a000000, 138412032 [pid 7400] <... set_robust_list resumed>) = 0 [pid 7400] chdir("./312" [pid 7399] <... munmap resumed>) = 0 [pid 7399] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7400] <... chdir resumed>) = 0 [pid 7400] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7400] setpgid(0, 0) = 0 [pid 7400] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7400] write(3, "1000", 4) = 4 [pid 7400] close(3 [pid 7399] <... openat resumed>) = 4 [pid 7397] close(3 [pid 7400] <... close resumed>) = 0 [pid 7399] ioctl(4, LOOP_SET_FD, 3 [pid 7397] <... close resumed>) = 0 [pid 7400] symlink("/dev/binderfs", "./binderfs" [pid 7397] close(4 [pid 7400] <... symlink resumed>) = 0 [ 236.756017][ T7397] loop0: detected capacity change from 0 to 128 [ 236.787801][ T7396] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 executing program [pid 7400] write(1, "executing program\n", 18 [pid 7397] <... close resumed>) = 0 [pid 7400] <... write resumed>) = 18 [pid 7397] mkdir("./file0", 0777 [pid 7400] memfd_create("syzkaller", 0 [pid 7397] <... mkdir resumed>) = 0 [pid 7400] <... memfd_create resumed>) = 3 [pid 7397] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7400] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7400] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 7400] munmap(0x7f957a000000, 138412032) = 0 [pid 7399] <... ioctl resumed>) = 0 [pid 7399] close(3) = 0 [pid 7400] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7399] close(4) = 0 [pid 7399] mkdir("./file0", 0777 [pid 7400] <... openat resumed>) = 4 [pid 7400] ioctl(4, LOOP_SET_FD, 3 [pid 7399] <... mkdir resumed>) = 0 [pid 7399] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7400] <... ioctl resumed>) = 0 [pid 7400] close(3) = 0 [pid 7400] close(4) = 0 [pid 7400] mkdir("./file0", 0777) = 0 [pid 7396] <... mount resumed>) = 0 [pid 7400] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7396] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7396] chdir("./file0") = 0 [pid 7396] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [ 236.823777][ T7399] loop4: detected capacity change from 0 to 128 [ 236.847376][ T7397] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 236.864390][ T7400] loop3: detected capacity change from 0 to 128 [pid 7396] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7396] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7397] <... mount resumed>) = 0 [pid 7396] <... renameat2 resumed>) = 0 [pid 7396] sync( [pid 7397] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7397] chdir("./file0") = 0 [pid 7397] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7397] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7397] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = 0 [ 236.891783][ T7400] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 236.894806][ T7399] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [pid 7397] sync( [pid 7400] <... mount resumed>) = 0 [pid 7399] <... mount resumed>) = 0 [pid 7398] <... sync resumed>) = 0 [pid 7400] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7399] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7398] exit_group(0 [pid 7400] <... openat resumed>) = 3 [pid 7399] <... openat resumed>) = 3 [pid 7398] <... exit_group resumed>) = ? [pid 7399] chdir("./file0") = 0 [pid 7399] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7400] chdir("./file0" [pid 7399] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7400] <... chdir resumed>) = 0 [pid 7399] openat(AT_FDCWD, ".", O_RDONLY [pid 7396] <... sync resumed>) = 0 [pid 7397] <... sync resumed>) = 0 [pid 7400] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7399] <... openat resumed>) = 4 [pid 7398] +++ exited with 0 +++ [pid 7397] exit_group(0 [pid 7396] exit_group(0 [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7398, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 7397] <... exit_group resumed>) = ? [pid 7397] +++ exited with 0 +++ [pid 5824] umount2("./309", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7397, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 7400] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7399] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7396] <... exit_group resumed>) = ? [pid 5824] openat(AT_FDCWD, "./309", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 7396] +++ exited with 0 +++ [pid 5824] <... openat resumed>) = 3 [pid 7400] openat(AT_FDCWD, ".", O_RDONLY [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7396, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 7399] <... renameat2 resumed>) = 0 [pid 5824] newfstatat(3, "", [pid 5823] <... restart_syscall resumed>) = 0 [pid 7400] <... openat resumed>) = 4 [pid 5825] restart_syscall(<... resuming interrupted clone ...> [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7400] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5825] <... restart_syscall resumed>) = 0 [pid 5824] getdents64(3, 0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 5823] umount2("./315", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7400] <... renameat2 resumed>) = 0 [pid 7399] sync( [pid 5824] umount2("./309/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] umount2("./307", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./315", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./309/binderfs", [pid 5823] <... openat resumed>) = 3 [pid 5825] openat(AT_FDCWD, "./307", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] newfstatat(3, "", [pid 7400] sync( [pid 5825] <... openat resumed>) = 3 [pid 5824] unlink("./309/binderfs" [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] newfstatat(3, "", [pid 5823] getdents64(3, [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] <... unlink resumed>) = 0 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5825] getdents64(3, [pid 5824] getdents64(3, [pid 5823] umount2("./315/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5825] umount2("./307/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] close(3) = 0 [pid 5823] <... umount2 resumed>) = 0 [pid 5823] umount2("./315/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] rmdir("./309" [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... rmdir resumed>) = 0 [pid 5825] <... umount2 resumed>) = 0 [pid 5825] umount2("./307/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] newfstatat(AT_FDCWD, "./315/file0", [pid 7399] <... sync resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7399] exit_group(0 [pid 5825] newfstatat(AT_FDCWD, "./307/file0", [pid 7400] <... sync resumed>) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7400] exit_group(0 [pid 5825] umount2("./307/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7400] <... exit_group resumed>) = ? [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] umount2("./315/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] openat(AT_FDCWD, "./307/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] mkdir("./310", 0777 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... mkdir resumed>) = 0 [pid 5823] openat(AT_FDCWD, "./315/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7400] +++ exited with 0 +++ [pid 5825] <... openat resumed>) = 4 [pid 5823] <... openat resumed>) = 4 [pid 5825] newfstatat(4, "", [pid 7399] <... exit_group resumed>) = ? [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] newfstatat(4, "", [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7400, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] restart_syscall(<... resuming interrupted clone ...> [pid 5823] getdents64(4, [pid 7399] +++ exited with 0 +++ [pid 5825] getdents64(4, [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7399, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] <... openat resumed>) = 3 [pid 5823] getdents64(4, [pid 5827] restart_syscall(<... resuming interrupted clone ...> [pid 5825] getdents64(4, [pid 5824] ioctl(3, LOOP_CLR_FD [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5827] <... restart_syscall resumed>) = 0 [pid 5826] <... restart_syscall resumed>) = 0 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5823] close(4 [pid 5825] close(4 [pid 5824] close(3 [pid 5823] <... close resumed>) = 0 [pid 5823] rmdir("./315/file0" [pid 5827] umount2("./302", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] umount2("./312", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... close resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 5823] <... rmdir resumed>) = 0 [pid 5827] openat(AT_FDCWD, "./302", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] openat(AT_FDCWD, "./312", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5825] rmdir("./307/file0" [pid 5827] <... openat resumed>) = 3 [pid 5826] <... openat resumed>) = 3 [pid 5825] <... rmdir resumed>) = 0 [pid 5826] newfstatat(3, "", [pid 5825] umount2("./307/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] newfstatat(3, "", [pid 5826] getdents64(3, [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] umount2("./315/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] newfstatat(AT_FDCWD, "./307/binderfs", [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] umount2("./312/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7401 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 7401 attached [pid 5825] unlink("./307/binderfs" [pid 5823] newfstatat(AT_FDCWD, "./315/binderfs", [pid 5827] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5825] <... unlink resumed>) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] umount2("./302/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] unlink("./315/binderfs" [pid 7401] set_robust_list(0x55557eba4660, 24 [pid 5825] getdents64(3, [pid 7401] <... set_robust_list resumed>) = 0 [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] <... unlink resumed>) = 0 [pid 7401] chdir("./310" [pid 5825] close(3 [pid 5823] getdents64(3, [pid 5825] <... close resumed>) = 0 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7401] <... chdir resumed>) = 0 [pid 5825] rmdir("./307" [pid 7401] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5825] <... rmdir resumed>) = 0 [pid 5823] close(3 [pid 7401] <... prctl resumed>) = 0 [pid 5826] <... umount2 resumed>) = 0 [pid 5825] mkdir("./308", 0777 [pid 5823] <... close resumed>) = 0 [pid 5823] rmdir("./315" [pid 7401] setpgid(0, 0 [pid 5825] <... mkdir resumed>) = 0 [pid 5823] <... rmdir resumed>) = 0 [pid 7401] <... setpgid resumed>) = 0 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5823] mkdir("./316", 0777 [pid 7401] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5827] <... umount2 resumed>) = 0 [pid 5825] <... openat resumed>) = 3 [pid 5823] <... mkdir resumed>) = 0 [pid 7401] <... openat resumed>) = 3 [pid 5827] umount2("./302/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] ioctl(3, LOOP_CLR_FD [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7401] write(3, "1000", 4 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... ioctl resumed>) = 0 [pid 5823] <... openat resumed>) = 3 [pid 7401] <... write resumed>) = 4 [pid 5827] newfstatat(AT_FDCWD, "./302/file0", [pid 5825] close(3 [pid 7401] close(3 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... close resumed>) = 0 [pid 5823] ioctl(3, LOOP_CLR_FD [pid 7401] <... close resumed>) = 0 [pid 5827] umount2("./302/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] umount2("./312/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7401] symlink("/dev/binderfs", "./binderfs" [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... ioctl resumed>) = 0 [pid 7401] <... symlink resumed>) = 0 [pid 5827] openat(AT_FDCWD, "./302/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) executing program [pid 5823] close(3 [pid 7401] write(1, "executing program\n", 18 [pid 5827] <... openat resumed>) = 4 [pid 5826] newfstatat(AT_FDCWD, "./312/file0", [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7402 attached [pid 7401] <... write resumed>) = 18 [pid 5827] newfstatat(4, "", [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... close resumed>) = 0 [pid 7401] memfd_create("syzkaller", 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7402] set_robust_list(0x55557eba4660, 24 [pid 5827] getdents64(4, [pid 5826] umount2("./312/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7402] <... set_robust_list resumed>) = 0 [pid 5826] openat(AT_FDCWD, "./312/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7402] chdir("./308" [pid 7401] <... memfd_create resumed>) = 3 [pid 5827] getdents64(4, [pid 5826] <... openat resumed>) = 4 [pid 7402] <... chdir resumed>) = 0 [pid 7401] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5827] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 7401] <... mmap resumed>) = 0x7f957a000000 [pid 5826] newfstatat(4, "", [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7402 [pid 7402] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 7403 attached [pid 7401] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5827] close(4 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] <... close resumed>) = 0 [pid 7403] set_robust_list(0x55557eba4660, 24 [pid 5826] getdents64(4, [pid 7403] <... set_robust_list resumed>) = 0 [pid 5827] rmdir("./302/file0" [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 7403] chdir("./316" [pid 7401] <... write resumed>) = 65536 [pid 5827] <... rmdir resumed>) = 0 [pid 5826] getdents64(4, [pid 7402] <... prctl resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 7403] <... chdir resumed>) = 0 [pid 5826] close(4) = 0 [pid 7403] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7401] munmap(0x7f957a000000, 138412032 [pid 5826] rmdir("./312/file0" [pid 7402] setpgid(0, 0 [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7403 [pid 5827] umount2("./302/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] newfstatat(AT_FDCWD, "./302/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] unlink("./302/binderfs") = 0 [pid 5827] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5827] close(3) = 0 [pid 5827] rmdir("./302") = 0 [pid 5827] mkdir("./303", 0777) = 0 [pid 7401] <... munmap resumed>) = 0 [pid 7403] setpgid(0, 0) = 0 [pid 5826] <... rmdir resumed>) = 0 [pid 7403] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7401] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7401] ioctl(4, LOOP_SET_FD, 3 [pid 5827] <... openat resumed>) = 3 [pid 5826] umount2("./312/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7403] write(3, "1000", 4 [pid 7402] <... setpgid resumed>) = 0 [pid 5827] ioctl(3, LOOP_CLR_FD [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./312/binderfs", [pid 5827] <... ioctl resumed>) = 0 [pid 7402] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./312/binderfs") = 0 executing program executing program [pid 7403] <... write resumed>) = 4 [pid 7402] <... openat resumed>) = 3 [pid 7403] close(3) = 0 [pid 7403] symlink("/dev/binderfs", "./binderfs" [pid 7402] write(3, "1000", 4 [pid 7403] <... symlink resumed>) = 0 [pid 5827] close(3 [pid 7402] <... write resumed>) = 4 [pid 5826] getdents64(3, [pid 5827] <... close resumed>) = 0 [pid 7403] write(1, "executing program\n", 18 [pid 7402] close(3 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 7402] <... close resumed>) = 0 [pid 7403] <... write resumed>) = 18 [pid 7402] symlink("/dev/binderfs", "./binderfs" [pid 7403] memfd_create("syzkaller", 0 [pid 7402] <... symlink resumed>) = 0 [pid 7402] write(1, "executing program\n", 18 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7402] <... write resumed>) = 18 [pid 7402] memfd_create("syzkaller", 0) = 3 [pid 7402] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5826] close(3 [pid 7402] <... mmap resumed>) = 0x7f957a000000 [pid 5826] <... close resumed>) = 0 ./strace-static-x86_64: Process 7404 attached [pid 7403] <... memfd_create resumed>) = 3 [pid 7402] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7401] <... ioctl resumed>) = 0 [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7404 [pid 5826] rmdir("./312" [pid 7403] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7402] <... write resumed>) = 65536 [pid 5826] <... rmdir resumed>) = 0 [pid 7404] set_robust_list(0x55557eba4660, 24 [pid 7403] <... mmap resumed>) = 0x7f957a000000 [pid 7401] close(3 [pid 7404] <... set_robust_list resumed>) = 0 [pid 7403] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7402] munmap(0x7f957a000000, 138412032 [pid 7401] <... close resumed>) = 0 [pid 5826] mkdir("./313", 0777 [pid 7404] chdir("./303") = 0 [pid 5826] <... mkdir resumed>) = 0 [pid 7401] close(4 [pid 7404] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7402] <... munmap resumed>) = 0 [pid 7401] <... close resumed>) = 0 [pid 7404] <... prctl resumed>) = 0 [pid 7403] <... write resumed>) = 65536 [pid 7401] mkdir("./file0", 0777 [pid 7404] setpgid(0, 0 [pid 7403] munmap(0x7f957a000000, 138412032 [pid 7402] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7401] <... mkdir resumed>) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7404] <... setpgid resumed>) = 0 [pid 7403] <... munmap resumed>) = 0 [pid 7402] <... openat resumed>) = 4 [pid 5826] <... openat resumed>) = 3 [pid 7402] ioctl(4, LOOP_SET_FD, 3 [pid 7404] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7403] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7404] <... openat resumed>) = 3 [pid 7403] <... openat resumed>) = 4 [ 237.133571][ T7401] loop1: detected capacity change from 0 to 128 [pid 7401] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7403] ioctl(4, LOOP_SET_FD, 3 [pid 7404] write(3, "1000", 4executing program ) = 4 [pid 7404] close(3) = 0 [pid 7404] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7404] write(1, "executing program\n", 18) = 18 [pid 7404] memfd_create("syzkaller", 0) = 3 [pid 7404] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7404] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5826] ioctl(3, LOOP_CLR_FD) = 0 [pid 5826] close(3 [pid 7404] <... write resumed>) = 65536 [pid 7402] <... ioctl resumed>) = 0 [pid 5826] <... close resumed>) = 0 [pid 7402] close(3 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7404] munmap(0x7f957a000000, 138412032) = 0 ./strace-static-x86_64: Process 7405 attached [pid 7404] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7403] <... ioctl resumed>) = 0 [pid 7402] <... close resumed>) = 0 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7405 [pid 7404] <... openat resumed>) = 4 [pid 7403] close(3 [pid 7402] close(4 [pid 7405] set_robust_list(0x55557eba4660, 24) = 0 [pid 7404] ioctl(4, LOOP_SET_FD, 3 [pid 7403] <... close resumed>) = 0 [pid 7402] <... close resumed>) = 0 [pid 7405] chdir("./313" [pid 7404] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 7402] mkdir("./file0", 0777 [pid 7405] <... chdir resumed>) = 0 [pid 7404] ioctl(4, LOOP_CLR_FD [pid 7403] close(4 [pid 7401] <... mount resumed>) = 0 [pid 7405] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7404] <... ioctl resumed>) = 0 [pid 7403] <... close resumed>) = 0 [pid 7401] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7405] <... prctl resumed>) = 0 [pid 7403] mkdir("./file0", 0777 [pid 7402] <... mkdir resumed>) = 0 [pid 7401] <... openat resumed>) = 3 [ 237.181636][ T7402] loop2: detected capacity change from 0 to 128 [ 237.183676][ T7403] loop0: detected capacity change from 0 to 128 [ 237.205870][ T7401] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [pid 7405] setpgid(0, 0 [pid 7403] <... mkdir resumed>) = 0 [pid 7402] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7401] chdir("./file0" [pid 7405] <... setpgid resumed>) = 0 [pid 7405] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7404] ioctl(4, LOOP_SET_FD, 3 [pid 7401] <... chdir resumed>) = 0 [pid 7404] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 7401] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7405] <... openat resumed>) = 3 [pid 7404] close(4 [pid 7403] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7401] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7405] write(3, "1000", 4 [pid 7404] <... close resumed>) = 0 [pid 7401] openat(AT_FDCWD, ".", O_RDONLY [pid 7405] <... write resumed>) = 4 [pid 7401] <... openat resumed>) = 4 [pid 7401] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = 0 [pid 7405] close(3 [pid 7401] sync( [pid 7404] close(3) = 0 [pid 7404] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 7404] renameat2(AT_FDCWD, "./file1", 3, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0) = -1 ENOENT (No such file or directory) [pid 7404] sync( [pid 7405] <... close resumed>) = 0 [pid 7405] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7405] write(1, "executing program\n", 18executing program ) = 18 [pid 7405] memfd_create("syzkaller", 0) = 3 [ 237.273477][ T7402] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 237.286155][ T7403] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [pid 7405] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7405] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7403] <... mount resumed>) = 0 [pid 7402] <... mount resumed>) = 0 [pid 7403] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7402] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7403] <... openat resumed>) = 3 [pid 7402] <... openat resumed>) = 3 [pid 7403] chdir("./file0") = 0 [pid 7402] chdir("./file0" [pid 7403] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7402] <... chdir resumed>) = 0 [pid 7403] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7402] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7403] openat(AT_FDCWD, ".", O_RDONLY [pid 7402] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 7402] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7405] <... write resumed>) = 65536 [pid 7405] munmap(0x7f957a000000, 138412032 [pid 7404] <... sync resumed>) = 0 [pid 7403] <... openat resumed>) = 4 [pid 7402] <... renameat2 resumed>) = 0 [pid 7401] <... sync resumed>) = 0 [pid 7403] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7405] <... munmap resumed>) = 0 [pid 7404] exit_group(0 [pid 7401] exit_group(0 [pid 7404] <... exit_group resumed>) = ? [pid 7401] <... exit_group resumed>) = ? [pid 7402] sync( [pid 7405] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7404] +++ exited with 0 +++ [pid 7403] <... renameat2 resumed>) = 0 [pid 7401] +++ exited with 0 +++ [pid 7405] <... openat resumed>) = 4 [pid 7402] <... sync resumed>) = 0 [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7401, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7405] ioctl(4, LOOP_SET_FD, 3 [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 7402] exit_group(0 [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7404, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5824] <... restart_syscall resumed>) = 0 [pid 7402] <... exit_group resumed>) = ? [pid 5827] restart_syscall(<... resuming interrupted clone ...> [pid 7403] sync( [pid 5827] <... restart_syscall resumed>) = 0 [pid 5824] umount2("./310", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7403] <... sync resumed>) = 0 [pid 5827] umount2("./303", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7403] exit_group(0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./310", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7403] <... exit_group resumed>) = ? [pid 5827] openat(AT_FDCWD, "./303", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7405] <... ioctl resumed>) = 0 [pid 5827] <... openat resumed>) = 3 [pid 5824] <... openat resumed>) = 3 [pid 5827] newfstatat(3, "", [pid 7405] close(3 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] newfstatat(3, "", [pid 7405] <... close resumed>) = 0 [pid 5827] getdents64(3, [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7405] close(4 [pid 5824] getdents64(3, [pid 7405] <... close resumed>) = 0 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 3 entries */, 32768) = 80 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5827] umount2("./303/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./310/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7405] mkdir("./file0", 0777 [pid 7403] +++ exited with 0 +++ [pid 5827] newfstatat(AT_FDCWD, "./303/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7403, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5827] unlink("./303/binderfs" [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 7405] <... mkdir resumed>) = 0 [pid 5827] <... unlink resumed>) = 0 [pid 5827] getdents64(3, [pid 7402] +++ exited with 0 +++ [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5827] close(3 [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7402, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5827] <... close resumed>) = 0 [pid 5825] restart_syscall(<... resuming interrupted clone ...> [pid 5827] rmdir("./303") = 0 [pid 5827] mkdir("./304", 0777 [pid 5823] <... restart_syscall resumed>) = 0 [pid 5827] <... mkdir resumed>) = 0 [pid 5825] <... restart_syscall resumed>) = 0 [pid 5825] umount2("./308", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7405] mount("/dev/loop3", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 5825] openat(AT_FDCWD, "./308", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] <... umount2 resumed>) = 0 [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5825] <... openat resumed>) = 3 [pid 5824] umount2("./310/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... openat resumed>) = 3 [pid 5825] newfstatat(3, "", [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 237.364573][ T7405] loop3: detected capacity change from 0 to 128 [pid 5823] umount2("./316", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] newfstatat(AT_FDCWD, "./310/file0", [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] getdents64(3, [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] openat(AT_FDCWD, "./316", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] ioctl(3, LOOP_CLR_FD [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] umount2("./310/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5825] umount2("./308/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... openat resumed>) = 3 [pid 5824] openat(AT_FDCWD, "./310/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5824] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5827] close(3) = 0 [pid 5823] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(4, [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5824] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5823] getdents64(3, [pid 5824] close(4) = 0 [pid 5823] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 5824] rmdir("./310/file0" [pid 5823] umount2("./316/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5823] umount2("./316/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./316/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] umount2("./316/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./316/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5823] newfstatat(4, "", ./strace-static-x86_64: Process 7406 attached [pid 5827] <... clone resumed>, child_tidptr=0x55557eba4650) = 7406 [pid 5825] <... umount2 resumed>) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7406] set_robust_list(0x55557eba4660, 24 [pid 5825] umount2("./308/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] getdents64(4, [pid 7406] <... set_robust_list resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 7406] chdir("./304" [pid 5825] newfstatat(AT_FDCWD, "./308/file0", [pid 5823] getdents64(4, [pid 7406] <... chdir resumed>) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] umount2("./310/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 7406] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5825] umount2("./308/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] close(4 [pid 7406] <... prctl resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./310/binderfs", [pid 5823] <... close resumed>) = 0 [pid 7406] setpgid(0, 0 [pid 5825] openat(AT_FDCWD, "./308/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] rmdir("./316/file0" [pid 7406] <... setpgid resumed>) = 0 [pid 5825] <... openat resumed>) = 4 [pid 5824] unlink("./310/binderfs" [pid 5823] <... rmdir resumed>) = 0 [pid 7406] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5825] newfstatat(4, "", [pid 5823] umount2("./316/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7406] <... openat resumed>) = 3 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] <... unlink resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7406] write(3, "1000", 4 [pid 5825] getdents64(4, [pid 5824] getdents64(3, [pid 5823] newfstatat(AT_FDCWD, "./316/binderfs", [pid 7406] <... write resumed>) = 4 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5824] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7406] close(3 [pid 5825] getdents64(4, [pid 5824] close(3 [pid 5823] unlink("./316/binderfs" [pid 7406] <... close resumed>) = 0 [pid 5825] <... getdents64 resumed>0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5824] <... close resumed>) = 0 [pid 5823] <... unlink resumed>) = 0 [pid 7406] symlink("/dev/binderfs", "./binderfs" [pid 5825] close(4 [pid 5824] rmdir("./310" [pid 5823] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5823] close(3) = 0 [pid 5823] rmdir("./316" [pid 5825] <... close resumed>) = 0 [pid 5823] <... rmdir resumed>) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 5823] mkdir("./317", 0777 [pid 7406] <... symlink resumed>) = 0 [pid 5825] rmdir("./308/file0" [pid 5823] <... mkdir resumed>) = 0 [pid 5825] <... rmdir resumed>) = 0 [ 237.419738][ T7405] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 executing program [pid 5824] mkdir("./311", 0777 [pid 7406] write(1, "executing program\n", 18 [pid 5825] umount2("./308/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7406] <... write resumed>) = 18 [pid 5824] <... mkdir resumed>) = 0 [pid 7406] memfd_create("syzkaller", 0 [pid 7405] <... mount resumed>) = 0 [pid 5825] newfstatat(AT_FDCWD, "./308/binderfs", [pid 7405] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5823] <... openat resumed>) = 3 [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] ioctl(3, LOOP_CLR_FD [pid 7406] <... memfd_create resumed>) = 3 [pid 7405] chdir("./file0" [pid 5825] unlink("./308/binderfs" [pid 5823] <... ioctl resumed>) = 0 [pid 7406] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7405] <... chdir resumed>) = 0 [pid 5825] <... unlink resumed>) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5823] close(3 [pid 7406] <... mmap resumed>) = 0x7f957a000000 [pid 7405] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5824] <... openat resumed>) = 3 [pid 5823] <... close resumed>) = 0 [pid 7405] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7406] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5825] getdents64(3, [pid 5824] ioctl(3, LOOP_CLR_FD [pid 5825] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5824] <... ioctl resumed>) = 0 [pid 5825] close(3 [pid 5824] close(3 [pid 7406] <... write resumed>) = 65536 [pid 5825] <... close resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 5825] rmdir("./308" [pid 7405] openat(AT_FDCWD, ".", O_RDONLY [pid 5825] <... rmdir resumed>) = 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7405] <... openat resumed>) = 4 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7407 attached ./strace-static-x86_64: Process 7408 attached [pid 7406] munmap(0x7f957a000000, 138412032 [pid 7405] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5825] mkdir("./309", 0777 [pid 7406] <... munmap resumed>) = 0 [pid 5825] <... mkdir resumed>) = 0 [pid 7407] set_robust_list(0x55557eba4660, 24) = 0 [pid 7406] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7407] chdir("./311" [pid 7406] <... openat resumed>) = 4 [pid 5825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7408] set_robust_list(0x55557eba4660, 24 [pid 7406] ioctl(4, LOOP_SET_FD, 3 [pid 5825] <... openat resumed>) = 3 [pid 5824] <... clone resumed>, child_tidptr=0x55557eba4650) = 7407 [pid 7408] <... set_robust_list resumed>) = 0 [pid 7407] <... chdir resumed>) = 0 [pid 7405] <... renameat2 resumed>) = 0 [pid 7408] chdir("./317" [pid 7407] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5823] <... clone resumed>, child_tidptr=0x55557eba4650) = 7408 [pid 7407] setpgid(0, 0 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 7407] <... setpgid resumed>) = 0 [pid 5825] <... ioctl resumed>) = 0 [pid 7408] <... chdir resumed>) = 0 [pid 7407] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5825] close(3 [pid 7408] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7407] <... openat resumed>) = 3 [pid 5825] <... close resumed>) = 0 [pid 7405] sync( [pid 7408] <... prctl resumed>) = 0 [pid 7407] write(3, "1000", 4 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7409 attached [pid 7408] setpgid(0, 0 [pid 7407] <... write resumed>) = 4 [pid 7409] set_robust_list(0x55557eba4660, 24 [pid 7408] <... setpgid resumed>) = 0 [pid 7407] close(3 [pid 7406] <... ioctl resumed>) = 0 [pid 5825] <... clone resumed>, child_tidptr=0x55557eba4650) = 7409 [pid 7409] <... set_robust_list resumed>) = 0 [pid 7408] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7407] <... close resumed>) = 0 [pid 7406] close(3 [pid 7407] symlink("/dev/binderfs", "./binderfs" [pid 7409] chdir("./309") = 0 [pid 7408] <... openat resumed>) = 3 [pid 7408] write(3, "1000", 4 [pid 7406] <... close resumed>) = 0 [pid 7408] <... write resumed>) = 4 [pid 7406] close(4 [pid 7408] close(3 [pid 7406] <... close resumed>) = 0 [pid 7408] <... close resumed>) = 0 [pid 7406] mkdir("./file0", 0777 [pid 7408] symlink("/dev/binderfs", "./binderfs" [pid 7409] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7409] setpgid(0, 0) = 0 [pid 7409] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7409] write(3, "1000", 4) = 4 [ 237.513060][ T7406] loop4: detected capacity change from 0 to 128 [pid 7409] close(3executing program executing program ) = 0 [pid 7408] <... symlink resumed>) = 0 [pid 7407] <... symlink resumed>) = 0 [pid 7406] <... mkdir resumed>) = 0 [pid 7408] write(1, "executing program\n", 18 [pid 7407] write(1, "executing program\n", 18 [pid 7406] mount("/dev/loop4", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7405] <... sync resumed>) = 0 [pid 7408] <... write resumed>) = 18 [pid 7407] <... write resumed>) = 18 [pid 7408] memfd_create("syzkaller", 0 [pid 7407] memfd_create("syzkaller", 0 [pid 7405] exit_group(0 [pid 7409] symlink("/dev/binderfs", "./binderfs"executing program [pid 7408] <... memfd_create resumed>) = 3 [pid 7407] <... memfd_create resumed>) = 3 [pid 7405] <... exit_group resumed>) = ? [pid 7409] <... symlink resumed>) = 0 [pid 7409] write(1, "executing program\n", 18 [pid 7408] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7407] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7405] +++ exited with 0 +++ [pid 7408] <... mmap resumed>) = 0x7f957a000000 [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7405, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7409] <... write resumed>) = 18 [pid 7407] <... mmap resumed>) = 0x7f957a000000 [pid 7409] memfd_create("syzkaller", 0 [pid 7407] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 7409] <... memfd_create resumed>) = 3 [pid 7409] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7408] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5826] umount2("./313", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7409] <... mmap resumed>) = 0x7f957a000000 [pid 7407] <... write resumed>) = 65536 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7409] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5826] openat(AT_FDCWD, "./313", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7408] <... write resumed>) = 65536 [pid 7407] munmap(0x7f957a000000, 138412032 [pid 7409] <... write resumed>) = 65536 [pid 7408] munmap(0x7f957a000000, 138412032 [pid 7407] <... munmap resumed>) = 0 [pid 5826] <... openat resumed>) = 3 [pid 7409] munmap(0x7f957a000000, 138412032) = 0 [pid 7408] <... munmap resumed>) = 0 [pid 7407] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5826] newfstatat(3, "", [pid 7407] <... openat resumed>) = 4 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7407] ioctl(4, LOOP_SET_FD, 3 [pid 5826] getdents64(3, [pid 7409] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 7409] ioctl(4, LOOP_SET_FD, 3 [pid 7408] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 7408] <... openat resumed>) = 4 [pid 5826] umount2("./313/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7408] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7407] <... ioctl resumed>) = 0 [pid 7407] close(3) = 0 [pid 7407] close(4) = 0 [pid 7407] mkdir("./file0", 0777 [pid 7409] <... ioctl resumed>) = 0 [pid 7408] close(3 [pid 7406] <... mount resumed>) = 0 [pid 5826] <... umount2 resumed>) = 0 [pid 7409] close(3 [pid 7408] <... close resumed>) = 0 [pid 7407] <... mkdir resumed>) = 0 [pid 7406] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5826] umount2("./313/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7409] <... close resumed>) = 0 [ 237.584980][ T7406] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 237.604267][ T7407] loop1: detected capacity change from 0 to 128 [ 237.605134][ T7409] loop2: detected capacity change from 0 to 128 [ 237.624265][ T7408] loop0: detected capacity change from 0 to 128 [pid 7408] close(4 [pid 7407] mount("/dev/loop1", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7406] <... openat resumed>) = 3 [pid 7409] close(4 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7406] chdir("./file0" [pid 5826] newfstatat(AT_FDCWD, "./313/file0", [pid 7406] <... chdir resumed>) = 0 [pid 7406] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7409] <... close resumed>) = 0 [pid 7408] <... close resumed>) = 0 [pid 7406] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7409] mkdir("./file0", 0777 [pid 7408] mkdir("./file0", 0777 [pid 7406] openat(AT_FDCWD, ".", O_RDONLY [pid 7409] <... mkdir resumed>) = 0 [pid 7408] <... mkdir resumed>) = 0 [pid 7406] <... openat resumed>) = 4 [pid 5826] umount2("./313/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7409] mount("/dev/loop2", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7408] mount("/dev/loop0", "./file0", "udf", MS_NOEXEC|MS_SILENT|MS_POSIXACL, "" [pid 7406] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7406] <... renameat2 resumed>) = 0 [pid 7406] sync( [pid 5826] openat(AT_FDCWD, "./313/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5826] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5826] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5826] close(4) = 0 [pid 5826] rmdir("./313/file0") = 0 [pid 5826] umount2("./313/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7407] <... mount resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./313/binderfs", [pid 7407] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7407] <... openat resumed>) = 3 [pid 5826] unlink("./313/binderfs" [pid 7409] <... mount resumed>) = 0 [pid 7408] <... mount resumed>) = 0 [pid 7407] chdir("./file0" [pid 5826] <... unlink resumed>) = 0 [pid 7409] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5826] getdents64(3, [pid 7409] <... openat resumed>) = 3 [pid 7409] chdir("./file0" [pid 7408] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7407] <... chdir resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5826] close(3 [pid 7408] <... openat resumed>) = 3 [pid 7407] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5826] <... close resumed>) = 0 [pid 7408] chdir("./file0" [pid 5826] rmdir("./313" [pid 7408] <... chdir resumed>) = 0 [pid 7409] <... chdir resumed>) = 0 [pid 5826] <... rmdir resumed>) = 0 [pid 7409] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7408] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7407] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5826] mkdir("./314", 0777 [pid 7409] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7408] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 237.677103][ T7409] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 237.689096][ T7408] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 237.703102][ T7407] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [pid 7407] openat(AT_FDCWD, ".", O_RDONLY [pid 7409] openat(AT_FDCWD, ".", O_RDONLY [pid 7408] openat(AT_FDCWD, ".", O_RDONLY [pid 7407] <... openat resumed>) = 4 [pid 5826] <... mkdir resumed>) = 0 [pid 7407] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 5826] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7408] <... openat resumed>) = 4 [pid 7409] <... openat resumed>) = 4 [pid 7408] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7407] <... renameat2 resumed>) = 0 [pid 7406] <... sync resumed>) = 0 [pid 5826] <... openat resumed>) = 3 [pid 7409] renameat2(AT_FDCWD, "./file1", 4, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0 [pid 7406] exit_group(0) = ? [pid 7406] +++ exited with 0 +++ [pid 5826] ioctl(3, LOOP_CLR_FD [pid 7407] sync( [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7406, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5826] <... ioctl resumed>) = 0 [pid 5827] restart_syscall(<... resuming interrupted clone ...> [pid 5826] close(3 [pid 5827] <... restart_syscall resumed>) = 0 [pid 5826] <... close resumed>) = 0 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5827] umount2("./304", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 7410 attached [pid 5827] openat(AT_FDCWD, "./304", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7410] set_robust_list(0x55557eba4660, 24 [pid 7409] <... renameat2 resumed>) = 0 [pid 5827] <... openat resumed>) = 3 [pid 5826] <... clone resumed>, child_tidptr=0x55557eba4650) = 7410 [pid 7409] sync( [pid 7410] <... set_robust_list resumed>) = 0 [pid 5827] newfstatat(3, "", [pid 7410] chdir("./314" [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7410] <... chdir resumed>) = 0 [pid 7410] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5827] getdents64(3, [pid 7410] <... prctl resumed>) = 0 [pid 5827] <... getdents64 resumed>0x55557eba56f0 /* 4 entries */, 32768) = 112 [pid 7410] setpgid(0, 0 [pid 5827] umount2("./304/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7410] <... setpgid resumed>) = 0 [pid 7410] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7409] <... sync resumed>) = 0 [pid 7407] <... sync resumed>) = 0 [pid 7407] exit_group(0) = ? [pid 7410] <... openat resumed>) = 3 [pid 7410] write(3, "1000", 4 [pid 7407] +++ exited with 0 +++ [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7407, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7410] <... write resumed>) = 4 [pid 7409] exit_group(0 [ 237.775431][ T7408] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 87) has entry at pos 0 with incorrect tag 10a [pid 7410] close(3) = 0 [pid 7409] <... exit_group resumed>) = ? [pid 5824] umount2("./311", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7410] symlink("/dev/binderfs", "./binderfs" [pid 5827] <... umount2 resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] umount2("./304/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7410] <... symlink resumed>) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./311", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 7409] +++ exited with 0 +++ [pid 5824] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(3, 0x55557eba56f0 /* 4 entries */, 32768) = 112 [ 237.827005][ T7408] ------------[ cut here ]------------ [ 237.832593][ T7408] WARNING: CPU: 1 PID: 7408 at fs/udf/namei.c:214 udf_fiiter_add_entry+0x183e/0x1e10 [ 237.842357][ T7408] Modules linked in: [ 237.846888][ T7408] CPU: 1 UID: 0 PID: 7408 Comm: syz-executor141 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) [ 237.859983][ T7408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 237.870679][ T7408] RIP: 0010:udf_fiiter_add_entry+0x183e/0x1e10 [ 237.877542][ T7408] Code: 44 89 f1 41 d3 ef 41 01 df 44 89 7c 24 20 48 8b 5c 24 10 e9 f0 fb ff ff e8 3f 11 8c fe 89 d8 e9 a8 fe ff ff e8 33 11 8c fe 90 <0f> 0b 90 e9 1e f9 ff ff 44 89 f9 80 e1 07 38 c1 0f 8c 93 e8 ff ff [ 237.898051][ T7408] RSP: 0018:ffffc9000c857320 EFLAGS: 00010293 [ 237.905022][ T7408] RAX: ffffffff833418cd RBX: 00000000ffffff8b RCX: ffff88802c835a00 [ 237.913671][ T7408] RDX: 0000000000000000 RSI: 00000000ffffff8b RDI: 0000000000000000 [ 237.921917][ T7408] RBP: ffffc9000c857730 R08: ffff888022e45b43 R09: 1ffff110045c8b68 [ 237.930034][ T7408] R10: dffffc0000000000 R11: ffffed10045c8b69 R12: dffffc0000000000 [ 237.938158][ T7408] R13: 1ffff9200190ae88 R14: ffff888074dd2020 R15: 0000000000000200 [ 237.946246][ T7408] FS: 000055557eba4380(0000) GS:ffff888125d98000(0000) knlGS:0000000000000000 [ 237.955304][ T7408] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 237.961938][ T7408] CR2: 00007f95825da00a CR3: 000000003333e000 CR4: 00000000003526f0 [ 237.970245][ T7408] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [pid 5824] umount2("./311/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] newfstatat(AT_FDCWD, "./304/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] umount2("./304/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] openat(AT_FDCWD, "./304/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5827] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] getdents64(4, 0x55557ebad730 /* 2 entries */, 32768) = 48 [pid 5827] getdents64(4, 0x55557ebad730 /* 0 entries */, 32768) = 0 [pid 5827] close(4) = 0 [pid 5827] rmdir("./304/file0") = 0 [pid 5827] umount2("./304/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] newfstatat(AT_FDCWD, "./304/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] unlink("./304/binderfs") = 0 [pid 5827] getdents64(3, 0x55557eba56f0 /* 0 entries */, 32768) = 0 [pid 5827] close(3) = 0 [pid 5827] rmdir("./304") = 0 [pid 5827] mkdir("./305", 0777) = 0 [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5827] ioctl(3, LOOP_CLR_FD) = 0 [pid 5827] close(3) = 0 [ 237.978318][ T7408] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 237.986404][ T7408] Call Trace: [ 237.989736][ T7408] [ 237.992812][ T7408] ? __pfx_udf_fiiter_add_entry+0x10/0x10 [ 237.998879][ T7408] ? rcu_is_watching+0x15/0xb0 [ 238.003837][ T7408] ? udf_fiiter_release+0xd7/0x100 [ 238.009011][ T7408] ? kfree+0x4d/0x440 [ 238.013083][ T7408] udf_rename+0x69b/0xcd0 [ 238.017916][ T7408] ? __pfx_udf_rename+0x10/0x10 [ 238.022852][ T7408] ? look_up_lock_class+0x74/0x170 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557eba4650) = 7411 [ 238.028718][ T7408] ? register_lock_class+0x51/0x320 [ 238.034034][ T7408] ? smack_log+0xef/0x3f0 [ 238.038484][ T7408] ? register_lock_class+0x51/0x320 [ 238.043904][ T7408] ? vfs_rename+0x69a/0xec0 [ 238.048541][ T7408] ? down_write_nested+0x169/0x200 [ 238.054075][ T7408] ? __pfx_down_write_nested+0x10/0x10 [ 238.059618][ T7408] ? do_raw_spin_unlock+0x122/0x240 [ 238.064984][ T7408] ? try_break_deleg+0x79/0x130 [ 238.069894][ T7408] ? __pfx_udf_rename+0x10/0x10 [ 238.074852][ T7408] vfs_rename+0xb9c/0xec0 executing program [pid 7410] write(1, "executing program\n", 18) = 18 [pid 7410] memfd_create("syzkaller", 0) = 3 [pid 7410] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f957a000000 [pid 7410] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [ 238.079293][ T7408] ? __pfx_vfs_rename+0x10/0x10 [ 238.084305][ T7408] ? d_alloc+0x144/0x190 [ 238.088610][ T7408] ? bpf_lsm_path_rename+0x9/0x20 [ 238.093766][ T7408] ? security_path_rename+0x17d/0x490 [ 238.099216][ T7408] do_renameat2+0x878/0xc50 [ 238.103909][ T7408] ? __pfx_do_renameat2+0x10/0x10 [ 238.109048][ T7408] ? getname_flags+0x1e5/0x540 [ 238.113979][ T7408] __x64_sys_renameat2+0xce/0xe0 [ 238.119009][ T7408] do_syscall_64+0xfa/0x3b0 [pid 7410] munmap(0x7f957a000000, 138412032) = 0 [pid 7410] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 7410] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7410] close(3) = 0 [pid 7410] close(4) = 0 [pid 7410] mkdir("./file0", 0777) = 0 [ 238.120496][ T7410] loop3: detected capacity change from 0 to 128 [ 238.124472][ T7408] ? lockdep_hardirqs_on+0x9c/0x150 [ 238.135173][ T7408] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.141290][ T7408] ? clear_bhb_loop+0x60/0xb0 [ 238.144732][ T7410] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 238.146098][ T7408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.161491][ T7408] RIP: 0033:0x7f95825912d9 [ 238.166035][ T7408] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 21 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 238.185881][ T7408] RSP: 002b:00007ffdb0ba3048 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 238.194749][ T7408] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f95825912d9 [ 238.202865][ T7408] RDX: 0000000000000004 RSI: 0000200000000080 RDI: 00000000ffffff9c [ 238.211010][ T7408] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 238.219102][ T7408] R10: 0000200000000980 R11: 0000000000000246 R12: 0000000000010000 [ 238.227225][ T7408] R13: 00007ffdb0ba30e0 R14: 0000200000000500 R15: 0000000000000003 [ 238.235386][ T7408] [ 238.238471][ T7408] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 238.245804][ T7408] CPU: 1 UID: 0 PID: 7408 Comm: syz-executor141 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) [ 238.257908][ T7408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 238.268162][ T7408] Call Trace: [ 238.271464][ T7408] [ 238.274415][ T7408] dump_stack_lvl+0x99/0x250 [ 238.279030][ T7408] ? __asan_memcpy+0x40/0x70 [ 238.283639][ T7408] ? __pfx_dump_stack_lvl+0x10/0x10 [ 238.288854][ T7408] ? __pfx__printk+0x10/0x10 [ 238.293472][ T7408] panic+0x2db/0x790 [ 238.297395][ T7408] ? __pfx_panic+0x10/0x10 [ 238.301826][ T7408] ? show_trace_log_lvl+0x4fb/0x550 [ 238.307064][ T7408] __warn+0x31b/0x4b0 [ 238.311063][ T7408] ? udf_fiiter_add_entry+0x183e/0x1e10 [ 238.316626][ T7408] ? udf_fiiter_add_entry+0x183e/0x1e10 [ 238.322203][ T7408] report_bug+0x2be/0x4f0 [ 238.326544][ T7408] ? udf_fiiter_add_entry+0x183e/0x1e10 [ 238.332108][ T7408] ? udf_fiiter_add_entry+0x183e/0x1e10 [ 238.337665][ T7408] ? udf_fiiter_add_entry+0x1840/0x1e10 [ 238.343222][ T7408] handle_bug+0x84/0x160 [ 238.347478][ T7408] exc_invalid_op+0x1a/0x50 [ 238.351993][ T7408] asm_exc_invalid_op+0x1a/0x20 [ 238.356857][ T7408] RIP: 0010:udf_fiiter_add_entry+0x183e/0x1e10 [ 238.363030][ T7408] Code: 44 89 f1 41 d3 ef 41 01 df 44 89 7c 24 20 48 8b 5c 24 10 e9 f0 fb ff ff e8 3f 11 8c fe 89 d8 e9 a8 fe ff ff e8 33 11 8c fe 90 <0f> 0b 90 e9 1e f9 ff ff 44 89 f9 80 e1 07 38 c1 0f 8c 93 e8 ff ff [ 238.382740][ T7408] RSP: 0018:ffffc9000c857320 EFLAGS: 00010293 [ 238.388820][ T7408] RAX: ffffffff833418cd RBX: 00000000ffffff8b RCX: ffff88802c835a00 [ 238.396802][ T7408] RDX: 0000000000000000 RSI: 00000000ffffff8b RDI: 0000000000000000 [ 238.404783][ T7408] RBP: ffffc9000c857730 R08: ffff888022e45b43 R09: 1ffff110045c8b68 [ 238.412766][ T7408] R10: dffffc0000000000 R11: ffffed10045c8b69 R12: dffffc0000000000 [ 238.420748][ T7408] R13: 1ffff9200190ae88 R14: ffff888074dd2020 R15: 0000000000000200 [ 238.428743][ T7408] ? udf_fiiter_add_entry+0x183d/0x1e10 [ 238.434345][ T7408] ? __pfx_udf_fiiter_add_entry+0x10/0x10 [ 238.440132][ T7408] ? rcu_is_watching+0x15/0xb0 [ 238.444907][ T7408] ? udf_fiiter_release+0xd7/0x100 [ 238.450035][ T7408] ? kfree+0x4d/0x440 [ 238.454043][ T7408] udf_rename+0x69b/0xcd0 [ 238.458395][ T7408] ? __pfx_udf_rename+0x10/0x10 [ 238.463263][ T7408] ? look_up_lock_class+0x74/0x170 [ 238.468387][ T7408] ? register_lock_class+0x51/0x320 [ 238.473602][ T7408] ? smack_log+0xef/0x3f0 [ 238.477967][ T7408] ? register_lock_class+0x51/0x320 [ 238.483197][ T7408] ? vfs_rename+0x69a/0xec0 [ 238.487731][ T7408] ? down_write_nested+0x169/0x200 [ 238.492867][ T7408] ? __pfx_down_write_nested+0x10/0x10 [ 238.498345][ T7408] ? do_raw_spin_unlock+0x122/0x240 [ 238.503565][ T7408] ? try_break_deleg+0x79/0x130 [ 238.508437][ T7408] ? __pfx_udf_rename+0x10/0x10 [ 238.513303][ T7408] vfs_rename+0xb9c/0xec0 [ 238.517667][ T7408] ? __pfx_vfs_rename+0x10/0x10 [ 238.522538][ T7408] ? d_alloc+0x144/0x190 [ 238.526795][ T7408] ? bpf_lsm_path_rename+0x9/0x20 [ 238.531837][ T7408] ? security_path_rename+0x17d/0x490 [ 238.537239][ T7408] do_renameat2+0x878/0xc50 [ 238.541787][ T7408] ? __pfx_do_renameat2+0x10/0x10 [ 238.546849][ T7408] ? getname_flags+0x1e5/0x540 [ 238.551629][ T7408] __x64_sys_renameat2+0xce/0xe0 [ 238.556597][ T7408] do_syscall_64+0xfa/0x3b0 [ 238.561114][ T7408] ? lockdep_hardirqs_on+0x9c/0x150 [ 238.566323][ T7408] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.572401][ T7408] ? clear_bhb_loop+0x60/0xb0 [ 238.577094][ T7408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.583004][ T7408] RIP: 0033:0x7f95825912d9 [ 238.587427][ T7408] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 21 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 238.607042][ T7408] RSP: 002b:00007ffdb0ba3048 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 238.615469][ T7408] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f95825912d9 [ 238.623490][ T7408] RDX: 0000000000000004 RSI: 0000200000000080 RDI: 00000000ffffff9c [ 238.631478][ T7408] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 238.639456][ T7408] R10: 0000200000000980 R11: 0000000000000246 R12: 0000000000010000 [ 238.647434][ T7408] R13: 00007ffdb0ba30e0 R14: 0000200000000500 R15: 0000000000000003 [ 238.655434][ T7408] [ 238.658718][ T7408] Kernel Offset: disabled [ 238.663056][ T7408] Rebooting in 86400 seconds..