./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor405442187 <...> Warning: Permanently added '10.128.1.143' (ED25519) to the list of known hosts. execve("./syz-executor405442187", ["./syz-executor405442187"], 0x7ffc1e678040 /* 10 vars */) = 0 brk(NULL) = 0x555571072000 brk(0x555571072d40) = 0x555571072d40 arch_prctl(ARCH_SET_FS, 0x5555710723c0) = 0 set_tid_address(0x555571072690) = 289 set_robust_list(0x5555710726a0, 24) = 0 rseq(0x555571072ce0, 0x20, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor405442187", 4096) = 27 getrandom("\x2b\xa7\xfc\xd1\x99\x22\x67\x61", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555571072d40 brk(0x555571093d40) = 0x555571093d40 brk(0x555571094000) = 0x555571094000 mprotect(0x7f3c70324000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571072690) = 290 ./strace-static-x86_64: Process 290 attached [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] set_robust_list(0x5555710726a0, 24) = 0 [pid 290] mkdir("./syzkaller.0GfHmL", 0700 [pid 289] <... clone resumed>, child_tidptr=0x555571072690) = 291 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571072690) = 292 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 291 attached [pid 290] chmod("./syzkaller.0GfHmL", 0777 [pid 291] set_robust_list(0x5555710726a0, 24./strace-static-x86_64: Process 292 attached ) = 0 [pid 290] <... chmod resumed>) = 0 [pid 290] chdir("./syzkaller.0GfHmL") = 0 [pid 290] mkdir("./0", 0777) = 0 ./strace-static-x86_64: Process 293 attached [pid 292] set_robust_list(0x5555710726a0, 24 [pid 289] <... clone resumed>, child_tidptr=0x555571072690) = 293 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 290] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 290] close(3) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571072690) = 295 ./strace-static-x86_64: Process 294 attached [pid 294] set_robust_list(0x5555710726a0, 24) = 0 [pid 294] getrandom("\x35\x4e\x96\x31\x83\x54\x55\xa7", 8, GRND_NONBLOCK) = 8 [pid 294] mkdir("./syzkaller.JnR4Ir", 0700) = 0 ./strace-static-x86_64: Process 295 attached [pid 295] set_robust_list(0x5555710726a0, 24) = 0 [pid 295] chdir("./0") = 0 [pid 295] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 295] setpgid(0, 0) = 0 [pid 295] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 294] chmod("./syzkaller.JnR4Ir", 0777 [pid 295] <... openat resumed>) = 3 [pid 294] <... chmod resumed>) = 0 [pid 294] chdir("./syzkaller.JnR4Ir") = 0 [pid 294] mkdir("./0", 0777) = 0 [pid 295] write(3, "1000", 4) = 4 [pid 295] close(3) = 0 [pid 295] symlink("/dev/binderfs", "./binderfs") = 0 [pid 294] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 294] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 294] close(3) = 0 [pid 289] <... clone resumed>, child_tidptr=0x555571072690) = 294 [pid 293] set_robust_list(0x5555710726a0, 24 [pid 292] <... set_robust_list resumed>) = 0 [pid 291] mkdir("./syzkaller.eB7ytv", 0700 [pid 293] <... set_robust_list resumed>) = 0 [pid 292] mkdir("./syzkaller.6aRKrm", 0700 [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 295] write(1, "executing program\n", 18 [pid 291] <... mkdir resumed>) = 0 [pid 293] mkdir("./syzkaller.A5TUjU", 0700executing program [pid 292] <... mkdir resumed>) = 0 [pid 293] <... mkdir resumed>) = 0 [pid 292] chmod("./syzkaller.6aRKrm", 0777 [pid 291] chmod("./syzkaller.eB7ytv", 0777 [pid 295] <... write resumed>) = 18 [pid 295] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 295] rt_sigaction(SIGRT_1, {sa_handler=0x7f3c702c31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3c702b4350}, NULL, 8) = 0 [pid 295] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [ 27.478701][ T28] audit: type=1400 audit(1752723027.589:64): avc: denied { execmem } for pid=289 comm="syz-executor405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 27.503718][ T28] audit: type=1400 audit(1752723027.619:65): avc: denied { read write } for pid=290 comm="syz-executor405" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [pid 295] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3c70239000 [pid 295] mprotect(0x7f3c7023a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 295] rt_sigprocmask(SIG_BLOCK, ~[], [pid 294] <... clone resumed>, child_tidptr=0x555571072690) = 298 [pid 295] <... rt_sigprocmask resumed>[], 8) = 0 [pid 295] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70259990, parent_tid=0x7f3c70259990, exit_signal=0, stack=0x7f3c70239000, stack_size=0x20300, tls=0x7f3c702596c0} => {parent_tid=[299]}, 88) = 299 [pid 295] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 295] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 295] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 299 attached [pid 299] set_robust_list(0x7f3c702599a0, 24) = 0 [pid 299] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 299] memfd_create("syzkaller", 0) = 3 [pid 299] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3c67e39000 [pid 293] chmod("./syzkaller.A5TUjU", 0777 [pid 291] <... chmod resumed>) = 0 [pid 293] <... chmod resumed>) = 0 [pid 292] <... chmod resumed>) = 0 [pid 291] chdir("./syzkaller.eB7ytv" [pid 293] chdir("./syzkaller.A5TUjU"./strace-static-x86_64: Process 298 attached [pid 292] chdir("./syzkaller.6aRKrm" [pid 293] <... chdir resumed>) = 0 [pid 291] <... chdir resumed>) = 0 [pid 298] set_robust_list(0x5555710726a0, 24 [pid 292] <... chdir resumed>) = 0 [pid 298] <... set_robust_list resumed>) = 0 [pid 293] mkdir("./0", 0777 [pid 292] mkdir("./0", 0777 [pid 291] mkdir("./0", 0777 [ 27.528755][ T28] audit: type=1400 audit(1752723027.619:66): avc: denied { open } for pid=290 comm="syz-executor405" path="/dev/loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [pid 298] chdir("./0" [pid 293] <... mkdir resumed>) = 0 [pid 292] <... mkdir resumed>) = 0 [pid 291] <... mkdir resumed>) = 0 [pid 298] <... chdir resumed>) = 0 [pid 292] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 291] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 298] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 293] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 292] <... openat resumed>) = 3 [pid 291] <... openat resumed>) = 3 [pid 298] <... prctl resumed>) = 0 [pid 293] <... openat resumed>) = 3 [pid 292] ioctl(3, LOOP_CLR_FD [pid 291] ioctl(3, LOOP_CLR_FD [pid 298] setpgid(0, 0 [pid 293] ioctl(3, LOOP_CLR_FD [pid 292] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 291] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 298] <... setpgid resumed>) = 0 [pid 293] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 292] close(3 [pid 291] close(3 [pid 298] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] close(3 [pid 292] <... close resumed>) = 0 [pid 291] <... close resumed>) = 0 [pid 298] <... openat resumed>) = 3 [pid 293] <... close resumed>) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 298] write(3, "1000", 4 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 298] <... write resumed>) = 4 [pid 298] close(3 [pid 293] <... clone resumed>, child_tidptr=0x555571072690) = 302 [pid 292] <... clone resumed>, child_tidptr=0x555571072690) = 300 [pid 291] <... clone resumed>, child_tidptr=0x555571072690) = 301 [pid 298] <... close resumed>) = 0 [pid 298] symlink("/dev/binderfs", "./binderfs") = 0 [pid 298] write(1, "executing program\n", 18executing program ) = 18 [pid 298] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 298] rt_sigaction(SIGRT_1, {sa_handler=0x7f3c702c31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3c702b4350}, NULL, 8) = 0 [pid 298] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 298] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3c70239000 [pid 298] mprotect(0x7f3c7023a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 298] rt_sigprocmask(SIG_BLOCK, ~[], ./strace-static-x86_64: Process 302 attached [], 8) = 0 [pid 302] set_robust_list(0x5555710726a0, 24 [pid 298] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70259990, parent_tid=0x7f3c70259990, exit_signal=0, stack=0x7f3c70239000, stack_size=0x20300, tls=0x7f3c702596c0} [pid 302] <... set_robust_list resumed>) = 0 [pid 298] <... clone3 resumed> => {parent_tid=[303]}, 88) = 303 [pid 302] chdir("./0" [pid 298] rt_sigprocmask(SIG_SETMASK, [], [pid 302] <... chdir resumed>) = 0 [pid 298] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 302] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 298] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] <... prctl resumed>) = 0 [pid 298] <... futex resumed>) = 0 [pid 302] setpgid(0, 0 [pid 298] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 302] <... setpgid resumed>) = 0 [pid 302] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 302] write(3, "1000", 4) = 4 [pid 302] close(3) = 0 [pid 302] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 302] write(1, "executing program\n", 18) = 18 [pid 302] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 302] rt_sigaction(SIGRT_1, {sa_handler=0x7f3c702c31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3c702b4350}, NULL, 8) = 0 [pid 302] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 302] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3c70239000 [pid 302] mprotect(0x7f3c7023a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 302] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 302] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70259990, parent_tid=0x7f3c70259990, exit_signal=0, stack=0x7f3c70239000, stack_size=0x20300, tls=0x7f3c702596c0} => {parent_tid=[304]}, 88) = 304 [pid 302] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 302] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 302] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 300 attached ./strace-static-x86_64: Process 301 attached [pid 301] set_robust_list(0x5555710726a0, 24 [pid 300] set_robust_list(0x5555710726a0, 24) = 0 [pid 301] <... set_robust_list resumed>) = 0 [pid 300] chdir("./0" [pid 301] chdir("./0" [pid 300] <... chdir resumed>) = 0 [pid 301] <... chdir resumed>) = 0 [pid 300] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 300] setpgid(0, 0 [pid 301] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 301] setpgid(0, 0 [pid 300] <... setpgid resumed>) = 0 [pid 300] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 301] <... setpgid resumed>) = 0 [pid 301] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 300] <... openat resumed>) = 3 [pid 301] <... openat resumed>) = 3 [pid 300] write(3, "1000", 4./strace-static-x86_64: Process 304 attached [pid 304] set_robust_list(0x7f3c702599a0, 24) = 0 [pid 301] write(3, "1000", 4 [pid 304] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 300] <... write resumed>) = 4 [pid 304] memfd_create("syzkaller", 0 [pid 301] <... write resumed>) = 4 [pid 300] close(3 [pid 301] close(3) = 0 [pid 300] <... close resumed>) = 0 [pid 300] symlink("/dev/binderfs", "./binderfs" [pid 301] symlink("/dev/binderfs", "./binderfs") = 0 [pid 300] <... symlink resumed>) = 0 executing program [pid 300] write(1, "executing program\n", 18) = 18 [pid 300] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 300] rt_sigaction(SIGRT_1, {sa_handler=0x7f3c702c31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3c702b4350}, NULL, 8) = 0 [pid 300] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 300] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3c70239000 [pid 300] mprotect(0x7f3c7023a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 300] rt_sigprocmask(SIG_BLOCK, ~[], ./strace-static-x86_64: Process 303 attached [pid 303] set_robust_list(0x7f3c702599a0, 24) = 0 [pid 303] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 303] memfd_create("syzkaller", 0 [pid 300] <... rt_sigprocmask resumed>[], 8) = 0 [pid 300] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70259990, parent_tid=0x7f3c70259990, exit_signal=0, stack=0x7f3c70239000, stack_size=0x20300, tls=0x7f3c702596c0} [pid 303] <... memfd_create resumed>) = 3 [ 27.556117][ T28] audit: type=1400 audit(1752723027.619:67): avc: denied { ioctl } for pid=290 comm="syz-executor405" path="/dev/loop0" dev="devtmpfs" ino=118 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [pid 303] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 300] <... clone3 resumed> => {parent_tid=[305]}, 88) = 305 [pid 303] <... mmap resumed>) = 0x7f3c67e39000 [pid 300] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 300] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 300] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 301] write(1, "executing program\n", 18executing program ) = 18 [pid 301] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 301] rt_sigaction(SIGRT_1, {sa_handler=0x7f3c702c31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3c702b4350}, NULL, 8) = 0 [pid 301] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 301] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3c70239000 [pid 301] mprotect(0x7f3c7023a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 301] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 301] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70259990, parent_tid=0x7f3c70259990, exit_signal=0, stack=0x7f3c70239000, stack_size=0x20300, tls=0x7f3c702596c0} [pid 304] <... memfd_create resumed>) = 3 [pid 304] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3c67e39000 [pid 301] <... clone3 resumed> => {parent_tid=[306]}, 88) = 306 [pid 301] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 301] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 301] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 305 attached [pid 305] set_robust_list(0x7f3c702599a0, 24) = 0 [pid 305] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 305] memfd_create("syzkaller", 0) = 3 [pid 305] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3c67e39000 ./strace-static-x86_64: Process 306 attached [pid 306] set_robust_list(0x7f3c702599a0, 24) = 0 [pid 306] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 306] memfd_create("syzkaller", 0) = 3 [pid 306] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3c67e39000 [pid 299] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 305] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 303] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 304] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 306] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 299] <... write resumed>) = 20699119 [pid 299] munmap(0x7f3c67e39000, 138412032) = 0 [pid 299] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 299] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 299] close(3) = 0 [pid 299] close(4) = 0 [pid 299] mkdir("./file0", 0777) = 0 [ 27.997582][ T299] loop0: detected capacity change from 0 to 40427 [ 28.021492][ T28] audit: type=1400 audit(1752723028.139:68): avc: denied { mounton } for pid=295 comm="syz-executor405" path="/root/syzkaller.0GfHmL/0/file0" dev="sda1" ino=2039 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 28.025015][ T299] F2FS-fs (loop0): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 299] mount("/dev/loop0", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 305] <... write resumed>) = 20699119 [pid 305] munmap(0x7f3c67e39000, 138412032) = 0 [pid 305] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 305] ioctl(4, LOOP_SET_FD, 3 [pid 303] <... write resumed>) = 20699119 [pid 303] munmap(0x7f3c67e39000, 138412032 [pid 305] <... ioctl resumed>) = 0 [pid 305] close(3) = 0 [pid 303] <... munmap resumed>) = 0 [pid 305] close(4) = 0 [pid 305] mkdir("./file0", 0777) = 0 [pid 304] <... write resumed>) = 20699119 [pid 303] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 304] munmap(0x7f3c67e39000, 138412032 [pid 303] <... openat resumed>) = 4 [pid 305] mount("/dev/loop2", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 304] <... munmap resumed>) = 0 [pid 303] ioctl(4, LOOP_SET_FD, 3 [ 28.107566][ T299] F2FS-fs (loop0): Found nat_bits in checkpoint [ 28.127368][ T305] loop2: detected capacity change from 0 to 40427 [pid 304] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 304] ioctl(4, LOOP_SET_FD, 3 [pid 303] <... ioctl resumed>) = 0 [pid 304] <... ioctl resumed>) = 0 [pid 303] close(3) = 0 [pid 304] close(3 [pid 303] close(4 [pid 304] <... close resumed>) = 0 [pid 303] <... close resumed>) = 0 [pid 304] close(4 [pid 303] mkdir("./file0", 0777) = 0 [pid 304] <... close resumed>) = 0 [pid 303] mount("/dev/loop4", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 304] mkdir("./file0", 0777) = 0 [pid 304] mount("/dev/loop3", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 306] <... write resumed>) = 20699119 [ 28.153585][ T303] loop4: detected capacity change from 0 to 40427 [ 28.155937][ T305] F2FS-fs (loop2): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 28.170634][ T304] loop3: detected capacity change from 0 to 40427 [ 28.186224][ T303] F2FS-fs (loop4): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 28.198902][ T304] F2FS-fs (loop3): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 306] munmap(0x7f3c67e39000, 138412032) = 0 [pid 306] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 306] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 306] close(3) = 0 [pid 306] close(4) = 0 [pid 306] mkdir("./file0", 0777) = 0 [ 28.218631][ T303] F2FS-fs (loop4): Found nat_bits in checkpoint [ 28.228468][ T306] loop1: detected capacity change from 0 to 40427 [ 28.239493][ T304] F2FS-fs (loop3): Found nat_bits in checkpoint [ 28.240923][ T305] F2FS-fs (loop2): Found nat_bits in checkpoint [ 28.257494][ T306] F2FS-fs (loop1): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 306] mount("/dev/loop1", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 299] <... mount resumed>) = 0 [pid 299] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 299] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 299] ioctl(4, LOOP_CLR_FD) = 0 [ 28.276869][ T299] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 28.298600][ T306] F2FS-fs (loop1): Found nat_bits in checkpoint [pid 299] close(4) = 0 [pid 299] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] <... futex resumed>) = 0 [pid 295] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 295] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... futex resumed>) = 1 [pid 299] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 299] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] <... futex resumed>) = 0 [pid 295] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 295] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... futex resumed>) = 1 [pid 299] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0) = 0 [pid 299] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] <... futex resumed>) = 0 [pid 295] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 295] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... futex resumed>) = 1 [pid 299] openat(AT_FDCWD, "./file0", O_RDONLY) = 5 [pid 299] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] <... futex resumed>) = 0 [pid 295] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 295] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... futex resumed>) = 1 [pid 299] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140) = 0 [pid 299] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] <... futex resumed>) = 0 [pid 295] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 295] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... futex resumed>) = 1 [pid 299] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, NULL) = 0 [pid 299] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] <... futex resumed>) = 0 [pid 295] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 295] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... futex resumed>) = 1 [pid 299] sched_setscheduler(0, SCHED_FIFO, [7]) = 0 [pid 299] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 295] <... futex resumed>) = 0 [pid 299] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 295] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... futex resumed>) = 0 [pid 295] <... futex resumed>) = 1 [pid 299] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 303] <... mount resumed>) = 0 [ 28.311042][ T28] audit: type=1400 audit(1752723028.429:69): avc: denied { mount } for pid=295 comm="syz-executor405" name="/" dev="loop0" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 28.360565][ T303] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [pid 295] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 304] <... mount resumed>) = 0 [pid 303] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 303] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 303] ioctl(4, LOOP_CLR_FD) = 0 [pid 303] close(4) = 0 [pid 303] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... futex resumed>) = 0 [pid 298] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 298] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 303] <... futex resumed>) = 1 [pid 303] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 303] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... futex resumed>) = 0 [pid 298] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 298] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 303] <... futex resumed>) = 1 [pid 303] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 304] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 304] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 304] ioctl(4, LOOP_CLR_FD) = 0 [pid 304] close(4) = 0 [pid 304] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] <... futex resumed>) = 0 [pid 302] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 302] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 304] <... futex resumed>) = 1 [pid 304] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 304] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] <... futex resumed>) = 0 [pid 302] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 302] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 304] <... futex resumed>) = 1 [pid 304] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 299] <... mmap resumed>) = 0x200000000000 [pid 299] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 295] <... futex resumed>) = 0 [pid 299] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [ 28.372604][ T304] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [pid 295] exit_group(0 [pid 299] <... futex resumed>) = ? [pid 295] <... exit_group resumed>) = ? [pid 299] +++ exited with 0 +++ [pid 303] <... fsconfig resumed>) = 0 [pid 303] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 298] <... futex resumed>) = 0 [pid 303] openat(AT_FDCWD, "./file0", O_RDONLY [pid 298] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] <... openat resumed>) = 5 [pid 298] <... futex resumed>) = 0 [pid 303] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 303] <... futex resumed>) = 0 [pid 298] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 303] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 298] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 303] <... ioctl resumed>) = 0 [pid 298] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 303] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 298] <... futex resumed>) = 0 [pid 303] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 298] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] <... prlimit64 resumed>NULL) = 0 [pid 298] <... futex resumed>) = 0 [pid 303] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 303] <... futex resumed>) = 0 [pid 298] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 303] sched_setscheduler(0, SCHED_FIFO, [7] [pid 298] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] <... sched_setscheduler resumed>) = 0 [pid 298] <... futex resumed>) = 0 [pid 303] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 298] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 303] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 298] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 298] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] <... futex resumed>) = 0 [pid 298] <... futex resumed>) = 1 [pid 303] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 298] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 302] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 302] futex(0x7f3c7032a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 302] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3c70218000 [pid 302] mprotect(0x7f3c70219000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 302] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 302] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70238990, parent_tid=0x7f3c70238990, exit_signal=0, stack=0x7f3c70218000, stack_size=0x20300, tls=0x7f3c702386c0} => {parent_tid=[325]}, 88) = 325 [pid 302] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 302] futex(0x7f3c7032a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 302] futex(0x7f3c7032a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 295] +++ exited with 0 +++ [pid 305] <... mount resumed>) = 0 [pid 305] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 305] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 305] ioctl(4, LOOP_CLR_FD) = 0 [pid 305] close(4 [pid 303] <... mmap resumed>) = 0x200000000000 [pid 304] <... fsconfig resumed>) = 0 [pid 303] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) ./strace-static-x86_64: Process 325 attached [pid 304] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] <... futex resumed>) = 0 [pid 325] set_robust_list(0x7f3c702389a0, 24 [pid 304] <... futex resumed>) = 0 [pid 303] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 298] exit_group(0 [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=295, si_uid=0, si_status=0, si_utime=7, si_stime=29} --- [pid 325] <... set_robust_list resumed>) = 0 [pid 304] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 303] <... futex resumed>) = ? [pid 298] <... exit_group resumed>) = ? [pid 325] rt_sigprocmask(SIG_SETMASK, [], [pid 303] +++ exited with 0 +++ [pid 325] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 290] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 325] openat(AT_FDCWD, "./file0", O_RDONLY [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 325] <... openat resumed>) = 5 [pid 290] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 325] futex(0x7f3c7032a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 290] <... openat resumed>) = 3 [pid 325] <... futex resumed>) = 1 [pid 302] <... futex resumed>) = 0 [pid 290] newfstatat(3, "", [pid 325] futex(0x7f3c7032a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 302] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] <... futex resumed>) = 0 [pid 302] <... futex resumed>) = 1 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 304] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 302] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 290] getdents64(3, 0x555571073730 /* 4 entries */, 32768) = 112 [pid 304] <... ioctl resumed>) = 0 [pid 290] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 304] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] <... futex resumed>) = 0 [pid 304] <... futex resumed>) = 1 [pid 302] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 302] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... close resumed>) = 0 [pid 305] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... futex resumed>) = 0 [pid 300] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 300] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... futex resumed>) = 1 [pid 305] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 305] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... futex resumed>) = 0 [pid 300] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 300] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... futex resumed>) = 1 [pid 305] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0) = 0 [ 28.473823][ T305] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [pid 305] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 300] <... futex resumed>) = 0 [pid 300] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 300] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] openat(AT_FDCWD, "./file0", O_RDONLY) = 5 [pid 305] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 300] <... futex resumed>) = 0 [pid 300] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 300] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140) = 0 [pid 305] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 300] <... futex resumed>) = 0 [pid 300] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 300] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, NULL) = 0 [pid 305] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 300] <... futex resumed>) = 0 [pid 300] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 300] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 28.513047][ T28] audit: type=1400 audit(1752723028.629:70): avc: denied { unmount } for pid=290 comm="syz-executor405" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 28.542898][ T306] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [pid 305] sched_setscheduler(0, SCHED_FIFO, [7]) = 0 [pid 305] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 300] <... futex resumed>) = 0 [pid 305] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 300] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... futex resumed>) = 0 [pid 300] <... futex resumed>) = 1 [pid 305] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 306] <... mount resumed>) = 0 [pid 304] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 300] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] +++ exited with 0 +++ [pid 306] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 304] <... prlimit64 resumed>NULL) = 0 [pid 306] <... openat resumed>) = 3 [pid 304] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 304] <... futex resumed>) = 1 [pid 306] <... openat resumed>) = 4 [pid 304] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 306] ioctl(4, LOOP_CLR_FD) = 0 [pid 306] close(4) = 0 [pid 306] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 306] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 294] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=298, si_uid=0, si_status=0, si_utime=11, si_stime=22} --- [pid 294] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 294] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] getdents64(3, 0x555571073730 /* 4 entries */, 32768) = 112 [pid 294] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 305] <... mmap resumed>) = 0x200000000000 [pid 305] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] <... futex resumed>) = 0 [pid 305] <... futex resumed>) = 1 [pid 301] <... futex resumed>) = 0 [pid 305] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 302] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... futex resumed>) = 0 [pid 300] exit_group(0) = ? [pid 305] <... futex resumed>) = ? [pid 302] <... futex resumed>) = 1 [pid 301] <... futex resumed>) = 1 [pid 305] +++ exited with 0 +++ [pid 306] <... futex resumed>) = 0 [pid 304] <... futex resumed>) = 0 [pid 302] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] fspick(AT_FDCWD, "./file0", 0 [pid 304] sched_setscheduler(0, SCHED_FIFO, [7] [pid 306] <... fspick resumed>) = 4 [pid 304] <... sched_setscheduler resumed>) = 0 [pid 306] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... futex resumed>) = 1 [pid 304] <... futex resumed>) = 1 [pid 302] <... futex resumed>) = 0 [pid 301] <... futex resumed>) = 0 [pid 306] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 304] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 302] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 304] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 302] <... futex resumed>) = 0 [pid 301] <... futex resumed>) = 0 [pid 306] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 304] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 302] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 304] <... mmap resumed>) = 0x200000000000 [pid 294] <... umount2 resumed>) = 0 [pid 304] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 304] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 302] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 302] exit_group(0 [pid 325] <... futex resumed>) = ? [pid 304] <... futex resumed>) = ? [pid 302] <... exit_group resumed>) = ? [pid 325] +++ exited with 0 +++ [pid 304] +++ exited with 0 +++ [pid 306] <... fsconfig resumed>) = 0 [pid 306] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 301] <... futex resumed>) = 0 [pid 306] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 301] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 301] <... futex resumed>) = 0 [pid 306] openat(AT_FDCWD, "./file0", O_RDONLY [pid 301] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] <... openat resumed>) = 5 [pid 306] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 301] <... futex resumed>) = 0 [pid 306] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 301] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 301] <... futex resumed>) = 0 [pid 306] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 301] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] <... ioctl resumed>) = 0 [pid 306] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 301] <... futex resumed>) = 0 [pid 306] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 301] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... prlimit64 resumed>NULL) = 0 [pid 301] <... futex resumed>) = 0 [pid 306] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 306] <... futex resumed>) = 0 [pid 306] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 301] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 301] <... futex resumed>) = 0 [pid 306] sched_setscheduler(0, SCHED_FIFO, [7] [pid 301] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] <... sched_setscheduler resumed>) = 0 [pid 306] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 301] <... futex resumed>) = 0 [pid 306] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 301] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 301] <... futex resumed>) = 0 [pid 301] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 294] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 294] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] getdents64(4, 0x55557107b770 /* 2 entries */, 32768) = 48 [pid 294] getdents64(4, 0x55557107b770 /* 0 entries */, 32768) = 0 [pid 294] close(4) = 0 [pid 294] rmdir("./0/file0") = 0 [pid 294] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] unlink("./0/binderfs") = 0 [pid 294] getdents64(3, 0x555571073730 /* 0 entries */, 32768) = 0 [pid 294] close(3) = 0 [pid 294] rmdir("./0") = 0 [pid 294] mkdir("./1", 0777) = 0 [pid 294] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 294] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 294] close(3) = 0 [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571072690) = 330 ./strace-static-x86_64: Process 330 attached [pid 330] set_robust_list(0x5555710726a0, 24) = 0 [pid 330] chdir("./1") = 0 [pid 330] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 330] setpgid(0, 0) = 0 [pid 330] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 330] write(3, "1000", 4) = 4 [pid 330] close(3) = 0 [pid 330] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 330] write(1, "executing program\n", 18) = 18 [pid 330] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 330] rt_sigaction(SIGRT_1, {sa_handler=0x7f3c702c31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3c702b4350}, NULL, 8) = 0 [pid 330] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 330] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3c70239000 [pid 330] mprotect(0x7f3c7023a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 330] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 330] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70259990, parent_tid=0x7f3c70259990, exit_signal=0, stack=0x7f3c70239000, stack_size=0x20300, tls=0x7f3c702596c0} => {parent_tid=[331]}, 88) = 331 [pid 330] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 330] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 330] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 306] <... mmap resumed>) = 0x200000000000 [pid 306] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 301] <... futex resumed>) = 0 [pid 306] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 301] exit_group(0 [pid 306] <... futex resumed>) = ? [pid 301] <... exit_group resumed>) = ? [pid 306] +++ exited with 0 +++ ./strace-static-x86_64: Process 331 attached [pid 300] +++ exited with 0 +++ [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=300, si_uid=0, si_status=0, si_utime=5, si_stime=28} --- [pid 292] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x555571073730 /* 4 entries */, 32768) = 112 [pid 292] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 331] set_robust_list(0x7f3c702599a0, 24) = 0 [pid 331] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 331] memfd_create("syzkaller", 0) = 3 [pid 331] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3c67e39000 [pid 302] +++ exited with 0 +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=302, si_uid=0, si_status=0, si_utime=10, si_stime=22} --- [pid 293] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 293] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x555571073730 /* 4 entries */, 32768) = 112 [pid 293] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... umount2 resumed>) = 0 [pid 290] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 290] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(4, 0x55557107b770 /* 2 entries */, 32768) = 48 [pid 290] getdents64(4, 0x55557107b770 /* 0 entries */, 32768) = 0 [pid 290] close(4) = 0 [pid 290] rmdir("./0/file0") = 0 [pid 290] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./0/binderfs") = 0 [pid 290] getdents64(3, 0x555571073730 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./0") = 0 [pid 290] mkdir("./1", 0777) = 0 [pid 290] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 290] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 290] close(3) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571072690) = 332 ./strace-static-x86_64: Process 332 attached [pid 332] set_robust_list(0x5555710726a0, 24) = 0 [pid 332] chdir("./1") = 0 [pid 332] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 332] setpgid(0, 0) = 0 [pid 332] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 332] write(3, "1000", 4) = 4 [pid 332] close(3) = 0 [pid 332] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 332] write(1, "executing program\n", 18) = 18 [pid 332] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 332] rt_sigaction(SIGRT_1, {sa_handler=0x7f3c702c31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3c702b4350}, NULL, 8) = 0 [pid 332] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 332] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3c70239000 [pid 332] mprotect(0x7f3c7023a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 332] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 332] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70259990, parent_tid=0x7f3c70259990, exit_signal=0, stack=0x7f3c70239000, stack_size=0x20300, tls=0x7f3c702596c0} => {parent_tid=[333]}, 88) = 333 [pid 332] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 332] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 332] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 333 attached [pid 333] set_robust_list(0x7f3c702599a0, 24) = 0 [pid 333] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 333] memfd_create("syzkaller", 0) = 3 [pid 333] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3c67e39000 [pid 301] +++ exited with 0 +++ [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=301, si_uid=0, si_status=0, si_utime=7, si_stime=32} --- [pid 291] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 291] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x555571073730 /* 4 entries */, 32768) = 112 [pid 291] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 331] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 292] <... umount2 resumed>) = 0 [pid 292] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 292] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(4, 0x55557107b770 /* 2 entries */, 32768) = 48 [pid 292] getdents64(4, 0x55557107b770 /* 0 entries */, 32768) = 0 [pid 292] close(4) = 0 [pid 292] rmdir("./0/file0") = 0 [pid 292] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./0/binderfs") = 0 [pid 292] getdents64(3, 0x555571073730 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./0") = 0 [pid 292] mkdir("./1", 0777) = 0 [pid 292] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 292] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 292] close(3) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571072690) = 334 ./strace-static-x86_64: Process 334 attached [pid 334] set_robust_list(0x5555710726a0, 24) = 0 [pid 334] chdir("./1") = 0 [pid 334] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 334] setpgid(0, 0) = 0 [pid 334] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 334] write(3, "1000", 4) = 4 [pid 334] close(3) = 0 [pid 334] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 334] write(1, "executing program\n", 18) = 18 [pid 334] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 334] rt_sigaction(SIGRT_1, {sa_handler=0x7f3c702c31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3c702b4350}, NULL, 8) = 0 [pid 334] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 334] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3c70239000 [pid 334] mprotect(0x7f3c7023a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 334] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 334] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70259990, parent_tid=0x7f3c70259990, exit_signal=0, stack=0x7f3c70239000, stack_size=0x20300, tls=0x7f3c702596c0} => {parent_tid=[335]}, 88) = 335 [pid 334] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 334] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 334] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 335 attached [pid 335] set_robust_list(0x7f3c702599a0, 24) = 0 [pid 335] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 335] memfd_create("syzkaller", 0) = 3 [pid 335] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3c67e39000 [pid 293] <... umount2 resumed>) = 0 [pid 293] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 293] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(4, 0x55557107b770 /* 2 entries */, 32768) = 48 [pid 293] getdents64(4, 0x55557107b770 /* 0 entries */, 32768) = 0 [pid 293] close(4) = 0 [pid 293] rmdir("./0/file0") = 0 [pid 293] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./0/binderfs") = 0 [pid 293] getdents64(3, 0x555571073730 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./0") = 0 [pid 293] mkdir("./1", 0777) = 0 [pid 293] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 293] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 293] close(3) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571072690) = 336 ./strace-static-x86_64: Process 336 attached [pid 336] set_robust_list(0x5555710726a0, 24) = 0 [pid 336] chdir("./1") = 0 [pid 336] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 336] setpgid(0, 0) = 0 [pid 336] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 336] write(3, "1000", 4) = 4 [pid 336] close(3) = 0 [pid 336] symlink("/dev/binderfs", "./binderfs") = 0 [pid 336] write(1, "executing program\n", 18executing program ) = 18 [pid 336] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 336] rt_sigaction(SIGRT_1, {sa_handler=0x7f3c702c31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3c702b4350}, NULL, 8) = 0 [pid 336] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 336] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3c70239000 [pid 336] mprotect(0x7f3c7023a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 336] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 336] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70259990, parent_tid=0x7f3c70259990, exit_signal=0, stack=0x7f3c70239000, stack_size=0x20300, tls=0x7f3c702596c0} => {parent_tid=[337]}, 88) = 337 [pid 336] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 336] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 336] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 291] <... umount2 resumed>) = 0 [pid 291] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 291] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(4, 0x55557107b770 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 337 attached [pid 337] set_robust_list(0x7f3c702599a0, 24 [pid 291] getdents64(4, [pid 337] <... set_robust_list resumed>) = 0 [pid 291] <... getdents64 resumed>0x55557107b770 /* 0 entries */, 32768) = 0 [pid 337] rt_sigprocmask(SIG_SETMASK, [], [pid 291] close(4 [pid 337] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 337] memfd_create("syzkaller", 0 [pid 291] <... close resumed>) = 0 [pid 291] rmdir("./0/file0") = 0 [pid 337] <... memfd_create resumed>) = 3 [pid 337] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3c67e39000 [pid 291] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./0/binderfs") = 0 [pid 291] getdents64(3, 0x555571073730 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./0") = 0 [pid 291] mkdir("./1", 0777) = 0 [pid 291] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 291] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 291] close(3 [pid 331] <... write resumed>) = 20699119 [pid 291] <... close resumed>) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 331] munmap(0x7f3c67e39000, 138412032 [pid 291] <... clone resumed>, child_tidptr=0x555571072690) = 338 ./strace-static-x86_64: Process 338 attached [pid 338] set_robust_list(0x5555710726a0, 24) = 0 [pid 338] chdir("./1") = 0 [pid 338] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 338] setpgid(0, 0) = 0 [pid 338] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 338] write(3, "1000", 4) = 4 [pid 338] close(3) = 0 [pid 338] symlink("/dev/binderfs", "./binderfs") = 0 [pid 338] write(1, "executing program\n", 18executing program ) = 18 [pid 338] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 338] rt_sigaction(SIGRT_1, {sa_handler=0x7f3c702c31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3c702b4350}, NULL, 8) = 0 [pid 338] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 338] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3c70239000 [pid 338] mprotect(0x7f3c7023a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 338] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 338] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70259990, parent_tid=0x7f3c70259990, exit_signal=0, stack=0x7f3c70239000, stack_size=0x20300, tls=0x7f3c702596c0} => {parent_tid=[339]}, 88) = 339 [pid 338] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 338] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 338] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 331] <... munmap resumed>) = 0 ./strace-static-x86_64: Process 339 attached [pid 331] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 339] set_robust_list(0x7f3c702599a0, 24) = 0 [pid 331] <... openat resumed>) = 4 [pid 339] rt_sigprocmask(SIG_SETMASK, [], [pid 331] ioctl(4, LOOP_SET_FD, 3 [pid 339] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 339] memfd_create("syzkaller", 0) = 3 [pid 339] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3c67e39000 [pid 331] <... ioctl resumed>) = 0 [pid 331] close(3) = 0 [pid 331] close(4) = 0 [pid 331] mkdir("./file0", 0777) = 0 [pid 331] mount("/dev/loop4", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [ 29.101155][ T331] loop4: detected capacity change from 0 to 40427 [ 29.133318][ T331] F2FS-fs (loop4): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 29.165520][ T331] F2FS-fs (loop4): Found nat_bits in checkpoint [pid 333] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 337] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 331] <... mount resumed>) = 0 [pid 331] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 331] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 331] ioctl(4, LOOP_CLR_FD) = 0 [pid 331] close(4) = 0 [pid 331] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 330] <... futex resumed>) = 0 [pid 331] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 330] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 331] <... futex resumed>) = 0 [pid 330] <... futex resumed>) = 1 [pid 331] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 330] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 331] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 330] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 331] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 330] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 331] <... futex resumed>) = 0 [pid 330] <... futex resumed>) = 1 [pid 331] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 330] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 333] <... write resumed>) = 20699119 [pid 331] <... fsconfig resumed>) = 0 [pid 333] munmap(0x7f3c67e39000, 138412032 [pid 331] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 330] <... futex resumed>) = 0 [pid 331] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 330] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 331] <... futex resumed>) = 0 [pid 330] <... futex resumed>) = 1 [pid 331] openat(AT_FDCWD, "./file0", O_RDONLY) = 5 [pid 330] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 331] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 330] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 331] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 330] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 331] <... futex resumed>) = 0 [pid 330] <... futex resumed>) = 1 [pid 331] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 330] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 331] <... ioctl resumed>) = 0 [pid 331] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 330] <... futex resumed>) = 0 [pid 330] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 331] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 330] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 331] <... prlimit64 resumed>NULL) = 0 [pid 333] <... munmap resumed>) = 0 [pid 331] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 330] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 333] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 331] <... futex resumed>) = 0 [pid 333] <... openat resumed>) = 4 [pid 331] sched_setscheduler(0, SCHED_FIFO, [7] [pid 330] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 331] <... sched_setscheduler resumed>) = 0 [pid 333] ioctl(4, LOOP_SET_FD, 3 [pid 331] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 330] <... futex resumed>) = 0 [pid 331] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 330] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [ 29.281545][ T331] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [pid 330] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 331] <... futex resumed>) = 0 [pid 330] <... futex resumed>) = 1 [pid 331] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 335] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 333] <... ioctl resumed>) = 0 [pid 331] <... mmap resumed>) = 0x200000000000 [pid 330] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 331] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 29.335888][ T333] loop0: detected capacity change from 0 to 40427 [pid 331] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 333] close(3 [pid 330] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 333] <... close resumed>) = 0 [pid 333] close(4 [pid 330] exit_group(0 [pid 333] <... close resumed>) = 0 [pid 333] mkdir("./file0", 0777 [pid 331] <... futex resumed>) = ? [pid 330] <... exit_group resumed>) = ? [pid 331] +++ exited with 0 +++ [pid 333] <... mkdir resumed>) = 0 [pid 339] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [ 29.412143][ T333] F2FS-fs (loop0): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 333] mount("/dev/loop0", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 330] +++ exited with 0 +++ [pid 294] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=330, si_uid=0, si_status=0, si_utime=9, si_stime=25} --- [pid 294] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 294] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 294] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] getdents64(3, 0x555571073730 /* 4 entries */, 32768) = 112 [pid 294] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 339] <... write resumed>) = 20699119 [pid 339] munmap(0x7f3c67e39000, 138412032) = 0 [ 29.471473][ T333] F2FS-fs (loop0): Found nat_bits in checkpoint [pid 339] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 339] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 339] close(3) = 0 [pid 339] close(4) = 0 [pid 339] mkdir("./file0", 0777) = 0 [pid 339] mount("/dev/loop1", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 337] <... write resumed>) = 20699119 [pid 337] munmap(0x7f3c67e39000, 138412032) = 0 [pid 337] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 337] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 337] close(3) = 0 [pid 337] close(4) = 0 [pid 337] mkdir("./file0", 0777) = 0 [ 29.534391][ T339] loop1: detected capacity change from 0 to 40427 [ 29.546363][ T339] F2FS-fs (loop1): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 29.567573][ T337] loop3: detected capacity change from 0 to 40427 [ 29.575229][ T339] F2FS-fs (loop1): Found nat_bits in checkpoint [ 29.594492][ T337] F2FS-fs (loop3): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 29.615532][ T337] F2FS-fs (loop3): Found nat_bits in checkpoint [ 29.628737][ T333] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [pid 337] mount("/dev/loop3", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 335] <... write resumed>) = 20699119 [pid 335] munmap(0x7f3c67e39000, 138412032 [pid 333] <... mount resumed>) = 0 [pid 335] <... munmap resumed>) = 0 [pid 333] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 335] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 333] <... openat resumed>) = 3 [pid 335] <... openat resumed>) = 4 [pid 333] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 335] ioctl(4, LOOP_SET_FD, 3 [pid 333] <... openat resumed>) = 4 [pid 339] <... mount resumed>) = 0 [pid 339] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 339] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 339] ioctl(4, LOOP_CLR_FD) = 0 [pid 339] close(4) = 0 [pid 339] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 338] <... futex resumed>) = 0 [pid 338] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 338] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 339] <... futex resumed>) = 1 [pid 339] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 339] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 338] <... futex resumed>) = 0 [pid 338] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 338] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 339] <... futex resumed>) = 1 [pid 339] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 333] ioctl(4, LOOP_CLR_FD) = 0 [pid 333] close(4) = 0 [pid 339] <... fsconfig resumed>) = 0 [pid 339] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 338] <... futex resumed>) = 0 [pid 338] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 338] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 339] openat(AT_FDCWD, "./file0", O_RDONLY) = 5 [pid 339] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 338] <... futex resumed>) = 0 [pid 338] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 338] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 339] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140) = 0 [pid 339] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 338] <... futex resumed>) = 0 [pid 338] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 338] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 339] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, NULL) = 0 [pid 333] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 332] <... futex resumed>) = 0 [pid 333] fspick(AT_FDCWD, "./file0", 0 [pid 332] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 339] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 338] <... futex resumed>) = 0 [pid 332] <... futex resumed>) = 0 [pid 333] <... fspick resumed>) = 4 [pid 332] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 339] sched_setscheduler(0, SCHED_FIFO, [7] [pid 338] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 333] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 339] <... sched_setscheduler resumed>) = 0 [pid 338] <... futex resumed>) = 0 [pid 339] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 338] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 339] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 338] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 338] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 339] <... futex resumed>) = 0 [pid 338] <... futex resumed>) = 1 [ 29.650983][ T339] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 29.669863][ T335] loop2: detected capacity change from 0 to 40427 [pid 339] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 335] <... ioctl resumed>) = 0 [pid 333] <... futex resumed>) = 1 [pid 332] <... futex resumed>) = 0 [pid 294] <... umount2 resumed>) = 0 [pid 335] close(3 [pid 333] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 332] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 335] <... close resumed>) = 0 [pid 333] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 332] <... futex resumed>) = 0 [pid 335] close(4 [pid 333] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 332] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 335] <... close resumed>) = 0 [pid 335] mkdir("./file0", 0777) = 0 [pid 335] mount("/dev/loop2", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 294] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] newfstatat(AT_FDCWD, "./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 294] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] getdents64(4, 0x55557107b770 /* 2 entries */, 32768) = 48 [pid 294] getdents64(4, 0x55557107b770 /* 0 entries */, 32768) = 0 [pid 294] close(4) = 0 [pid 294] rmdir("./1/file0") = 0 [pid 294] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] unlink("./1/binderfs") = 0 [pid 294] getdents64(3, 0x555571073730 /* 0 entries */, 32768) = 0 [pid 294] close(3) = 0 [pid 294] rmdir("./1") = 0 [pid 294] mkdir("./2", 0777) = 0 [pid 294] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 294] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 294] close(3) = 0 [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571072690) = 352 [pid 338] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 352 attached [pid 352] set_robust_list(0x5555710726a0, 24) = 0 [pid 352] chdir("./2") = 0 [pid 352] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 352] setpgid(0, 0) = 0 [pid 352] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 352] write(3, "1000", 4) = 4 [pid 352] close(3) = 0 [pid 352] symlink("/dev/binderfs", "./binderfs") = 0 [pid 352] write(1, "executing program\n", 18executing program ) = 18 [pid 352] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 352] rt_sigaction(SIGRT_1, {sa_handler=0x7f3c702c31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3c702b4350}, NULL, 8) = 0 [pid 352] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 352] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3c70239000 [pid 352] mprotect(0x7f3c7023a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 352] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 352] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70259990, parent_tid=0x7f3c70259990, exit_signal=0, stack=0x7f3c70239000, stack_size=0x20300, tls=0x7f3c702596c0} => {parent_tid=[355]}, 88) = 355 [pid 352] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 352] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 352] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 355 attached [pid 339] <... mmap resumed>) = 0x200000000000 [pid 339] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 339] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 355] set_robust_list(0x7f3c702599a0, 24) = 0 [pid 355] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 355] memfd_create("syzkaller", 0) = 3 [pid 355] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3c67e39000 [pid 333] <... fsconfig resumed>) = 0 [pid 338] <... futex resumed>) = 0 [pid 338] exit_group(0 [pid 333] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 339] <... futex resumed>) = ? [pid 338] <... exit_group resumed>) = ? [pid 333] <... futex resumed>) = 1 [pid 332] <... futex resumed>) = 0 [pid 339] +++ exited with 0 +++ [pid 332] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 333] openat(AT_FDCWD, "./file0", O_RDONLY [pid 332] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 333] <... openat resumed>) = 5 [pid 333] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 332] <... futex resumed>) = 0 [pid 333] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 332] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 333] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 332] <... futex resumed>) = 0 [pid 332] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 333] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140) = 0 [pid 333] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 332] <... futex resumed>) = 0 [pid 333] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 332] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 333] <... prlimit64 resumed>NULL) = 0 [pid 332] <... futex resumed>) = 0 [pid 333] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 332] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 333] <... futex resumed>) = 0 [pid 332] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 333] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 332] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 333] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 332] <... futex resumed>) = 0 [pid 333] sched_setscheduler(0, SCHED_FIFO, [7]) = 0 [pid 332] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 333] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 333] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 332] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 332] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 333] <... futex resumed>) = 0 [pid 332] <... futex resumed>) = 1 [ 29.751167][ T335] F2FS-fs (loop2): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 29.772032][ T337] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [pid 333] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 332] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 337] <... mount resumed>) = 0 [pid 337] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 337] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 337] ioctl(4, LOOP_CLR_FD) = 0 [pid 337] close(4) = 0 [pid 337] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 337] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 336] <... futex resumed>) = 0 [pid 333] <... mmap resumed>) = 0x200000000000 [pid 336] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 333] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 336] <... futex resumed>) = 1 [pid 333] <... futex resumed>) = 1 [pid 336] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 333] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 337] <... futex resumed>) = 0 [pid 332] <... futex resumed>) = 0 [pid 337] fspick(AT_FDCWD, "./file0", 0 [pid 332] exit_group(0 [pid 337] <... fspick resumed>) = 4 [pid 333] <... futex resumed>) = ? [pid 332] <... exit_group resumed>) = ? [pid 337] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 333] +++ exited with 0 +++ [pid 337] <... futex resumed>) = 1 [pid 336] <... futex resumed>) = 0 [pid 337] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 336] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 336] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 337] <... fsconfig resumed>) = 0 [pid 337] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 336] <... futex resumed>) = 0 [pid 337] openat(AT_FDCWD, "./file0", O_RDONLY [pid 336] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 337] <... openat resumed>) = 5 [pid 336] <... futex resumed>) = 0 [pid 337] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 336] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 337] <... futex resumed>) = 0 [pid 336] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 337] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 336] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 29.802291][ T335] F2FS-fs (loop2): Found nat_bits in checkpoint [pid 336] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 337] <... ioctl resumed>) = 0 [pid 337] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 336] <... futex resumed>) = 0 [pid 337] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 336] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 337] <... prlimit64 resumed>NULL) = 0 [pid 336] <... futex resumed>) = 0 [pid 337] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 336] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 337] <... futex resumed>) = 0 [pid 336] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 337] sched_setscheduler(0, SCHED_FIFO, [7] [pid 336] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 337] <... sched_setscheduler resumed>) = 0 [pid 336] <... futex resumed>) = 0 [pid 337] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 336] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 337] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 336] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 336] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 337] <... futex resumed>) = 0 [pid 336] <... futex resumed>) = 1 [pid 337] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 336] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 338] +++ exited with 0 +++ [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=338, si_uid=0, si_status=0, si_utime=10, si_stime=24} --- [pid 291] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 291] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x555571073730 /* 4 entries */, 32768) = 112 [pid 291] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 332] +++ exited with 0 +++ [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=332, si_uid=0, si_status=0, si_utime=9, si_stime=22} --- [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 337] <... mmap resumed>) = 0x200000000000 [pid 337] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 290] <... restart_syscall resumed>) = 0 [pid 337] <... futex resumed>) = 1 [pid 337] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 336] <... futex resumed>) = 0 [pid 336] exit_group(0 [pid 337] <... futex resumed>) = ? [pid 336] <... exit_group resumed>) = ? [pid 290] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 337] +++ exited with 0 +++ [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x555571073730 /* 4 entries */, 32768) = 112 [pid 290] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 335] <... mount resumed>) = 0 [pid 335] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 335] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 335] ioctl(4, LOOP_CLR_FD) = 0 [pid 335] close(4) = 0 [pid 335] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 334] <... futex resumed>) = 0 [pid 335] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 334] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 335] <... futex resumed>) = 0 [pid 334] <... futex resumed>) = 1 [pid 335] fspick(AT_FDCWD, "./file0", 0 [pid 334] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 335] <... fspick resumed>) = 4 [pid 335] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 334] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 335] <... futex resumed>) = 0 [pid 335] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 334] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 335] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 335] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 334] <... futex resumed>) = 0 [pid 334] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 29.924369][ T335] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [pid 355] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 335] <... fsconfig resumed>) = 0 [pid 335] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 334] <... futex resumed>) = 0 [pid 335] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 334] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 335] <... futex resumed>) = 0 [pid 334] <... futex resumed>) = 1 [pid 335] openat(AT_FDCWD, "./file0", O_RDONLY) = 5 [pid 334] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 335] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 334] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 335] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 334] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 335] <... futex resumed>) = 0 [pid 334] <... futex resumed>) = 1 [pid 335] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 334] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 335] <... ioctl resumed>) = 0 [pid 335] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 334] <... futex resumed>) = 0 [pid 335] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 334] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 335] <... futex resumed>) = 0 [pid 334] <... futex resumed>) = 1 [pid 335] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, NULL) = 0 [pid 334] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 335] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 334] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 335] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 334] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 335] <... futex resumed>) = 0 [pid 334] <... futex resumed>) = 1 [pid 335] sched_setscheduler(0, SCHED_FIFO, [7]) = 0 [pid 334] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 335] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 334] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 335] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 334] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 335] <... futex resumed>) = 0 [pid 334] <... futex resumed>) = 1 [pid 335] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 334] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 336] +++ exited with 0 +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=336, si_uid=0, si_status=0, si_utime=11, si_stime=24} --- [pid 293] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 293] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x555571073730 /* 4 entries */, 32768) = 112 [pid 293] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 334] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 335] <... mmap resumed>) = 0x200000000000 [pid 335] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 334] exit_group(0 [pid 335] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL) = ? [pid 334] <... exit_group resumed>) = ? [pid 335] +++ exited with 0 +++ [pid 291] <... umount2 resumed>) = 0 [pid 291] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 291] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(4, 0x55557107b770 /* 2 entries */, 32768) = 48 [pid 291] getdents64(4, 0x55557107b770 /* 0 entries */, 32768) = 0 [pid 291] close(4) = 0 [pid 291] rmdir("./1/file0") = 0 [pid 291] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./1/binderfs") = 0 [pid 291] getdents64(3, 0x555571073730 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./1") = 0 [pid 291] mkdir("./2", 0777) = 0 [pid 291] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 291] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 291] close(3) = 0 [pid 290] <... umount2 resumed>) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... clone resumed>, child_tidptr=0x555571072690) = 362 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 290] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(4, 0x55557107b770 /* 2 entries */, 32768) = 48 [pid 290] getdents64(4, 0x55557107b770 /* 0 entries */, 32768) = 0 [pid 290] close(4) = 0 [pid 290] rmdir("./1/file0"./strace-static-x86_64: Process 362 attached ) = 0 [pid 290] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./1/binderfs") = 0 [pid 290] getdents64(3, 0x555571073730 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./1" [pid 362] set_robust_list(0x5555710726a0, 24 [pid 290] <... rmdir resumed>) = 0 [pid 290] mkdir("./2", 0777 [pid 362] <... set_robust_list resumed>) = 0 [pid 290] <... mkdir resumed>) = 0 [pid 290] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 290] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 290] close(3) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571072690) = 363 [pid 362] chdir("./2") = 0 [pid 362] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 362] setpgid(0, 0) = 0 [pid 362] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 362] write(3, "1000", 4) = 4 [pid 362] close(3) = 0 [pid 362] symlink("/dev/binderfs", "./binderfs") = 0 [pid 362] write(1, "executing program\n", 18executing program ) = 18 [pid 362] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 362] rt_sigaction(SIGRT_1, {sa_handler=0x7f3c702c31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3c702b4350}, NULL, 8) = 0 [pid 362] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 362] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3c70239000 [pid 362] mprotect(0x7f3c7023a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 362] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 362] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70259990, parent_tid=0x7f3c70259990, exit_signal=0, stack=0x7f3c70239000, stack_size=0x20300, tls=0x7f3c702596c0} => {parent_tid=[364]}, 88) = 364 [pid 362] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 362] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 362] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 363 attached [pid 363] set_robust_list(0x5555710726a0, 24) = 0 [pid 363] chdir("./2") = 0 [pid 363] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 363] setpgid(0, 0) = 0 [pid 363] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 363] write(3, "1000", 4) = 4 [pid 363] close(3) = 0 [pid 363] symlink("/dev/binderfs", "./binderfs") = 0 [pid 363] write(1, "executing program\n", 18executing program ) = 18 ./strace-static-x86_64: Process 364 attached [pid 364] set_robust_list(0x7f3c702599a0, 24) = 0 [pid 364] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 363] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 364] memfd_create("syzkaller", 0 [pid 363] <... futex resumed>) = 0 [pid 364] <... memfd_create resumed>) = 3 [pid 363] rt_sigaction(SIGRT_1, {sa_handler=0x7f3c702c31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3c702b4350}, [pid 364] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 363] <... rt_sigaction resumed>NULL, 8) = 0 [pid 363] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 364] <... mmap resumed>) = 0x7f3c67e39000 [pid 363] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 363] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3c70239000 [pid 363] mprotect(0x7f3c7023a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 363] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 363] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70259990, parent_tid=0x7f3c70259990, exit_signal=0, stack=0x7f3c70239000, stack_size=0x20300, tls=0x7f3c702596c0} => {parent_tid=[365]}, 88) = 365 [pid 363] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 363] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 363] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 365 attached [pid 365] set_robust_list(0x7f3c702599a0, 24) = 0 [pid 365] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 365] memfd_create("syzkaller", 0) = 3 [pid 365] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3c67e39000 [pid 334] +++ exited with 0 +++ [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=334, si_uid=0, si_status=0, si_utime=11, si_stime=23} --- [pid 292] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 292] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x555571073730 /* 4 entries */, 32768) = 112 [pid 292] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 355] <... write resumed>) = 20699119 [pid 355] munmap(0x7f3c67e39000, 138412032) = 0 [pid 355] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 355] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 355] close(3) = 0 [pid 355] close(4) = 0 [pid 355] mkdir("./file0", 0777) = 0 [pid 355] mount("/dev/loop4", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 293] <... umount2 resumed>) = 0 [pid 293] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 293] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(4, 0x55557107b770 /* 2 entries */, 32768) = 48 [pid 293] getdents64(4, 0x55557107b770 /* 0 entries */, 32768) = 0 [pid 293] close(4) = 0 [pid 293] rmdir("./1/file0") = 0 [pid 293] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./1/binderfs") = 0 [pid 293] getdents64(3, 0x555571073730 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./1") = 0 [pid 293] mkdir("./2", 0777) = 0 [pid 293] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 293] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 293] close(3) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571072690) = 368 [ 30.215758][ T355] loop4: detected capacity change from 0 to 40427 [ 30.235560][ T355] F2FS-fs (loop4): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root ./strace-static-x86_64: Process 368 attached [pid 368] set_robust_list(0x5555710726a0, 24) = 0 [pid 368] chdir("./2") = 0 [pid 368] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 368] setpgid(0, 0) = 0 [pid 368] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 368] write(3, "1000", 4) = 4 [pid 368] close(3) = 0 [pid 368] symlink("/dev/binderfs", "./binderfs") = 0 [pid 368] write(1, "executing program\n", 18executing program ) = 18 [pid 368] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 368] rt_sigaction(SIGRT_1, {sa_handler=0x7f3c702c31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3c702b4350}, NULL, 8) = 0 [pid 368] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 368] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3c70239000 [pid 368] mprotect(0x7f3c7023a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 368] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 368] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70259990, parent_tid=0x7f3c70259990, exit_signal=0, stack=0x7f3c70239000, stack_size=0x20300, tls=0x7f3c702596c0} => {parent_tid=[369]}, 88) = 369 [pid 368] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 368] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 368] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 369 attached [pid 369] set_robust_list(0x7f3c702599a0, 24) = 0 [pid 369] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 369] memfd_create("syzkaller", 0) = 3 [pid 369] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3c67e39000 [ 30.285962][ T355] F2FS-fs (loop4): Found nat_bits in checkpoint [pid 292] <... umount2 resumed>) = 0 [pid 292] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 292] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(4, 0x55557107b770 /* 2 entries */, 32768) = 48 [pid 292] getdents64(4, 0x55557107b770 /* 0 entries */, 32768) = 0 [pid 292] close(4) = 0 [pid 292] rmdir("./1/file0") = 0 [pid 292] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./1/binderfs") = 0 [pid 292] getdents64(3, 0x555571073730 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./1") = 0 [pid 292] mkdir("./2", 0777) = 0 [pid 292] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 292] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 292] close(3) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571072690) = 370 ./strace-static-x86_64: Process 370 attached [pid 370] set_robust_list(0x5555710726a0, 24) = 0 [pid 370] chdir("./2") = 0 [pid 370] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 370] setpgid(0, 0) = 0 [pid 370] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 370] write(3, "1000", 4) = 4 [pid 370] close(3) = 0 [pid 370] symlink("/dev/binderfs", "./binderfs") = 0 [pid 370] write(1, "executing program\n", 18executing program ) = 18 [pid 370] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 370] rt_sigaction(SIGRT_1, {sa_handler=0x7f3c702c31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3c702b4350}, NULL, 8) = 0 [pid 370] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 370] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3c70239000 [pid 370] mprotect(0x7f3c7023a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 370] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 370] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70259990, parent_tid=0x7f3c70259990, exit_signal=0, stack=0x7f3c70239000, stack_size=0x20300, tls=0x7f3c702596c0} => {parent_tid=[371]}, 88) = 371 [pid 370] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 370] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 370] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 371 attached [pid 371] set_robust_list(0x7f3c702599a0, 24) = 0 [pid 371] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 371] memfd_create("syzkaller", 0) = 3 [pid 371] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3c67e39000 [pid 355] <... mount resumed>) = 0 [pid 355] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 355] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 355] ioctl(4, LOOP_CLR_FD) = 0 [pid 355] close(4) = 0 [pid 355] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 352] <... futex resumed>) = 0 [pid 352] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 352] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 355] <... futex resumed>) = 1 [pid 355] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 355] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 352] <... futex resumed>) = 0 [pid 352] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 352] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 355] <... futex resumed>) = 1 [pid 355] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0) = 0 [pid 355] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 352] <... futex resumed>) = 0 [pid 352] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 352] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 355] openat(AT_FDCWD, "./file0", O_RDONLY) = 5 [pid 355] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 352] <... futex resumed>) = 0 [pid 355] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 352] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 352] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 355] <... ioctl resumed>) = 0 [pid 355] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 352] <... futex resumed>) = 0 [pid 355] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 352] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 355] <... prlimit64 resumed>NULL) = 0 [pid 352] <... futex resumed>) = 0 [pid 355] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 352] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 355] <... futex resumed>) = 0 [pid 352] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 355] sched_setscheduler(0, SCHED_FIFO, [7] [pid 352] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 355] <... sched_setscheduler resumed>) = 0 [pid 352] <... futex resumed>) = 0 [pid 355] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 352] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 355] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 352] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 352] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 355] <... futex resumed>) = 0 [ 30.393756][ T355] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [pid 352] <... futex resumed>) = 1 [pid 355] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 365] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 364] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 352] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 355] <... mmap resumed>) = 0x200000000000 [pid 355] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 352] <... futex resumed>) = 0 [pid 355] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 352] exit_group(0 [pid 355] <... futex resumed>) = ? [pid 352] <... exit_group resumed>) = ? [pid 355] +++ exited with 0 +++ [pid 369] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 352] +++ exited with 0 +++ [pid 294] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=352, si_uid=0, si_status=0, si_utime=11, si_stime=24} --- [pid 294] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 294] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 294] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] getdents64(3, 0x555571073730 /* 4 entries */, 32768) = 112 [pid 294] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 365] <... write resumed>) = 20699119 [pid 365] munmap(0x7f3c67e39000, 138412032 [pid 364] <... write resumed>) = 20699119 [pid 365] <... munmap resumed>) = 0 [pid 365] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 365] ioctl(4, LOOP_SET_FD, 3 [pid 364] munmap(0x7f3c67e39000, 138412032) = 0 [pid 364] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 364] ioctl(4, LOOP_SET_FD, 3 [pid 365] <... ioctl resumed>) = 0 [pid 365] close(3) = 0 [pid 365] close(4) = 0 [pid 365] mkdir("./file0", 0777) = 0 [pid 365] mount("/dev/loop0", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 364] <... ioctl resumed>) = 0 [pid 294] <... umount2 resumed>) = 0 [pid 364] close(3) = 0 [pid 364] close(4) = 0 [pid 364] mkdir("./file0", 0777) = 0 [ 30.689114][ T365] loop0: detected capacity change from 0 to 40427 [ 30.698437][ T364] loop1: detected capacity change from 0 to 40427 [ 30.712858][ T365] F2FS-fs (loop0): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 364] mount("/dev/loop1", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 294] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] newfstatat(AT_FDCWD, "./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 294] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] getdents64(4, 0x55557107b770 /* 2 entries */, 32768) = 48 [pid 294] getdents64(4, 0x55557107b770 /* 0 entries */, 32768) = 0 [pid 294] close(4) = 0 [pid 294] rmdir("./2/file0") = 0 [pid 294] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] unlink("./2/binderfs") = 0 [pid 294] getdents64(3, 0x555571073730 /* 0 entries */, 32768) = 0 [pid 294] close(3) = 0 [pid 294] rmdir("./2") = 0 [pid 294] mkdir("./3", 0777) = 0 [pid 294] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 294] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 369] <... write resumed>) = 20699119 [pid 369] munmap(0x7f3c67e39000, 138412032) = 0 [pid 371] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 369] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 369] ioctl(4, LOOP_SET_FD, 3 [pid 294] close(3) = 0 [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571072690) = 376 [pid 369] <... ioctl resumed>) = 0 [pid 369] close(3) = 0 [pid 369] close(4) = 0 [pid 369] mkdir("./file0", 0777) = 0 [pid 369] mount("/dev/loop3", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"..../strace-static-x86_64: Process 376 attached [pid 376] set_robust_list(0x5555710726a0, 24) = 0 [pid 376] chdir("./3") = 0 [pid 376] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 376] setpgid(0, 0) = 0 [ 30.735394][ T364] F2FS-fs (loop1): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 30.745434][ T365] F2FS-fs (loop0): Found nat_bits in checkpoint [ 30.770612][ T369] loop3: detected capacity change from 0 to 40427 [pid 376] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 376] write(3, "1000", 4) = 4 [pid 376] close(3) = 0 [pid 376] symlink("/dev/binderfs", "./binderfs") = 0 [pid 376] write(1, "executing program\n", 18executing program ) = 18 [pid 376] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 376] rt_sigaction(SIGRT_1, {sa_handler=0x7f3c702c31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3c702b4350}, NULL, 8) = 0 [pid 376] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 376] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3c70239000 [pid 376] mprotect(0x7f3c7023a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 376] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 376] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70259990, parent_tid=0x7f3c70259990, exit_signal=0, stack=0x7f3c70239000, stack_size=0x20300, tls=0x7f3c702596c0} => {parent_tid=[380]}, 88) = 380 [pid 376] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 376] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 376] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 380 attached [pid 380] set_robust_list(0x7f3c702599a0, 24) = 0 [pid 380] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 380] memfd_create("syzkaller", 0) = 3 [pid 380] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3c67e39000 [ 30.802200][ T369] F2FS-fs (loop3): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 30.811980][ T364] F2FS-fs (loop1): Found nat_bits in checkpoint [pid 365] <... mount resumed>) = 0 [pid 365] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 365] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 365] ioctl(4, LOOP_CLR_FD) = 0 [pid 365] close(4) = 0 [pid 365] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 365] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 363] <... futex resumed>) = 0 [pid 363] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 365] <... futex resumed>) = 0 [pid 365] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 365] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 365] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 363] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 363] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 365] <... futex resumed>) = 0 [pid 363] <... futex resumed>) = 1 [pid 365] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [ 30.851413][ T369] F2FS-fs (loop3): Found nat_bits in checkpoint [ 30.879808][ T365] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [pid 363] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 364] <... mount resumed>) = 0 [pid 365] <... fsconfig resumed>) = 0 [pid 365] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 365] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 363] <... futex resumed>) = 0 [pid 363] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 365] <... futex resumed>) = 0 [pid 363] <... futex resumed>) = 1 [pid 365] openat(AT_FDCWD, "./file0", O_RDONLY) = 5 [pid 365] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 365] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 363] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 363] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 365] <... futex resumed>) = 0 [pid 363] <... futex resumed>) = 1 [pid 365] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 363] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 365] <... ioctl resumed>) = 0 [pid 365] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 365] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 363] <... futex resumed>) = 0 [pid 363] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 365] <... futex resumed>) = 0 [pid 363] <... futex resumed>) = 1 [pid 365] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, NULL) = 0 [pid 365] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 365] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 363] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 363] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 365] <... futex resumed>) = 0 [pid 363] <... futex resumed>) = 1 [pid 365] sched_setscheduler(0, SCHED_FIFO, [7]) = 0 [pid 365] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 365] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 363] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 363] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 365] <... futex resumed>) = 0 [pid 363] <... futex resumed>) = 1 [ 30.922549][ T364] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [pid 365] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0) = 0x200000000000 [pid 363] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 365] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 365] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 364] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 364] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 363] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 364] ioctl(4, LOOP_CLR_FD) = 0 [pid 364] close(4) = 0 [pid 364] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 364] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 362] <... futex resumed>) = 0 [pid 362] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 363] exit_group(0 [pid 362] <... futex resumed>) = 1 [pid 364] <... futex resumed>) = 0 [pid 364] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 364] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 364] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 362] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 365] <... futex resumed>) = ? [pid 363] <... exit_group resumed>) = ? [pid 365] +++ exited with 0 +++ [pid 371] <... write resumed>) = 20699119 [pid 371] munmap(0x7f3c67e39000, 138412032) = 0 [pid 371] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 371] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 371] close(3) = 0 [pid 371] close(4) = 0 [pid 371] mkdir("./file0", 0777) = 0 [pid 371] mount("/dev/loop2", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 362] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 362] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 364] <... futex resumed>) = 0 [pid 362] <... futex resumed>) = 1 [pid 364] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 362] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 364] <... fsconfig resumed>) = 0 [pid 364] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 364] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 362] <... futex resumed>) = 0 [pid 362] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 364] <... futex resumed>) = 0 [pid 362] <... futex resumed>) = 1 [pid 364] openat(AT_FDCWD, "./file0", O_RDONLY) = 5 [pid 364] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 364] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 362] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 362] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 364] <... futex resumed>) = 0 [pid 364] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 362] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 364] <... ioctl resumed>) = 0 [pid 364] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 364] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 362] <... futex resumed>) = 0 [pid 362] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 364] <... futex resumed>) = 0 [pid 362] <... futex resumed>) = 1 [pid 364] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, NULL) = 0 [pid 364] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 362] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 364] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 362] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 362] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 364] <... futex resumed>) = 0 [pid 362] <... futex resumed>) = 1 [pid 364] sched_setscheduler(0, SCHED_FIFO, [7] [pid 362] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 364] <... sched_setscheduler resumed>) = 0 [pid 364] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 364] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 362] <... futex resumed>) = 0 [pid 362] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 364] <... futex resumed>) = 0 [pid 362] <... futex resumed>) = 1 [ 31.004125][ T371] loop2: detected capacity change from 0 to 40427 [ 31.022352][ T371] F2FS-fs (loop2): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 364] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 369] <... mount resumed>) = 0 [pid 363] +++ exited with 0 +++ [pid 362] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 369] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 369] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 369] ioctl(4, LOOP_CLR_FD) = 0 [pid 369] close(4) = 0 [pid 369] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 368] <... futex resumed>) = 0 [pid 369] fspick(AT_FDCWD, "./file0", 0 [pid 368] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 369] <... fspick resumed>) = 4 [pid 368] <... futex resumed>) = 0 [pid 369] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 368] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 369] <... futex resumed>) = 0 [pid 368] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 369] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 368] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 368] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 364] <... mmap resumed>) = 0x200000000000 [pid 364] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 362] <... futex resumed>) = 0 [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=363, si_uid=0, si_status=0, si_utime=10, si_stime=28} --- [pid 364] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 362] exit_group(0 [pid 364] <... futex resumed>) = ? [pid 362] <... exit_group resumed>) = ? [pid 290] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW [pid 364] +++ exited with 0 +++ [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x555571073730 /* 4 entries */, 32768) = 112 [pid 290] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW [ 31.065535][ T369] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 31.091836][ T371] F2FS-fs (loop2): Found nat_bits in checkpoint [pid 380] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 368] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 368] futex(0x7f3c7032a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 368] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3c70218000 [pid 368] mprotect(0x7f3c70219000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 368] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 368] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70238990, parent_tid=0x7f3c70238990, exit_signal=0, stack=0x7f3c70218000, stack_size=0x20300, tls=0x7f3c702386c0} => {parent_tid=[391]}, 88) = 391 [pid 368] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 369] <... fsconfig resumed>) = 0 [pid 368] futex(0x7f3c7032a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 369] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 368] <... futex resumed>) = 0 [pid 369] <... futex resumed>) = 0 [pid 368] futex(0x7f3c7032a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 369] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 391 attached [pid 391] set_robust_list(0x7f3c702389a0, 24) = 0 [pid 391] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 391] openat(AT_FDCWD, "./file0", O_RDONLY) = 5 [pid 391] futex(0x7f3c7032a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 368] <... futex resumed>) = 0 [pid 368] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 369] <... futex resumed>) = 0 [pid 368] <... futex resumed>) = 1 [pid 369] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 368] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 369] <... ioctl resumed>) = 0 [pid 369] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 368] <... futex resumed>) = 0 [pid 369] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 368] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 369] <... prlimit64 resumed>NULL) = 0 [pid 368] <... futex resumed>) = 0 [pid 369] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 368] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 369] <... futex resumed>) = 0 [pid 368] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 369] sched_setscheduler(0, SCHED_FIFO, [7] [pid 368] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 369] <... sched_setscheduler resumed>) = 0 [pid 368] <... futex resumed>) = 0 [pid 369] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 368] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 369] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 368] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 368] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 369] <... futex resumed>) = 0 [pid 368] <... futex resumed>) = 1 [pid 369] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 290] <... umount2 resumed>) = 0 [pid 368] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 369] <... mmap resumed>) = 0x200000000000 [pid 290] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 369] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 368] <... futex resumed>) = 0 [pid 369] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 368] exit_group(0 [pid 369] <... futex resumed>) = ? [pid 368] <... exit_group resumed>) = ? [pid 369] +++ exited with 0 +++ [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 290] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(4, 0x55557107b770 /* 2 entries */, 32768) = 48 [pid 290] getdents64(4, 0x55557107b770 /* 0 entries */, 32768) = 0 [pid 290] close(4) = 0 [pid 290] rmdir("./2/file0") = 0 [pid 290] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./2/binderfs") = 0 [pid 290] getdents64(3, 0x555571073730 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./2") = 0 [pid 290] mkdir("./3", 0777) = 0 [pid 290] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 290] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 290] close(3) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571072690) = 392 ./strace-static-x86_64: Process 392 attached [pid 392] set_robust_list(0x5555710726a0, 24) = 0 [pid 392] chdir("./3") = 0 [pid 392] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 391] <... futex resumed>) = ? [pid 392] setpgid(0, 0) = 0 [pid 392] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 392] write(3, "1000", 4) = 4 [pid 392] close(3) = 0 [pid 392] symlink("/dev/binderfs", "./binderfs") = 0 [pid 392] write(1, "executing program\n", 18executing program ) = 18 [pid 392] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 392] rt_sigaction(SIGRT_1, {sa_handler=0x7f3c702c31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3c702b4350}, NULL, 8) = 0 [pid 392] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 392] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3c70239000 [pid 392] mprotect(0x7f3c7023a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 392] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 371] <... mount resumed>) = 0 [pid 392] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70259990, parent_tid=0x7f3c70259990, exit_signal=0, stack=0x7f3c70239000, stack_size=0x20300, tls=0x7f3c702596c0} => {parent_tid=[393]}, 88) = 393 [pid 392] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 392] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 392] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 393 attached [pid 393] set_robust_list(0x7f3c702599a0, 24) = 0 [pid 393] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 393] memfd_create("syzkaller", 0) = 3 [pid 393] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3c67e39000 [pid 371] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 371] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 371] ioctl(4, LOOP_CLR_FD) = 0 [pid 371] close(4) = 0 [pid 371] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 370] <... futex resumed>) = 0 [pid 371] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 370] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 371] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 370] <... futex resumed>) = 0 [pid 371] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 370] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 371] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 370] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 371] <... futex resumed>) = 0 [pid 370] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 371] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 370] <... futex resumed>) = 0 [pid 370] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 391] +++ exited with 0 +++ [pid 368] +++ exited with 0 +++ [pid 371] <... fsconfig resumed>) = 0 [pid 371] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 370] <... futex resumed>) = 0 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=368, si_uid=0, si_status=0, si_utime=11, si_stime=24} --- [pid 371] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 370] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 371] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 370] <... futex resumed>) = 0 [pid 371] openat(AT_FDCWD, "./file0", O_RDONLY [pid 370] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 371] <... openat resumed>) = 5 [pid 371] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 370] <... futex resumed>) = 0 [pid 371] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 370] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 371] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 370] <... futex resumed>) = 0 [pid 371] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 370] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 371] <... ioctl resumed>) = 0 [pid 371] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 370] <... futex resumed>) = 0 [pid 362] +++ exited with 0 +++ [pid 371] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 370] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 371] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 370] <... futex resumed>) = 0 [pid 371] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=362, si_uid=0, si_status=0, si_utime=4, si_stime=24} --- [pid 371] <... prlimit64 resumed>NULL) = 0 [pid 370] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 371] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 370] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 371] <... futex resumed>) = 0 [pid 370] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 371] sched_setscheduler(0, SCHED_FIFO, [7] [pid 370] <... futex resumed>) = 0 [pid 371] <... sched_setscheduler resumed>) = 0 [pid 370] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 371] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 370] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 293] <... restart_syscall resumed>) = 0 [pid 291] <... restart_syscall resumed>) = 0 [pid 371] <... futex resumed>) = 0 [ 31.248372][ T371] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [pid 371] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 370] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 380] <... write resumed>) = 20699119 [pid 370] <... futex resumed>) = 0 [pid 370] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 380] munmap(0x7f3c67e39000, 138412032) = 0 [pid 380] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 380] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 380] close(3) = 0 [pid 380] close(4) = 0 [pid 380] mkdir("./file0", 0777) = 0 [pid 380] mount("/dev/loop4", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 371] <... mmap resumed>) = 0x200000000000 [pid 371] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 370] <... futex resumed>) = 0 [pid 371] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 293] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW [pid 370] exit_group(0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 371] <... futex resumed>) = ? [pid 370] <... exit_group resumed>) = ? [pid 293] <... openat resumed>) = 3 [pid 291] <... openat resumed>) = 3 [pid 371] +++ exited with 0 +++ [pid 293] newfstatat(3, "", [pid 291] newfstatat(3, "", [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] <... getdents64 resumed>0x555571073730 /* 4 entries */, 32768) = 112 [pid 291] getdents64(3, [pid 293] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... getdents64 resumed>0x555571073730 /* 4 entries */, 32768) = 112 [ 31.323001][ T380] loop4: detected capacity change from 0 to 40427 [ 31.375878][ T380] F2FS-fs (loop4): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 291] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 370] +++ exited with 0 +++ [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=370, si_uid=0, si_status=0, si_utime=9, si_stime=25} --- [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 293] <... umount2 resumed>) = 0 [pid 293] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 293] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] <... restart_syscall resumed>) = 0 [pid 293] getdents64(4, 0x55557107b770 /* 2 entries */, 32768) = 48 [pid 293] getdents64(4, [pid 292] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] <... getdents64 resumed>0x55557107b770 /* 0 entries */, 32768) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] close(4 [pid 292] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] <... close resumed>) = 0 [pid 293] rmdir("./2/file0" [pid 292] <... openat resumed>) = 3 [pid 293] <... rmdir resumed>) = 0 [pid 292] newfstatat(3, "", [pid 293] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] getdents64(3, [pid 293] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] <... getdents64 resumed>0x555571073730 /* 4 entries */, 32768) = 112 [pid 293] unlink("./2/binderfs" [pid 292] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] <... unlink resumed>) = 0 [pid 293] getdents64(3, 0x555571073730 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./2") = 0 [pid 293] mkdir("./3", 0777) = 0 [pid 293] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 293] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 293] close(3) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571072690) = 398 ./strace-static-x86_64: Process 398 attached [pid 398] set_robust_list(0x5555710726a0, 24) = 0 [pid 398] chdir("./3") = 0 [pid 398] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 398] setpgid(0, 0) = 0 [pid 398] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 398] write(3, "1000", 4) = 4 [ 31.442902][ T380] F2FS-fs (loop4): Found nat_bits in checkpoint [pid 398] close(3) = 0 [pid 398] symlink("/dev/binderfs", "./binderfs") = 0 [pid 398] write(1, "executing program\n", 18executing program ) = 18 [pid 398] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 398] rt_sigaction(SIGRT_1, {sa_handler=0x7f3c702c31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3c702b4350}, NULL, 8) = 0 [pid 398] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 398] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3c70239000 [pid 398] mprotect(0x7f3c7023a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 398] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 398] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70259990, parent_tid=0x7f3c70259990, exit_signal=0, stack=0x7f3c70239000, stack_size=0x20300, tls=0x7f3c702596c0} => {parent_tid=[399]}, 88) = 399 [pid 398] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 398] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 398] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 291] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 399 attached [pid 399] set_robust_list(0x7f3c702599a0, 24) = 0 [pid 399] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 399] memfd_create("syzkaller", 0) = 3 [pid 399] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3c67e39000 [pid 291] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 291] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(4, 0x55557107b770 /* 2 entries */, 32768) = 48 [pid 291] getdents64(4, 0x55557107b770 /* 0 entries */, 32768) = 0 [pid 291] close(4) = 0 [pid 291] rmdir("./2/file0") = 0 [pid 291] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./2/binderfs") = 0 [pid 291] getdents64(3, 0x555571073730 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./2") = 0 [pid 291] mkdir("./3", 0777) = 0 [pid 291] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 291] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 291] close(3) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571072690) = 400 ./strace-static-x86_64: Process 400 attached [pid 400] set_robust_list(0x5555710726a0, 24) = 0 [pid 400] chdir("./3") = 0 [pid 400] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 400] setpgid(0, 0) = 0 [pid 400] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 400] write(3, "1000", 4) = 4 [pid 400] close(3) = 0 [pid 400] symlink("/dev/binderfs", "./binderfs") = 0 [pid 400] write(1, "executing program\n", 18executing program ) = 18 [pid 400] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 400] rt_sigaction(SIGRT_1, {sa_handler=0x7f3c702c31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3c702b4350}, NULL, 8) = 0 [pid 400] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 400] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3c70239000 [pid 400] mprotect(0x7f3c7023a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 400] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 400] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70259990, parent_tid=0x7f3c70259990, exit_signal=0, stack=0x7f3c70239000, stack_size=0x20300, tls=0x7f3c702596c0} => {parent_tid=[401]}, 88) = 401 [pid 400] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 400] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 400] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 401 attached [pid 401] set_robust_list(0x7f3c702599a0, 24) = 0 [pid 401] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 401] memfd_create("syzkaller", 0) = 3 [pid 401] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3c67e39000 [pid 292] <... umount2 resumed>) = 0 [pid 292] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 292] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(4, 0x55557107b770 /* 2 entries */, 32768) = 48 [pid 292] getdents64(4, 0x55557107b770 /* 0 entries */, 32768) = 0 [pid 292] close(4) = 0 [pid 292] rmdir("./2/file0") = 0 [pid 292] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./2/binderfs") = 0 [pid 292] getdents64(3, 0x555571073730 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./2") = 0 [pid 292] mkdir("./3", 0777) = 0 [pid 292] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 292] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 292] close(3) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571072690) = 402 ./strace-static-x86_64: Process 402 attached [pid 402] set_robust_list(0x5555710726a0, 24) = 0 [pid 402] chdir("./3") = 0 [pid 402] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 402] setpgid(0, 0) = 0 [pid 402] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 402] write(3, "1000", 4) = 4 [pid 402] close(3) = 0 [pid 402] symlink("/dev/binderfs", "./binderfs") = 0 [pid 402] write(1, "executing program\n", 18executing program ) = 18 [pid 402] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 402] rt_sigaction(SIGRT_1, {sa_handler=0x7f3c702c31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3c702b4350}, NULL, 8) = 0 [pid 402] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 402] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3c70239000 [pid 402] mprotect(0x7f3c7023a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 402] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 402] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70259990, parent_tid=0x7f3c70259990, exit_signal=0, stack=0x7f3c70239000, stack_size=0x20300, tls=0x7f3c702596c0} => {parent_tid=[403]}, 88) = 403 [pid 402] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 402] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 402] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 403 attached [pid 403] set_robust_list(0x7f3c702599a0, 24) = 0 [pid 380] <... mount resumed>) = 0 [pid 403] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 380] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 403] memfd_create("syzkaller", 0) = 3 [pid 403] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3c67e39000 [pid 380] <... openat resumed>) = 3 [pid 380] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 380] ioctl(4, LOOP_CLR_FD) = 0 [pid 380] close(4) = 0 [pid 380] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 376] <... futex resumed>) = 0 [pid 376] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 380] fspick(AT_FDCWD, "./file0", 0 [pid 376] <... futex resumed>) = 0 [pid 376] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 380] <... fspick resumed>) = 4 [pid 380] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 376] <... futex resumed>) = 0 [pid 376] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 376] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 31.575101][ T380] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [pid 380] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0) = 0 [pid 380] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 376] <... futex resumed>) = 0 [pid 376] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 380] openat(AT_FDCWD, "./file0", O_RDONLY [pid 376] <... futex resumed>) = 0 [pid 380] <... openat resumed>) = 5 [pid 376] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 380] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... futex resumed>) = 0 [pid 380] <... futex resumed>) = 1 [pid 376] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 380] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 376] <... futex resumed>) = 0 [pid 376] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 380] <... ioctl resumed>) = 0 [pid 380] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 376] <... futex resumed>) = 0 [pid 376] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 380] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 376] <... futex resumed>) = 0 [pid 380] <... prlimit64 resumed>NULL) = 0 [pid 376] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 380] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 376] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 376] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 380] sched_setscheduler(0, SCHED_FIFO, [7] [pid 376] <... futex resumed>) = 0 [pid 380] <... sched_setscheduler resumed>) = 0 [pid 380] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 380] <... futex resumed>) = 0 [pid 380] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 376] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 376] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 380] <... futex resumed>) = 0 [pid 376] <... futex resumed>) = 1 [pid 380] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 376] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 393] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 380] <... mmap resumed>) = 0x200000000000 [pid 380] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 380] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 376] <... futex resumed>) = 0 [pid 376] exit_group(0 [pid 380] <... futex resumed>) = ? [pid 376] <... exit_group resumed>) = ? [pid 380] +++ exited with 0 +++ [pid 376] +++ exited with 0 +++ [pid 294] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=376, si_uid=0, si_status=0, si_utime=6, si_stime=24} --- [pid 294] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 294] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 294] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] getdents64(3, 0x555571073730 /* 4 entries */, 32768) = 112 [pid 294] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 399] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 401] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 393] <... write resumed>) = 20699119 [pid 393] munmap(0x7f3c67e39000, 138412032) = 0 [pid 393] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 393] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 393] close(3) = 0 [pid 393] close(4) = 0 [pid 393] mkdir("./file0", 0777) = 0 [pid 393] mount("/dev/loop0", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 294] <... umount2 resumed>) = 0 [pid 403] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 294] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] newfstatat(AT_FDCWD, "./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 294] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] getdents64(4, 0x55557107b770 /* 2 entries */, 32768) = 48 [pid 294] getdents64(4, 0x55557107b770 /* 0 entries */, 32768) = 0 [pid 294] close(4) = 0 [pid 294] rmdir("./3/file0") = 0 [pid 294] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] unlink("./3/binderfs") = 0 [pid 294] getdents64(3, 0x555571073730 /* 0 entries */, 32768) = 0 [pid 294] close(3) = 0 [pid 294] rmdir("./3") = 0 [pid 294] mkdir("./4", 0777) = 0 [pid 294] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 294] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 294] close(3) = 0 [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571072690) = 407 ./strace-static-x86_64: Process 407 attached [pid 407] set_robust_list(0x5555710726a0, 24) = 0 [ 31.903997][ T393] loop0: detected capacity change from 0 to 40427 [ 31.931183][ T393] F2FS-fs (loop0): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 407] chdir("./4" [pid 399] <... write resumed>) = 20699119 [pid 407] <... chdir resumed>) = 0 [pid 407] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 407] setpgid(0, 0) = 0 [pid 407] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 407] write(3, "1000", 4) = 4 [pid 407] close(3) = 0 [pid 407] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 407] write(1, "executing program\n", 18) = 18 [pid 407] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 407] rt_sigaction(SIGRT_1, {sa_handler=0x7f3c702c31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3c702b4350}, NULL, 8) = 0 [pid 407] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 399] munmap(0x7f3c67e39000, 138412032 [pid 407] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3c70239000 [pid 407] mprotect(0x7f3c7023a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 407] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 407] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70259990, parent_tid=0x7f3c70259990, exit_signal=0, stack=0x7f3c70239000, stack_size=0x20300, tls=0x7f3c702596c0} => {parent_tid=[409]}, 88) = 409 [pid 407] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 407] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 407] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 409 attached [pid 399] <... munmap resumed>) = 0 [pid 399] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 409] set_robust_list(0x7f3c702599a0, 24) = 0 [pid 399] <... openat resumed>) = 4 [pid 409] rt_sigprocmask(SIG_SETMASK, [], [pid 399] ioctl(4, LOOP_SET_FD, 3 [pid 409] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 409] memfd_create("syzkaller", 0) = 3 [pid 409] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3c67e39000 [pid 399] <... ioctl resumed>) = 0 [pid 399] close(3) = 0 [pid 399] close(4) = 0 [pid 399] mkdir("./file0", 0777) = 0 [ 31.981831][ T393] F2FS-fs (loop0): Found nat_bits in checkpoint [ 31.999737][ T399] loop3: detected capacity change from 0 to 40427 [pid 399] mount("/dev/loop3", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 401] <... write resumed>) = 20699119 [pid 401] munmap(0x7f3c67e39000, 138412032) = 0 [pid 401] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 32.034333][ T399] F2FS-fs (loop3): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 32.064599][ T399] F2FS-fs (loop3): Found nat_bits in checkpoint [pid 401] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 401] close(3) = 0 [pid 401] close(4) = 0 [pid 401] mkdir("./file0", 0777) = 0 [pid 401] mount("/dev/loop1", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 393] <... mount resumed>) = 0 [pid 393] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 393] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 393] ioctl(4, LOOP_CLR_FD) = 0 [pid 393] close(4) = 0 [pid 393] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 392] <... futex resumed>) = 0 [pid 392] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 392] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 393] <... futex resumed>) = 1 [pid 393] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 393] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 392] <... futex resumed>) = 0 [pid 392] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 392] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 32.081212][ T401] loop1: detected capacity change from 0 to 40427 [ 32.090191][ T393] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 32.110168][ T401] F2FS-fs (loop1): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 393] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 403] <... write resumed>) = 20699119 [pid 403] munmap(0x7f3c67e39000, 138412032) = 0 [pid 403] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 403] ioctl(4, LOOP_SET_FD, 3 [pid 393] <... fsconfig resumed>) = 0 [pid 393] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 393] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 392] <... futex resumed>) = 0 [pid 392] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 393] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 392] <... futex resumed>) = 0 [pid 393] openat(AT_FDCWD, "./file0", O_RDONLY [pid 392] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 393] <... openat resumed>) = 5 [pid 393] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 392] <... futex resumed>) = 0 [pid 393] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 392] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 392] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 393] <... ioctl resumed>) = 0 [pid 393] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 392] <... futex resumed>) = 0 [pid 393] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 392] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 393] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 392] <... futex resumed>) = 0 [pid 393] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 392] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 393] <... prlimit64 resumed>NULL) = 0 [pid 393] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 392] <... futex resumed>) = 0 [pid 393] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 392] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 393] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 392] <... futex resumed>) = 0 [pid 393] sched_setscheduler(0, SCHED_FIFO, [7] [pid 392] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 393] <... sched_setscheduler resumed>) = 0 [pid 393] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 392] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 393] <... futex resumed>) = 0 [pid 392] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 393] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 399] <... mount resumed>) = 0 [pid 399] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 399] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 399] ioctl(4, LOOP_CLR_FD) = 0 [pid 399] close(4) = 0 [pid 399] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 398] <... futex resumed>) = 0 [pid 398] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 398] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 399] <... futex resumed>) = 1 [pid 399] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 399] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 398] <... futex resumed>) = 0 [pid 398] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 398] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 399] <... futex resumed>) = 1 [pid 399] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 403] <... ioctl resumed>) = 0 [pid 403] close(3) = 0 [pid 403] close(4) = 0 [pid 403] mkdir("./file0", 0777) = 0 [pid 403] mount("/dev/loop2", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 392] <... futex resumed>) = 0 [ 32.152304][ T401] F2FS-fs (loop1): Found nat_bits in checkpoint [ 32.160520][ T403] loop2: detected capacity change from 0 to 40427 [ 32.167577][ T399] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [pid 392] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 393] <... mmap resumed>) = 0x200000000000 [pid 393] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 392] <... futex resumed>) = 0 [pid 393] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 392] exit_group(0 [pid 393] <... futex resumed>) = ? [pid 392] <... exit_group resumed>) = ? [pid 393] +++ exited with 0 +++ [pid 398] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 398] futex(0x7f3c7032a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 398] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3c70218000 [pid 398] mprotect(0x7f3c70219000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 398] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 398] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70238990, parent_tid=0x7f3c70238990, exit_signal=0, stack=0x7f3c70218000, stack_size=0x20300, tls=0x7f3c702386c0} => {parent_tid=[418]}, 88) = 418 [pid 398] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 398] futex(0x7f3c7032a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 398] futex(0x7f3c7032a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 418 attached [pid 409] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 418] set_robust_list(0x7f3c702389a0, 24) = 0 [pid 418] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 418] openat(AT_FDCWD, "./file0", O_RDONLY) = 5 [pid 418] futex(0x7f3c7032a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 418] futex(0x7f3c7032a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 398] <... futex resumed>) = 0 [pid 398] futex(0x7f3c7032a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 418] <... futex resumed>) = 0 [pid 398] <... futex resumed>) = 1 [pid 418] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 398] futex(0x7f3c7032a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 418] <... ioctl resumed>) = 0 [pid 418] futex(0x7f3c7032a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 398] <... futex resumed>) = 0 [pid 418] futex(0x7f3c7032a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 398] futex(0x7f3c7032a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 418] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 398] <... futex resumed>) = 0 [pid 418] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 398] futex(0x7f3c7032a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 418] <... prlimit64 resumed>NULL) = 0 [pid 418] futex(0x7f3c7032a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 398] <... futex resumed>) = 0 [pid 418] futex(0x7f3c7032a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 398] futex(0x7f3c7032a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 418] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 398] <... futex resumed>) = 0 [pid 418] sched_setscheduler(0, SCHED_FIFO, [7] [pid 398] futex(0x7f3c7032a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 418] <... sched_setscheduler resumed>) = 0 [pid 418] futex(0x7f3c7032a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 398] <... futex resumed>) = 0 [pid 418] futex(0x7f3c7032a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 398] futex(0x7f3c7032a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 418] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 398] <... futex resumed>) = 0 [pid 418] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 398] futex(0x7f3c7032a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 399] <... fsconfig resumed>) = 0 [pid 399] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 32.253496][ T403] F2FS-fs (loop2): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 32.291139][ T403] F2FS-fs (loop2): Found nat_bits in checkpoint [pid 399] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 418] <... mmap resumed>) = 0x200000000000 [pid 418] futex(0x7f3c7032a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 398] <... futex resumed>) = 0 [pid 418] futex(0x7f3c7032a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 398] exit_group(0 [pid 418] <... futex resumed>) = ? [pid 399] <... futex resumed>) = ? [pid 398] <... exit_group resumed>) = ? [pid 418] +++ exited with 0 +++ [pid 399] +++ exited with 0 +++ [pid 403] <... mount resumed>) = 0 [pid 403] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 403] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 403] ioctl(4, LOOP_CLR_FD) = 0 [pid 403] close(4) = 0 [pid 403] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 402] <... futex resumed>) = 0 [pid 402] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 402] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 403] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 403] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 402] <... futex resumed>) = 0 [pid 402] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 402] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 403] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0) = 0 [pid 403] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 402] <... futex resumed>) = 0 [pid 402] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 402] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 403] openat(AT_FDCWD, "./file0", O_RDONLY) = 5 [pid 403] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 402] <... futex resumed>) = 0 [pid 402] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 403] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 402] <... futex resumed>) = 0 [pid 402] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 403] <... ioctl resumed>) = 0 [pid 403] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 402] <... futex resumed>) = 0 [pid 403] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 402] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 403] <... prlimit64 resumed>NULL) = 0 [pid 402] <... futex resumed>) = 0 [pid 403] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 402] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 403] <... futex resumed>) = 0 [pid 402] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 403] sched_setscheduler(0, SCHED_FIFO, [7] [pid 402] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 403] <... sched_setscheduler resumed>) = 0 [pid 402] <... futex resumed>) = 0 [pid 403] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 402] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 403] <... futex resumed>) = 0 [pid 403] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 402] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 32.330960][ T403] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [pid 402] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 403] <... futex resumed>) = 0 [pid 402] <... futex resumed>) = 1 [pid 403] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 402] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 398] +++ exited with 0 +++ [pid 392] +++ exited with 0 +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=398, si_uid=0, si_status=0, si_utime=10, si_stime=24} --- [pid 293] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, [pid 403] <... mmap resumed>) = 0x200000000000 [pid 403] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 293] <... getdents64 resumed>0x555571073730 /* 4 entries */, 32768) = 112 [pid 403] <... futex resumed>) = 1 [pid 402] <... futex resumed>) = 0 [pid 293] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=392, si_uid=0, si_status=0, si_utime=13, si_stime=22} --- [pid 403] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 402] exit_group(0 [pid 403] <... futex resumed>) = ? [pid 402] <... exit_group resumed>) = ? [pid 403] +++ exited with 0 +++ [pid 290] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x555571073730 /* 4 entries */, 32768) = 112 [pid 290] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 409] <... write resumed>) = 20699119 [pid 409] munmap(0x7f3c67e39000, 138412032) = 0 [pid 401] <... mount resumed>) = 0 [pid 401] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 401] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 401] ioctl(4, LOOP_CLR_FD) = 0 [pid 401] close(4 [pid 409] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 409] ioctl(4, LOOP_SET_FD, 3 [pid 401] <... close resumed>) = 0 [pid 401] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 400] <... futex resumed>) = 0 [pid 400] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 400] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 401] <... futex resumed>) = 1 [pid 401] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 401] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 400] <... futex resumed>) = 0 [pid 400] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 400] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 401] <... futex resumed>) = 1 [pid 401] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0) = 0 [pid 401] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 400] <... futex resumed>) = 0 [pid 401] openat(AT_FDCWD, "./file0", O_RDONLY [pid 400] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 401] <... openat resumed>) = 5 [pid 400] <... futex resumed>) = 0 [pid 401] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 400] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 401] <... futex resumed>) = 0 [pid 400] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 401] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 400] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 402] +++ exited with 0 +++ [pid 400] <... futex resumed>) = 0 [pid 400] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=402, si_uid=0, si_status=0, si_utime=8, si_stime=27} --- [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 401] <... ioctl resumed>) = 0 [pid 401] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 400] <... futex resumed>) = 0 [pid 401] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 400] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 401] <... prlimit64 resumed>NULL) = 0 [pid 400] <... futex resumed>) = 0 [pid 401] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 400] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 401] <... futex resumed>) = 0 [pid 400] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 401] sched_setscheduler(0, SCHED_FIFO, [7] [pid 400] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 401] <... sched_setscheduler resumed>) = 0 [pid 400] <... futex resumed>) = 0 [pid 401] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 400] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 401] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 400] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 32.475731][ T401] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 32.500598][ T409] loop4: detected capacity change from 0 to 40427 [pid 400] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 401] <... futex resumed>) = 0 [pid 400] <... futex resumed>) = 1 [pid 401] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 409] <... ioctl resumed>) = 0 [pid 400] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 293] <... umount2 resumed>) = 0 [pid 292] <... restart_syscall resumed>) = 0 [pid 290] <... umount2 resumed>) = 0 [pid 409] close(3 [pid 290] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 409] <... close resumed>) = 0 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 409] close(4 [pid 292] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] newfstatat(AT_FDCWD, "./3/file0", [pid 409] <... close resumed>) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 409] mkdir("./file0", 0777 [pid 292] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 409] <... mkdir resumed>) = 0 [pid 292] <... openat resumed>) = 3 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 409] mount("/dev/loop4", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 292] newfstatat(3, "", [pid 290] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] <... openat resumed>) = 4 [pid 292] getdents64(3, [pid 290] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(4, [pid 293] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 293] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(4, [pid 401] <... mmap resumed>) = 0x200000000000 [pid 401] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 401] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 400] <... futex resumed>) = 0 [pid 290] <... getdents64 resumed>0x55557107b770 /* 2 entries */, 32768) = 48 [pid 292] <... getdents64 resumed>0x555571073730 /* 4 entries */, 32768) = 112 [pid 400] exit_group(0 [pid 290] getdents64(4, 0x55557107b770 /* 0 entries */, 32768) = 0 [pid 290] close(4 [pid 292] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... close resumed>) = 0 [pid 401] <... futex resumed>) = ? [pid 400] <... exit_group resumed>) = ? [pid 290] rmdir("./3/file0" [pid 401] +++ exited with 0 +++ [pid 290] <... rmdir resumed>) = 0 [pid 290] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] <... getdents64 resumed>0x55557107b770 /* 2 entries */, 32768) = 48 [pid 293] getdents64(4, 0x55557107b770 /* 0 entries */, 32768) = 0 [pid 293] close(4) = 0 [pid 293] rmdir("./3/file0") = 0 [pid 293] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./3/binderfs") = 0 [pid 293] getdents64(3, 0x555571073730 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./3") = 0 [pid 293] mkdir("./4", 0777) = 0 [pid 293] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 293] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 293] close(3) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] unlink("./3/binderfs" [pid 293] <... clone resumed>, child_tidptr=0x555571072690) = 427 [pid 290] <... unlink resumed>) = 0 [pid 290] getdents64(3, 0x555571073730 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./3") = 0 [pid 290] mkdir("./4", 0777) = 0 [pid 290] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 290] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 290] close(3) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571072690) = 428 [ 32.583610][ T409] F2FS-fs (loop4): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root ./strace-static-x86_64: Process 428 attached [pid 428] set_robust_list(0x5555710726a0, 24./strace-static-x86_64: Process 427 attached ) = 0 [pid 427] set_robust_list(0x5555710726a0, 24 [pid 428] chdir("./4" [pid 427] <... set_robust_list resumed>) = 0 [pid 428] <... chdir resumed>) = 0 [pid 428] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 427] chdir("./4" [pid 428] <... prctl resumed>) = 0 [pid 428] setpgid(0, 0 [pid 427] <... chdir resumed>) = 0 [pid 428] <... setpgid resumed>) = 0 [pid 428] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 427] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 428] <... openat resumed>) = 3 [pid 427] <... prctl resumed>) = 0 [pid 428] write(3, "1000", 4) = 4 [pid 427] setpgid(0, 0 [pid 428] close(3 [pid 427] <... setpgid resumed>) = 0 [pid 428] <... close resumed>) = 0 [pid 428] symlink("/dev/binderfs", "./binderfs" [pid 427] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 428] <... symlink resumed>) = 0 executing program [pid 428] write(1, "executing program\n", 18 [pid 427] <... openat resumed>) = 3 [pid 428] <... write resumed>) = 18 [pid 428] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 427] write(3, "1000", 4 [pid 428] <... futex resumed>) = 0 [pid 428] rt_sigaction(SIGRT_1, {sa_handler=0x7f3c702c31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3c702b4350}, [pid 427] <... write resumed>) = 4 [pid 428] <... rt_sigaction resumed>NULL, 8) = 0 [pid 427] close(3 [pid 428] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 427] <... close resumed>) = 0 [pid 428] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 427] symlink("/dev/binderfs", "./binderfs" [pid 428] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 427] <... symlink resumed>) = 0 [pid 428] <... mmap resumed>) = 0x7f3c70239000 [pid 427] write(1, "executing program\n", 18 [pid 428] mprotect(0x7f3c7023a000, 131072, PROT_READ|PROT_WRITEexecuting program ) = 0 [pid 427] <... write resumed>) = 18 [pid 428] rt_sigprocmask(SIG_BLOCK, ~[], [pid 427] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 428] <... rt_sigprocmask resumed>[], 8) = 0 [pid 428] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70259990, parent_tid=0x7f3c70259990, exit_signal=0, stack=0x7f3c70239000, stack_size=0x20300, tls=0x7f3c702596c0} [pid 427] <... futex resumed>) = 0 [pid 427] rt_sigaction(SIGRT_1, {sa_handler=0x7f3c702c31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3c702b4350}, [pid 428] <... clone3 resumed> => {parent_tid=[429]}, 88) = 429 [pid 428] rt_sigprocmask(SIG_SETMASK, [], [pid 427] <... rt_sigaction resumed>NULL, 8) = 0 [pid 428] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 427] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 428] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 427] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 428] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 427] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3c70239000 [pid 427] mprotect(0x7f3c7023a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 427] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 427] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70259990, parent_tid=0x7f3c70259990, exit_signal=0, stack=0x7f3c70239000, stack_size=0x20300, tls=0x7f3c702596c0} => {parent_tid=[430]}, 88) = 430 [pid 427] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 427] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 427] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 429 attached [pid 429] set_robust_list(0x7f3c702599a0, 24) = 0 [pid 429] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 429] memfd_create("syzkaller", 0) = 3 [pid 429] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3c67e39000 ./strace-static-x86_64: Process 430 attached [pid 430] set_robust_list(0x7f3c702599a0, 24) = 0 [pid 430] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 430] memfd_create("syzkaller", 0) = 3 [pid 430] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3c67e39000 [ 32.624613][ T409] F2FS-fs (loop4): Found nat_bits in checkpoint [pid 400] +++ exited with 0 +++ [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=400, si_uid=0, si_status=0, si_utime=10, si_stime=21} --- [pid 291] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 291] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x555571073730 /* 4 entries */, 32768) = 112 [pid 291] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 409] <... mount resumed>) = 0 [pid 409] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 409] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 409] ioctl(4, LOOP_CLR_FD) = 0 [pid 409] close(4) = 0 [pid 409] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 407] <... futex resumed>) = 0 [pid 409] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 407] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 409] <... futex resumed>) = 0 [pid 407] <... futex resumed>) = 1 [pid 409] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 407] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 409] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 407] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 409] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 407] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 407] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 292] <... umount2 resumed>) = 0 [pid 292] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 292] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(4, 0x55557107b770 /* 2 entries */, 32768) = 48 [pid 292] getdents64(4, 0x55557107b770 /* 0 entries */, 32768) = 0 [pid 292] close(4) = 0 [pid 292] rmdir("./3/file0") = 0 [pid 292] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./3/binderfs") = 0 [pid 292] getdents64(3, 0x555571073730 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./3") = 0 [pid 292] mkdir("./4", 0777) = 0 [pid 292] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 292] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 292] close(3) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571072690) = 433 [ 32.719112][ T409] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 ./strace-static-x86_64: Process 433 attached [pid 433] set_robust_list(0x5555710726a0, 24) = 0 [pid 433] chdir("./4") = 0 [pid 433] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 433] setpgid(0, 0) = 0 [pid 409] <... fsconfig resumed>) = 0 [pid 409] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 407] <... futex resumed>) = 0 [pid 407] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 409] openat(AT_FDCWD, "./file0", O_RDONLY [pid 407] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 409] <... openat resumed>) = 5 [pid 409] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 407] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 409] <... futex resumed>) = 0 [pid 407] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 409] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 407] <... futex resumed>) = 0 [pid 407] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 433] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 433] write(3, "1000", 4 [pid 409] <... ioctl resumed>) = 0 [pid 409] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 407] <... futex resumed>) = 0 [pid 409] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 407] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 409] <... futex resumed>) = 0 [pid 409] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 407] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 409] <... prlimit64 resumed>NULL) = 0 [pid 409] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 407] <... futex resumed>) = 0 [pid 407] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 409] sched_setscheduler(0, SCHED_FIFO, [7] [pid 407] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 409] <... sched_setscheduler resumed>) = 0 [pid 409] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 407] <... futex resumed>) = 0 [pid 409] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 407] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 409] <... futex resumed>) = 0 [pid 407] <... futex resumed>) = 1 [pid 409] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 407] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 291] <... umount2 resumed>) = 0 [pid 433] <... write resumed>) = 4 [pid 433] close(3) = 0 [pid 433] symlink("/dev/binderfs", "./binderfs") = 0 [pid 433] write(1, "executing program\n", 18executing program ) = 18 [pid 433] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 433] rt_sigaction(SIGRT_1, {sa_handler=0x7f3c702c31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3c702b4350}, NULL, 8) = 0 [pid 433] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 433] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3c70239000 [pid 433] mprotect(0x7f3c7023a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 433] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 433] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70259990, parent_tid=0x7f3c70259990, exit_signal=0, stack=0x7f3c70239000, stack_size=0x20300, tls=0x7f3c702596c0} => {parent_tid=[434]}, 88) = 434 [pid 433] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 433] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 433] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 291] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 291] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(4, 0x55557107b770 /* 2 entries */, 32768) = 48 [pid 291] getdents64(4, 0x55557107b770 /* 0 entries */, 32768) = 0 [pid 291] close(4) = 0 [pid 291] rmdir("./3/file0") = 0 [pid 291] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./3/binderfs") = 0 [pid 291] getdents64(3, 0x555571073730 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./3") = 0 [pid 291] mkdir("./4", 0777) = 0 [pid 291] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 409] <... mmap resumed>) = 0x200000000000 ./strace-static-x86_64: Process 434 attached [pid 409] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 407] <... futex resumed>) = 0 [pid 434] set_robust_list(0x7f3c702599a0, 24 [pid 409] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 407] exit_group(0 [pid 434] <... set_robust_list resumed>) = 0 [pid 409] <... futex resumed>) = ? [pid 407] <... exit_group resumed>) = ? [pid 409] +++ exited with 0 +++ [pid 434] rt_sigprocmask(SIG_SETMASK, [], [pid 291] ioctl(3, LOOP_CLR_FD [pid 434] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 434] memfd_create("syzkaller", 0 [pid 291] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 434] <... memfd_create resumed>) = 3 [pid 291] close(3 [pid 434] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 291] <... close resumed>) = 0 [pid 434] <... mmap resumed>) = 0x7f3c67e39000 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571072690) = 435 ./strace-static-x86_64: Process 435 attached [pid 435] set_robust_list(0x5555710726a0, 24) = 0 [pid 435] chdir("./4") = 0 [pid 435] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 435] setpgid(0, 0) = 0 [pid 435] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 435] write(3, "1000", 4) = 4 [pid 435] close(3) = 0 [pid 435] symlink("/dev/binderfs", "./binderfs") = 0 [pid 435] write(1, "executing program\n", 18executing program ) = 18 [pid 435] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 435] rt_sigaction(SIGRT_1, {sa_handler=0x7f3c702c31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3c702b4350}, NULL, 8) = 0 [pid 435] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 435] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3c70239000 [pid 435] mprotect(0x7f3c7023a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 435] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 435] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70259990, parent_tid=0x7f3c70259990, exit_signal=0, stack=0x7f3c70239000, stack_size=0x20300, tls=0x7f3c702596c0} => {parent_tid=[436]}, 88) = 436 [pid 435] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 435] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 435] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 436 attached [pid 436] set_robust_list(0x7f3c702599a0, 24) = 0 [pid 436] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 436] memfd_create("syzkaller", 0) = 3 [pid 436] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3c67e39000 [pid 407] +++ exited with 0 +++ [pid 294] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=407, si_uid=0, si_status=0, si_utime=9, si_stime=27} --- [pid 294] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 294] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 294] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] getdents64(3, 0x555571073730 /* 4 entries */, 32768) = 112 [pid 294] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 429] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 430] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 294] <... umount2 resumed>) = 0 [pid 294] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] newfstatat(AT_FDCWD, "./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 294] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] getdents64(4, 0x55557107b770 /* 2 entries */, 32768) = 48 [pid 294] getdents64(4, 0x55557107b770 /* 0 entries */, 32768) = 0 [pid 294] close(4) = 0 [pid 294] rmdir("./4/file0") = 0 [pid 294] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] unlink("./4/binderfs") = 0 [pid 294] getdents64(3, 0x555571073730 /* 0 entries */, 32768) = 0 [pid 294] close(3) = 0 [pid 294] rmdir("./4") = 0 [pid 294] mkdir("./5", 0777) = 0 [pid 294] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 294] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 294] close(3) = 0 [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571072690) = 437 ./strace-static-x86_64: Process 437 attached [pid 437] set_robust_list(0x5555710726a0, 24) = 0 [pid 437] chdir("./5") = 0 [pid 437] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 437] setpgid(0, 0) = 0 [pid 437] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 437] write(3, "1000", 4) = 4 [pid 437] close(3) = 0 [pid 437] symlink("/dev/binderfs", "./binderfs") = 0 [pid 437] write(1, "executing program\n", 18executing program ) = 18 [pid 437] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 437] rt_sigaction(SIGRT_1, {sa_handler=0x7f3c702c31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3c702b4350}, NULL, 8) = 0 [pid 437] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 437] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3c70239000 [pid 437] mprotect(0x7f3c7023a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 437] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 437] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70259990, parent_tid=0x7f3c70259990, exit_signal=0, stack=0x7f3c70239000, stack_size=0x20300, tls=0x7f3c702596c0} => {parent_tid=[438]}, 88) = 438 [pid 437] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 437] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 437] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 438 attached [pid 438] set_robust_list(0x7f3c702599a0, 24) = 0 [pid 429] <... write resumed>) = 20699119 [pid 438] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 438] memfd_create("syzkaller", 0) = 3 [pid 438] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3c67e39000 [pid 429] munmap(0x7f3c67e39000, 138412032) = 0 [pid 429] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 429] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 429] close(3) = 0 [pid 429] close(4) = 0 [pid 429] mkdir("./file0", 0777) = 0 [pid 429] mount("/dev/loop0", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 434] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 430] <... write resumed>) = 20699119 [ 33.151143][ T429] loop0: detected capacity change from 0 to 40427 [ 33.173507][ T429] F2FS-fs (loop0): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 430] munmap(0x7f3c67e39000, 138412032) = 0 [pid 430] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 430] ioctl(4, LOOP_SET_FD, 3 [pid 436] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 430] <... ioctl resumed>) = 0 [pid 430] close(3) = 0 [pid 430] close(4) = 0 [pid 430] mkdir("./file0", 0777) = 0 [ 33.203454][ T429] F2FS-fs (loop0): Found nat_bits in checkpoint [ 33.220770][ T430] loop3: detected capacity change from 0 to 40427 [ 33.245526][ T430] F2FS-fs (loop3): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 33.276305][ T430] F2FS-fs (loop3): Found nat_bits in checkpoint [pid 430] mount("/dev/loop3", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 429] <... mount resumed>) = 0 [pid 429] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 429] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 429] ioctl(4, LOOP_CLR_FD) = 0 [pid 429] close(4) = 0 [pid 429] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 429] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 428] <... futex resumed>) = 0 [pid 428] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 429] <... futex resumed>) = 0 [pid 428] <... futex resumed>) = 1 [pid 429] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 428] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 429] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 428] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 429] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 428] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 429] <... futex resumed>) = 0 [pid 428] <... futex resumed>) = 1 [pid 429] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [ 33.316809][ T429] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [pid 428] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 429] <... fsconfig resumed>) = 0 [pid 429] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 428] <... futex resumed>) = 0 [pid 429] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 428] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 429] <... futex resumed>) = 0 [pid 428] <... futex resumed>) = 1 [pid 429] openat(AT_FDCWD, "./file0", O_RDONLY) = 5 [pid 428] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 429] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 429] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 428] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 428] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 429] <... futex resumed>) = 0 [pid 428] <... futex resumed>) = 1 [pid 429] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 428] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 429] <... ioctl resumed>) = 0 [pid 429] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 428] <... futex resumed>) = 0 [pid 429] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 428] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 429] <... futex resumed>) = 0 [pid 428] <... futex resumed>) = 1 [pid 429] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, NULL) = 0 [pid 428] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 429] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 428] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 429] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 428] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 429] <... futex resumed>) = 0 [pid 428] <... futex resumed>) = 1 [pid 429] sched_setscheduler(0, SCHED_FIFO, [7]) = 0 [pid 428] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 429] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 428] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 429] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 428] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 429] <... futex resumed>) = 0 [pid 428] <... futex resumed>) = 1 [pid 429] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 428] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 430] <... mount resumed>) = 0 [pid 430] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 430] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 430] ioctl(4, LOOP_CLR_FD) = 0 [pid 430] close(4) = 0 [pid 430] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 427] <... futex resumed>) = 0 [pid 427] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 427] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 430] <... futex resumed>) = 1 [pid 430] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 430] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 427] <... futex resumed>) = 0 [pid 427] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 427] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 430] <... futex resumed>) = 1 [pid 430] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0) = 0 [pid 430] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 427] <... futex resumed>) = 0 [pid 427] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 427] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 430] openat(AT_FDCWD, "./file0", O_RDONLY) = 5 [pid 430] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 427] <... futex resumed>) = 0 [pid 427] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 427] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 430] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140) = 0 [pid 430] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 427] <... futex resumed>) = 0 [pid 427] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 427] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 430] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, NULL) = 0 [pid 430] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 427] <... futex resumed>) = 0 [pid 430] sched_setscheduler(0, SCHED_FIFO, [7] [pid 427] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 430] <... sched_setscheduler resumed>) = 0 [pid 427] <... futex resumed>) = 0 [pid 430] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 427] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 430] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 427] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 427] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 430] <... futex resumed>) = 0 [ 33.361435][ T430] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [pid 427] <... futex resumed>) = 1 [pid 430] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0) = 0x200000000000 [pid 429] <... mmap resumed>) = 0x200000000000 [pid 428] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 427] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 430] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 429] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 430] <... futex resumed>) = 0 [pid 429] <... futex resumed>) = 0 [pid 428] exit_group(0 [pid 427] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 430] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 428] <... exit_group resumed>) = ? [pid 427] exit_group(0 [pid 430] <... futex resumed>) = ? [pid 429] +++ exited with 0 +++ [pid 427] <... exit_group resumed>) = ? [pid 430] +++ exited with 0 +++ [pid 434] <... write resumed>) = 20699119 [pid 434] munmap(0x7f3c67e39000, 138412032) = 0 [pid 434] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 434] ioctl(4, LOOP_SET_FD, 3 [pid 436] <... write resumed>) = 20699119 [pid 436] munmap(0x7f3c67e39000, 138412032) = 0 [pid 436] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 436] ioctl(4, LOOP_SET_FD, 3 [pid 438] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 434] <... ioctl resumed>) = 0 [pid 434] close(3) = 0 [pid 434] close(4) = 0 [pid 434] mkdir("./file0", 0777) = 0 [pid 434] mount("/dev/loop2", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 427] +++ exited with 0 +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=427, si_uid=0, si_status=0, si_utime=13, si_stime=20} --- [pid 293] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 293] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x555571073730 /* 4 entries */, 32768) = 112 [pid 293] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 428] +++ exited with 0 +++ [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=428, si_uid=0, si_status=0, si_utime=8, si_stime=24} --- [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 436] <... ioctl resumed>) = 0 [pid 436] close(3) = 0 [pid 436] close(4) = 0 [pid 436] mkdir("./file0", 0777) = 0 [pid 436] mount("/dev/loop1", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 290] <... restart_syscall resumed>) = 0 [pid 290] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x555571073730 /* 4 entries */, 32768) = 112 [ 33.492811][ T434] loop2: detected capacity change from 0 to 40427 [ 33.506272][ T436] loop1: detected capacity change from 0 to 40427 [ 33.524291][ T434] F2FS-fs (loop2): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 33.557776][ T436] F2FS-fs (loop1): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 33.585351][ T436] F2FS-fs (loop1): Found nat_bits in checkpoint [ 33.602128][ T434] F2FS-fs (loop2): Found nat_bits in checkpoint [pid 290] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 436] <... mount resumed>) = 0 [pid 436] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 436] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 436] ioctl(4, LOOP_CLR_FD) = 0 [pid 436] close(4) = 0 [pid 436] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 435] <... futex resumed>) = 0 [pid 435] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 436] fspick(AT_FDCWD, "./file0", 0 [pid 435] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 436] <... fspick resumed>) = 4 [pid 436] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 436] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 435] <... futex resumed>) = 0 [pid 435] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 435] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 436] <... futex resumed>) = 0 [pid 436] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 438] <... write resumed>) = 20699119 [pid 438] munmap(0x7f3c67e39000, 138412032) = 0 [pid 438] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 438] ioctl(4, LOOP_SET_FD, 3 [pid 436] <... fsconfig resumed>) = 0 [pid 436] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 436] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 435] <... futex resumed>) = 0 [pid 438] <... ioctl resumed>) = 0 [pid 438] close(3) = 0 [pid 438] close(4 [pid 435] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 438] <... close resumed>) = 0 [pid 438] mkdir("./file0", 0777 [pid 436] <... futex resumed>) = 0 [pid 436] openat(AT_FDCWD, "./file0", O_RDONLY) = 5 [pid 436] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 436] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 435] <... futex resumed>) = 1 [pid 435] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 438] <... mkdir resumed>) = 0 [pid 438] mount("/dev/loop4", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 435] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 435] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 436] <... futex resumed>) = 0 [pid 435] <... futex resumed>) = 1 [pid 436] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 435] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 436] <... ioctl resumed>) = 0 [pid 436] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 436] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 435] <... futex resumed>) = 0 [pid 435] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 436] <... futex resumed>) = 0 [pid 435] <... futex resumed>) = 1 [pid 436] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, NULL) = 0 [pid 436] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 436] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 435] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 435] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 436] <... futex resumed>) = 0 [pid 435] <... futex resumed>) = 1 [pid 436] sched_setscheduler(0, SCHED_FIFO, [7] [pid 435] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 436] <... sched_setscheduler resumed>) = 0 [pid 436] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 435] <... futex resumed>) = 0 [pid 436] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 435] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 436] <... futex resumed>) = 0 [pid 435] <... futex resumed>) = 1 [ 33.675751][ T436] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 33.697926][ T438] loop4: detected capacity change from 0 to 40427 [pid 436] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 435] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 434] <... mount resumed>) = 0 [pid 293] <... umount2 resumed>) = 0 [pid 290] <... umount2 resumed>) = 0 [pid 290] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 290] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(4, 0x55557107b770 /* 2 entries */, 32768) = 48 [pid 290] getdents64(4, 0x55557107b770 /* 0 entries */, 32768) = 0 [pid 290] close(4) = 0 [pid 290] rmdir("./4/file0") = 0 [pid 290] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./4/binderfs") = 0 [pid 290] getdents64(3, 0x555571073730 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./4") = 0 [pid 290] mkdir("./5", 0777) = 0 [pid 290] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 290] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 290] close(3) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571072690) = 454 [pid 434] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 434] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 434] ioctl(4, LOOP_CLR_FD) = 0 [pid 434] close(4) = 0 [pid 434] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 433] <... futex resumed>) = 0 [pid 433] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 433] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 434] <... futex resumed>) = 1 [pid 434] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 434] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 433] <... futex resumed>) = 0 [pid 433] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 433] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 434] <... futex resumed>) = 1 [pid 434] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 293] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 293] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(4, 0x55557107b770 /* 2 entries */, 32768) = 48 [pid 293] getdents64(4, 0x55557107b770 /* 0 entries */, 32768) = 0 [pid 293] close(4) = 0 [pid 293] rmdir("./4/file0") = 0 [pid 293] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./4/binderfs") = 0 [pid 293] getdents64(3, 0x555571073730 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./4") = 0 [pid 293] mkdir("./5", 0777) = 0 [pid 293] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 293] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 293] close(3) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571072690) = 456 [pid 434] <... fsconfig resumed>) = 0 [pid 434] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 433] <... futex resumed>) = 0 [pid 434] openat(AT_FDCWD, "./file0", O_RDONLY [pid 433] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 434] <... openat resumed>) = 5 [pid 433] <... futex resumed>) = 0 [pid 434] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 433] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 434] <... futex resumed>) = 0 [pid 433] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 434] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 433] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 433] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 456 attached [pid 456] set_robust_list(0x5555710726a0, 24) = 0 [pid 456] chdir("./5") = 0 [pid 456] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 456] setpgid(0, 0) = 0 [pid 456] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 33.726101][ T438] F2FS-fs (loop4): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 33.734953][ T434] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [pid 436] <... mmap resumed>) = 0x200000000000 [pid 436] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 435] <... futex resumed>) = 0 [pid 436] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 435] exit_group(0 [pid 436] <... futex resumed>) = ? [pid 435] <... exit_group resumed>) = ? [pid 436] +++ exited with 0 +++ [pid 434] <... ioctl resumed>) = 0 [pid 434] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 433] <... futex resumed>) = 0 [pid 434] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 433] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 433] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 434] <... prlimit64 resumed>NULL) = 0 [pid 434] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 433] <... futex resumed>) = 0 [pid 434] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 433] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 434] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 433] <... futex resumed>) = 0 [pid 434] sched_setscheduler(0, SCHED_FIFO, [7] [pid 433] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 434] <... sched_setscheduler resumed>) = 0 [pid 434] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 433] <... futex resumed>) = 0 [pid 434] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 433] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 434] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 433] <... futex resumed>) = 0 [pid 434] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 433] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 454 attached [pid 456] write(3, "1000", 4 [pid 435] +++ exited with 0 +++ [pid 456] <... write resumed>) = 4 [pid 454] set_robust_list(0x5555710726a0, 24 [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=435, si_uid=0, si_status=0, si_utime=10, si_stime=26} --- [pid 456] close(3 [pid 454] <... set_robust_list resumed>) = 0 [pid 456] <... close resumed>) = 0 [pid 454] chdir("./5" [pid 456] symlink("/dev/binderfs", "./binderfs" [pid 454] <... chdir resumed>) = 0 [pid 291] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 456] <... symlink resumed>) = 0 [pid 454] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) executing program [pid 456] write(1, "executing program\n", 18 [pid 454] <... prctl resumed>) = 0 [pid 291] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 456] <... write resumed>) = 18 [pid 454] setpgid(0, 0 [pid 434] <... mmap resumed>) = 0x200000000000 [pid 434] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 433] <... futex resumed>) = 0 [pid 454] <... setpgid resumed>) = 0 [pid 434] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 433] exit_group(0 [pid 291] <... openat resumed>) = 3 [pid 434] <... futex resumed>) = ? [pid 433] <... exit_group resumed>) = ? [pid 456] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 454] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 434] +++ exited with 0 +++ [pid 291] newfstatat(3, "", [pid 456] <... futex resumed>) = 0 [pid 454] <... openat resumed>) = 3 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 456] rt_sigaction(SIGRT_1, {sa_handler=0x7f3c702c31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3c702b4350}, [pid 454] write(3, "1000", 4 [pid 291] getdents64(3, [pid 456] <... rt_sigaction resumed>NULL, 8) = 0 [pid 454] <... write resumed>) = 4 [pid 291] <... getdents64 resumed>0x555571073730 /* 4 entries */, 32768) = 112 [pid 456] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 454] close(3 [pid 291] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 456] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 454] <... close resumed>) = 0 [pid 456] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3c70239000 [pid 454] symlink("/dev/binderfs", "./binderfs" [pid 456] mprotect(0x7f3c7023a000, 131072, PROT_READ|PROT_WRITE [pid 454] <... symlink resumed>) = 0 [pid 456] <... mprotect resumed>) = 0 [pid 454] write(1, "executing program\n", 18executing program [pid 456] rt_sigprocmask(SIG_BLOCK, ~[], [pid 454] <... write resumed>) = 18 [pid 456] <... rt_sigprocmask resumed>[], 8) = 0 [pid 454] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 456] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70259990, parent_tid=0x7f3c70259990, exit_signal=0, stack=0x7f3c70239000, stack_size=0x20300, tls=0x7f3c702596c0} [pid 454] <... futex resumed>) = 0 [pid 454] rt_sigaction(SIGRT_1, {sa_handler=0x7f3c702c31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3c702b4350}, [pid 456] <... clone3 resumed> => {parent_tid=[459]}, 88) = 459 [pid 454] <... rt_sigaction resumed>NULL, 8) = 0 [pid 456] rt_sigprocmask(SIG_SETMASK, [], [pid 454] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 456] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 454] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 456] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 454] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 456] <... futex resumed>) = 0 [pid 454] <... mmap resumed>) = 0x7f3c70239000 [pid 456] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 454] mprotect(0x7f3c7023a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 454] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 454] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70259990, parent_tid=0x7f3c70259990, exit_signal=0, stack=0x7f3c70239000, stack_size=0x20300, tls=0x7f3c702596c0} => {parent_tid=[460]}, 88) = 460 [pid 454] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 454] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 454] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 459 attached [pid 459] set_robust_list(0x7f3c702599a0, 24) = 0 [pid 459] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 459] memfd_create("syzkaller", 0) = 3 [pid 459] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3c67e39000 ./strace-static-x86_64: Process 460 attached [pid 460] set_robust_list(0x7f3c702599a0, 24) = 0 [pid 460] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 460] memfd_create("syzkaller", 0) = 3 [pid 460] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3c67e39000 [pid 433] +++ exited with 0 +++ [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=433, si_uid=0, si_status=0, si_utime=9, si_stime=25} --- [pid 292] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 292] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x555571073730 /* 4 entries */, 32768) = 112 [ 33.853571][ T438] F2FS-fs (loop4): Found nat_bits in checkpoint [pid 292] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 438] <... mount resumed>) = 0 [pid 438] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 438] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 438] ioctl(4, LOOP_CLR_FD) = 0 [pid 438] close(4) = 0 [pid 291] <... umount2 resumed>) = 0 [pid 438] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 291] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 438] <... futex resumed>) = 1 [pid 437] <... futex resumed>) = 0 [pid 438] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 291] newfstatat(AT_FDCWD, "./4/file0", [pid 437] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 438] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 437] <... futex resumed>) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 438] fspick(AT_FDCWD, "./file0", 0 [pid 437] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 291] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 438] <... fspick resumed>) = 4 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 438] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 291] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 438] <... futex resumed>) = 1 [pid 437] <... futex resumed>) = 0 [pid 438] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 291] <... openat resumed>) = 4 [pid 437] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 438] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 291] newfstatat(4, "", [pid 437] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 438] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(4, 0x55557107b770 /* 2 entries */, 32768) = 48 [pid 291] getdents64(4, 0x55557107b770 /* 0 entries */, 32768) = 0 [pid 291] close(4) = 0 [pid 291] rmdir("./4/file0") = 0 [pid 291] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./4/binderfs") = 0 [pid 291] getdents64(3, 0x555571073730 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./4") = 0 [pid 291] mkdir("./5", 0777) = 0 [pid 291] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 291] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 291] close(3) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571072690) = 463 [pid 438] <... fsconfig resumed>) = 0 [pid 438] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 437] <... futex resumed>) = 0 [pid 438] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 437] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 438] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 437] <... futex resumed>) = 0 [pid 438] openat(AT_FDCWD, "./file0", O_RDONLY [pid 437] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 463 attached [pid 463] set_robust_list(0x5555710726a0, 24 [pid 438] <... openat resumed>) = 5 [pid 438] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 463] <... set_robust_list resumed>) = 0 [pid 438] <... futex resumed>) = 1 [pid 437] <... futex resumed>) = 0 [pid 437] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 438] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 437] <... futex resumed>) = 0 [pid 437] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 438] <... ioctl resumed>) = 0 [pid 438] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 437] <... futex resumed>) = 0 [pid 438] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 437] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 438] <... prlimit64 resumed>NULL) = 0 [pid 437] <... futex resumed>) = 0 [pid 463] chdir("./5") = 0 [pid 438] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 437] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 438] <... futex resumed>) = 0 [pid 437] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 438] sched_setscheduler(0, SCHED_FIFO, [7] [pid 437] <... futex resumed>) = 0 [pid 438] <... sched_setscheduler resumed>) = 0 [ 33.977695][ T438] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [pid 437] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 438] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 437] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 438] <... futex resumed>) = 0 [pid 437] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 438] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 437] <... futex resumed>) = 0 [pid 437] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 292] <... umount2 resumed>) = 0 [pid 463] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 463] setpgid(0, 0) = 0 [pid 463] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 292] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 463] <... openat resumed>) = 3 [pid 292] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 292] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 463] write(3, "1000", 4) = 4 [pid 292] getdents64(4, [pid 463] close(3) = 0 [pid 463] symlink("/dev/binderfs", "./binderfs") = 0 [pid 292] <... getdents64 resumed>0x55557107b770 /* 2 entries */, 32768) = 48 [pid 292] getdents64(4, 0x55557107b770 /* 0 entries */, 32768) = 0 [pid 292] close(4) = 0 [pid 292] rmdir("./4/file0") = 0 [pid 463] write(1, "executing program\n", 18executing program ) = 18 [pid 463] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 463] rt_sigaction(SIGRT_1, {sa_handler=0x7f3c702c31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3c702b4350}, NULL, 8) = 0 [pid 463] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 463] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3c70239000 [pid 292] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 463] mprotect(0x7f3c7023a000, 131072, PROT_READ|PROT_WRITE [pid 292] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 463] <... mprotect resumed>) = 0 [pid 292] unlink("./4/binderfs") = 0 [pid 463] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 292] getdents64(3, [pid 463] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70259990, parent_tid=0x7f3c70259990, exit_signal=0, stack=0x7f3c70239000, stack_size=0x20300, tls=0x7f3c702596c0} [pid 292] <... getdents64 resumed>0x555571073730 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./4" [pid 463] <... clone3 resumed> => {parent_tid=[464]}, 88) = 464 [pid 292] <... rmdir resumed>) = 0 [pid 463] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 463] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 463] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 292] mkdir("./5", 0777) = 0 [pid 292] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 292] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 292] close(3) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 437] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 437] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 437] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 292] <... clone resumed>, child_tidptr=0x555571072690) = 465 ./strace-static-x86_64: Process 464 attached [pid 464] set_robust_list(0x7f3c702599a0, 24) = 0 [pid 464] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 438] <... mmap resumed>) = 0x200000000000 [pid 438] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 438] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 437] exit_group(0 [pid 438] <... futex resumed>) = ? [pid 437] <... exit_group resumed>) = ? [pid 438] +++ exited with 0 +++ [pid 464] memfd_create("syzkaller", 0) = 3 [pid 464] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3c67e39000 ./strace-static-x86_64: Process 465 attached [pid 465] set_robust_list(0x5555710726a0, 24) = 0 [pid 465] chdir("./5") = 0 [pid 465] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 465] setpgid(0, 0) = 0 [pid 465] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 465] write(3, "1000", 4) = 4 [pid 465] close(3) = 0 [pid 465] symlink("/dev/binderfs", "./binderfs") = 0 [pid 465] write(1, "executing program\n", 18executing program ) = 18 [pid 465] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 465] rt_sigaction(SIGRT_1, {sa_handler=0x7f3c702c31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3c702b4350}, NULL, 8) = 0 [pid 465] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 465] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3c70239000 [pid 465] mprotect(0x7f3c7023a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 465] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 465] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70259990, parent_tid=0x7f3c70259990, exit_signal=0, stack=0x7f3c70239000, stack_size=0x20300, tls=0x7f3c702596c0} => {parent_tid=[466]}, 88) = 466 [pid 465] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 465] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 465] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 466 attached [pid 466] set_robust_list(0x7f3c702599a0, 24) = 0 [pid 466] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 466] memfd_create("syzkaller", 0) = 3 [pid 466] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3c67e39000 [pid 437] +++ exited with 0 +++ [pid 294] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=437, si_uid=0, si_status=0, si_utime=11, si_stime=27} --- [pid 294] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 294] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 294] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] getdents64(3, 0x555571073730 /* 4 entries */, 32768) = 112 [pid 294] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 459] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 460] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 294] <... umount2 resumed>) = 0 [pid 294] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] newfstatat(AT_FDCWD, "./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 294] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] getdents64(4, 0x55557107b770 /* 2 entries */, 32768) = 48 [pid 294] getdents64(4, 0x55557107b770 /* 0 entries */, 32768) = 0 [pid 294] close(4) = 0 [pid 294] rmdir("./5/file0") = 0 [pid 294] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] unlink("./5/binderfs") = 0 [pid 294] getdents64(3, 0x555571073730 /* 0 entries */, 32768) = 0 [pid 294] close(3) = 0 [pid 294] rmdir("./5") = 0 [pid 294] mkdir("./6", 0777) = 0 [pid 294] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 294] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 294] close(3) = 0 [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571072690) = 467 ./strace-static-x86_64: Process 467 attached [pid 467] set_robust_list(0x5555710726a0, 24) = 0 [pid 467] chdir("./6") = 0 [pid 467] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 467] setpgid(0, 0) = 0 [pid 467] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 467] write(3, "1000", 4) = 4 [pid 467] close(3) = 0 [pid 467] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 467] write(1, "executing program\n", 18) = 18 [pid 467] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 467] rt_sigaction(SIGRT_1, {sa_handler=0x7f3c702c31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3c702b4350}, NULL, 8) = 0 [pid 467] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 467] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3c70239000 [pid 467] mprotect(0x7f3c7023a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 467] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 467] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70259990, parent_tid=0x7f3c70259990, exit_signal=0, stack=0x7f3c70239000, stack_size=0x20300, tls=0x7f3c702596c0} => {parent_tid=[468]}, 88) = 468 [pid 467] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 467] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 467] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 468 attached [pid 468] set_robust_list(0x7f3c702599a0, 24) = 0 [pid 468] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 468] memfd_create("syzkaller", 0) = 3 [pid 468] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3c67e39000 [pid 466] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 459] <... write resumed>) = 20699119 [pid 459] munmap(0x7f3c67e39000, 138412032) = 0 [pid 459] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 459] ioctl(4, LOOP_SET_FD, 3 [pid 460] <... write resumed>) = 20699119 [pid 459] <... ioctl resumed>) = 0 [pid 459] close(3) = 0 [pid 459] close(4) = 0 [pid 459] mkdir("./file0", 0777) = 0 [pid 459] mount("/dev/loop3", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 460] munmap(0x7f3c67e39000, 138412032 [pid 464] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 460] <... munmap resumed>) = 0 [pid 460] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 34.409608][ T459] loop3: detected capacity change from 0 to 40427 [ 34.444427][ T459] F2FS-fs (loop3): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 460] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 460] close(3) = 0 [pid 460] close(4) = 0 [pid 460] mkdir("./file0", 0777) = 0 [ 34.462910][ T460] loop0: detected capacity change from 0 to 40427 [ 34.481574][ T460] F2FS-fs (loop0): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 34.493111][ T459] F2FS-fs (loop3): Found nat_bits in checkpoint [pid 460] mount("/dev/loop0", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 459] <... mount resumed>) = 0 [pid 466] <... write resumed>) = 20699119 [pid 466] munmap(0x7f3c67e39000, 138412032 [pid 459] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 459] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 466] <... munmap resumed>) = 0 [pid 466] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 466] ioctl(4, LOOP_SET_FD, 3 [pid 459] <... openat resumed>) = 4 [pid 459] ioctl(4, LOOP_CLR_FD) = 0 [pid 459] close(4) = 0 [pid 459] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 456] <... futex resumed>) = 0 [pid 456] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 459] <... futex resumed>) = 1 [pid 466] <... ioctl resumed>) = 0 [pid 456] <... futex resumed>) = 0 [pid 466] close(3 [pid 456] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 466] <... close resumed>) = 0 [pid 466] close(4) = 0 [pid 459] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 459] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 466] mkdir("./file0", 0777 [pid 456] <... futex resumed>) = 0 [pid 459] <... futex resumed>) = 1 [pid 459] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 466] <... mkdir resumed>) = 0 [pid 456] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 466] mount("/dev/loop2", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 456] <... futex resumed>) = 0 [pid 456] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 459] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 34.541371][ T460] F2FS-fs (loop0): Found nat_bits in checkpoint [ 34.560546][ T459] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 34.581004][ T466] loop2: detected capacity change from 0 to 40427 [pid 459] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0) = 0 [pid 459] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 456] <... futex resumed>) = 0 [pid 459] openat(AT_FDCWD, "./file0", O_RDONLY [pid 456] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 459] <... openat resumed>) = 5 [pid 456] <... futex resumed>) = 0 [pid 459] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 456] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 459] <... futex resumed>) = 0 [pid 456] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 459] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 456] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 459] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 456] <... futex resumed>) = 0 [pid 459] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 456] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 459] <... ioctl resumed>) = 0 [pid 459] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 456] <... futex resumed>) = 0 [pid 459] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 456] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 459] <... prlimit64 resumed>NULL) = 0 [pid 456] <... futex resumed>) = 0 [pid 459] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 456] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 459] <... futex resumed>) = 0 [pid 456] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 459] sched_setscheduler(0, SCHED_FIFO, [7] [pid 456] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 459] <... sched_setscheduler resumed>) = 0 [pid 456] <... futex resumed>) = 0 [pid 459] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 456] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 459] <... futex resumed>) = 0 [pid 456] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 459] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 456] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 459] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 456] <... futex resumed>) = 0 [pid 464] <... write resumed>) = 20699119 [pid 456] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 464] munmap(0x7f3c67e39000, 138412032) = 0 [pid 464] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 34.606282][ T466] F2FS-fs (loop2): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 464] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 468] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 464] close(3) = 0 [pid 464] close(4) = 0 [pid 464] mkdir("./file0", 0777) = 0 [pid 464] mount("/dev/loop1", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 459] <... mmap resumed>) = 0x200000000000 [pid 459] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 456] <... futex resumed>) = 0 [pid 459] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 456] exit_group(0 [pid 459] <... futex resumed>) = ? [pid 456] <... exit_group resumed>) = ? [pid 459] +++ exited with 0 +++ [ 34.663509][ T464] loop1: detected capacity change from 0 to 40427 [ 34.686331][ T464] F2FS-fs (loop1): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 460] <... mount resumed>) = 0 [pid 460] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 460] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 460] ioctl(4, LOOP_CLR_FD) = 0 [ 34.719624][ T460] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 34.729818][ T466] F2FS-fs (loop2): Found nat_bits in checkpoint [pid 460] close(4) = 0 [pid 460] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 454] <... futex resumed>) = 0 [pid 454] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 454] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 460] <... futex resumed>) = 1 [pid 460] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 460] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 454] <... futex resumed>) = 0 [pid 454] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 454] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 460] <... futex resumed>) = 1 [pid 460] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 468] <... write resumed>) = 20699119 [pid 468] munmap(0x7f3c67e39000, 138412032) = 0 [pid 460] <... fsconfig resumed>) = 0 [pid 460] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 454] <... futex resumed>) = 0 [pid 460] openat(AT_FDCWD, "./file0", O_RDONLY [pid 454] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 460] <... openat resumed>) = 5 [pid 454] <... futex resumed>) = 0 [pid 460] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 454] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 460] <... futex resumed>) = 0 [pid 454] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 460] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 454] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 468] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 454] <... futex resumed>) = 0 [pid 468] <... openat resumed>) = 4 [pid 454] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 468] ioctl(4, LOOP_SET_FD, 3 [pid 460] <... ioctl resumed>) = 0 [pid 460] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 454] <... futex resumed>) = 0 [pid 460] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 454] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 460] <... prlimit64 resumed>NULL) = 0 [pid 454] <... futex resumed>) = 0 [pid 460] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 454] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 460] <... futex resumed>) = 0 [pid 454] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 460] sched_setscheduler(0, SCHED_FIFO, [7] [pid 454] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 460] <... sched_setscheduler resumed>) = 0 [pid 454] <... futex resumed>) = 0 [pid 460] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 454] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 460] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 454] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 454] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 460] <... futex resumed>) = 0 [pid 454] <... futex resumed>) = 1 [pid 460] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 454] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 456] +++ exited with 0 +++ [pid 468] <... ioctl resumed>) = 0 [pid 468] close(3) = 0 [pid 468] close(4) = 0 [pid 468] mkdir("./file0", 0777) = 0 [pid 468] mount("/dev/loop4", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=456, si_uid=0, si_status=0, si_utime=10, si_stime=22} --- [pid 293] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x555571073730 /* 4 entries */, 32768) = 112 [ 34.766393][ T464] F2FS-fs (loop1): Found nat_bits in checkpoint [ 34.794485][ T468] loop4: detected capacity change from 0 to 40427 [pid 293] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 454] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 460] <... mmap resumed>) = 0x200000000000 [pid 460] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 460] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 454] exit_group(0 [pid 460] <... futex resumed>) = ? [pid 454] <... exit_group resumed>) = ? [pid 460] +++ exited with 0 +++ [pid 466] <... mount resumed>) = 0 [pid 464] <... mount resumed>) = 0 [pid 454] +++ exited with 0 +++ [pid 466] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 464] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 466] <... openat resumed>) = 3 [pid 464] <... openat resumed>) = 3 [pid 466] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 464] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 466] <... openat resumed>) = 4 [pid 466] ioctl(4, LOOP_CLR_FD [pid 464] <... openat resumed>) = 4 [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=454, si_uid=0, si_status=0, si_utime=6, si_stime=27} --- [pid 466] <... ioctl resumed>) = 0 [pid 464] ioctl(4, LOOP_CLR_FD [pid 466] close(4 [pid 464] <... ioctl resumed>) = 0 [pid 466] <... close resumed>) = 0 [pid 464] close(4 [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 466] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 464] <... close resumed>) = 0 [pid 466] <... futex resumed>) = 1 [pid 464] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 466] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 465] <... futex resumed>) = 0 [pid 464] <... futex resumed>) = 1 [pid 463] <... futex resumed>) = 0 [pid 290] <... restart_syscall resumed>) = 0 [pid 464] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 465] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 463] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 466] <... futex resumed>) = 0 [pid 465] <... futex resumed>) = 1 [pid 464] <... futex resumed>) = 0 [pid 463] <... futex resumed>) = 1 [pid 466] fspick(AT_FDCWD, "./file0", 0 [pid 464] fspick(AT_FDCWD, "./file0", 0 [pid 466] <... fspick resumed>) = 4 [pid 465] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 464] <... fspick resumed>) = 4 [pid 463] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 290] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW [pid 466] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 464] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 466] <... futex resumed>) = 0 [pid 464] <... futex resumed>) = 0 [pid 466] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 464] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 465] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 463] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 465] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 463] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 466] <... futex resumed>) = 0 [pid 465] <... futex resumed>) = 1 [pid 464] <... futex resumed>) = 0 [pid 463] <... futex resumed>) = 1 [pid 466] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 465] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 464] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 463] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 290] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x555571073730 /* 4 entries */, 32768) = 112 [pid 290] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 466] <... fsconfig resumed>) = 0 [pid 466] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 465] <... futex resumed>) = 0 [pid 466] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 465] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 466] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 465] <... futex resumed>) = 0 [pid 466] openat(AT_FDCWD, "./file0", O_RDONLY [pid 465] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 466] <... openat resumed>) = 5 [pid 466] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 465] <... futex resumed>) = 0 [pid 466] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 465] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 466] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 465] <... futex resumed>) = 0 [pid 466] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 465] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 466] <... ioctl resumed>) = 0 [pid 466] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 465] <... futex resumed>) = 0 [pid 466] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 465] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 466] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 465] <... futex resumed>) = 0 [pid 466] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 465] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 466] <... prlimit64 resumed>NULL) = 0 [pid 466] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 465] <... futex resumed>) = 0 [pid 466] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 465] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 466] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 465] <... futex resumed>) = 0 [pid 466] sched_setscheduler(0, SCHED_FIFO, [7] [pid 465] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 466] <... sched_setscheduler resumed>) = 0 [pid 466] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 465] <... futex resumed>) = 0 [pid 466] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 465] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 466] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 34.866059][ T468] F2FS-fs (loop4): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 34.886339][ T466] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 34.897937][ T464] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 34.907617][ T468] F2FS-fs (loop4): Found nat_bits in checkpoint [pid 465] <... futex resumed>) = 0 [pid 466] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 465] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 466] <... mmap resumed>) = 0x200000000000 [pid 463] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 293] <... umount2 resumed>) = 0 [pid 466] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 465] <... futex resumed>) = 0 [pid 466] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 465] exit_group(0 [pid 466] <... futex resumed>) = ? [pid 465] <... exit_group resumed>) = ? [pid 463] futex(0x7f3c7032a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 293] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 466] +++ exited with 0 +++ [pid 463] <... futex resumed>) = 0 [pid 463] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 463] <... mmap resumed>) = 0x7f3c70218000 [pid 293] newfstatat(AT_FDCWD, "./5/file0", [pid 463] mprotect(0x7f3c70219000, 131072, PROT_READ|PROT_WRITE [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 463] <... mprotect resumed>) = 0 [pid 293] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 463] rt_sigprocmask(SIG_BLOCK, ~[], [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 463] <... rt_sigprocmask resumed>[], 8) = 0 [pid 293] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 463] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70238990, parent_tid=0x7f3c70238990, exit_signal=0, stack=0x7f3c70218000, stack_size=0x20300, tls=0x7f3c702386c0} [pid 293] <... openat resumed>) = 4 [pid 293] newfstatat(4, "", [pid 463] <... clone3 resumed> => {parent_tid=[486]}, 88) = 486 [pid 463] rt_sigprocmask(SIG_SETMASK, [], [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 463] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 293] getdents64(4, [pid 463] futex(0x7f3c7032a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 293] <... getdents64 resumed>0x55557107b770 /* 2 entries */, 32768) = 48 [pid 463] futex(0x7f3c7032a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 293] getdents64(4, 0x55557107b770 /* 0 entries */, 32768) = 0 [pid 293] close(4) = 0 [pid 293] rmdir("./5/file0") = 0 [pid 293] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 486 attached [pid 293] newfstatat(AT_FDCWD, "./5/binderfs", [pid 486] set_robust_list(0x7f3c702389a0, 24 [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./5/binderfs" [pid 486] <... set_robust_list resumed>) = 0 [pid 293] <... unlink resumed>) = 0 [pid 486] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 293] getdents64(3, 0x555571073730 /* 0 entries */, 32768) = 0 [pid 293] close(3 [pid 486] openat(AT_FDCWD, "./file0", O_RDONLY [pid 293] <... close resumed>) = 0 [pid 293] rmdir("./5") = 0 [pid 293] mkdir("./6", 0777 [pid 486] <... openat resumed>) = 5 [pid 293] <... mkdir resumed>) = 0 [pid 486] futex(0x7f3c7032a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 293] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 463] <... futex resumed>) = 0 [pid 486] <... futex resumed>) = 1 [pid 463] futex(0x7f3c7032a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 293] <... openat resumed>) = 3 [pid 463] <... futex resumed>) = 0 [pid 463] futex(0x7f3c7032a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 293] ioctl(3, LOOP_CLR_FD [pid 486] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 293] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 293] close(3) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571072690) = 488 [pid 486] <... ioctl resumed>) = 0 [pid 486] futex(0x7f3c7032a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 463] <... futex resumed>) = 0 [pid 463] futex(0x7f3c7032a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 463] futex(0x7f3c7032a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 486] <... futex resumed>) = 1 [pid 486] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, NULL) = 0 [pid 486] futex(0x7f3c7032a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 463] <... futex resumed>) = 0 [pid 463] futex(0x7f3c7032a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 463] futex(0x7f3c7032a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 486] sched_setscheduler(0, SCHED_FIFO, [7] [pid 464] <... fsconfig resumed>) = 0 [pid 464] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 464] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 486] <... sched_setscheduler resumed>) = 0 [pid 486] futex(0x7f3c7032a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 463] <... futex resumed>) = 0 [pid 486] futex(0x7f3c7032a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 463] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 464] <... futex resumed>) = 0 [pid 463] <... futex resumed>) = 1 [pid 464] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 463] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 488 attached [pid 488] set_robust_list(0x5555710726a0, 24) = 0 [pid 488] chdir("./6" [pid 468] <... mount resumed>) = 0 [pid 488] <... chdir resumed>) = 0 [pid 468] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 488] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 465] +++ exited with 0 +++ [pid 488] <... prctl resumed>) = 0 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=465, si_uid=0, si_status=0, si_utime=12, si_stime=26} --- [pid 488] setpgid(0, 0 [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 488] <... setpgid resumed>) = 0 [pid 488] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 468] <... openat resumed>) = 3 [pid 488] <... openat resumed>) = 3 [pid 468] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 488] write(3, "1000", 4 [pid 468] <... openat resumed>) = 4 [pid 488] <... write resumed>) = 4 [pid 468] ioctl(4, LOOP_CLR_FD [pid 488] close(3 [pid 468] <... ioctl resumed>) = 0 [pid 488] <... close resumed>) = 0 [pid 468] close(4 [pid 488] symlink("/dev/binderfs", "./binderfs") = 0 [pid 292] <... restart_syscall resumed>) = 0 executing program [pid 488] write(1, "executing program\n", 18) = 18 [pid 488] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 468] <... close resumed>) = 0 [pid 292] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW [pid 488] <... futex resumed>) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 488] rt_sigaction(SIGRT_1, {sa_handler=0x7f3c702c31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3c702b4350}, [pid 468] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 488] <... rt_sigaction resumed>NULL, 8) = 0 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 488] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 292] getdents64(3, [pid 488] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 488] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 292] <... getdents64 resumed>0x555571073730 /* 4 entries */, 32768) = 112 [pid 468] <... futex resumed>) = 1 [pid 467] <... futex resumed>) = 0 [pid 292] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 488] <... mmap resumed>) = 0x7f3c70239000 [pid 467] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 488] mprotect(0x7f3c7023a000, 131072, PROT_READ|PROT_WRITE [pid 468] fspick(AT_FDCWD, "./file0", 0 [pid 488] <... mprotect resumed>) = 0 [pid 467] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 488] rt_sigprocmask(SIG_BLOCK, ~[], [pid 468] <... fspick resumed>) = 4 [pid 488] <... rt_sigprocmask resumed>[], 8) = 0 [pid 488] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70259990, parent_tid=0x7f3c70259990, exit_signal=0, stack=0x7f3c70239000, stack_size=0x20300, tls=0x7f3c702596c0} [pid 468] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 488] <... clone3 resumed> => {parent_tid=[489]}, 88) = 489 [pid 467] <... futex resumed>) = 0 [pid 488] rt_sigprocmask(SIG_SETMASK, [], [pid 468] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 467] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 488] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 467] <... futex resumed>) = 0 [pid 488] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 468] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 467] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 488] <... futex resumed>) = 0 [pid 468] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 488] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 463] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) ./strace-static-x86_64: Process 489 attached [pid 489] set_robust_list(0x7f3c702599a0, 24) = 0 [pid 489] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 489] memfd_create("syzkaller", 0) = 3 [pid 489] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3c67e39000 [pid 468] <... fsconfig resumed>) = 0 [pid 468] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 467] <... futex resumed>) = 0 [pid 468] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 467] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 468] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 467] <... futex resumed>) = 0 [pid 467] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 468] openat(AT_FDCWD, "./file0", O_RDONLY) = 5 [pid 468] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 467] <... futex resumed>) = 0 [pid 468] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 467] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 467] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 468] <... ioctl resumed>) = 0 [pid 468] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 467] <... futex resumed>) = 0 [pid 467] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 468] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 467] <... futex resumed>) = 0 [pid 468] <... prlimit64 resumed>NULL) = 0 [pid 467] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 468] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 467] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 468] <... futex resumed>) = 0 [pid 467] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 468] sched_setscheduler(0, SCHED_FIFO, [7] [pid 467] <... futex resumed>) = 0 [pid 468] <... sched_setscheduler resumed>) = 0 [ 35.062285][ T468] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [pid 467] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 468] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 executing program [pid 467] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 468] <... futex resumed>) = 0 [pid 467] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 468] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 467] <... futex resumed>) = 0 [pid 290] <... umount2 resumed>) = 0 [pid 290] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 290] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(4, 0x55557107b770 /* 2 entries */, 32768) = 48 [pid 290] getdents64(4, 0x55557107b770 /* 0 entries */, 32768) = 0 [pid 290] close(4) = 0 [pid 290] rmdir("./5/file0") = 0 [pid 290] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./5/binderfs") = 0 [pid 290] getdents64(3, 0x555571073730 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./5") = 0 [pid 290] mkdir("./6", 0777) = 0 [pid 290] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 290] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 290] close(3) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571072690) = 492 ./strace-static-x86_64: Process 492 attached [pid 492] set_robust_list(0x5555710726a0, 24) = 0 [pid 492] chdir("./6") = 0 [pid 492] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 492] setpgid(0, 0) = 0 [pid 492] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 492] write(3, "1000", 4) = 4 [pid 492] close(3) = 0 [pid 492] symlink("/dev/binderfs", "./binderfs") = 0 [pid 492] write(1, "executing program\n", 18) = 18 [pid 492] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 492] rt_sigaction(SIGRT_1, {sa_handler=0x7f3c702c31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3c702b4350}, NULL, 8) = 0 [pid 492] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 492] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3c70239000 [pid 492] mprotect(0x7f3c7023a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 492] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 492] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70259990, parent_tid=0x7f3c70259990, exit_signal=0, stack=0x7f3c70239000, stack_size=0x20300, tls=0x7f3c702596c0} => {parent_tid=[493]}, 88) = 493 [pid 492] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 492] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 492] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 493 attached [pid 493] set_robust_list(0x7f3c702599a0, 24) = 0 [pid 493] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 493] memfd_create("syzkaller", 0) = 3 [pid 493] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3c67e39000 [pid 467] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 468] <... mmap resumed>) = 0x200000000000 [pid 468] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 467] <... futex resumed>) = 0 [pid 468] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 467] exit_group(0 [pid 468] <... futex resumed>) = ? [pid 467] <... exit_group resumed>) = ? [pid 468] +++ exited with 0 +++ [pid 463] exit_group(0) = ? [pid 486] <... futex resumed>) = ? [pid 464] <... mmap resumed>) = ? [pid 486] +++ exited with 0 +++ [pid 467] +++ exited with 0 +++ [pid 294] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=467, si_uid=0, si_status=0, si_utime=8, si_stime=20} --- [pid 294] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 294] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 294] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] getdents64(3, 0x555571073730 /* 4 entries */, 32768) = 112 [pid 294] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 464] +++ exited with 0 +++ [pid 463] +++ exited with 0 +++ [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=463, si_uid=0, si_status=0, si_utime=5, si_stime=20} --- [pid 291] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 291] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x555571073730 /* 4 entries */, 32768) = 112 [pid 291] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 493] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 292] <... umount2 resumed>) = 0 [pid 292] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 292] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(4, 0x55557107b770 /* 2 entries */, 32768) = 48 [pid 292] getdents64(4, 0x55557107b770 /* 0 entries */, 32768) = 0 [pid 292] close(4) = 0 [pid 292] rmdir("./5/file0") = 0 [pid 292] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./5/binderfs") = 0 [pid 292] getdents64(3, 0x555571073730 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./5") = 0 [pid 292] mkdir("./6", 0777) = 0 [pid 292] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 292] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 292] close(3) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571072690) = 494 ./strace-static-x86_64: Process 494 attached [pid 494] set_robust_list(0x5555710726a0, 24) = 0 [pid 494] chdir("./6") = 0 [pid 494] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 494] setpgid(0, 0) = 0 [pid 494] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 494] write(3, "1000", 4) = 4 [pid 494] close(3) = 0 [pid 494] symlink("/dev/binderfs", "./binderfs") = 0 [pid 494] write(1, "executing program\n", 18executing program ) = 18 [pid 494] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 494] rt_sigaction(SIGRT_1, {sa_handler=0x7f3c702c31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3c702b4350}, NULL, 8) = 0 [pid 494] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 494] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3c70239000 [pid 494] mprotect(0x7f3c7023a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 494] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 494] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70259990, parent_tid=0x7f3c70259990, exit_signal=0, stack=0x7f3c70239000, stack_size=0x20300, tls=0x7f3c702596c0} => {parent_tid=[495]}, 88) = 495 [pid 494] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 494] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 494] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 495 attached [pid 495] set_robust_list(0x7f3c702599a0, 24) = 0 [pid 495] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 495] memfd_create("syzkaller", 0) = 3 [pid 495] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3c67e39000 [pid 493] <... write resumed>) = 20699119 [pid 493] munmap(0x7f3c67e39000, 138412032) = 0 [pid 493] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 493] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 493] close(3) = 0 [pid 493] close(4) = 0 [pid 493] mkdir("./file0", 0777) = 0 [pid 493] mount("/dev/loop0", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 294] <... umount2 resumed>) = 0 [pid 294] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] newfstatat(AT_FDCWD, "./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 294] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] getdents64(4, 0x55557107b770 /* 2 entries */, 32768) = 48 [pid 294] getdents64(4, 0x55557107b770 /* 0 entries */, 32768) = 0 [pid 294] close(4) = 0 [pid 294] rmdir("./6/file0") = 0 [pid 294] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] unlink("./6/binderfs") = 0 [pid 294] getdents64(3, 0x555571073730 /* 0 entries */, 32768) = 0 [pid 294] close(3) = 0 [pid 294] rmdir("./6") = 0 [pid 294] mkdir("./7", 0777) = 0 [pid 291] <... umount2 resumed>) = 0 [pid 294] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 294] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 294] close(3) = 0 [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 291] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(4, [pid 294] <... clone resumed>, child_tidptr=0x555571072690) = 496 [pid 291] <... getdents64 resumed>0x55557107b770 /* 2 entries */, 32768) = 48 [pid 291] getdents64(4, 0x55557107b770 /* 0 entries */, 32768) = 0 [pid 291] close(4) = 0 [pid 291] rmdir("./5/file0") = 0 [pid 291] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./5/binderfs") = 0 [pid 291] getdents64(3, 0x555571073730 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./5") = 0 [pid 291] mkdir("./6", 0777) = 0 [pid 291] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 291] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 291] close(3) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571072690) = 498 ./strace-static-x86_64: Process 496 attached [pid 496] set_robust_list(0x5555710726a0, 24) = 0 [pid 496] chdir("./7") = 0 [pid 496] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 496] setpgid(0, 0) = 0 [pid 496] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 496] write(3, "1000", 4) = 4 [pid 496] close(3) = 0 [pid 496] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 496] write(1, "executing program\n", 18) = 18 [pid 496] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 496] rt_sigaction(SIGRT_1, {sa_handler=0x7f3c702c31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3c702b4350}, NULL, 8) = 0 [pid 496] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 496] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3c70239000 [pid 496] mprotect(0x7f3c7023a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 496] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 496] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70259990, parent_tid=0x7f3c70259990, exit_signal=0, stack=0x7f3c70239000, stack_size=0x20300, tls=0x7f3c702596c0} => {parent_tid=[500]}, 88) = 500 [pid 496] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 496] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 35.458043][ T493] loop0: detected capacity change from 0 to 40427 [ 35.474640][ T493] F2FS-fs (loop0): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 496] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 489] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119./strace-static-x86_64: Process 498 attached [pid 498] set_robust_list(0x5555710726a0, 24) = 0 [pid 498] chdir("./6") = 0 [pid 498] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 executing program [pid 498] setpgid(0, 0) = 0 [pid 498] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 498] write(3, "1000", 4) = 4 [pid 498] close(3) = 0 [pid 498] symlink("/dev/binderfs", "./binderfs") = 0 [pid 498] write(1, "executing program\n", 18) = 18 [pid 498] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 498] rt_sigaction(SIGRT_1, {sa_handler=0x7f3c702c31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3c702b4350}, NULL, 8) = 0 [pid 498] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 498] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3c70239000 [pid 498] mprotect(0x7f3c7023a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 498] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 498] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70259990, parent_tid=0x7f3c70259990, exit_signal=0, stack=0x7f3c70239000, stack_size=0x20300, tls=0x7f3c702596c0} => {parent_tid=[501]}, 88) = 501 [pid 498] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 498] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 498] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 500 attached [pid 500] set_robust_list(0x7f3c702599a0, 24) = 0 [pid 500] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 500] memfd_create("syzkaller", 0) = 3 [pid 500] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3c67e39000 ./strace-static-x86_64: Process 501 attached [pid 501] set_robust_list(0x7f3c702599a0, 24) = 0 [pid 501] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 501] memfd_create("syzkaller", 0) = 3 [pid 501] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3c67e39000 [ 35.523126][ T493] F2FS-fs (loop0): Found nat_bits in checkpoint [pid 495] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 493] <... mount resumed>) = 0 [pid 493] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 493] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 493] ioctl(4, LOOP_CLR_FD) = 0 [pid 493] close(4) = 0 [pid 493] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 492] <... futex resumed>) = 0 [pid 492] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 492] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 493] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 493] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 492] <... futex resumed>) = 0 [pid 492] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 492] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 493] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [ 35.655709][ T493] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [pid 500] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 489] <... write resumed>) = 20699119 [pid 493] <... fsconfig resumed>) = 0 [pid 493] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 489] munmap(0x7f3c67e39000, 138412032 [pid 493] <... futex resumed>) = 1 [pid 492] <... futex resumed>) = 0 [pid 492] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 492] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 493] openat(AT_FDCWD, "./file0", O_RDONLY) = 5 [pid 493] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 492] <... futex resumed>) = 0 [pid 492] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 493] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 492] <... futex resumed>) = 0 [pid 492] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 493] <... ioctl resumed>) = 0 [pid 493] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 492] <... futex resumed>) = 0 [pid 492] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 492] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 493] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, NULL) = 0 [pid 493] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 492] <... futex resumed>) = 0 [pid 492] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 492] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 493] sched_setscheduler(0, SCHED_FIFO, [7]) = 0 [pid 493] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 492] <... futex resumed>) = 0 [pid 493] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 492] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 493] <... futex resumed>) = 0 [pid 492] <... futex resumed>) = 1 [pid 493] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 492] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 492] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 493] <... mmap resumed>) = 0x200000000000 [pid 493] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 493] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 492] exit_group(0 [pid 493] <... futex resumed>) = ? [pid 492] <... exit_group resumed>) = ? [pid 493] +++ exited with 0 +++ [pid 489] <... munmap resumed>) = 0 [pid 489] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 489] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 489] close(3) = 0 [pid 489] close(4) = 0 [pid 489] mkdir("./file0", 0777) = 0 [pid 489] mount("/dev/loop3", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [ 35.811542][ T489] loop3: detected capacity change from 0 to 40427 [ 35.832869][ T489] F2FS-fs (loop3): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 501] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 495] <... write resumed>) = 20699119 [pid 495] munmap(0x7f3c67e39000, 138412032) = 0 [pid 492] +++ exited with 0 +++ [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=492, si_uid=0, si_status=0, si_utime=10, si_stime=22} --- [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 495] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 495] ioctl(4, LOOP_SET_FD, 3 [pid 290] <... restart_syscall resumed>) = 0 [pid 290] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x555571073730 /* 4 entries */, 32768) = 112 [pid 290] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 500] <... write resumed>) = 20699119 [pid 495] <... ioctl resumed>) = 0 [pid 495] close(3) = 0 [pid 495] close(4) = 0 [pid 495] mkdir("./file0", 0777 [pid 500] munmap(0x7f3c67e39000, 138412032 [pid 495] <... mkdir resumed>) = 0 [pid 500] <... munmap resumed>) = 0 [pid 495] mount("/dev/loop2", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 500] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 35.864470][ T489] F2FS-fs (loop3): Found nat_bits in checkpoint [ 35.885352][ T495] loop2: detected capacity change from 0 to 40427 [pid 500] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 500] close(3) = 0 [pid 500] close(4) = 0 [pid 500] mkdir("./file0", 0777) = 0 [ 35.933234][ T495] F2FS-fs (loop2): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 35.942749][ T500] loop4: detected capacity change from 0 to 40427 [ 35.964927][ T500] F2FS-fs (loop4): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 35.975026][ T495] F2FS-fs (loop2): Found nat_bits in checkpoint [pid 500] mount("/dev/loop4", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 489] <... mount resumed>) = 0 [pid 489] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 489] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 489] ioctl(4, LOOP_CLR_FD) = 0 [pid 489] close(4) = 0 [pid 489] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 290] <... umount2 resumed>) = 0 [pid 489] <... futex resumed>) = 1 [pid 488] <... futex resumed>) = 0 [pid 290] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 489] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 488] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 489] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 488] <... futex resumed>) = 0 [pid 489] fspick(AT_FDCWD, "./file0", 0 [pid 488] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 489] <... fspick resumed>) = 4 [pid 290] newfstatat(AT_FDCWD, "./6/file0", [pid 489] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 488] <... futex resumed>) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 489] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 488] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 489] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 488] <... futex resumed>) = 0 [pid 489] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 488] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 290] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 290] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(4, 0x55557107b770 /* 2 entries */, 32768) = 48 [pid 290] getdents64(4, 0x55557107b770 /* 0 entries */, 32768) = 0 [pid 290] close(4) = 0 [pid 290] rmdir("./6/file0") = 0 [pid 290] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./6/binderfs") = 0 [ 35.992414][ T500] F2FS-fs (loop4): Found nat_bits in checkpoint [ 35.996799][ T489] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [pid 290] getdents64(3, 0x555571073730 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./6") = 0 [pid 290] mkdir("./7", 0777) = 0 [pid 290] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 290] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 290] close(3) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571072690) = 511 [pid 501] <... write resumed>) = 20699119 ./strace-static-x86_64: Process 511 attached [pid 511] set_robust_list(0x5555710726a0, 24 [pid 501] munmap(0x7f3c67e39000, 138412032 [pid 511] <... set_robust_list resumed>) = 0 [pid 511] chdir("./7") = 0 [pid 501] <... munmap resumed>) = 0 [pid 511] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 501] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 489] <... fsconfig resumed>) = 0 [pid 511] <... prctl resumed>) = 0 [pid 501] <... openat resumed>) = 4 [pid 489] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 511] setpgid(0, 0 [pid 501] ioctl(4, LOOP_SET_FD, 3 [pid 511] <... setpgid resumed>) = 0 [pid 489] <... futex resumed>) = 1 [pid 488] <... futex resumed>) = 0 [pid 511] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 501] <... ioctl resumed>) = 0 [pid 489] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 488] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 511] <... openat resumed>) = 3 [pid 501] close(3 [pid 495] <... mount resumed>) = 0 [pid 489] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 488] <... futex resumed>) = 0 [pid 511] write(3, "1000", 4 [pid 501] <... close resumed>) = 0 [pid 489] openat(AT_FDCWD, "./file0", O_RDONLY [pid 488] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 511] <... write resumed>) = 4 [pid 501] close(4 [pid 489] <... openat resumed>) = 5 [pid 511] close(3 [pid 501] <... close resumed>) = 0 [pid 511] <... close resumed>) = 0 [pid 489] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 501] mkdir("./file0", 0777 [pid 511] symlink("/dev/binderfs", "./binderfs" [pid 489] <... futex resumed>) = 1 [pid 488] <... futex resumed>) = 0 [pid 501] <... mkdir resumed>) = 0 [pid 489] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 488] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 511] <... symlink resumed>) = 0 executing program [pid 511] write(1, "executing program\n", 18 [pid 501] mount("/dev/loop1", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 488] <... futex resumed>) = 0 [pid 511] <... write resumed>) = 18 [pid 511] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 489] <... ioctl resumed>) = 0 [pid 488] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 489] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 511] <... futex resumed>) = 0 [pid 489] <... futex resumed>) = 1 [pid 488] <... futex resumed>) = 0 [pid 511] rt_sigaction(SIGRT_1, {sa_handler=0x7f3c702c31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3c702b4350}, NULL, 8) = 0 [pid 489] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 488] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 511] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 489] <... prlimit64 resumed>NULL) = 0 [pid 488] <... futex resumed>) = 0 [pid 489] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 488] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 489] <... futex resumed>) = 0 [pid 488] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 489] sched_setscheduler(0, SCHED_FIFO, [7] [pid 488] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 489] <... sched_setscheduler resumed>) = 0 [pid 488] <... futex resumed>) = 0 [pid 489] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 488] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 489] <... futex resumed>) = 0 [pid 488] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 489] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 488] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 489] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 488] <... futex resumed>) = 0 [pid 489] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 488] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 511] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 500] <... mount resumed>) = 0 [pid 495] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 511] <... mmap resumed>) = 0x7f3c70239000 [pid 511] mprotect(0x7f3c7023a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 511] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 511] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70259990, parent_tid=0x7f3c70259990, exit_signal=0, stack=0x7f3c70239000, stack_size=0x20300, tls=0x7f3c702596c0} => {parent_tid=[513]}, 88) = 513 [pid 511] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 511] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 511] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 500] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 495] <... openat resumed>) = 3 [pid 495] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 500] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 495] <... openat resumed>) = 4 [pid 500] <... openat resumed>) = 4 [pid 500] ioctl(4, LOOP_CLR_FD) = 0 [pid 495] ioctl(4, LOOP_CLR_FD [pid 500] close(4 [pid 495] <... ioctl resumed>) = 0 [pid 500] <... close resumed>) = 0 [pid 495] close(4 [pid 500] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 495] <... close resumed>) = 0 [pid 500] <... futex resumed>) = 1 [pid 495] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 494] <... futex resumed>) = 0 [pid 494] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 494] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 500] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 495] <... futex resumed>) = 1 [pid 495] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 495] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 494] <... futex resumed>) = 0 [pid 494] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 494] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 495] <... futex resumed>) = 1 [pid 495] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 496] <... futex resumed>) = 0 [pid 496] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 500] <... futex resumed>) = 0 [pid 496] <... futex resumed>) = 1 [pid 500] fspick(AT_FDCWD, "./file0", 0 [pid 496] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 500] <... fspick resumed>) = 4 [pid 500] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 496] <... futex resumed>) = 0 [pid 500] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 496] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 36.071701][ T501] loop1: detected capacity change from 0 to 40427 [ 36.074655][ T495] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 36.092048][ T500] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 36.099656][ T501] F2FS-fs (loop1): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 496] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 489] <... mmap resumed>) = 0x200000000000 ./strace-static-x86_64: Process 513 attached [pid 489] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 513] set_robust_list(0x7f3c702599a0, 24 [pid 489] <... futex resumed>) = 1 [pid 513] <... set_robust_list resumed>) = 0 [pid 489] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 513] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 513] memfd_create("syzkaller", 0 [pid 488] <... futex resumed>) = 0 [pid 513] <... memfd_create resumed>) = 3 [pid 495] <... fsconfig resumed>) = 0 [pid 488] exit_group(0 [pid 500] <... fsconfig resumed>) = 0 [pid 513] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 495] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 489] <... futex resumed>) = ? [pid 488] <... exit_group resumed>) = ? [pid 513] <... mmap resumed>) = 0x7f3c67e39000 [pid 500] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 495] <... futex resumed>) = 1 [pid 489] +++ exited with 0 +++ [pid 494] <... futex resumed>) = 0 [pid 495] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 494] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 500] <... futex resumed>) = 1 [pid 496] <... futex resumed>) = 0 [pid 494] <... futex resumed>) = 0 [pid 495] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 495] openat(AT_FDCWD, "./file0", O_RDONLY) = 5 [pid 495] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 495] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 496] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 494] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 496] <... futex resumed>) = 0 [pid 500] openat(AT_FDCWD, "./file0", O_RDONLY [pid 496] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 494] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 500] <... openat resumed>) = 5 [pid 494] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 500] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 496] <... futex resumed>) = 0 [pid 494] <... futex resumed>) = 1 [pid 500] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 496] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 495] <... futex resumed>) = 0 [pid 495] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 500] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 496] <... futex resumed>) = 0 [pid 494] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 500] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 496] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 500] <... ioctl resumed>) = 0 [pid 495] <... ioctl resumed>) = 0 [pid 495] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 495] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 500] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 494] <... futex resumed>) = 0 [pid 500] <... futex resumed>) = 1 [pid 494] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 500] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 496] <... futex resumed>) = 0 [pid 496] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 494] <... futex resumed>) = 1 [pid 500] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 495] <... futex resumed>) = 0 [pid 495] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, NULL) = 0 [pid 495] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 496] <... futex resumed>) = 0 [pid 494] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 500] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 495] <... futex resumed>) = 0 [pid 495] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 494] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 500] <... prlimit64 resumed>NULL) = 0 [pid 496] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 494] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 500] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 496] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 494] <... futex resumed>) = 1 [pid 500] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 496] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 494] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 500] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 496] <... futex resumed>) = 0 [pid 500] sched_setscheduler(0, SCHED_FIFO, [7] [pid 496] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 500] <... sched_setscheduler resumed>) = 0 [pid 500] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 495] <... futex resumed>) = 0 [pid 500] <... futex resumed>) = 1 [pid 496] <... futex resumed>) = 0 [pid 500] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [ 36.173281][ T501] F2FS-fs (loop1): Found nat_bits in checkpoint [pid 496] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 500] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 496] <... futex resumed>) = 0 [pid 500] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 496] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 495] sched_setscheduler(0, SCHED_FIFO, [7]) = 0 [pid 495] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 495] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 500] <... mmap resumed>) = 0x200000000000 [pid 494] <... futex resumed>) = 0 [pid 500] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 496] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 494] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 500] <... futex resumed>) = 0 [pid 495] <... futex resumed>) = 0 [pid 494] <... futex resumed>) = 1 [pid 500] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 496] exit_group(0 [pid 495] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 494] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 501] <... mount resumed>) = 0 [pid 500] <... futex resumed>) = ? [pid 496] <... exit_group resumed>) = ? [pid 495] <... mmap resumed>) = 0x200000000000 [pid 495] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 500] +++ exited with 0 +++ [pid 495] <... futex resumed>) = 0 [pid 495] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 494] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 501] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 494] exit_group(0 [pid 501] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 495] <... futex resumed>) = ? [pid 494] <... exit_group resumed>) = ? [pid 501] <... openat resumed>) = 4 [pid 495] +++ exited with 0 +++ [pid 501] ioctl(4, LOOP_CLR_FD) = 0 [pid 501] close(4) = 0 [pid 501] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 498] <... futex resumed>) = 0 [pid 498] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 498] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 501] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 501] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 498] <... futex resumed>) = 0 [pid 498] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 498] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 501] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 488] +++ exited with 0 +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=488, si_uid=0, si_status=0, si_utime=11, si_stime=23} --- [ 36.279140][ T501] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 501] <... fsconfig resumed>) = 0 [pid 501] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 498] <... futex resumed>) = 0 [pid 498] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 498] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 501] openat(AT_FDCWD, "./file0", O_RDONLY [pid 293] <... restart_syscall resumed>) = 0 [pid 501] <... openat resumed>) = 5 [pid 501] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 293] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW [pid 498] <... futex resumed>) = 0 [pid 498] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 498] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 501] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 501] <... ioctl resumed>) = 0 [pid 293] <... openat resumed>) = 3 [pid 501] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 293] newfstatat(3, "", [pid 498] <... futex resumed>) = 0 [pid 501] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 498] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 498] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 501] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 293] getdents64(3, [pid 501] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, NULL) = 0 [pid 293] <... getdents64 resumed>0x555571073730 /* 4 entries */, 32768) = 112 [pid 501] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 293] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 501] <... futex resumed>) = 1 [pid 498] <... futex resumed>) = 0 [pid 501] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 498] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 498] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 513] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 501] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 501] sched_setscheduler(0, SCHED_FIFO, [7]) = 0 [pid 501] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 501] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 498] <... futex resumed>) = 0 [pid 498] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 501] <... futex resumed>) = 0 [pid 498] <... futex resumed>) = 1 [pid 501] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 498] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 494] +++ exited with 0 +++ [pid 498] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 498] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 498] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 498] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 501] <... mmap resumed>) = 0x200000000000 [pid 501] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=494, si_uid=0, si_status=0, si_utime=9, si_stime=25} --- [pid 501] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 498] exit_group(0 [pid 292] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW [pid 501] <... futex resumed>) = ? [pid 498] <... exit_group resumed>) = ? [pid 501] +++ exited with 0 +++ [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x555571073730 /* 4 entries */, 32768) = 112 [pid 292] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] <... umount2 resumed>) = 0 [pid 293] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 293] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(4, 0x55557107b770 /* 2 entries */, 32768) = 48 [pid 293] getdents64(4, 0x55557107b770 /* 0 entries */, 32768) = 0 [pid 293] close(4) = 0 [pid 293] rmdir("./6/file0") = 0 [pid 293] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./6/binderfs") = 0 [pid 293] getdents64(3, 0x555571073730 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./6") = 0 [pid 293] mkdir("./7", 0777) = 0 [pid 293] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 293] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 293] close(3) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571072690) = 522 ./strace-static-x86_64: Process 522 attached [pid 522] set_robust_list(0x5555710726a0, 24) = 0 [pid 522] chdir("./7") = 0 [pid 522] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 522] setpgid(0, 0) = 0 [pid 522] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 522] write(3, "1000", 4) = 4 [pid 522] close(3) = 0 [pid 522] symlink("/dev/binderfs", "./binderfs") = 0 [pid 522] write(1, "executing program\n", 18executing program ) = 18 [pid 522] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 522] rt_sigaction(SIGRT_1, {sa_handler=0x7f3c702c31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3c702b4350}, NULL, 8) = 0 [pid 522] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 522] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3c70239000 [pid 522] mprotect(0x7f3c7023a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 522] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 522] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70259990, parent_tid=0x7f3c70259990, exit_signal=0, stack=0x7f3c70239000, stack_size=0x20300, tls=0x7f3c702596c0} => {parent_tid=[523]}, 88) = 523 [pid 522] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 522] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 522] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 496] +++ exited with 0 +++ [pid 294] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=496, si_uid=0, si_status=0, si_utime=7, si_stime=27} --- [pid 294] restart_syscall(<... resuming interrupted clone ...>) = 0 ./strace-static-x86_64: Process 523 attached [pid 523] set_robust_list(0x7f3c702599a0, 24 [pid 294] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW [pid 523] <... set_robust_list resumed>) = 0 [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 523] rt_sigprocmask(SIG_SETMASK, [], [pid 294] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 523] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 294] <... openat resumed>) = 3 [pid 294] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 523] memfd_create("syzkaller", 0 [pid 294] getdents64(3, [pid 523] <... memfd_create resumed>) = 3 [pid 294] <... getdents64 resumed>0x555571073730 /* 4 entries */, 32768) = 112 [pid 294] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 523] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3c67e39000 [pid 498] +++ exited with 0 +++ [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=498, si_uid=0, si_status=0, si_utime=8, si_stime=28} --- [pid 291] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 291] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x555571073730 /* 4 entries */, 32768) = 112 [pid 291] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... umount2 resumed>) = 0 [pid 292] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 292] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(4, 0x55557107b770 /* 2 entries */, 32768) = 48 [pid 292] getdents64(4, 0x55557107b770 /* 0 entries */, 32768) = 0 [pid 292] close(4) = 0 [pid 292] rmdir("./6/file0") = 0 [pid 292] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./6/binderfs") = 0 [pid 292] getdents64(3, 0x555571073730 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./6") = 0 [pid 292] mkdir("./7", 0777) = 0 [pid 292] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 292] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 292] close(3) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571072690) = 524 ./strace-static-x86_64: Process 524 attached [pid 524] set_robust_list(0x5555710726a0, 24) = 0 [pid 524] chdir("./7") = 0 [pid 524] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 524] setpgid(0, 0) = 0 [pid 524] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 524] write(3, "1000", 4) = 4 [pid 524] close(3) = 0 [pid 524] symlink("/dev/binderfs", "./binderfs") = 0 [pid 524] write(1, "executing program\n", 18executing program ) = 18 [pid 524] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 524] rt_sigaction(SIGRT_1, {sa_handler=0x7f3c702c31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3c702b4350}, NULL, 8) = 0 [pid 524] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 524] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3c70239000 [pid 524] mprotect(0x7f3c7023a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 524] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 524] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70259990, parent_tid=0x7f3c70259990, exit_signal=0, stack=0x7f3c70239000, stack_size=0x20300, tls=0x7f3c702596c0} => {parent_tid=[525]}, 88) = 525 [pid 524] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 524] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 524] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 513] <... write resumed>) = 20699119 ./strace-static-x86_64: Process 525 attached [pid 525] set_robust_list(0x7f3c702599a0, 24 [pid 513] munmap(0x7f3c67e39000, 138412032 [pid 525] <... set_robust_list resumed>) = 0 [pid 525] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 525] memfd_create("syzkaller", 0) = 3 [pid 525] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3c67e39000 [pid 513] <... munmap resumed>) = 0 [pid 513] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 513] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 513] close(3) = 0 [pid 513] close(4) = 0 [pid 513] mkdir("./file0", 0777) = 0 [ 36.588526][ T513] loop0: detected capacity change from 0 to 40427 [ 36.628886][ T513] F2FS-fs (loop0): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 513] mount("/dev/loop0", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 291] <... umount2 resumed>) = 0 [pid 294] <... umount2 resumed>) = 0 [pid 294] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] newfstatat(AT_FDCWD, "./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 294] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] getdents64(4, 0x55557107b770 /* 2 entries */, 32768) = 48 [pid 294] getdents64(4, 0x55557107b770 /* 0 entries */, 32768) = 0 [pid 294] close(4) = 0 [pid 294] rmdir("./7/file0") = 0 [pid 294] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] unlink("./7/binderfs") = 0 [pid 294] getdents64(3, 0x555571073730 /* 0 entries */, 32768) = 0 [pid 294] close(3) = 0 [pid 294] rmdir("./7") = 0 [pid 294] mkdir("./8", 0777) = 0 [pid 291] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 291] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 294] <... openat resumed>) = 3 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 294] ioctl(3, LOOP_CLR_FD [pid 291] <... openat resumed>) = 4 [pid 294] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 294] close(3 [pid 291] newfstatat(4, "", [pid 294] <... close resumed>) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] getdents64(4, 0x55557107b770 /* 2 entries */, 32768) = 48 [pid 291] getdents64(4, 0x55557107b770 /* 0 entries */, 32768) = 0 [pid 291] close(4) = 0 [pid 291] rmdir("./6/file0") = 0 [pid 294] <... clone resumed>, child_tidptr=0x555571072690) = 528 [pid 291] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./6/binderfs") = 0 [pid 291] getdents64(3, 0x555571073730 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./6") = 0 [pid 291] mkdir("./7", 0777) = 0 [pid 291] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 291] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 36.689601][ T513] F2FS-fs (loop0): Found nat_bits in checkpoint [pid 291] close(3) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 528 attached [pid 528] set_robust_list(0x5555710726a0, 24) = 0 [pid 291] <... clone resumed>, child_tidptr=0x555571072690) = 529 [pid 528] chdir("./8") = 0 [pid 528] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 528] setpgid(0, 0) = 0 [pid 528] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 528] write(3, "1000", 4) = 4 [pid 528] close(3) = 0 [pid 528] symlink("/dev/binderfs", "./binderfs") = 0 [pid 528] write(1, "executing program\n", 18executing program ) = 18 ./strace-static-x86_64: Process 529 attached [pid 528] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 529] set_robust_list(0x5555710726a0, 24 [pid 528] <... futex resumed>) = 0 [pid 529] <... set_robust_list resumed>) = 0 [pid 529] chdir("./7" [pid 528] rt_sigaction(SIGRT_1, {sa_handler=0x7f3c702c31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3c702b4350}, NULL, 8) = 0 [pid 529] <... chdir resumed>) = 0 [pid 529] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 529] setpgid(0, 0 [pid 528] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 529] <... setpgid resumed>) = 0 [pid 529] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 528] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 528] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 529] <... openat resumed>) = 3 [pid 528] <... mmap resumed>) = 0x7f3c70239000 [pid 529] write(3, "1000", 4) = 4 [pid 529] close(3) = 0 [pid 528] mprotect(0x7f3c7023a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 529] symlink("/dev/binderfs", "./binderfs" [pid 528] rt_sigprocmask(SIG_BLOCK, ~[], [pid 529] <... symlink resumed>) = 0 [pid 528] <... rt_sigprocmask resumed>[], 8) = 0 executing program [pid 529] write(1, "executing program\n", 18) = 18 [pid 529] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 529] rt_sigaction(SIGRT_1, {sa_handler=0x7f3c702c31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3c702b4350}, [pid 528] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70259990, parent_tid=0x7f3c70259990, exit_signal=0, stack=0x7f3c70239000, stack_size=0x20300, tls=0x7f3c702596c0} [pid 529] <... rt_sigaction resumed>NULL, 8) = 0 [pid 529] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 529] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3c70239000 [pid 529] mprotect(0x7f3c7023a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 529] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 529] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70259990, parent_tid=0x7f3c70259990, exit_signal=0, stack=0x7f3c70239000, stack_size=0x20300, tls=0x7f3c702596c0} [pid 528] <... clone3 resumed> => {parent_tid=[530]}, 88) = 530 [pid 529] <... clone3 resumed> => {parent_tid=[531]}, 88) = 531 [pid 529] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 529] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 529] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 531 attached [pid 531] set_robust_list(0x7f3c702599a0, 24) = 0 [pid 531] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 531] memfd_create("syzkaller", 0) = 3 [pid 531] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3c67e39000 [pid 528] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 528] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 528] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 530 attached [pid 523] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 530] set_robust_list(0x7f3c702599a0, 24) = 0 [pid 530] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 530] memfd_create("syzkaller", 0) = 3 [pid 530] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3c67e39000 [pid 513] <... mount resumed>) = 0 [pid 513] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 513] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 513] ioctl(4, LOOP_CLR_FD) = 0 [pid 513] close(4) = 0 [pid 513] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 513] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 511] <... futex resumed>) = 0 [pid 511] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 513] <... futex resumed>) = 0 [pid 513] fspick(AT_FDCWD, "./file0", 0 [pid 511] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 513] <... fspick resumed>) = 4 [pid 513] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 513] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 511] <... futex resumed>) = 0 [pid 511] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 513] <... futex resumed>) = 0 [pid 513] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 511] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 513] <... fsconfig resumed>) = 0 [pid 513] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 513] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 511] <... futex resumed>) = 0 [pid 511] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 513] <... futex resumed>) = 0 [pid 511] <... futex resumed>) = 1 [pid 513] openat(AT_FDCWD, "./file0", O_RDONLY) = 5 [pid 511] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 513] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 513] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 511] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 511] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 513] <... futex resumed>) = 0 [pid 511] <... futex resumed>) = 1 [pid 513] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 511] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 513] <... ioctl resumed>) = 0 [pid 513] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 513] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 511] <... futex resumed>) = 0 [pid 511] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 513] <... futex resumed>) = 0 [pid 511] <... futex resumed>) = 1 [pid 513] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, NULL) = 0 [pid 513] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 513] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 511] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 511] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 513] <... futex resumed>) = 0 [pid 511] <... futex resumed>) = 1 [pid 513] sched_setscheduler(0, SCHED_FIFO, [7] [pid 511] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 513] <... sched_setscheduler resumed>) = 0 [pid 513] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 511] <... futex resumed>) = 0 [pid 513] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 511] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 513] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 511] <... futex resumed>) = 0 [ 36.797380][ T513] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [pid 513] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 511] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 525] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 513] <... mmap resumed>) = 0x200000000000 [pid 513] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 513] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 511] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 511] exit_group(0 [pid 513] <... futex resumed>) = ? [pid 511] <... exit_group resumed>) = ? [pid 513] +++ exited with 0 +++ [pid 530] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 511] +++ exited with 0 +++ [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=511, si_uid=0, si_status=0, si_utime=7, si_stime=26} --- [pid 290] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 290] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x555571073730 /* 4 entries */, 32768) = 112 [pid 290] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 523] <... write resumed>) = 20699119 [pid 523] munmap(0x7f3c67e39000, 138412032) = 0 [pid 523] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 523] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 523] close(3) = 0 [pid 523] close(4) = 0 [pid 523] mkdir("./file0", 0777) = 0 [ 37.043700][ T523] loop3: detected capacity change from 0 to 40427 [ 37.076368][ T523] F2FS-fs (loop3): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 523] mount("/dev/loop3", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 525] <... write resumed>) = 20699119 [pid 525] munmap(0x7f3c67e39000, 138412032) = 0 [pid 525] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 525] ioctl(4, LOOP_SET_FD, 3 [pid 530] <... write resumed>) = 20699119 [pid 525] <... ioctl resumed>) = 0 [pid 525] close(3 [pid 530] munmap(0x7f3c67e39000, 138412032 [pid 525] <... close resumed>) = 0 [pid 525] close(4) = 0 [pid 525] mkdir("./file0", 0777 [pid 530] <... munmap resumed>) = 0 [pid 530] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 37.101690][ T523] F2FS-fs (loop3): Found nat_bits in checkpoint [ 37.141802][ T525] loop2: detected capacity change from 0 to 40427 [pid 530] ioctl(4, LOOP_SET_FD, 3 [pid 525] <... mkdir resumed>) = 0 [pid 525] mount("/dev/loop2", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 530] <... ioctl resumed>) = 0 [pid 530] close(3) = 0 [pid 530] close(4) = 0 [pid 530] mkdir("./file0", 0777) = 0 [pid 530] mount("/dev/loop4", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 290] <... umount2 resumed>) = 0 [pid 290] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 290] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(4, 0x55557107b770 /* 2 entries */, 32768) = 48 [pid 290] getdents64(4, 0x55557107b770 /* 0 entries */, 32768) = 0 [pid 290] close(4) = 0 [pid 290] rmdir("./7/file0") = 0 [pid 290] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./7/binderfs") = 0 [pid 290] getdents64(3, 0x555571073730 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./7") = 0 [pid 290] mkdir("./8", 0777) = 0 [pid 290] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 290] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 290] close(3) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571072690) = 537 [ 37.153587][ T530] loop4: detected capacity change from 0 to 40427 [ 37.169602][ T525] F2FS-fs (loop2): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 37.180583][ T530] F2FS-fs (loop4): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root ./strace-static-x86_64: Process 537 attached [pid 537] set_robust_list(0x5555710726a0, 24 [pid 531] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 537] <... set_robust_list resumed>) = 0 [pid 537] chdir("./8") = 0 [pid 537] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 537] setpgid(0, 0) = 0 [pid 537] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 537] write(3, "1000", 4) = 4 [pid 537] close(3) = 0 [pid 537] symlink("/dev/binderfs", "./binderfs") = 0 [pid 537] write(1, "executing program\n", 18executing program ) = 18 [pid 537] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 537] rt_sigaction(SIGRT_1, {sa_handler=0x7f3c702c31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3c702b4350}, NULL, 8) = 0 [pid 537] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 537] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3c70239000 [pid 537] mprotect(0x7f3c7023a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 537] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 537] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70259990, parent_tid=0x7f3c70259990, exit_signal=0, stack=0x7f3c70239000, stack_size=0x20300, tls=0x7f3c702596c0} => {parent_tid=[541]}, 88) = 541 [pid 537] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 523] <... mount resumed>) = 0 [pid 537] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 537] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 541 attached [pid 523] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 541] set_robust_list(0x7f3c702599a0, 24) = 0 [pid 523] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 541] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 523] <... openat resumed>) = 4 [pid 523] ioctl(4, LOOP_CLR_FD) = 0 [pid 541] memfd_create("syzkaller", 0 [pid 523] close(4) = 0 [pid 523] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 522] <... futex resumed>) = 0 [pid 522] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 523] fspick(AT_FDCWD, "./file0", 0 [pid 522] <... futex resumed>) = 0 [pid 523] <... fspick resumed>) = 4 [pid 522] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 523] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 522] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 522] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 522] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 523] <... futex resumed>) = 0 [pid 523] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 541] <... memfd_create resumed>) = 3 [pid 541] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3c67e39000 [pid 523] <... fsconfig resumed>) = 0 [pid 523] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 522] <... futex resumed>) = 0 [pid 523] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 522] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 523] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 522] <... futex resumed>) = 0 [pid 523] openat(AT_FDCWD, "./file0", O_RDONLY [pid 522] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 523] <... openat resumed>) = 5 [pid 523] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 522] <... futex resumed>) = 0 [pid 523] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 522] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 523] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 522] <... futex resumed>) = 0 [pid 523] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 522] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 523] <... ioctl resumed>) = 0 [pid 523] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 522] <... futex resumed>) = 0 [pid 523] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 522] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 523] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 522] <... futex resumed>) = 0 [pid 523] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 522] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 523] <... prlimit64 resumed>NULL) = 0 [pid 523] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 522] <... futex resumed>) = 0 [pid 523] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 522] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 523] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 522] <... futex resumed>) = 0 [pid 523] sched_setscheduler(0, SCHED_FIFO, [7] [pid 522] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 523] <... sched_setscheduler resumed>) = 0 [pid 523] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 37.206550][ T530] F2FS-fs (loop4): Found nat_bits in checkpoint [ 37.220532][ T523] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 37.234011][ T525] F2FS-fs (loop2): Found nat_bits in checkpoint [pid 522] <... futex resumed>) = 0 [pid 523] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 522] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 523] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 522] <... futex resumed>) = 0 [pid 523] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 522] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 523] <... mmap resumed>) = 0x200000000000 [pid 523] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 522] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 523] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 522] exit_group(0 [pid 523] <... futex resumed>) = ? [pid 522] <... exit_group resumed>) = ? [pid 523] +++ exited with 0 +++ [pid 525] <... mount resumed>) = 0 [pid 525] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 531] <... write resumed>) = 20699119 [pid 531] munmap(0x7f3c67e39000, 138412032 [pid 525] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 525] ioctl(4, LOOP_CLR_FD) = 0 [pid 525] close(4 [pid 531] <... munmap resumed>) = 0 [pid 525] <... close resumed>) = 0 [pid 525] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 525] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 530] <... mount resumed>) = 0 [pid 530] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 531] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 524] <... futex resumed>) = 0 [pid 531] <... openat resumed>) = 4 [pid 524] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 530] <... openat resumed>) = 3 [pid 531] ioctl(4, LOOP_SET_FD, 3 [pid 524] <... futex resumed>) = 1 [pid 525] <... futex resumed>) = 0 [ 37.350621][ T525] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 37.380289][ T530] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [pid 525] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 524] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 525] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 524] <... futex resumed>) = 0 [pid 525] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 524] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 524] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 530] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 530] ioctl(4, LOOP_CLR_FD) = 0 [pid 530] close(4) = 0 [pid 530] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 530] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 528] <... futex resumed>) = 0 [pid 528] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 530] <... futex resumed>) = 0 [pid 530] fspick(AT_FDCWD, "./file0", 0 [pid 528] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 530] <... fspick resumed>) = 4 [pid 530] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 528] <... futex resumed>) = 0 [pid 530] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 528] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 530] <... futex resumed>) = 0 [pid 530] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 528] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 530] <... fsconfig resumed>) = 0 [pid 530] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 528] <... futex resumed>) = 0 [pid 530] openat(AT_FDCWD, "./file0", O_RDONLY [pid 528] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 530] <... openat resumed>) = 5 [pid 528] <... futex resumed>) = 0 [pid 530] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 528] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 530] <... futex resumed>) = 0 [pid 528] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 530] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 528] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 528] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 531] <... ioctl resumed>) = 0 [pid 530] <... ioctl resumed>) = 0 [pid 530] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 528] <... futex resumed>) = 0 [pid 530] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 528] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 530] <... prlimit64 resumed>NULL) = 0 [pid 528] <... futex resumed>) = 0 [pid 528] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 530] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 528] <... futex resumed>) = 0 [pid 531] close(3 [pid 528] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 530] sched_setscheduler(0, SCHED_FIFO, [7] [pid 528] <... futex resumed>) = 0 [pid 530] <... sched_setscheduler resumed>) = 0 [pid 528] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 531] <... close resumed>) = 0 [pid 530] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 528] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 530] <... futex resumed>) = 0 [pid 528] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [ 37.400502][ T531] loop1: detected capacity change from 0 to 40427 [pid 530] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 531] close(4 [pid 530] <... mmap resumed>) = 0x200000000000 [pid 528] <... futex resumed>) = 0 [pid 525] <... fsconfig resumed>) = 0 [pid 524] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 522] +++ exited with 0 +++ [pid 530] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 525] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 524] futex(0x7f3c7032a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=522, si_uid=0, si_status=0, si_utime=9, si_stime=22} --- [pid 530] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 525] <... futex resumed>) = 0 [pid 524] <... futex resumed>) = 0 [pid 531] <... close resumed>) = 0 [pid 528] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 525] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 524] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3c70218000 [pid 293] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW [pid 528] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 531] mkdir("./file0", 0777 [pid 524] mprotect(0x7f3c70219000, 131072, PROT_READ|PROT_WRITE [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 528] exit_group(0 [pid 524] <... mprotect resumed>) = 0 [pid 293] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 524] rt_sigprocmask(SIG_BLOCK, ~[], [pid 293] <... openat resumed>) = 3 [pid 524] <... rt_sigprocmask resumed>[], 8) = 0 [pid 293] newfstatat(3, "", [pid 531] <... mkdir resumed>) = 0 [pid 530] <... futex resumed>) = ? [pid 528] <... exit_group resumed>) = ? [pid 524] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70238990, parent_tid=0x7f3c70238990, exit_signal=0, stack=0x7f3c70218000, stack_size=0x20300, tls=0x7f3c702386c0} [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 530] +++ exited with 0 +++ [pid 293] getdents64(3, [pid 524] <... clone3 resumed> => {parent_tid=[549]}, 88) = 549 [pid 293] <... getdents64 resumed>0x555571073730 /* 4 entries */, 32768) = 112 [pid 524] rt_sigprocmask(SIG_SETMASK, [], [pid 293] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 531] mount("/dev/loop1", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 524] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 524] futex(0x7f3c7032a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 524] futex(0x7f3c7032a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 541] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119./strace-static-x86_64: Process 549 attached [pid 549] set_robust_list(0x7f3c702389a0, 24) = 0 [pid 549] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 549] openat(AT_FDCWD, "./file0", O_RDONLY) = 5 [pid 549] futex(0x7f3c7032a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 524] <... futex resumed>) = 0 [pid 549] futex(0x7f3c7032a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 524] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 525] <... futex resumed>) = 0 [pid 524] <... futex resumed>) = 1 [pid 525] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 524] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 525] <... ioctl resumed>) = 0 [pid 525] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 525] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 524] <... futex resumed>) = 0 [pid 524] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 525] <... futex resumed>) = 0 [pid 524] <... futex resumed>) = 1 [pid 525] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, NULL) = 0 [pid 525] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 524] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 525] <... futex resumed>) = 0 [pid 525] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 524] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 524] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 525] <... futex resumed>) = 0 [pid 524] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 525] sched_setscheduler(0, SCHED_FIFO, [7]) = 0 [pid 525] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 524] <... futex resumed>) = 0 [pid 525] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 524] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [ 37.495529][ T531] F2FS-fs (loop1): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 525] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 524] <... futex resumed>) = 0 [pid 528] +++ exited with 0 +++ [pid 524] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 294] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=528, si_uid=0, si_status=0, si_utime=11, si_stime=26} --- [pid 294] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 294] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] getdents64(3, [pid 525] <... mmap resumed>) = 0x200000000000 [pid 294] <... getdents64 resumed>0x555571073730 /* 4 entries */, 32768) = 112 [pid 525] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 524] <... futex resumed>) = 0 [pid 294] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 525] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 524] exit_group(0 [pid 549] <... futex resumed>) = ? [pid 525] <... futex resumed>) = ? [pid 524] <... exit_group resumed>) = ? [pid 293] <... umount2 resumed>) = 0 [pid 549] +++ exited with 0 +++ [pid 525] +++ exited with 0 +++ [pid 293] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 293] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(4, 0x55557107b770 /* 2 entries */, 32768) = 48 [pid 293] getdents64(4, 0x55557107b770 /* 0 entries */, 32768) = 0 [pid 293] close(4) = 0 [pid 293] rmdir("./7/file0") = 0 [pid 293] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./7/binderfs") = 0 [pid 293] getdents64(3, 0x555571073730 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./7") = 0 [pid 293] mkdir("./8", 0777) = 0 [pid 293] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 293] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 293] close(3) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571072690) = 552 ./strace-static-x86_64: Process 552 attached [pid 552] set_robust_list(0x5555710726a0, 24) = 0 [pid 552] chdir("./8") = 0 [pid 552] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 552] setpgid(0, 0) = 0 [ 37.585491][ T531] F2FS-fs (loop1): Found nat_bits in checkpoint [pid 552] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 552] write(3, "1000", 4) = 4 [pid 552] close(3) = 0 [pid 552] symlink("/dev/binderfs", "./binderfs") = 0 [pid 552] write(1, "executing program\n", 18executing program ) = 18 [pid 552] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 552] rt_sigaction(SIGRT_1, {sa_handler=0x7f3c702c31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3c702b4350}, NULL, 8) = 0 [pid 552] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 552] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3c70239000 [pid 552] mprotect(0x7f3c7023a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 552] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 552] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70259990, parent_tid=0x7f3c70259990, exit_signal=0, stack=0x7f3c70239000, stack_size=0x20300, tls=0x7f3c702596c0} => {parent_tid=[553]}, 88) = 553 [pid 552] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 552] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 552] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 553 attached [pid 553] set_robust_list(0x7f3c702599a0, 24) = 0 [pid 553] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 553] memfd_create("syzkaller", 0) = 3 [pid 553] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3c67e39000 [pid 524] +++ exited with 0 +++ [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=524, si_uid=0, si_status=0, si_utime=11, si_stime=24} --- [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 541] <... write resumed>) = 20699119 [pid 541] munmap(0x7f3c67e39000, 138412032) = 0 [pid 541] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 541] ioctl(4, LOOP_SET_FD, 3 [pid 292] <... restart_syscall resumed>) = 0 [pid 292] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x555571073730 /* 4 entries */, 32768) = 112 [pid 292] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 541] <... ioctl resumed>) = 0 [pid 541] close(3) = 0 [pid 541] close(4) = 0 [pid 541] mkdir("./file0", 0777) = 0 [pid 541] mount("/dev/loop0", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 531] <... mount resumed>) = 0 [pid 531] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 531] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 531] ioctl(4, LOOP_CLR_FD) = 0 [pid 531] close(4) = 0 [pid 531] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 529] <... futex resumed>) = 0 [pid 531] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 529] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 531] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 529] <... futex resumed>) = 0 [pid 531] fspick(AT_FDCWD, "./file0", 0 [pid 529] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 531] <... fspick resumed>) = 4 [pid 531] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 529] <... futex resumed>) = 0 [pid 531] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 529] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 531] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 531] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 529] <... futex resumed>) = 0 [pid 529] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 294] <... umount2 resumed>) = 0 [pid 294] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] newfstatat(AT_FDCWD, "./8/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 294] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] getdents64(4, 0x55557107b770 /* 2 entries */, 32768) = 48 [pid 294] getdents64(4, 0x55557107b770 /* 0 entries */, 32768) = 0 [pid 294] close(4) = 0 [pid 294] rmdir("./8/file0") = 0 [pid 294] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 531] <... fsconfig resumed>) = 0 [pid 294] unlink("./8/binderfs") = 0 [pid 294] getdents64(3, 0x555571073730 /* 0 entries */, 32768) = 0 [ 37.708325][ T541] loop0: detected capacity change from 0 to 40427 [ 37.727891][ T531] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 37.743858][ T541] F2FS-fs (loop0): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 294] close(3) = 0 [pid 294] rmdir("./8") = 0 [pid 294] mkdir("./9", 0777) = 0 [pid 294] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 294] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 294] close(3 [pid 531] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 529] <... futex resumed>) = 0 [pid 531] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 529] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 531] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 529] <... futex resumed>) = 0 [pid 531] openat(AT_FDCWD, "./file0", O_RDONLY [pid 529] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 531] <... openat resumed>) = 5 [pid 531] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 529] <... futex resumed>) = 0 [pid 531] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 529] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 531] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 529] <... futex resumed>) = 0 [pid 531] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 529] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 531] <... ioctl resumed>) = 0 [pid 531] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 529] <... futex resumed>) = 0 [pid 531] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 529] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 531] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 531] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 529] <... futex resumed>) = 0 [pid 531] <... prlimit64 resumed>NULL) = 0 [pid 529] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 531] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 529] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 531] <... futex resumed>) = 0 [pid 529] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 531] sched_setscheduler(0, SCHED_FIFO, [7] [pid 529] <... futex resumed>) = 0 [pid 531] <... sched_setscheduler resumed>) = 0 [pid 531] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 529] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 531] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 529] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 37.781640][ T541] F2FS-fs (loop0): Found nat_bits in checkpoint [pid 529] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 531] <... futex resumed>) = 0 [pid 529] <... futex resumed>) = 1 [pid 531] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 529] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 294] <... close resumed>) = 0 [pid 531] <... mmap resumed>) = 0x200000000000 [pid 531] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 529] <... futex resumed>) = 0 [pid 531] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 529] exit_group(0 [pid 531] <... futex resumed>) = ? [pid 529] <... exit_group resumed>) = ? [pid 531] +++ exited with 0 +++ [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 541] <... mount resumed>) = 0 [pid 294] <... clone resumed>, child_tidptr=0x555571072690) = 558 ./strace-static-x86_64: Process 558 attached [pid 558] set_robust_list(0x5555710726a0, 24) = 0 [pid 558] chdir("./9") = 0 [pid 558] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 558] setpgid(0, 0) = 0 [pid 558] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 558] write(3, "1000", 4) = 4 [pid 558] close(3) = 0 [pid 558] symlink("/dev/binderfs", "./binderfs") = 0 [pid 558] write(1, "executing program\n", 18 [pid 541] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 541] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 541] ioctl(4, LOOP_CLR_FD) = 0 [pid 541] close(4executing program [pid 558] <... write resumed>) = 18 [pid 558] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 558] rt_sigaction(SIGRT_1, {sa_handler=0x7f3c702c31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3c702b4350}, NULL, 8) = 0 [pid 558] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 558] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 541] <... close resumed>) = 0 [pid 541] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 537] <... futex resumed>) = 0 [pid 541] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 537] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 541] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 541] fspick(AT_FDCWD, "./file0", 0 [pid 537] <... futex resumed>) = 0 [pid 541] <... fspick resumed>) = 4 [pid 537] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 541] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 537] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 541] <... futex resumed>) = 0 [pid 537] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 541] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 537] <... futex resumed>) = 0 [pid 537] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 558] <... mmap resumed>) = 0x7f3c70239000 [pid 558] mprotect(0x7f3c7023a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 558] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 558] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70259990, parent_tid=0x7f3c70259990, exit_signal=0, stack=0x7f3c70239000, stack_size=0x20300, tls=0x7f3c702596c0} => {parent_tid=[560]}, 88) = 560 [pid 558] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 541] <... fsconfig resumed>) = 0 [pid 541] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 537] <... futex resumed>) = 0 [pid 541] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 537] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 541] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 537] <... futex resumed>) = 0 [pid 541] openat(AT_FDCWD, "./file0", O_RDONLY [pid 537] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 541] <... openat resumed>) = 5 [pid 541] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 537] <... futex resumed>) = 0 [pid 541] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 537] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 541] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 537] <... futex resumed>) = 0 [pid 541] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 537] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 558] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 541] <... ioctl resumed>) = 0 [pid 541] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 537] <... futex resumed>) = 0 [pid 529] +++ exited with 0 +++ [pid 541] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 537] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=529, si_uid=0, si_status=0, si_utime=8, si_stime=25} --- [pid 541] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 537] <... futex resumed>) = 0 [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 541] <... prlimit64 resumed>NULL) = 0 [pid 537] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 541] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 537] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 541] <... futex resumed>) = 0 [pid 537] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 541] sched_setscheduler(0, SCHED_FIFO, [7] [pid 537] <... futex resumed>) = 0 [pid 541] <... sched_setscheduler resumed>) = 0 [pid 537] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 541] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 537] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 541] <... futex resumed>) = 0 [pid 537] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 541] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 537] <... futex resumed>) = 0 [pid 558] <... futex resumed>) = 0 [pid 558] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 560 attached [pid 560] set_robust_list(0x7f3c702599a0, 24) = 0 [pid 560] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 560] memfd_create("syzkaller", 0) = 3 [pid 560] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3c67e39000 [pid 291] <... restart_syscall resumed>) = 0 [pid 291] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x555571073730 /* 4 entries */, 32768) = 112 [ 37.863606][ T541] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [pid 291] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... umount2 resumed>) = 0 [pid 292] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./7/file0", [pid 541] <... mmap resumed>) = 0x200000000000 [pid 537] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 541] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 537] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 541] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 537] exit_group(0 [pid 541] <... futex resumed>) = ? [pid 537] <... exit_group resumed>) = ? [pid 541] +++ exited with 0 +++ [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 292] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(4, 0x55557107b770 /* 2 entries */, 32768) = 48 [pid 292] getdents64(4, 0x55557107b770 /* 0 entries */, 32768) = 0 [pid 292] close(4) = 0 [pid 292] rmdir("./7/file0") = 0 [pid 292] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./7/binderfs") = 0 [pid 292] getdents64(3, 0x555571073730 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./7") = 0 [pid 292] mkdir("./8", 0777) = 0 [pid 292] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 292] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 292] close(3) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571072690) = 562 ./strace-static-x86_64: Process 562 attached [pid 562] set_robust_list(0x5555710726a0, 24) = 0 [pid 562] chdir("./8") = 0 [pid 553] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 562] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 562] setpgid(0, 0) = 0 [pid 562] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 562] write(3, "1000", 4) = 4 [pid 562] close(3) = 0 [pid 562] symlink("/dev/binderfs", "./binderfs") = 0 [pid 562] write(1, "executing program\n", 18executing program ) = 18 [pid 562] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 562] rt_sigaction(SIGRT_1, {sa_handler=0x7f3c702c31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3c702b4350}, NULL, 8) = 0 [pid 562] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 562] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3c70239000 [pid 562] mprotect(0x7f3c7023a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 562] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 562] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70259990, parent_tid=0x7f3c70259990, exit_signal=0, stack=0x7f3c70239000, stack_size=0x20300, tls=0x7f3c702596c0} => {parent_tid=[563]}, 88) = 563 [pid 562] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 562] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 562] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 537] +++ exited with 0 +++ [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=537, si_uid=0, si_status=0, si_utime=9, si_stime=24} --- [pid 290] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 290] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x555571073730 /* 4 entries */, 32768) = 112 [pid 290] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 563 attached [pid 563] set_robust_list(0x7f3c702599a0, 24) = 0 [pid 563] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 563] memfd_create("syzkaller", 0) = 3 [pid 563] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3c67e39000 [pid 291] <... umount2 resumed>) = 0 [pid 291] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... umount2 resumed>) = 0 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 291] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(4, 0x55557107b770 /* 2 entries */, 32768) = 48 [pid 291] getdents64(4, 0x55557107b770 /* 0 entries */, 32768) = 0 [pid 291] close(4) = 0 [pid 291] rmdir("./7/file0") = 0 [pid 291] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] unlink("./7/binderfs") = 0 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] getdents64(3, 0x555571073730 /* 0 entries */, 32768) = 0 [pid 290] newfstatat(AT_FDCWD, "./8/file0", [pid 291] close(3) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] rmdir("./7") = 0 [pid 291] mkdir("./8", 0777 [pid 290] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... mkdir resumed>) = 0 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 290] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 290] <... openat resumed>) = 4 [pid 291] close(3) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] <... clone resumed>, child_tidptr=0x555571072690) = 564 [pid 290] getdents64(4, 0x55557107b770 /* 2 entries */, 32768) = 48 [pid 290] getdents64(4, 0x55557107b770 /* 0 entries */, 32768) = 0 [pid 290] close(4) = 0 [pid 290] rmdir("./8/file0") = 0 [pid 290] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./8/binderfs") = 0 [pid 290] getdents64(3, 0x555571073730 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./8") = 0 [pid 290] mkdir("./9", 0777) = 0 [pid 290] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 290] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 290] close(3) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571072690) = 565 ./strace-static-x86_64: Process 565 attached ./strace-static-x86_64: Process 564 attached [pid 553] <... write resumed>) = 20699119 [pid 565] set_robust_list(0x5555710726a0, 24) = 0 [pid 565] chdir("./9") = 0 [pid 565] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 565] setpgid(0, 0) = 0 [pid 565] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 565] write(3, "1000", 4) = 4 [pid 565] close(3) = 0 [pid 565] symlink("/dev/binderfs", "./binderfs" [pid 564] set_robust_list(0x5555710726a0, 24 [pid 565] <... symlink resumed>) = 0 executing program [pid 565] write(1, "executing program\n", 18) = 18 [pid 565] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 565] rt_sigaction(SIGRT_1, {sa_handler=0x7f3c702c31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3c702b4350}, NULL, 8) = 0 [pid 565] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 553] munmap(0x7f3c67e39000, 138412032 [pid 565] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 565] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3c70239000 [pid 565] mprotect(0x7f3c7023a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 564] <... set_robust_list resumed>) = 0 [pid 565] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 565] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70259990, parent_tid=0x7f3c70259990, exit_signal=0, stack=0x7f3c70239000, stack_size=0x20300, tls=0x7f3c702596c0} => {parent_tid=[566]}, 88) = 566 [pid 565] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 565] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 565] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 564] chdir("./8" [pid 553] <... munmap resumed>) = 0 [pid 564] <... chdir resumed>) = 0 [pid 564] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 564] setpgid(0, 0) = 0 [pid 564] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 564] write(3, "1000", 4) = 4 [pid 564] close(3) = 0 [pid 553] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 564] symlink("/dev/binderfs", "./binderfs") = 0 [pid 564] write(1, "executing program\n", 18executing program ) = 18 [pid 564] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 564] rt_sigaction(SIGRT_1, {sa_handler=0x7f3c702c31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3c702b4350}, NULL, 8) = 0 [pid 564] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 564] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3c70239000 [pid 564] mprotect(0x7f3c7023a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 564] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 553] ioctl(4, LOOP_SET_FD, 3 [pid 564] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70259990, parent_tid=0x7f3c70259990, exit_signal=0, stack=0x7f3c70239000, stack_size=0x20300, tls=0x7f3c702596c0} => {parent_tid=[567]}, 88) = 567 [pid 564] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 564] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 564] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 566 attached [pid 566] set_robust_list(0x7f3c702599a0, 24) = 0 [pid 566] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 566] memfd_create("syzkaller", 0) = 3 [pid 566] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3c67e39000 ./strace-static-x86_64: Process 567 attached [pid 567] set_robust_list(0x7f3c702599a0, 24) = 0 [pid 567] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 567] memfd_create("syzkaller", 0) = 3 [pid 567] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3c67e39000 [pid 553] <... ioctl resumed>) = 0 [pid 553] close(3) = 0 [pid 553] close(4) = 0 [pid 553] mkdir("./file0", 0777) = 0 [pid 553] mount("/dev/loop3", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 560] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [ 38.213164][ T553] loop3: detected capacity change from 0 to 40427 [ 38.235474][ T553] F2FS-fs (loop3): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 38.255773][ T553] F2FS-fs (loop3): Found nat_bits in checkpoint [pid 563] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 553] <... mount resumed>) = 0 [pid 553] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 553] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 553] ioctl(4, LOOP_CLR_FD) = 0 [pid 553] close(4) = 0 [pid 553] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 552] <... futex resumed>) = 0 [pid 553] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 552] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 553] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 552] <... futex resumed>) = 0 [pid 553] fspick(AT_FDCWD, "./file0", 0 [pid 552] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 553] <... fspick resumed>) = 4 [pid 553] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 552] <... futex resumed>) = 0 [pid 553] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 552] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 553] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 552] <... futex resumed>) = 0 [pid 553] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 552] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 553] <... fsconfig resumed>) = 0 [pid 553] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 553] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 552] <... futex resumed>) = 0 [pid 552] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 553] <... futex resumed>) = 0 [pid 552] <... futex resumed>) = 1 [pid 553] openat(AT_FDCWD, "./file0", O_RDONLY [pid 552] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 553] <... openat resumed>) = 5 [pid 553] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 552] <... futex resumed>) = 0 [pid 553] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 552] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 553] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 552] <... futex resumed>) = 0 [pid 553] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 552] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 553] <... ioctl resumed>) = 0 [pid 553] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 552] <... futex resumed>) = 0 [pid 553] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 552] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 553] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 552] <... futex resumed>) = 0 [pid 553] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 552] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 553] <... prlimit64 resumed>NULL) = 0 [pid 553] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 552] <... futex resumed>) = 0 [pid 553] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 552] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 553] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 552] <... futex resumed>) = 0 [pid 553] sched_setscheduler(0, SCHED_FIFO, [7] [pid 552] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 553] <... sched_setscheduler resumed>) = 0 [pid 553] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 552] <... futex resumed>) = 0 [pid 553] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 552] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 553] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 552] <... futex resumed>) = 0 [pid 553] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [ 38.338606][ T553] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [pid 552] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 553] <... mmap resumed>) = 0x200000000000 [pid 553] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 552] <... futex resumed>) = 0 [pid 553] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 552] exit_group(0 [pid 553] <... futex resumed>) = ? [pid 552] <... exit_group resumed>) = ? [pid 553] +++ exited with 0 +++ [pid 563] <... write resumed>) = 20699119 [pid 552] +++ exited with 0 +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=552, si_uid=0, si_status=0, si_utime=8, si_stime=27} --- [pid 293] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 293] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x555571073730 /* 4 entries */, 32768) = 112 [pid 293] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 563] munmap(0x7f3c67e39000, 138412032) = 0 [pid 563] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 563] ioctl(4, LOOP_SET_FD, 3 [pid 560] <... write resumed>) = 20699119 [pid 560] munmap(0x7f3c67e39000, 138412032) = 0 [pid 560] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 560] ioctl(4, LOOP_SET_FD, 3 [pid 563] <... ioctl resumed>) = 0 [pid 563] close(3) = 0 [pid 563] close(4) = 0 [pid 563] mkdir("./file0", 0777) = 0 [pid 563] mount("/dev/loop2", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 560] <... ioctl resumed>) = 0 [pid 560] close(3) = 0 [pid 560] close(4) = 0 [pid 560] mkdir("./file0", 0777) = 0 [pid 560] mount("/dev/loop4", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [ 38.522822][ T563] loop2: detected capacity change from 0 to 40427 [ 38.530907][ T560] loop4: detected capacity change from 0 to 40427 [ 38.552104][ T563] F2FS-fs (loop2): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 567] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [ 38.570346][ T560] F2FS-fs (loop4): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 38.600487][ T560] F2FS-fs (loop4): Found nat_bits in checkpoint [pid 566] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 293] <... umount2 resumed>) = 0 [pid 293] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./8/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 293] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(4, 0x55557107b770 /* 2 entries */, 32768) = 48 [pid 293] getdents64(4, 0x55557107b770 /* 0 entries */, 32768) = 0 [pid 293] close(4) = 0 [pid 293] rmdir("./8/file0") = 0 [pid 293] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./8/binderfs") = 0 [pid 293] getdents64(3, 0x555571073730 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [ 38.631344][ T563] F2FS-fs (loop2): Found nat_bits in checkpoint [pid 293] rmdir("./8") = 0 [pid 293] mkdir("./9", 0777) = 0 [pid 293] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 293] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 293] close(3) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571072690) = 576 ./strace-static-x86_64: Process 576 attached [pid 560] <... mount resumed>) = 0 [pid 560] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 560] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 560] ioctl(4, LOOP_CLR_FD) = 0 [pid 560] close(4) = 0 [pid 560] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 558] <... futex resumed>) = 0 [pid 558] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 558] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 560] <... futex resumed>) = 1 [pid 560] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 560] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 558] <... futex resumed>) = 0 [pid 558] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 558] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 560] <... futex resumed>) = 1 [pid 560] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 576] set_robust_list(0x5555710726a0, 24) = 0 [pid 576] chdir("./9") = 0 [pid 576] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 576] setpgid(0, 0) = 0 [pid 576] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 38.681922][ T560] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [pid 576] write(3, "1000", 4 [pid 563] <... mount resumed>) = 0 [pid 576] <... write resumed>) = 4 [pid 576] close(3) = 0 [pid 576] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 576] write(1, "executing program\n", 18) = 18 [pid 576] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 576] rt_sigaction(SIGRT_1, {sa_handler=0x7f3c702c31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3c702b4350}, NULL, 8) = 0 [pid 576] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 576] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3c70239000 [pid 576] mprotect(0x7f3c7023a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 576] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 576] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70259990, parent_tid=0x7f3c70259990, exit_signal=0, stack=0x7f3c70239000, stack_size=0x20300, tls=0x7f3c702596c0} => {parent_tid=[578]}, 88) = 578 [pid 576] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 576] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 576] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 563] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY./strace-static-x86_64: Process 578 attached ) = 3 [pid 578] set_robust_list(0x7f3c702599a0, 24) = 0 [pid 578] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 578] memfd_create("syzkaller", 0) = 3 [pid 578] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3c67e39000 [pid 563] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 560] <... fsconfig resumed>) = 0 [pid 563] ioctl(4, LOOP_CLR_FD) = 0 [pid 560] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 563] close(4 [pid 560] <... futex resumed>) = 1 [pid 563] <... close resumed>) = 0 [pid 558] <... futex resumed>) = 0 [pid 560] openat(AT_FDCWD, "./file0", O_RDONLY [pid 558] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 560] <... openat resumed>) = 5 [pid 558] <... futex resumed>) = 0 [pid 560] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 558] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 560] <... futex resumed>) = 0 [pid 558] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 560] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 558] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 558] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 563] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 563] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 562] <... futex resumed>) = 0 [pid 560] <... ioctl resumed>) = 0 [pid 562] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 560] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 563] <... futex resumed>) = 0 [pid 562] <... futex resumed>) = 1 [pid 560] <... futex resumed>) = 1 [pid 558] <... futex resumed>) = 0 [pid 563] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 562] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 560] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 558] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 563] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 562] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 560] <... prlimit64 resumed>NULL) = 0 [pid 558] <... futex resumed>) = 0 [pid 563] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 562] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 560] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 558] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 563] <... futex resumed>) = 0 [pid 562] <... futex resumed>) = 1 [pid 560] <... futex resumed>) = 0 [pid 558] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 563] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 562] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 560] sched_setscheduler(0, SCHED_FIFO, [7] [pid 558] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 560] <... sched_setscheduler resumed>) = 0 [pid 558] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 560] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 558] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 560] <... futex resumed>) = 0 [pid 558] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [ 38.722342][ T563] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [pid 560] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 558] <... futex resumed>) = 0 [pid 567] <... write resumed>) = 20699119 [pid 566] <... write resumed>) = 20699119 [pid 563] <... fsconfig resumed>) = 0 [pid 567] munmap(0x7f3c67e39000, 138412032 [pid 566] munmap(0x7f3c67e39000, 138412032 [pid 563] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 567] <... munmap resumed>) = 0 [pid 566] <... munmap resumed>) = 0 [pid 563] <... futex resumed>) = 1 [pid 567] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 566] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 563] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 567] <... openat resumed>) = 4 [pid 566] <... openat resumed>) = 4 [pid 567] ioctl(4, LOOP_SET_FD, 3 [pid 566] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 566] close(3) = 0 [pid 566] close(4) = 0 [pid 566] mkdir("./file0", 0777 [pid 562] <... futex resumed>) = 0 [pid 558] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 562] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 563] <... futex resumed>) = 0 [pid 562] <... futex resumed>) = 1 [pid 563] openat(AT_FDCWD, "./file0", O_RDONLY [pid 562] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 563] <... openat resumed>) = 5 [pid 560] <... mmap resumed>) = 0x200000000000 [pid 563] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 560] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 563] <... futex resumed>) = 1 [pid 562] <... futex resumed>) = 0 [pid 560] <... futex resumed>) = 1 [pid 558] <... futex resumed>) = 0 [pid 563] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 562] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 560] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 563] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 562] <... futex resumed>) = 0 [pid 558] exit_group(0 [pid 563] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 562] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 560] <... futex resumed>) = ? [pid 558] <... exit_group resumed>) = ? [pid 563] <... ioctl resumed>) = 0 [pid 560] +++ exited with 0 +++ [pid 563] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 562] <... futex resumed>) = 0 [pid 563] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 562] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 563] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 562] <... futex resumed>) = 0 [pid 563] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 562] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 563] <... prlimit64 resumed>NULL) = 0 [pid 563] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 562] <... futex resumed>) = 0 [pid 563] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 562] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 563] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 562] <... futex resumed>) = 0 [pid 563] sched_setscheduler(0, SCHED_FIFO, [7] [pid 562] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 567] <... ioctl resumed>) = 0 [pid 563] <... sched_setscheduler resumed>) = 0 [pid 567] close(3 [pid 563] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 562] <... futex resumed>) = 0 [pid 567] <... close resumed>) = 0 [pid 563] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 562] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 567] close(4 [pid 563] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 562] <... futex resumed>) = 0 [ 38.792881][ T566] loop0: detected capacity change from 0 to 40427 [ 38.800049][ T567] loop1: detected capacity change from 0 to 40427 [pid 567] <... close resumed>) = 0 [pid 563] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 562] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 567] mkdir("./file0", 0777 [pid 566] <... mkdir resumed>) = 0 [pid 567] <... mkdir resumed>) = 0 [pid 566] mount("/dev/loop0", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 567] mount("/dev/loop1", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 563] <... mmap resumed>) = 0x200000000000 [pid 563] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 562] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 563] <... futex resumed>) = 0 [pid 562] exit_group(0 [pid 563] ????() = ? [pid 562] <... exit_group resumed>) = ? [pid 563] +++ exited with 0 +++ [pid 558] +++ exited with 0 +++ [pid 294] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=558, si_uid=0, si_status=0, si_utime=6, si_stime=24} --- [pid 294] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 294] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 294] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] getdents64(3, 0x555571073730 /* 4 entries */, 32768) = 112 [ 38.892584][ T566] F2FS-fs (loop0): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 38.901306][ T567] F2FS-fs (loop1): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 294] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 562] +++ exited with 0 +++ [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=562, si_uid=0, si_status=0, si_utime=9, si_stime=20} --- [pid 292] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 292] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x555571073730 /* 4 entries */, 32768) = 112 [ 38.943664][ T567] F2FS-fs (loop1): Found nat_bits in checkpoint [ 38.972081][ T566] F2FS-fs (loop0): Found nat_bits in checkpoint [pid 292] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 578] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 294] <... umount2 resumed>) = 0 [pid 294] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] newfstatat(AT_FDCWD, "./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 294] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] getdents64(4, 0x55557107b770 /* 2 entries */, 32768) = 48 [pid 294] getdents64(4, 0x55557107b770 /* 0 entries */, 32768) = 0 [pid 294] close(4) = 0 [pid 294] rmdir("./9/file0") = 0 [pid 294] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] unlink("./9/binderfs") = 0 [pid 294] getdents64(3, 0x555571073730 /* 0 entries */, 32768) = 0 [pid 294] close(3) = 0 [pid 294] rmdir("./9" [pid 567] <... mount resumed>) = 0 [pid 294] <... rmdir resumed>) = 0 [pid 294] mkdir("./10", 0777 [pid 567] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 294] <... mkdir resumed>) = 0 [pid 294] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 294] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 294] close(3) = 0 [pid 567] <... openat resumed>) = 3 [pid 567] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 567] ioctl(4, LOOP_CLR_FD) = 0 [pid 567] close(4 [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571072690) = 586 [pid 567] <... close resumed>) = 0 [pid 567] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 564] <... futex resumed>) = 0 [pid 564] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 564] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 567] <... futex resumed>) = 1 [pid 567] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 567] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 564] <... futex resumed>) = 0 [pid 564] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 564] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 567] <... futex resumed>) = 1 [pid 567] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 566] <... mount resumed>) = 0 [pid 566] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 566] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 566] ioctl(4, LOOP_CLR_FD) = 0 [pid 566] close(4./strace-static-x86_64: Process 586 attached ) = 0 [pid 566] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 565] <... futex resumed>) = 0 [pid 566] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 565] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 566] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 565] <... futex resumed>) = 0 [pid 566] fspick(AT_FDCWD, "./file0", 0 [pid 565] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 566] <... fspick resumed>) = 4 [pid 566] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 565] <... futex resumed>) = 0 [pid 566] <... futex resumed>) = 1 [pid 565] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 566] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 565] <... futex resumed>) = 0 [pid 565] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 586] set_robust_list(0x5555710726a0, 24) = 0 [pid 586] chdir("./10") = 0 [pid 586] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 586] setpgid(0, 0) = 0 [pid 586] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 586] write(3, "1000", 4) = 4 [pid 586] close(3) = 0 [pid 586] symlink("/dev/binderfs", "./binderfs") = 0 [pid 586] write(1, "executing program\n", 18executing program ) = 18 [pid 586] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 586] rt_sigaction(SIGRT_1, {sa_handler=0x7f3c702c31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3c702b4350}, NULL, 8) = 0 [pid 586] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 586] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3c70239000 [pid 586] mprotect(0x7f3c7023a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 586] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 586] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70259990, parent_tid=0x7f3c70259990, exit_signal=0, stack=0x7f3c70239000, stack_size=0x20300, tls=0x7f3c702596c0} => {parent_tid=[590]}, 88) = 590 [pid 586] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 586] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 39.058764][ T567] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 39.078117][ T566] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [pid 586] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 567] <... fsconfig resumed>) = 0 [pid 567] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 564] <... futex resumed>) = 0 [pid 567] openat(AT_FDCWD, "./file0", O_RDONLY [pid 564] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 567] <... openat resumed>) = 5 [pid 564] <... futex resumed>) = 0 [pid 564] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 567] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 564] <... futex resumed>) = 0 [pid 564] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 564] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 567] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140) = 0 [pid 567] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 564] <... futex resumed>) = 0 [pid 567] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 564] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 567] <... prlimit64 resumed>NULL) = 0 [pid 564] <... futex resumed>) = 0 [pid 567] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 564] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 567] <... futex resumed>) = 0 [pid 564] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 567] sched_setscheduler(0, SCHED_FIFO, [7] [pid 564] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 567] <... sched_setscheduler resumed>) = 0 [pid 564] <... futex resumed>) = 0 [pid 567] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 564] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 567] <... futex resumed>) = 0 [pid 564] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 567] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 564] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 567] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 564] <... futex resumed>) = 0 [pid 567] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 564] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 578] <... write resumed>) = 20699119 [pid 566] <... fsconfig resumed>) = 0 [pid 292] <... umount2 resumed>) = 0 [pid 578] munmap(0x7f3c67e39000, 138412032 [pid 566] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 578] <... munmap resumed>) = 0 [pid 566] <... futex resumed>) = 1 [pid 565] <... futex resumed>) = 0 [pid 578] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 566] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 565] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 578] <... openat resumed>) = 4 [pid 566] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 565] <... futex resumed>) = 0 [pid 578] ioctl(4, LOOP_SET_FD, 3 [pid 566] openat(AT_FDCWD, "./file0", O_RDONLY [pid 565] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 566] <... openat resumed>) = 5 [pid 566] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 565] <... futex resumed>) = 0 [pid 566] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 565] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 566] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 565] <... futex resumed>) = 0 [pid 566] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 565] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 292] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./8/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 292] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(4, 0x55557107b770 /* 2 entries */, 32768) = 48 [pid 292] getdents64(4, 0x55557107b770 /* 0 entries */, 32768) = 0 [pid 292] close(4) = 0 [pid 292] rmdir("./8/file0") = 0 [pid 292] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./8/binderfs") = 0 [pid 292] getdents64(3, 0x555571073730 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./8") = 0 [pid 292] mkdir("./9", 0777) = 0 [pid 292] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 292] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 292] close(3) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571072690) = 592 [pid 578] <... ioctl resumed>) = 0 [pid 578] close(3) = 0 [pid 578] close(4) = 0 [pid 578] mkdir("./file0", 0777) = 0 [pid 578] mount("/dev/loop3", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"..../strace-static-x86_64: Process 590 attached [pid 590] set_robust_list(0x7f3c702599a0, 24) = 0 [pid 590] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 590] memfd_create("syzkaller", 0) = 3 [pid 590] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3c67e39000 [pid 567] <... mmap resumed>) = 0x200000000000 [pid 567] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 567] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 564] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 564] exit_group(0 [pid 567] <... futex resumed>) = ? [pid 564] <... exit_group resumed>) = ? [pid 567] +++ exited with 0 +++ [pid 566] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 592 attached [pid 566] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 592] set_robust_list(0x5555710726a0, 24 [pid 566] <... futex resumed>) = 1 [pid 565] <... futex resumed>) = 0 [pid 592] <... set_robust_list resumed>) = 0 [pid 566] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 592] chdir("./9" [pid 565] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 592] <... chdir resumed>) = 0 [pid 566] <... futex resumed>) = 0 [pid 565] <... futex resumed>) = 1 [pid 592] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 566] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 565] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 592] <... prctl resumed>) = 0 [pid 566] <... prlimit64 resumed>NULL) = 0 [pid 592] setpgid(0, 0 [pid 566] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 592] <... setpgid resumed>) = 0 [pid 566] <... futex resumed>) = 1 [pid 592] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 566] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 565] <... futex resumed>) = 0 [pid 592] <... openat resumed>) = 3 [pid 565] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 592] write(3, "1000", 4 [pid 566] <... futex resumed>) = 0 [pid 565] <... futex resumed>) = 1 [pid 592] <... write resumed>) = 4 [pid 566] sched_setscheduler(0, SCHED_FIFO, [7] [pid 565] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 592] close(3) = 0 [pid 566] <... sched_setscheduler resumed>) = 0 [pid 592] symlink("/dev/binderfs", "./binderfs" [pid 566] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 592] <... symlink resumed>) = 0 [pid 566] <... futex resumed>) = 1 [pid 565] <... futex resumed>) = 0 executing program [pid 592] write(1, "executing program\n", 18 [pid 566] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 592] <... write resumed>) = 18 [pid 565] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 566] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 592] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 566] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 592] <... futex resumed>) = 0 [pid 565] <... futex resumed>) = 0 [ 39.164781][ T578] loop3: detected capacity change from 0 to 40427 [ 39.201424][ T578] F2FS-fs (loop3): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 565] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 566] <... mmap resumed>) = 0x200000000000 [pid 592] rt_sigaction(SIGRT_1, {sa_handler=0x7f3c702c31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3c702b4350}, [pid 566] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 592] <... rt_sigaction resumed>NULL, 8) = 0 [pid 566] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 592] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 565] exit_group(0 [pid 592] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 592] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 566] <... futex resumed>) = ? [pid 565] <... exit_group resumed>) = ? [pid 592] <... mmap resumed>) = 0x7f3c70239000 [pid 566] +++ exited with 0 +++ [pid 592] mprotect(0x7f3c7023a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 592] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 592] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70259990, parent_tid=0x7f3c70259990, exit_signal=0, stack=0x7f3c70239000, stack_size=0x20300, tls=0x7f3c702596c0} => {parent_tid=[595]}, 88) = 595 [pid 592] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 592] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 592] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 564] +++ exited with 0 +++ [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=564, si_uid=0, si_status=0, si_utime=6, si_stime=30} --- [pid 291] restart_syscall(<... resuming interrupted clone ...>) = 0 [ 39.246746][ T578] F2FS-fs (loop3): Found nat_bits in checkpoint [pid 291] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x555571073730 /* 4 entries */, 32768) = 112 [pid 291] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 595 attached [pid 595] set_robust_list(0x7f3c702599a0, 24) = 0 [pid 595] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 595] memfd_create("syzkaller", 0) = 3 [pid 595] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3c67e39000 [pid 565] +++ exited with 0 +++ [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=565, si_uid=0, si_status=0, si_utime=11, si_stime=26} --- [pid 290] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 290] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x555571073730 /* 4 entries */, 32768) = 112 [pid 290] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 590] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 578] <... mount resumed>) = 0 [pid 578] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 578] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 578] ioctl(4, LOOP_CLR_FD) = 0 [pid 578] close(4) = 0 [pid 578] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 578] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 576] <... futex resumed>) = 0 [pid 576] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 578] <... futex resumed>) = 0 [pid 576] <... futex resumed>) = 1 [pid 578] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 576] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 578] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 576] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 578] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 576] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 578] <... futex resumed>) = 0 [pid 576] <... futex resumed>) = 1 [pid 578] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 576] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 578] <... fsconfig resumed>) = 0 [ 39.389351][ T578] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [pid 578] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 576] <... futex resumed>) = 0 [pid 578] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 576] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 578] openat(AT_FDCWD, "./file0", O_RDONLY) = 5 [pid 576] <... futex resumed>) = 0 [pid 578] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 576] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 578] <... futex resumed>) = 0 [pid 576] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 578] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 576] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 576] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 578] <... ioctl resumed>) = 0 [pid 578] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 576] <... futex resumed>) = 0 [pid 578] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 576] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 578] <... futex resumed>) = 0 [pid 576] <... futex resumed>) = 1 [pid 578] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, NULL) = 0 [pid 576] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 578] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 576] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 578] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 576] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 578] <... futex resumed>) = 0 [pid 576] <... futex resumed>) = 1 [pid 578] sched_setscheduler(0, SCHED_FIFO, [7] [pid 576] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 578] <... sched_setscheduler resumed>) = 0 [pid 578] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 576] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 578] <... futex resumed>) = 0 [pid 578] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 576] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 578] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 578] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 576] <... futex resumed>) = 0 [pid 590] <... write resumed>) = 20699119 [pid 590] munmap(0x7f3c67e39000, 138412032) = 0 [pid 590] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 590] ioctl(4, LOOP_SET_FD, 3 [pid 578] <... mmap resumed>) = 0x200000000000 [pid 576] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 578] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 576] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 578] <... futex resumed>) = 0 [pid 578] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 576] exit_group(0 [pid 578] <... futex resumed>) = ? [pid 576] <... exit_group resumed>) = ? [pid 578] +++ exited with 0 +++ [pid 590] <... ioctl resumed>) = 0 [pid 590] close(3) = 0 [pid 590] close(4) = 0 [pid 590] mkdir("./file0", 0777) = 0 [pid 590] mount("/dev/loop4", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 291] <... umount2 resumed>) = 0 [pid 291] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./8/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 291] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(4, 0x55557107b770 /* 2 entries */, 32768) = 48 [pid 291] getdents64(4, 0x55557107b770 /* 0 entries */, 32768) = 0 [pid 291] close(4) = 0 [pid 291] rmdir("./8/file0") = 0 [pid 291] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./8/binderfs") = 0 [pid 291] getdents64(3, [pid 576] +++ exited with 0 +++ [pid 291] <... getdents64 resumed>0x555571073730 /* 0 entries */, 32768) = 0 [pid 291] close(3 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=576, si_uid=0, si_status=0, si_utime=10, si_stime=24} --- [pid 291] <... close resumed>) = 0 [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 291] rmdir("./8") = 0 [pid 291] mkdir("./9", 0777) = 0 [pid 291] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 291] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 291] close(3) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571072690) = 598 [pid 293] <... restart_syscall resumed>) = 0 [pid 293] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x555571073730 /* 4 entries */, 32768) = 112 [pid 293] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 598 attached [pid 290] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 598] set_robust_list(0x5555710726a0, 24) = 0 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 598] chdir("./9" [pid 290] newfstatat(AT_FDCWD, "./9/file0", [pid 598] <... chdir resumed>) = 0 [pid 598] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 598] <... prctl resumed>) = 0 [pid 290] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 598] setpgid(0, 0 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 598] <... setpgid resumed>) = 0 [pid 290] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 598] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 290] <... openat resumed>) = 4 [pid 598] <... openat resumed>) = 3 [pid 290] newfstatat(4, "", [pid 598] write(3, "1000", 4 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 598] <... write resumed>) = 4 [pid 290] getdents64(4, [pid 598] close(3) = 0 [pid 290] <... getdents64 resumed>0x55557107b770 /* 2 entries */, 32768) = 48 [pid 598] symlink("/dev/binderfs", "./binderfs" [pid 290] getdents64(4, executing program [pid 598] <... symlink resumed>) = 0 [pid 290] <... getdents64 resumed>0x55557107b770 /* 0 entries */, 32768) = 0 [pid 598] write(1, "executing program\n", 18 [pid 290] close(4 [pid 598] <... write resumed>) = 18 [pid 290] <... close resumed>) = 0 [pid 598] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 290] rmdir("./9/file0" [pid 598] <... futex resumed>) = 0 [pid 598] rt_sigaction(SIGRT_1, {sa_handler=0x7f3c702c31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3c702b4350}, [pid 290] <... rmdir resumed>) = 0 [pid 598] <... rt_sigaction resumed>NULL, 8) = 0 [pid 290] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 598] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 598] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 290] newfstatat(AT_FDCWD, "./9/binderfs", [pid 598] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 598] <... mmap resumed>) = 0x7f3c70239000 [pid 290] unlink("./9/binderfs" [pid 598] mprotect(0x7f3c7023a000, 131072, PROT_READ|PROT_WRITE [pid 290] <... unlink resumed>) = 0 [pid 598] <... mprotect resumed>) = 0 [pid 290] getdents64(3, [pid 598] rt_sigprocmask(SIG_BLOCK, ~[], [pid 290] <... getdents64 resumed>0x555571073730 /* 0 entries */, 32768) = 0 [pid 598] <... rt_sigprocmask resumed>[], 8) = 0 [pid 290] close(3 [pid 598] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70259990, parent_tid=0x7f3c70259990, exit_signal=0, stack=0x7f3c70239000, stack_size=0x20300, tls=0x7f3c702596c0} [pid 290] <... close resumed>) = 0 [pid 290] rmdir("./9" [pid 598] <... clone3 resumed> => {parent_tid=[599]}, 88) = 599 [pid 290] <... rmdir resumed>) = 0 [pid 598] rt_sigprocmask(SIG_SETMASK, [], [pid 290] mkdir("./10", 0777 [pid 598] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 598] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 290] <... mkdir resumed>) = 0 [pid 598] <... futex resumed>) = 0 [pid 290] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 598] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 290] <... openat resumed>) = 3 [pid 290] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 290] close(3) = 0 [ 39.513822][ T590] loop4: detected capacity change from 0 to 40427 [ 39.545347][ T590] F2FS-fs (loop4): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571072690) = 600 ./strace-static-x86_64: Process 599 attached [pid 599] set_robust_list(0x7f3c702599a0, 24) = 0 [pid 599] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 599] memfd_create("syzkaller", 0) = 3 [pid 599] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3c67e39000 ./strace-static-x86_64: Process 600 attached [pid 600] set_robust_list(0x5555710726a0, 24) = 0 [pid 600] chdir("./10") = 0 [pid 600] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 600] setpgid(0, 0) = 0 [pid 600] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 600] write(3, "1000", 4) = 4 [pid 600] close(3) = 0 [pid 600] symlink("/dev/binderfs", "./binderfs") = 0 [pid 600] write(1, "executing program\n", 18executing program ) = 18 [pid 600] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 600] rt_sigaction(SIGRT_1, {sa_handler=0x7f3c702c31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3c702b4350}, NULL, 8) = 0 [pid 600] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 600] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3c70239000 [pid 600] mprotect(0x7f3c7023a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 600] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 600] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70259990, parent_tid=0x7f3c70259990, exit_signal=0, stack=0x7f3c70239000, stack_size=0x20300, tls=0x7f3c702596c0} => {parent_tid=[603]}, 88) = 603 [pid 600] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 600] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 600] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 603 attached [pid 603] set_robust_list(0x7f3c702599a0, 24) = 0 [pid 603] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 603] memfd_create("syzkaller", 0) = 3 [pid 603] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3c67e39000 [ 39.611317][ T590] F2FS-fs (loop4): Found nat_bits in checkpoint [pid 595] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 293] <... umount2 resumed>) = 0 [pid 590] <... mount resumed>) = 0 [pid 293] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./9/file0", [pid 590] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 590] <... openat resumed>) = 3 [pid 293] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 590] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 293] <... openat resumed>) = 4 [pid 590] <... openat resumed>) = 4 [pid 293] newfstatat(4, "", [pid 590] ioctl(4, LOOP_CLR_FD [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 590] <... ioctl resumed>) = 0 [pid 293] getdents64(4, 0x55557107b770 /* 2 entries */, 32768) = 48 [pid 293] getdents64(4, [pid 590] close(4 [pid 293] <... getdents64 resumed>0x55557107b770 /* 0 entries */, 32768) = 0 [pid 293] close(4) = 0 [pid 590] <... close resumed>) = 0 [pid 293] rmdir("./9/file0") = 0 [pid 590] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 293] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 590] <... futex resumed>) = 1 [pid 586] <... futex resumed>) = 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 590] fspick(AT_FDCWD, "./file0", 0 [pid 586] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 590] <... fspick resumed>) = 4 [pid 586] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 293] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 590] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 586] <... futex resumed>) = 0 [pid 293] unlink("./9/binderfs" [pid 586] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 590] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 293] <... unlink resumed>) = 0 [pid 586] <... futex resumed>) = 0 [pid 293] getdents64(3, [pid 586] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 293] <... getdents64 resumed>0x555571073730 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./9") = 0 [pid 293] mkdir("./10", 0777) = 0 [pid 293] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 293] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 293] close(3) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571072690) = 605 ./strace-static-x86_64: Process 605 attached [pid 605] set_robust_list(0x5555710726a0, 24) = 0 [pid 605] chdir("./10") = 0 [pid 605] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 605] setpgid(0, 0) = 0 [pid 605] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 605] write(3, "1000", 4) = 4 [pid 605] close(3) = 0 [pid 605] symlink("/dev/binderfs", "./binderfs") = 0 [pid 605] write(1, "executing program\n", 18executing program ) = 18 [pid 605] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 605] rt_sigaction(SIGRT_1, {sa_handler=0x7f3c702c31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3c702b4350}, NULL, 8) = 0 [pid 605] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 605] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3c70239000 [pid 605] mprotect(0x7f3c7023a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 605] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 605] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70259990, parent_tid=0x7f3c70259990, exit_signal=0, stack=0x7f3c70239000, stack_size=0x20300, tls=0x7f3c702596c0} => {parent_tid=[607]}, 88) = 607 [pid 605] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 605] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 39.743943][ T590] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [pid 605] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 590] <... fsconfig resumed>) = 0 [pid 590] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 586] <... futex resumed>) = 0 [pid 586] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 590] openat(AT_FDCWD, "./file0", O_RDONLY [pid 586] <... futex resumed>) = 0 [pid 590] <... openat resumed>) = 5 [pid 586] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 590] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 586] <... futex resumed>) = 0 [pid 586] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 590] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 586] <... futex resumed>) = 0 [pid 586] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 607 attached [pid 607] set_robust_list(0x7f3c702599a0, 24) = 0 [pid 607] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 607] memfd_create("syzkaller", 0) = 3 [pid 607] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3c67e39000 [pid 590] <... ioctl resumed>) = 0 [pid 590] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 586] <... futex resumed>) = 0 [pid 586] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 590] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 586] <... futex resumed>) = 0 [pid 586] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 590] <... prlimit64 resumed>NULL) = 0 [pid 590] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 586] <... futex resumed>) = 0 [pid 590] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 586] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 590] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 586] <... futex resumed>) = 0 [pid 590] sched_setscheduler(0, SCHED_FIFO, [7] [pid 586] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 590] <... sched_setscheduler resumed>) = 0 [pid 590] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 586] <... futex resumed>) = 0 [pid 590] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 586] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 590] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 586] <... futex resumed>) = 0 [pid 599] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 590] <... mmap resumed>) = 0x200000000000 [pid 586] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 590] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 586] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 590] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 586] exit_group(0 [pid 590] <... futex resumed>) = ? [pid 586] <... exit_group resumed>) = ? [pid 595] <... write resumed>) = 20699119 [pid 590] +++ exited with 0 +++ [pid 595] munmap(0x7f3c67e39000, 138412032) = 0 [pid 595] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 595] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 595] close(3) = 0 [pid 595] close(4) = 0 [pid 595] mkdir("./file0", 0777) = 0 [pid 595] mount("/dev/loop2", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 586] +++ exited with 0 +++ [pid 294] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=586, si_uid=0, si_status=0, si_utime=6, si_stime=26} --- [pid 294] restart_syscall(<... resuming interrupted clone ...> [pid 603] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 294] <... restart_syscall resumed>) = 0 [pid 294] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 294] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] getdents64(3, 0x555571073730 /* 4 entries */, 32768) = 112 [ 39.892874][ T595] loop2: detected capacity change from 0 to 40427 [ 39.931192][ T595] F2FS-fs (loop2): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 39.968415][ T595] F2FS-fs (loop2): Found nat_bits in checkpoint [pid 294] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 595] <... mount resumed>) = 0 [pid 599] <... write resumed>) = 20699119 [pid 599] munmap(0x7f3c67e39000, 138412032 [pid 595] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 595] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 595] ioctl(4, LOOP_CLR_FD) = 0 [pid 595] close(4 [pid 599] <... munmap resumed>) = 0 [pid 599] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 599] ioctl(4, LOOP_SET_FD, 3 [pid 595] <... close resumed>) = 0 [pid 595] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 595] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 592] <... futex resumed>) = 0 [pid 592] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 595] <... futex resumed>) = 0 [pid 592] <... futex resumed>) = 1 [pid 595] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 595] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 595] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 592] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 592] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 595] <... futex resumed>) = 0 [pid 592] <... futex resumed>) = 1 [pid 595] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 592] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 599] <... ioctl resumed>) = 0 [pid 599] close(3) = 0 [pid 599] close(4) = 0 [pid 595] <... fsconfig resumed>) = 0 [pid 595] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 595] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 592] <... futex resumed>) = 0 [pid 592] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 599] mkdir("./file0", 0777 [pid 595] <... futex resumed>) = 0 [pid 592] <... futex resumed>) = 1 [pid 595] openat(AT_FDCWD, "./file0", O_RDONLY [pid 592] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 595] <... openat resumed>) = 5 [pid 595] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 595] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 592] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 592] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 595] <... futex resumed>) = 0 [pid 595] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 592] <... futex resumed>) = 1 [pid 592] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 595] <... ioctl resumed>) = 0 [pid 595] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 595] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 592] <... futex resumed>) = 0 [pid 592] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 595] <... futex resumed>) = 0 [pid 592] <... futex resumed>) = 1 [pid 595] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, NULL) = 0 [pid 592] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 595] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 595] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 592] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 592] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 595] <... futex resumed>) = 0 [pid 592] <... futex resumed>) = 1 [pid 595] sched_setscheduler(0, SCHED_FIFO, [7] [pid 592] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 595] <... sched_setscheduler resumed>) = 0 [pid 595] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 592] <... futex resumed>) = 0 [pid 595] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 592] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 595] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 592] <... futex resumed>) = 0 [ 40.070522][ T595] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 40.084223][ T599] loop1: detected capacity change from 0 to 40427 [pid 595] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 607] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 603] <... write resumed>) = 20699119 [pid 599] <... mkdir resumed>) = 0 [pid 592] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 294] <... umount2 resumed>) = 0 [pid 603] munmap(0x7f3c67e39000, 138412032 [pid 599] mount("/dev/loop1", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 294] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 603] <... munmap resumed>) = 0 [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 294] newfstatat(AT_FDCWD, "./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 603] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 294] <... openat resumed>) = 4 [pid 603] <... openat resumed>) = 4 [pid 294] newfstatat(4, "", [pid 603] ioctl(4, LOOP_SET_FD, 3 [pid 294] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] getdents64(4, 0x55557107b770 /* 2 entries */, 32768) = 48 [pid 294] getdents64(4, 0x55557107b770 /* 0 entries */, 32768) = 0 [pid 294] close(4) = 0 [pid 294] rmdir("./10/file0") = 0 [pid 294] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] unlink("./10/binderfs") = 0 [pid 294] getdents64(3, 0x555571073730 /* 0 entries */, 32768) = 0 [pid 294] close(3) = 0 [pid 294] rmdir("./10") = 0 [pid 294] mkdir("./11", 0777) = 0 [pid 294] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 294] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 294] close(3) = 0 [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571072690) = 612 [pid 603] <... ioctl resumed>) = 0 [pid 595] <... mmap resumed>) = 0x200000000000 [pid 595] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 592] <... futex resumed>) = 0 [pid 595] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 592] exit_group(0 [pid 595] <... futex resumed>) = ? [pid 592] <... exit_group resumed>) = ? [pid 595] +++ exited with 0 +++ ./strace-static-x86_64: Process 612 attached [pid 612] set_robust_list(0x5555710726a0, 24) = 0 [pid 612] chdir("./11") = 0 [pid 612] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 612] setpgid(0, 0) = 0 [pid 612] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 612] write(3, "1000", 4) = 4 [pid 612] close(3) = 0 executing program [pid 612] symlink("/dev/binderfs", "./binderfs") = 0 [pid 612] write(1, "executing program\n", 18) = 18 [pid 612] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 612] rt_sigaction(SIGRT_1, {sa_handler=0x7f3c702c31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3c702b4350}, NULL, 8) = 0 [pid 612] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 612] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3c70239000 [pid 612] mprotect(0x7f3c7023a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 612] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 612] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70259990, parent_tid=0x7f3c70259990, exit_signal=0, stack=0x7f3c70239000, stack_size=0x20300, tls=0x7f3c702596c0} => {parent_tid=[613]}, 88) = 613 [pid 612] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 612] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 612] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 603] close(3) = 0 [pid 603] close(4) = 0 [pid 603] mkdir("./file0", 0777) = 0 [pid 603] mount("/dev/loop0", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"..../strace-static-x86_64: Process 613 attached [ 40.159891][ T603] loop0: detected capacity change from 0 to 40427 [ 40.185650][ T599] F2FS-fs (loop1): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 613] set_robust_list(0x7f3c702599a0, 24) = 0 [pid 613] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 613] memfd_create("syzkaller", 0) = 3 [pid 613] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3c67e39000 [ 40.223513][ T603] F2FS-fs (loop0): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 607] <... write resumed>) = 20699119 [pid 592] +++ exited with 0 +++ [pid 607] munmap(0x7f3c67e39000, 138412032 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=592, si_uid=0, si_status=0, si_utime=11, si_stime=25} --- [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 607] <... munmap resumed>) = 0 [pid 607] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 292] <... restart_syscall resumed>) = 0 [pid 607] ioctl(4, LOOP_SET_FD, 3 [pid 292] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 607] <... ioctl resumed>) = 0 [pid 292] getdents64(3, [pid 607] close(3 [pid 292] <... getdents64 resumed>0x555571073730 /* 4 entries */, 32768) = 112 [pid 607] <... close resumed>) = 0 [pid 292] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 607] close(4) = 0 [pid 607] mkdir("./file0", 0777) = 0 [ 40.264467][ T599] F2FS-fs (loop1): Found nat_bits in checkpoint [ 40.287252][ T603] F2FS-fs (loop0): Found nat_bits in checkpoint [ 40.294586][ T607] loop3: detected capacity change from 0 to 40427 [ 40.328648][ T607] F2FS-fs (loop3): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 607] mount("/dev/loop3", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 599] <... mount resumed>) = 0 [pid 599] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 599] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 599] ioctl(4, LOOP_CLR_FD) = 0 [pid 599] close(4) = 0 [pid 599] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 598] <... futex resumed>) = 0 [pid 598] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 598] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 599] <... futex resumed>) = 1 [pid 599] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 599] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 598] <... futex resumed>) = 0 [pid 598] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 598] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 599] <... futex resumed>) = 1 [pid 599] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0) = 0 [pid 599] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 598] <... futex resumed>) = 0 [pid 599] openat(AT_FDCWD, "./file0", O_RDONLY [pid 598] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 599] <... openat resumed>) = 5 [pid 598] <... futex resumed>) = 0 [pid 599] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 598] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 599] <... futex resumed>) = 0 [pid 598] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 599] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 598] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 598] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 599] <... ioctl resumed>) = 0 [pid 599] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 598] <... futex resumed>) = 0 [pid 599] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 598] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 599] <... prlimit64 resumed>NULL) = 0 [pid 598] <... futex resumed>) = 0 [pid 599] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 598] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 599] <... futex resumed>) = 0 [pid 598] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 599] sched_setscheduler(0, SCHED_FIFO, [7] [pid 598] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 599] <... sched_setscheduler resumed>) = 0 [pid 598] <... futex resumed>) = 0 [pid 599] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 598] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 599] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 598] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 598] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 599] <... futex resumed>) = 0 [pid 598] <... futex resumed>) = 1 [pid 599] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 603] <... mount resumed>) = 0 [pid 603] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 40.369283][ T607] F2FS-fs (loop3): Found nat_bits in checkpoint [ 40.378666][ T599] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 40.387614][ T603] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [pid 603] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 603] ioctl(4, LOOP_CLR_FD) = 0 [pid 603] close(4) = 0 [pid 603] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 600] <... futex resumed>) = 0 [pid 600] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 600] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 603] <... futex resumed>) = 1 [pid 603] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 603] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 600] <... futex resumed>) = 0 [pid 600] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 600] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 603] <... futex resumed>) = 1 [pid 603] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 599] <... mmap resumed>) = 0x200000000000 [pid 599] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 599] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 598] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 598] exit_group(0 [pid 599] <... futex resumed>) = ? [pid 598] <... exit_group resumed>) = ? [pid 599] +++ exited with 0 +++ [pid 603] <... fsconfig resumed>) = 0 [pid 603] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 600] <... futex resumed>) = 0 [pid 603] openat(AT_FDCWD, "./file0", O_RDONLY [pid 600] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 603] <... openat resumed>) = 5 [pid 600] <... futex resumed>) = 0 [pid 603] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 600] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 603] <... futex resumed>) = 0 [pid 600] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 603] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 600] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 600] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 607] <... mount resumed>) = 0 [pid 603] <... ioctl resumed>) = 0 [pid 603] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 600] <... futex resumed>) = 0 [pid 603] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 600] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 603] <... prlimit64 resumed>NULL) = 0 [pid 600] <... futex resumed>) = 0 [pid 603] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 600] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 603] <... futex resumed>) = 0 [pid 600] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 603] sched_setscheduler(0, SCHED_FIFO, [7] [pid 600] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 603] <... sched_setscheduler resumed>) = 0 [pid 600] <... futex resumed>) = 0 [pid 603] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 600] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 603] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 600] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 600] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 603] <... futex resumed>) = 0 [pid 600] <... futex resumed>) = 1 [pid 603] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 613] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 607] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 600] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 292] <... umount2 resumed>) = 0 [pid 607] <... openat resumed>) = 3 [pid 292] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 607] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 607] <... openat resumed>) = 4 [pid 292] newfstatat(AT_FDCWD, "./9/file0", [pid 607] ioctl(4, LOOP_CLR_FD [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 607] <... ioctl resumed>) = 0 [pid 292] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 607] close(4 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 607] <... close resumed>) = 0 [pid 292] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 607] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] <... openat resumed>) = 4 [pid 607] <... futex resumed>) = 1 [pid 292] newfstatat(4, "", [pid 607] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(4, 0x55557107b770 /* 2 entries */, 32768) = 48 [pid 292] getdents64(4, 0x55557107b770 /* 0 entries */, 32768) = 0 [pid 292] close(4) = 0 [pid 292] rmdir("./9/file0") = 0 [pid 292] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./9/binderfs") = 0 [pid 292] getdents64(3, 0x555571073730 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./9") = 0 [pid 292] mkdir("./10", 0777) = 0 [pid 292] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 292] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 292] close(3) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571072690) = 624 [pid 605] <... futex resumed>) = 0 [pid 605] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 607] <... futex resumed>) = 0 [pid 605] <... futex resumed>) = 1 [pid 607] fspick(AT_FDCWD, "./file0", 0 [pid 605] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 607] <... fspick resumed>) = 4 [ 40.490555][ T607] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [pid 607] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 605] <... futex resumed>) = 0 [pid 607] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 605] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 605] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 603] <... mmap resumed>) = 0x200000000000 [pid 603] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 600] <... futex resumed>) = 0 [pid 603] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 600] exit_group(0 [pid 603] <... futex resumed>) = ? [pid 600] <... exit_group resumed>) = ? [pid 603] +++ exited with 0 +++ ./strace-static-x86_64: Process 624 attached [pid 624] set_robust_list(0x5555710726a0, 24) = 0 [pid 624] chdir("./10") = 0 [pid 624] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 624] setpgid(0, 0) = 0 [pid 605] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 605] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 605] futex(0x7f3c7032a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 605] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3c70218000 [pid 605] mprotect(0x7f3c70219000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 605] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 605] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70238990, parent_tid=0x7f3c70238990, exit_signal=0, stack=0x7f3c70218000, stack_size=0x20300, tls=0x7f3c702386c0} => {parent_tid=[627]}, 88) = 627 [pid 605] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 605] futex(0x7f3c7032a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 605] futex(0x7f3c7032a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 624] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 624] write(3, "1000", 4) = 4 [pid 624] close(3) = 0 ./strace-static-x86_64: Process 627 attached [pid 627] set_robust_list(0x7f3c702389a0, 24) = 0 [pid 627] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 627] openat(AT_FDCWD, "./file0", O_RDONLY) = 5 [pid 624] symlink("/dev/binderfs", "./binderfs" [pid 627] futex(0x7f3c7032a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 627] futex(0x7f3c7032a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 605] <... futex resumed>) = 0 [pid 605] futex(0x7f3c7032a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 627] <... futex resumed>) = 0 [pid 605] <... futex resumed>) = 1 [pid 627] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 605] futex(0x7f3c7032a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 624] <... symlink resumed>) = 0 [pid 627] <... ioctl resumed>) = 0 [pid 627] futex(0x7f3c7032a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 605] <... futex resumed>) = 0 [pid 605] futex(0x7f3c7032a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 605] futex(0x7f3c7032a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 627] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, NULL) = 0 [pid 627] futex(0x7f3c7032a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 605] <... futex resumed>) = 0 [pid 627] futex(0x7f3c7032a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 605] futex(0x7f3c7032a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 627] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 627] sched_setscheduler(0, SCHED_FIFO, [7] [pid 605] futex(0x7f3c7032a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 627] <... sched_setscheduler resumed>) = 0 [pid 627] futex(0x7f3c7032a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 605] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 627] <... futex resumed>) = 0 [pid 627] futex(0x7f3c7032a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 605] futex(0x7f3c7032a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 627] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) executing program [pid 627] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 605] <... futex resumed>) = 0 [pid 624] write(1, "executing program\n", 18 [pid 613] <... write resumed>) = 20699119 [pid 600] +++ exited with 0 +++ [pid 598] +++ exited with 0 +++ [pid 613] munmap(0x7f3c67e39000, 138412032 [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=598, si_uid=0, si_status=0, si_utime=8, si_stime=31} --- [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=600, si_uid=0, si_status=0, si_utime=6, si_stime=29} --- [pid 613] <... munmap resumed>) = 0 [pid 613] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 291] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW [pid 613] ioctl(4, LOOP_SET_FD, 3 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] <... openat resumed>) = 3 [pid 290] <... openat resumed>) = 3 [pid 291] newfstatat(3, "", [pid 290] newfstatat(3, "", [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, [pid 290] getdents64(3, [pid 291] <... getdents64 resumed>0x555571073730 /* 4 entries */, 32768) = 112 [pid 290] <... getdents64 resumed>0x555571073730 /* 4 entries */, 32768) = 112 [pid 291] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 624] <... write resumed>) = 18 [pid 624] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 624] rt_sigaction(SIGRT_1, {sa_handler=0x7f3c702c31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3c702b4350}, NULL, 8) = 0 [pid 624] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 624] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3c70239000 [pid 624] mprotect(0x7f3c7023a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 624] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 624] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70259990, parent_tid=0x7f3c70259990, exit_signal=0, stack=0x7f3c70239000, stack_size=0x20300, tls=0x7f3c702596c0} => {parent_tid=[628]}, 88) = 628 [pid 624] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 624] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 624] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 613] <... ioctl resumed>) = 0 [pid 613] close(3) = 0 [pid 613] close(4) = 0 [pid 613] mkdir("./file0", 0777) = 0 [pid 613] mount("/dev/loop4", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"..../strace-static-x86_64: Process 628 attached [pid 628] set_robust_list(0x7f3c702599a0, 24) = 0 [pid 628] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 628] memfd_create("syzkaller", 0) = 3 [pid 628] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3c67e39000 [pid 627] <... mmap resumed>) = 0x200000000000 [pid 627] futex(0x7f3c7032a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 607] <... fsconfig resumed>) = 0 [pid 627] <... futex resumed>) = 0 [pid 605] futex(0x7f3c7032a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 627] futex(0x7f3c7032a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 607] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 605] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 607] <... futex resumed>) = 0 [pid 605] exit_group(0 [pid 627] <... futex resumed>) = ? [pid 605] <... exit_group resumed>) = ? [pid 627] +++ exited with 0 +++ [pid 607] +++ exited with 0 +++ [ 40.644329][ T613] loop4: detected capacity change from 0 to 40427 [ 40.682436][ T613] F2FS-fs (loop4): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 605] +++ exited with 0 +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=605, si_uid=0, si_status=0, si_utime=9, si_stime=24} --- [pid 293] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 293] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x555571073730 /* 4 entries */, 32768) = 112 [ 40.741317][ T613] F2FS-fs (loop4): Found nat_bits in checkpoint [pid 293] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... umount2 resumed>) = 0 [pid 290] <... umount2 resumed>) = 0 [pid 291] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 290] newfstatat(AT_FDCWD, "./10/file0", [pid 291] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] getdents64(4, [pid 290] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... getdents64 resumed>0x55557107b770 /* 2 entries */, 32768) = 48 [pid 291] getdents64(4, 0x55557107b770 /* 0 entries */, 32768) = 0 [pid 291] close(4) = 0 [pid 291] rmdir("./9/file0" [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 290] newfstatat(4, "", [pid 291] <... rmdir resumed>) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] getdents64(4, [pid 291] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./9/binderfs" [pid 290] <... getdents64 resumed>0x55557107b770 /* 2 entries */, 32768) = 48 [pid 291] <... unlink resumed>) = 0 [pid 290] getdents64(4, [pid 291] getdents64(3, [pid 290] <... getdents64 resumed>0x55557107b770 /* 0 entries */, 32768) = 0 [pid 293] <... umount2 resumed>) = 0 [pid 291] <... getdents64 resumed>0x555571073730 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./9") = 0 [pid 290] close(4 [pid 291] mkdir("./10", 0777) = 0 [pid 290] <... close resumed>) = 0 [pid 291] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 291] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 291] close(3) = 0 [pid 290] rmdir("./10/file0") = 0 [pid 290] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./10/binderfs") = 0 [pid 290] getdents64(3, 0x555571073730 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./10") = 0 [pid 290] mkdir("./11", 0777) = 0 [pid 290] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 290] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 290] close(3) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571072690) = 631 [pid 628] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 293] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] <... clone resumed>, child_tidptr=0x555571072690) = 632 [pid 293] newfstatat(AT_FDCWD, "./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 631 attached [pid 293] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 293] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(4, [pid 631] set_robust_list(0x5555710726a0, 24 [pid 293] <... getdents64 resumed>0x55557107b770 /* 2 entries */, 32768) = 48 [pid 293] getdents64(4, 0x55557107b770 /* 0 entries */, 32768) = 0 [pid 293] close(4) = 0 [pid 293] rmdir("./10/file0" [pid 631] <... set_robust_list resumed>) = 0 [pid 631] chdir("./11") = 0 [pid 293] <... rmdir resumed>) = 0 [pid 293] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./10/binderfs" [pid 631] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 293] <... unlink resumed>) = 0 [pid 293] getdents64(3, 0x555571073730 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./10") = 0 [pid 293] mkdir("./11", 0777 [pid 631] setpgid(0, 0) = 0 [pid 631] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] <... mkdir resumed>) = 0 [pid 293] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 293] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 293] close(3) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 631] <... openat resumed>) = 3 [pid 631] write(3, "1000", 4 [pid 293] <... clone resumed>, child_tidptr=0x555571072690) = 633 [pid 631] <... write resumed>) = 4 [pid 631] close(3) = 0 [pid 631] symlink("/dev/binderfs", "./binderfs") = 0 [pid 631] write(1, "executing program\n", 18executing program ) = 18 [pid 631] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 631] rt_sigaction(SIGRT_1, {sa_handler=0x7f3c702c31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3c702b4350}, NULL, 8) = 0 [pid 631] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 631] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3c70239000 [pid 631] mprotect(0x7f3c7023a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 631] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 631] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70259990, parent_tid=0x7f3c70259990, exit_signal=0, stack=0x7f3c70239000, stack_size=0x20300, tls=0x7f3c702596c0} => {parent_tid=[634]}, 88) = 634 [pid 631] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 631] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 631] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 632 attached [pid 632] set_robust_list(0x5555710726a0, 24) = 0 [pid 632] chdir("./10") = 0 [pid 632] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 632] setpgid(0, 0) = 0 [pid 632] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 632] write(3, "1000", 4) = 4 [pid 632] close(3) = 0 [pid 632] symlink("/dev/binderfs", "./binderfs") = 0 [pid 632] write(1, "executing program\n", 18executing program ) = 18 [pid 632] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 632] rt_sigaction(SIGRT_1, {sa_handler=0x7f3c702c31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3c702b4350}, NULL, 8) = 0 [pid 632] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 632] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3c70239000 [pid 632] mprotect(0x7f3c7023a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 632] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 632] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70259990, parent_tid=0x7f3c70259990, exit_signal=0, stack=0x7f3c70239000, stack_size=0x20300, tls=0x7f3c702596c0} => {parent_tid=[635]}, 88) = 635 [pid 632] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 632] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 632] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 634 attached [pid 634] set_robust_list(0x7f3c702599a0, 24) = 0 [pid 634] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 634] memfd_create("syzkaller", 0) = 3 [pid 634] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3c67e39000 ./strace-static-x86_64: Process 635 attached [pid 635] set_robust_list(0x7f3c702599a0, 24./strace-static-x86_64: Process 633 attached [pid 633] set_robust_list(0x5555710726a0, 24) = 0 [pid 633] chdir("./11") = 0 [pid 613] <... mount resumed>) = 0 [pid 633] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 613] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 633] setpgid(0, 0) = 0 [pid 635] <... set_robust_list resumed>) = 0 [pid 633] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 613] <... openat resumed>) = 3 [pid 633] <... openat resumed>) = 3 [pid 613] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 633] write(3, "1000", 4) = 4 [pid 633] close(3) = 0 [pid 613] <... openat resumed>) = 4 [pid 633] symlink("/dev/binderfs", "./binderfs" [pid 635] rt_sigprocmask(SIG_SETMASK, [], executing program [pid 633] <... symlink resumed>) = 0 [pid 613] ioctl(4, LOOP_CLR_FD [pid 633] write(1, "executing program\n", 18) = 18 [pid 613] <... ioctl resumed>) = 0 [pid 633] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 613] close(4 [pid 633] <... futex resumed>) = 0 [pid 633] rt_sigaction(SIGRT_1, {sa_handler=0x7f3c702c31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3c702b4350}, [pid 635] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 635] memfd_create("syzkaller", 0) = 3 [pid 635] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3c67e39000 [pid 633] <... rt_sigaction resumed>NULL, 8) = 0 [pid 633] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 633] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3c70239000 [pid 633] mprotect(0x7f3c7023a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 633] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 633] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70259990, parent_tid=0x7f3c70259990, exit_signal=0, stack=0x7f3c70239000, stack_size=0x20300, tls=0x7f3c702596c0} => {parent_tid=[636]}, 88) = 636 [pid 633] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 633] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 633] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 613] <... close resumed>) = 0 [pid 613] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 613] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 612] <... futex resumed>) = 0 [pid 612] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 613] <... futex resumed>) = 0 [pid 612] <... futex resumed>) = 1 [pid 613] fspick(AT_FDCWD, "./file0", 0 [pid 612] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 613] <... fspick resumed>) = 4 [pid 613] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 612] <... futex resumed>) = 0 [pid 613] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 612] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 613] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 612] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 613] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0./strace-static-x86_64: Process 636 attached [pid 636] set_robust_list(0x7f3c702599a0, 24) = 0 [pid 636] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 636] memfd_create("syzkaller", 0) = 3 [pid 636] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3c67e39000 [pid 613] <... fsconfig resumed>) = 0 [pid 613] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 613] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 612] <... futex resumed>) = 0 [pid 612] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 613] <... futex resumed>) = 0 [pid 612] <... futex resumed>) = 1 [pid 613] openat(AT_FDCWD, "./file0", O_RDONLY [pid 612] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 613] <... openat resumed>) = 5 [pid 613] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 612] <... futex resumed>) = 0 [pid 613] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 612] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 612] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 613] <... futex resumed>) = 0 [pid 613] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140) = 0 [pid 613] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 612] <... futex resumed>) = 0 [pid 613] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 612] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 613] <... futex resumed>) = 0 [pid 612] <... futex resumed>) = 1 [pid 613] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, NULL) = 0 [pid 612] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 613] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 612] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 40.912698][ T613] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [pid 613] sched_setscheduler(0, SCHED_FIFO, [7] [pid 612] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 613] <... sched_setscheduler resumed>) = 0 [pid 613] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 612] <... futex resumed>) = 0 [pid 613] <... futex resumed>) = 0 [pid 613] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 612] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 612] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 613] <... futex resumed>) = 0 [pid 612] <... futex resumed>) = 1 [pid 613] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 628] <... write resumed>) = 20699119 [pid 612] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 628] munmap(0x7f3c67e39000, 138412032) = 0 [pid 628] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 628] ioctl(4, LOOP_SET_FD, 3 [pid 613] <... mmap resumed>) = 0x200000000000 [pid 613] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 612] <... futex resumed>) = 0 [pid 613] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 612] exit_group(0 [pid 613] <... futex resumed>) = ? [pid 612] <... exit_group resumed>) = ? [pid 613] +++ exited with 0 +++ [pid 628] <... ioctl resumed>) = 0 [pid 628] close(3) = 0 [pid 628] close(4) = 0 [pid 628] mkdir("./file0", 0777) = 0 [ 41.024100][ T628] loop2: detected capacity change from 0 to 40427 [ 41.070635][ T628] F2FS-fs (loop2): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 628] mount("/dev/loop2", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 612] +++ exited with 0 +++ [pid 294] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=612, si_uid=0, si_status=0, si_utime=12, si_stime=24} --- [pid 294] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 294] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 294] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] getdents64(3, 0x555571073730 /* 4 entries */, 32768) = 112 [ 41.135721][ T628] F2FS-fs (loop2): Found nat_bits in checkpoint [pid 294] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 634] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 628] <... mount resumed>) = 0 [pid 628] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 628] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 628] ioctl(4, LOOP_CLR_FD) = 0 [pid 628] close(4) = 0 [pid 628] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 624] <... futex resumed>) = 0 [pid 624] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 624] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 628] <... futex resumed>) = 1 [pid 628] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 628] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 624] <... futex resumed>) = 0 [pid 624] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 624] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 628] <... futex resumed>) = 1 [ 41.227373][ T628] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [pid 628] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0) = 0 [pid 628] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 624] <... futex resumed>) = 0 [pid 628] openat(AT_FDCWD, "./file0", O_RDONLY [pid 624] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 628] <... openat resumed>) = 5 [pid 624] <... futex resumed>) = 0 [pid 628] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 624] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 628] <... futex resumed>) = 0 [pid 624] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 628] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 624] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 294] <... umount2 resumed>) = 0 [pid 628] <... ioctl resumed>) = 0 [pid 624] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 294] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 628] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 624] <... futex resumed>) = 0 [pid 628] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 624] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 628] <... prlimit64 resumed>NULL) = 0 [pid 624] <... futex resumed>) = 0 [pid 628] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 624] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 628] <... futex resumed>) = 0 [pid 624] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 628] sched_setscheduler(0, SCHED_FIFO, [7] [pid 624] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 628] <... sched_setscheduler resumed>) = 0 [pid 624] <... futex resumed>) = 0 [pid 628] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 624] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 628] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 624] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 624] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 628] <... futex resumed>) = 0 [pid 624] <... futex resumed>) = 1 [pid 628] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 635] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 634] <... write resumed>) = 20699119 [pid 624] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 634] munmap(0x7f3c67e39000, 138412032 [pid 628] <... mmap resumed>) = 0x200000000000 [pid 294] newfstatat(AT_FDCWD, "./11/file0", [pid 636] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 634] <... munmap resumed>) = 0 [pid 628] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 294] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 634] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 628] <... futex resumed>) = 1 [pid 624] <... futex resumed>) = 0 [pid 294] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 634] <... openat resumed>) = 4 [pid 628] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 624] exit_group(0 [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 634] ioctl(4, LOOP_SET_FD, 3 [pid 628] <... futex resumed>) = ? [pid 624] <... exit_group resumed>) = ? [pid 294] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 628] +++ exited with 0 +++ [pid 294] <... openat resumed>) = 4 [pid 294] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] getdents64(4, 0x55557107b770 /* 2 entries */, 32768) = 48 [pid 294] getdents64(4, 0x55557107b770 /* 0 entries */, 32768) = 0 [pid 294] close(4) = 0 [pid 294] rmdir("./11/file0") = 0 [pid 294] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] unlink("./11/binderfs") = 0 [pid 294] getdents64(3, 0x555571073730 /* 0 entries */, 32768) = 0 [pid 294] close(3) = 0 [pid 294] rmdir("./11") = 0 [pid 294] mkdir("./12", 0777) = 0 [pid 294] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 294] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 294] close(3) = 0 [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571072690) = 643 ./strace-static-x86_64: Process 643 attached [pid 643] set_robust_list(0x5555710726a0, 24) = 0 [pid 643] chdir("./12") = 0 [pid 643] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 643] setpgid(0, 0 [pid 634] <... ioctl resumed>) = 0 [pid 643] <... setpgid resumed>) = 0 [pid 643] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 634] close(3) = 0 [pid 634] close(4) = 0 [pid 634] mkdir("./file0", 0777 [pid 643] <... openat resumed>) = 3 [pid 634] <... mkdir resumed>) = 0 [pid 643] write(3, "1000", 4) = 4 [pid 643] close(3) = 0 [pid 643] symlink("/dev/binderfs", "./binderfs") = 0 [pid 643] write(1, "executing program\n", 18 [pid 634] mount("/dev/loop0", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"...executing program [pid 643] <... write resumed>) = 18 [pid 643] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 643] rt_sigaction(SIGRT_1, {sa_handler=0x7f3c702c31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3c702b4350}, NULL, 8) = 0 [pid 643] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 643] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3c70239000 [pid 643] mprotect(0x7f3c7023a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 643] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 643] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70259990, parent_tid=0x7f3c70259990, exit_signal=0, stack=0x7f3c70239000, stack_size=0x20300, tls=0x7f3c702596c0} => {parent_tid=[644]}, 88) = 644 [pid 643] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 643] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 643] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 644 attached [pid 644] set_robust_list(0x7f3c702599a0, 24) = 0 [pid 644] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 644] memfd_create("syzkaller", 0) = 3 [pid 644] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3c67e39000 [pid 624] +++ exited with 0 +++ [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=624, si_uid=0, si_status=0, si_utime=9, si_stime=26} --- [pid 292] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 292] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x555571073730 /* 4 entries */, 32768) = 112 [ 41.364643][ T634] loop0: detected capacity change from 0 to 40427 [ 41.399415][ T634] F2FS-fs (loop0): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 41.465049][ T634] F2FS-fs (loop0): Found nat_bits in checkpoint [pid 292] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 636] <... write resumed>) = 20699119 [pid 292] <... umount2 resumed>) = 0 [pid 636] munmap(0x7f3c67e39000, 138412032) = 0 [pid 636] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 636] ioctl(4, LOOP_SET_FD, 3 [pid 292] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 292] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(4, 0x55557107b770 /* 2 entries */, 32768) = 48 [pid 292] getdents64(4, 0x55557107b770 /* 0 entries */, 32768) = 0 [pid 292] close(4) = 0 [pid 292] rmdir("./10/file0") = 0 [pid 292] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./10/binderfs") = 0 [pid 292] getdents64(3, 0x555571073730 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./10") = 0 [pid 292] mkdir("./11", 0777) = 0 [pid 292] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 292] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 292] close(3 [pid 635] <... write resumed>) = 20699119 [pid 635] munmap(0x7f3c67e39000, 138412032 [pid 292] <... close resumed>) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571072690) = 647 [pid 635] <... munmap resumed>) = 0 [pid 635] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 636] <... ioctl resumed>) = 0 [pid 636] close(3) = 0 [pid 636] close(4) = 0 [pid 636] mkdir("./file0", 0777) = 0 [pid 635] <... openat resumed>) = 4 [pid 635] ioctl(4, LOOP_SET_FD, 3 [ 41.543933][ T636] loop3: detected capacity change from 0 to 40427 [ 41.573982][ T634] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 41.582192][ T635] loop1: detected capacity change from 0 to 40427 [pid 636] mount("/dev/loop3", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 635] <... ioctl resumed>) = 0 [pid 635] close(3) = 0 [pid 635] close(4) = 0 [pid 635] mkdir("./file0", 0777 [pid 634] <... mount resumed>) = 0 ./strace-static-x86_64: Process 647 attached [pid 635] <... mkdir resumed>) = 0 [pid 634] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 647] set_robust_list(0x5555710726a0, 24 [pid 635] mount("/dev/loop1", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 647] <... set_robust_list resumed>) = 0 [pid 634] <... openat resumed>) = 3 [pid 634] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 647] chdir("./11" [pid 634] <... openat resumed>) = 4 [pid 647] <... chdir resumed>) = 0 [pid 634] ioctl(4, LOOP_CLR_FD [pid 647] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 634] <... ioctl resumed>) = 0 [pid 647] <... prctl resumed>) = 0 [pid 634] close(4 [pid 647] setpgid(0, 0 [pid 634] <... close resumed>) = 0 [pid 647] <... setpgid resumed>) = 0 [pid 634] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 647] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 634] <... futex resumed>) = 1 [pid 631] <... futex resumed>) = 0 [pid 647] <... openat resumed>) = 3 [pid 634] fspick(AT_FDCWD, "./file0", 0 [pid 631] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 647] write(3, "1000", 4 [pid 634] <... fspick resumed>) = 4 [pid 631] <... futex resumed>) = 0 [pid 647] <... write resumed>) = 4 [pid 634] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 631] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 647] close(3 [pid 634] <... futex resumed>) = 0 [pid 647] <... close resumed>) = 0 [pid 634] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 631] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 647] symlink("/dev/binderfs", "./binderfs" [pid 631] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 647] <... symlink resumed>) = 0 [pid 634] <... futex resumed>) = 0 [pid 631] <... futex resumed>) = 1 executing program [pid 647] write(1, "executing program\n", 18 [pid 634] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 631] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 647] <... write resumed>) = 18 [pid 647] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 647] rt_sigaction(SIGRT_1, {sa_handler=0x7f3c702c31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3c702b4350}, NULL, 8) = 0 [pid 647] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 647] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3c70239000 [pid 647] mprotect(0x7f3c7023a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 647] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 647] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70259990, parent_tid=0x7f3c70259990, exit_signal=0, stack=0x7f3c70239000, stack_size=0x20300, tls=0x7f3c702596c0} => {parent_tid=[649]}, 88) = 649 [pid 647] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 647] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 647] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 649 attached [pid 649] set_robust_list(0x7f3c702599a0, 24 [pid 634] <... fsconfig resumed>) = 0 [pid 649] <... set_robust_list resumed>) = 0 [pid 634] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 649] rt_sigprocmask(SIG_SETMASK, [], [pid 634] <... futex resumed>) = 1 [pid 649] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 634] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 649] memfd_create("syzkaller", 0 [pid 631] <... futex resumed>) = 0 [pid 649] <... memfd_create resumed>) = 3 [pid 631] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 649] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 634] <... futex resumed>) = 0 [pid 631] <... futex resumed>) = 1 [pid 649] <... mmap resumed>) = 0x7f3c67e39000 [pid 634] openat(AT_FDCWD, "./file0", O_RDONLY [ 41.585113][ T636] F2FS-fs (loop3): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 41.607016][ T635] F2FS-fs (loop1): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 631] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 634] <... openat resumed>) = 5 [pid 634] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 631] <... futex resumed>) = 0 [pid 634] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 631] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 631] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 634] <... ioctl resumed>) = 0 [pid 634] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 631] <... futex resumed>) = 0 [pid 634] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 631] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 634] <... futex resumed>) = 0 [pid 631] <... futex resumed>) = 1 [pid 634] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, NULL) = 0 [pid 631] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 634] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 631] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 634] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 631] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 634] <... futex resumed>) = 0 [pid 631] <... futex resumed>) = 1 [pid 634] sched_setscheduler(0, SCHED_FIFO, [7]) = 0 [pid 631] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 634] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 631] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 634] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 631] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 634] <... futex resumed>) = 0 [pid 631] <... futex resumed>) = 1 [pid 634] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 631] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 631] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 631] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 634] <... mmap resumed>) = 0x200000000000 [pid 634] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 634] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 631] exit_group(0 [pid 634] <... futex resumed>) = ? [pid 631] <... exit_group resumed>) = ? [pid 634] +++ exited with 0 +++ [ 41.642226][ T636] F2FS-fs (loop3): Found nat_bits in checkpoint [ 41.661382][ T635] F2FS-fs (loop1): Found nat_bits in checkpoint [pid 635] <... mount resumed>) = 0 [pid 635] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 635] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 635] ioctl(4, LOOP_CLR_FD) = 0 [pid 635] close(4) = 0 [pid 635] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 632] <... futex resumed>) = 0 [pid 635] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 632] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 635] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 632] <... futex resumed>) = 0 [pid 635] fspick(AT_FDCWD, "./file0", 0 [pid 632] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 635] <... fspick resumed>) = 4 [pid 635] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 632] <... futex resumed>) = 0 [pid 635] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 632] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 635] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 632] <... futex resumed>) = 0 [pid 635] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 632] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 635] <... fsconfig resumed>) = 0 [pid 635] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 632] <... futex resumed>) = 0 [pid 635] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 632] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 635] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 632] <... futex resumed>) = 0 [pid 635] openat(AT_FDCWD, "./file0", O_RDONLY [pid 632] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 635] <... openat resumed>) = 5 [pid 635] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 632] <... futex resumed>) = 0 [pid 635] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 632] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 635] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 632] <... futex resumed>) = 0 [pid 635] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 632] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 644] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 635] <... ioctl resumed>) = 0 [pid 635] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 632] <... futex resumed>) = 0 [pid 635] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 632] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 635] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 632] <... futex resumed>) = 0 [pid 635] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 632] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 635] <... prlimit64 resumed>NULL) = 0 [pid 635] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 632] <... futex resumed>) = 0 [pid 635] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 632] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 635] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 632] <... futex resumed>) = 0 [pid 635] sched_setscheduler(0, SCHED_FIFO, [7] [pid 632] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 635] <... sched_setscheduler resumed>) = 0 [pid 635] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 632] <... futex resumed>) = 0 [pid 635] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 632] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 635] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 632] <... futex resumed>) = 0 [pid 635] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [ 41.734062][ T635] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [pid 632] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 631] +++ exited with 0 +++ [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=631, si_uid=0, si_status=0, si_utime=9, si_stime=28} --- [pid 290] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 290] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x555571073730 /* 4 entries */, 32768) = 112 [pid 290] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 635] <... mmap resumed>) = 0x200000000000 [pid 635] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 632] <... futex resumed>) = 0 [pid 635] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 632] exit_group(0 [pid 635] <... futex resumed>) = ? [pid 632] <... exit_group resumed>) = ? [pid 635] +++ exited with 0 +++ [pid 636] <... mount resumed>) = 0 [pid 636] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 636] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 636] ioctl(4, LOOP_CLR_FD) = 0 [pid 636] close(4) = 0 [pid 636] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 633] <... futex resumed>) = 0 [pid 636] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 633] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 636] <... futex resumed>) = 0 [pid 633] <... futex resumed>) = 1 [pid 636] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 633] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 636] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 633] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 636] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 633] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 636] <... futex resumed>) = 0 [pid 633] <... futex resumed>) = 1 [pid 636] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [ 41.861120][ T636] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [pid 633] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 649] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 632] +++ exited with 0 +++ [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=632, si_uid=0, si_status=0, si_utime=7, si_stime=23} --- [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 636] <... fsconfig resumed>) = 0 [pid 636] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 633] <... futex resumed>) = 0 [pid 636] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 633] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 636] <... futex resumed>) = 0 [pid 633] <... futex resumed>) = 1 [pid 636] openat(AT_FDCWD, "./file0", O_RDONLY) = 5 [pid 633] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 636] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 633] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 636] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 633] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 636] <... futex resumed>) = 0 [pid 633] <... futex resumed>) = 1 [pid 636] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 633] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 636] <... ioctl resumed>) = 0 [pid 636] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 633] <... futex resumed>) = 0 [pid 636] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 633] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 636] <... futex resumed>) = 0 [pid 633] <... futex resumed>) = 1 [pid 636] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, NULL) = 0 [pid 633] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 291] <... restart_syscall resumed>) = 0 [pid 636] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 633] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 636] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 633] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 636] <... futex resumed>) = 0 [pid 633] <... futex resumed>) = 1 [pid 291] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW [pid 636] sched_setscheduler(0, SCHED_FIFO, [7]) = 0 [pid 633] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 636] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 633] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 291] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 636] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 633] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 291] <... openat resumed>) = 3 [pid 636] <... futex resumed>) = 0 [pid 633] <... futex resumed>) = 1 [pid 291] newfstatat(3, "", [pid 636] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 633] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x555571073730 /* 4 entries */, 32768) = 112 [pid 291] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 644] <... write resumed>) = 20699119 [pid 644] munmap(0x7f3c67e39000, 138412032) = 0 [pid 290] <... umount2 resumed>) = 0 [pid 644] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 644] ioctl(4, LOOP_SET_FD, 3 [pid 290] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 290] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(4, 0x55557107b770 /* 2 entries */, 32768) = 48 [pid 290] getdents64(4, 0x55557107b770 /* 0 entries */, 32768) = 0 [pid 290] close(4) = 0 [pid 290] rmdir("./11/file0" [pid 633] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 290] <... rmdir resumed>) = 0 [pid 290] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./11/binderfs") = 0 [pid 290] getdents64(3, 0x555571073730 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./11") = 0 [pid 290] mkdir("./12", 0777) = 0 [pid 290] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 290] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 290] close(3 [pid 636] <... mmap resumed>) = 0x200000000000 [pid 636] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 633] exit_group(0 [pid 636] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL) = ? [pid 633] <... exit_group resumed>) = ? [pid 636] +++ exited with 0 +++ [pid 290] <... close resumed>) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571072690) = 659 [ 41.985589][ T644] loop4: detected capacity change from 0 to 40427 [pid 644] <... ioctl resumed>) = 0 [pid 644] close(3) = 0 [pid 644] close(4./strace-static-x86_64: Process 659 attached [pid 659] set_robust_list(0x5555710726a0, 24) = 0 [pid 659] chdir("./12") = 0 [pid 659] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 659] setpgid(0, 0) = 0 [pid 659] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 659] write(3, "1000", 4) = 4 [pid 659] close(3) = 0 [pid 659] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 659] write(1, "executing program\n", 18) = 18 [pid 659] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 659] rt_sigaction(SIGRT_1, {sa_handler=0x7f3c702c31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3c702b4350}, NULL, 8) = 0 [pid 659] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 659] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3c70239000 [pid 659] mprotect(0x7f3c7023a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 644] <... close resumed>) = 0 [pid 659] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 659] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70259990, parent_tid=0x7f3c70259990, exit_signal=0, stack=0x7f3c70239000, stack_size=0x20300, tls=0x7f3c702596c0} => {parent_tid=[660]}, 88) = 660 [pid 644] mkdir("./file0", 0777 [pid 659] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 659] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 659] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 644] <... mkdir resumed>) = 0 [pid 644] mount("/dev/loop4", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 649] <... write resumed>) = 20699119 [pid 649] munmap(0x7f3c67e39000, 138412032) = 0 ./strace-static-x86_64: Process 660 attached [pid 660] set_robust_list(0x7f3c702599a0, 24) = 0 [pid 660] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 660] memfd_create("syzkaller", 0) = 3 [pid 660] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3c67e39000 [pid 649] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 649] ioctl(4, LOOP_SET_FD, 3 [pid 633] +++ exited with 0 +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=633, si_uid=0, si_status=0, si_utime=11, si_stime=27} --- [pid 293] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 293] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x555571073730 /* 4 entries */, 32768) = 112 [pid 293] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... umount2 resumed>) = 0 [pid 291] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 291] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(4, 0x55557107b770 /* 2 entries */, 32768) = 48 [pid 291] getdents64(4, 0x55557107b770 /* 0 entries */, 32768) = 0 [pid 291] close(4) = 0 [pid 291] rmdir("./10/file0") = 0 [pid 291] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./10/binderfs") = 0 [pid 291] getdents64(3, 0x555571073730 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./10") = 0 [pid 291] mkdir("./11", 0777) = 0 [pid 291] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 291] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 291] close(3 [pid 649] <... ioctl resumed>) = 0 [pid 649] close(3) = 0 [pid 649] close(4) = 0 [pid 649] mkdir("./file0", 0777) = 0 [ 42.065173][ T644] F2FS-fs (loop4): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 42.095861][ T649] loop2: detected capacity change from 0 to 40427 [ 42.106295][ T644] F2FS-fs (loop4): Found nat_bits in checkpoint [pid 649] mount("/dev/loop2", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 291] <... close resumed>) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571072690) = 663 ./strace-static-x86_64: Process 663 attached [pid 663] set_robust_list(0x5555710726a0, 24) = 0 [pid 663] chdir("./11") = 0 [pid 663] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 663] setpgid(0, 0) = 0 [pid 663] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 663] write(3, "1000", 4) = 4 [pid 663] close(3) = 0 [pid 663] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 663] write(1, "executing program\n", 18) = 18 [pid 663] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 663] rt_sigaction(SIGRT_1, {sa_handler=0x7f3c702c31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3c702b4350}, NULL, 8) = 0 [pid 663] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 663] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3c70239000 [pid 663] mprotect(0x7f3c7023a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 663] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 663] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70259990, parent_tid=0x7f3c70259990, exit_signal=0, stack=0x7f3c70239000, stack_size=0x20300, tls=0x7f3c702596c0} => {parent_tid=[664]}, 88) = 664 [pid 663] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 663] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 663] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 664 attached [pid 664] set_robust_list(0x7f3c702599a0, 24) = 0 [pid 664] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 664] memfd_create("syzkaller", 0) = 3 [pid 664] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3c67e39000 [ 42.156478][ T649] F2FS-fs (loop2): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 42.212150][ T649] F2FS-fs (loop2): Found nat_bits in checkpoint [pid 644] <... mount resumed>) = 0 [pid 644] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 644] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 644] ioctl(4, LOOP_CLR_FD) = 0 [pid 644] close(4) = 0 [pid 293] <... umount2 resumed>) = 0 [pid 644] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 293] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 643] <... futex resumed>) = 0 [pid 643] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 644] <... futex resumed>) = 1 [pid 643] <... futex resumed>) = 0 [pid 644] fspick(AT_FDCWD, "./file0", 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 643] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 644] <... fspick resumed>) = 4 [pid 293] newfstatat(AT_FDCWD, "./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 644] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 293] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 644] <... futex resumed>) = 1 [pid 643] <... futex resumed>) = 0 [pid 643] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 644] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 643] <... futex resumed>) = 0 [pid 643] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 293] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 293] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(4, 0x55557107b770 /* 2 entries */, 32768) = 48 [pid 293] getdents64(4, 0x55557107b770 /* 0 entries */, 32768) = 0 [pid 293] close(4) = 0 [pid 293] rmdir("./11/file0") = 0 [pid 293] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./11/binderfs") = 0 [pid 293] getdents64(3, 0x555571073730 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./11") = 0 [pid 293] mkdir("./12", 0777) = 0 [pid 293] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 293] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 293] close(3) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 644] <... fsconfig resumed>) = 0 [pid 644] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 293] <... clone resumed>, child_tidptr=0x555571072690) = 669 [pid 644] <... futex resumed>) = 1 [pid 643] <... futex resumed>) = 0 [pid 644] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 643] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 644] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 643] <... futex resumed>) = 0 [pid 643] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 644] openat(AT_FDCWD, "./file0", O_RDONLY) = 5 [pid 644] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 643] <... futex resumed>) = 0 [pid 643] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 643] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 644] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140) = 0 [pid 644] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 643] <... futex resumed>) = 0 ./strace-static-x86_64: Process 669 attached [pid 643] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 643] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 644] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 669] set_robust_list(0x5555710726a0, 24 [pid 644] <... prlimit64 resumed>NULL) = 0 [pid 669] <... set_robust_list resumed>) = 0 [pid 644] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 643] <... futex resumed>) = 0 [pid 643] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 643] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 644] sched_setscheduler(0, SCHED_FIFO, [7]) = 0 [pid 644] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 643] <... futex resumed>) = 0 [pid 644] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 643] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 644] <... futex resumed>) = 0 [pid 643] <... futex resumed>) = 1 [ 42.261402][ T644] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [pid 644] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 669] chdir("./12" [pid 643] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 669] <... chdir resumed>) = 0 [pid 669] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 669] setpgid(0, 0) = 0 [pid 669] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 669] write(3, "1000", 4) = 4 [pid 669] close(3) = 0 [pid 669] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 669] write(1, "executing program\n", 18) = 18 [pid 669] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 669] rt_sigaction(SIGRT_1, {sa_handler=0x7f3c702c31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3c702b4350}, NULL, 8) = 0 [pid 669] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 669] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3c70239000 [pid 669] mprotect(0x7f3c7023a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 669] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 669] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70259990, parent_tid=0x7f3c70259990, exit_signal=0, stack=0x7f3c70239000, stack_size=0x20300, tls=0x7f3c702596c0} => {parent_tid=[670]}, 88) = 670 [pid 669] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 669] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 669] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 660] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119./strace-static-x86_64: Process 670 attached [pid 670] set_robust_list(0x7f3c702599a0, 24) = 0 [pid 670] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 670] memfd_create("syzkaller", 0) = 3 [pid 670] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3c67e39000 [pid 644] <... mmap resumed>) = 0x200000000000 [pid 644] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 643] <... futex resumed>) = 0 [pid 644] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 643] exit_group(0 [pid 644] <... futex resumed>) = ? [pid 643] <... exit_group resumed>) = ? [pid 644] +++ exited with 0 +++ [pid 649] <... mount resumed>) = 0 [pid 649] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 649] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 649] ioctl(4, LOOP_CLR_FD) = 0 [pid 649] close(4) = 0 [pid 649] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 647] <... futex resumed>) = 0 [pid 649] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 647] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 649] <... futex resumed>) = 0 [pid 647] <... futex resumed>) = 1 [pid 649] fspick(AT_FDCWD, "./file0", 0 [pid 647] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 649] <... fspick resumed>) = 4 [pid 649] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 647] <... futex resumed>) = 0 [pid 649] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 647] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 649] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 647] <... futex resumed>) = 0 [pid 649] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 647] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 649] <... fsconfig resumed>) = 0 [pid 649] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 647] <... futex resumed>) = 0 [pid 649] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 647] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 649] <... futex resumed>) = 0 [pid 647] <... futex resumed>) = 1 [pid 649] openat(AT_FDCWD, "./file0", O_RDONLY) = 5 [pid 647] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 649] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 647] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 649] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 647] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 649] <... futex resumed>) = 0 [pid 647] <... futex resumed>) = 1 [pid 649] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 647] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 649] <... ioctl resumed>) = 0 [pid 649] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 647] <... futex resumed>) = 0 [pid 649] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 647] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 649] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, NULL) = 0 [pid 647] <... futex resumed>) = 0 [pid 649] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 647] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 649] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 647] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 647] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 649] <... futex resumed>) = 0 [pid 647] <... futex resumed>) = 1 [pid 649] sched_setscheduler(0, SCHED_FIFO, [7]) = 0 [pid 647] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 649] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 647] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 649] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 647] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 649] <... futex resumed>) = 0 [pid 647] <... futex resumed>) = 1 [pid 649] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [ 42.374968][ T649] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [pid 647] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 643] +++ exited with 0 +++ [pid 294] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=643, si_uid=0, si_status=0, si_utime=7, si_stime=25} --- [pid 294] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 294] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 294] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] getdents64(3, [pid 647] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 294] <... getdents64 resumed>0x555571073730 /* 4 entries */, 32768) = 112 [pid 647] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 294] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 647] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 649] <... mmap resumed>) = 0x200000000000 [pid 649] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 649] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 647] exit_group(0 [pid 649] <... futex resumed>) = ? [pid 647] <... exit_group resumed>) = ? [pid 649] +++ exited with 0 +++ [pid 660] <... write resumed>) = 20699119 [pid 660] munmap(0x7f3c67e39000, 138412032) = 0 [pid 660] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 660] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 660] close(3) = 0 [pid 660] close(4) = 0 [pid 660] mkdir("./file0", 0777) = 0 [pid 660] mount("/dev/loop0", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 647] +++ exited with 0 +++ [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=647, si_uid=0, si_status=0, si_utime=11, si_stime=22} --- [pid 292] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 292] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x555571073730 /* 4 entries */, 32768) = 112 [ 42.520666][ T660] loop0: detected capacity change from 0 to 40427 [ 42.544977][ T660] F2FS-fs (loop0): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 42.570723][ T660] F2FS-fs (loop0): Found nat_bits in checkpoint [pid 292] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 660] <... mount resumed>) = 0 [pid 660] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 660] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 660] ioctl(4, LOOP_CLR_FD) = 0 [pid 660] close(4) = 0 [pid 660] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 659] <... futex resumed>) = 0 [pid 660] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 659] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 660] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 659] <... futex resumed>) = 0 [pid 660] fspick(AT_FDCWD, "./file0", 0 [pid 659] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 660] <... fspick resumed>) = 4 [pid 660] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 659] <... futex resumed>) = 0 [pid 660] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 659] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 660] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 659] <... futex resumed>) = 0 [pid 660] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 659] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 294] <... umount2 resumed>) = 0 [pid 664] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 660] <... fsconfig resumed>) = 0 [pid 660] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 659] <... futex resumed>) = 0 [pid 660] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 659] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 660] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 659] <... futex resumed>) = 0 [pid 660] openat(AT_FDCWD, "./file0", O_RDONLY [pid 659] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 660] <... openat resumed>) = 5 [pid 660] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 659] <... futex resumed>) = 0 [pid 660] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 659] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 660] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 659] <... futex resumed>) = 0 [pid 660] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 659] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 660] <... ioctl resumed>) = 0 [pid 660] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 659] <... futex resumed>) = 0 [pid 660] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 659] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 660] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 659] <... futex resumed>) = 0 [pid 660] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 659] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 660] <... prlimit64 resumed>NULL) = 0 [ 42.630252][ T660] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [pid 660] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 659] <... futex resumed>) = 0 [pid 660] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 659] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 660] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 659] <... futex resumed>) = 0 [pid 660] sched_setscheduler(0, SCHED_FIFO, [7] [pid 659] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 660] <... sched_setscheduler resumed>) = 0 [pid 660] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 659] <... futex resumed>) = 0 [pid 660] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 659] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 660] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 659] <... futex resumed>) = 0 [pid 660] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 659] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 294] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] newfstatat(AT_FDCWD, "./12/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 294] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] getdents64(4, 0x55557107b770 /* 2 entries */, 32768) = 48 [pid 294] getdents64(4, 0x55557107b770 /* 0 entries */, 32768) = 0 [pid 294] close(4) = 0 [pid 294] rmdir("./12/file0") = 0 [pid 294] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] unlink("./12/binderfs") = 0 [pid 294] getdents64(3, 0x555571073730 /* 0 entries */, 32768) = 0 [pid 294] close(3) = 0 [pid 294] rmdir("./12") = 0 [pid 294] mkdir("./13", 0777) = 0 [pid 294] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 294] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 294] close(3) = 0 [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571072690) = 677 ./strace-static-x86_64: Process 677 attached [pid 677] set_robust_list(0x5555710726a0, 24) = 0 [pid 677] chdir("./13") = 0 [pid 677] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 677] setpgid(0, 0) = 0 [pid 677] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 677] write(3, "1000", 4) = 4 [pid 677] close(3) = 0 [pid 677] symlink("/dev/binderfs", "./binderfs" [pid 660] <... mmap resumed>) = 0x200000000000 [pid 660] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 659] <... futex resumed>) = 0 [pid 660] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 659] exit_group(0 [pid 660] <... futex resumed>) = ? [pid 659] <... exit_group resumed>) = ? [pid 660] +++ exited with 0 +++ [pid 677] <... symlink resumed>) = 0 [pid 677] write(1, "executing program\n", 18executing program ) = 18 [pid 677] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 677] rt_sigaction(SIGRT_1, {sa_handler=0x7f3c702c31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3c702b4350}, NULL, 8) = 0 [pid 677] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 677] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3c70239000 [pid 677] mprotect(0x7f3c7023a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 677] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 677] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70259990, parent_tid=0x7f3c70259990, exit_signal=0, stack=0x7f3c70239000, stack_size=0x20300, tls=0x7f3c702596c0} => {parent_tid=[678]}, 88) = 678 [pid 677] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 677] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 677] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 670] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119./strace-static-x86_64: Process 678 attached [pid 678] set_robust_list(0x7f3c702599a0, 24) = 0 [pid 678] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 678] memfd_create("syzkaller", 0) = 3 [pid 678] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3c67e39000 [pid 292] <... umount2 resumed>) = 0 [pid 292] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 292] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(4, 0x55557107b770 /* 2 entries */, 32768) = 48 [pid 292] getdents64(4, 0x55557107b770 /* 0 entries */, 32768) = 0 [pid 292] close(4) = 0 [pid 292] rmdir("./11/file0") = 0 [pid 292] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./11/binderfs") = 0 [pid 292] getdents64(3, 0x555571073730 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./11") = 0 [pid 292] mkdir("./12", 0777) = 0 [pid 292] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 292] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 292] close(3) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571072690) = 679 [pid 659] +++ exited with 0 +++ [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=659, si_uid=0, si_status=0, si_utime=10, si_stime=21} --- [pid 290] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 679 attached [pid 679] set_robust_list(0x5555710726a0, 24) = 0 [pid 679] chdir("./12") = 0 [pid 679] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 679] setpgid(0, 0) = 0 [pid 679] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 679] write(3, "1000", 4) = 4 [pid 679] close(3) = 0 [pid 679] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 679] write(1, "executing program\n", 18) = 18 [pid 290] <... restart_syscall resumed>) = 0 [pid 679] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 679] rt_sigaction(SIGRT_1, {sa_handler=0x7f3c702c31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3c702b4350}, NULL, 8) = 0 [pid 679] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 290] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW [pid 679] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3c70239000 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 679] mprotect(0x7f3c7023a000, 131072, PROT_READ|PROT_WRITE [pid 290] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 679] <... mprotect resumed>) = 0 [pid 290] <... openat resumed>) = 3 [pid 290] newfstatat(3, "", [pid 679] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 679] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70259990, parent_tid=0x7f3c70259990, exit_signal=0, stack=0x7f3c70239000, stack_size=0x20300, tls=0x7f3c702596c0} [pid 290] getdents64(3, [pid 679] <... clone3 resumed> => {parent_tid=[680]}, 88) = 680 [pid 290] <... getdents64 resumed>0x555571073730 /* 4 entries */, 32768) = 112 [pid 679] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 290] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 679] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 679] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 680 attached [pid 664] <... write resumed>) = 20699119 [pid 680] set_robust_list(0x7f3c702599a0, 24 [pid 664] munmap(0x7f3c67e39000, 138412032 [pid 680] <... set_robust_list resumed>) = 0 [pid 680] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 680] memfd_create("syzkaller", 0) = 3 [pid 680] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3c67e39000 [pid 664] <... munmap resumed>) = 0 [pid 664] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 664] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 664] close(3) = 0 [pid 664] close(4) = 0 [pid 664] mkdir("./file0", 0777) = 0 [pid 664] mount("/dev/loop1", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 670] <... write resumed>) = 20699119 [ 42.891600][ T664] loop1: detected capacity change from 0 to 40427 [ 42.931618][ T664] F2FS-fs (loop1): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 670] munmap(0x7f3c67e39000, 138412032) = 0 [pid 670] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 670] ioctl(4, LOOP_SET_FD, 3 [pid 290] <... umount2 resumed>) = 0 [pid 670] <... ioctl resumed>) = 0 [pid 290] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 670] close(3 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./12/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 290] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(4, 0x55557107b770 /* 2 entries */, 32768) = 48 [pid 670] <... close resumed>) = 0 [pid 670] close(4) = 0 [pid 670] mkdir("./file0", 0777 [pid 290] getdents64(4, 0x55557107b770 /* 0 entries */, 32768) = 0 [pid 670] <... mkdir resumed>) = 0 [pid 670] mount("/dev/loop3", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 290] close(4) = 0 [pid 290] rmdir("./12/file0") = 0 [pid 290] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 42.971255][ T664] F2FS-fs (loop1): Found nat_bits in checkpoint [ 42.983429][ T670] loop3: detected capacity change from 0 to 40427 [pid 290] unlink("./12/binderfs") = 0 [pid 290] getdents64(3, 0x555571073730 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./12") = 0 [pid 290] mkdir("./13", 0777) = 0 [pid 290] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 290] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 290] close(3) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571072690) = 683 ./strace-static-x86_64: Process 683 attached [pid 683] set_robust_list(0x5555710726a0, 24) = 0 [pid 683] chdir("./13") = 0 [pid 683] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 683] setpgid(0, 0) = 0 [pid 683] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 683] write(3, "1000", 4) = 4 [pid 683] close(3) = 0 [pid 683] symlink("/dev/binderfs", "./binderfs") = 0 [pid 683] write(1, "executing program\n", 18executing program ) = 18 [pid 683] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 683] rt_sigaction(SIGRT_1, {sa_handler=0x7f3c702c31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3c702b4350}, NULL, 8) = 0 [pid 683] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 683] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3c70239000 [pid 683] mprotect(0x7f3c7023a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 683] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 683] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70259990, parent_tid=0x7f3c70259990, exit_signal=0, stack=0x7f3c70239000, stack_size=0x20300, tls=0x7f3c702596c0} => {parent_tid=[686]}, 88) = 686 [pid 683] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 683] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 683] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 686 attached [pid 686] set_robust_list(0x7f3c702599a0, 24) = 0 [pid 686] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 686] memfd_create("syzkaller", 0) = 3 [pid 686] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3c67e39000 [ 43.013860][ T670] F2FS-fs (loop3): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 43.044604][ T670] F2FS-fs (loop3): Found nat_bits in checkpoint [pid 664] <... mount resumed>) = 0 [pid 664] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 664] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 664] ioctl(4, LOOP_CLR_FD) = 0 [pid 664] close(4) = 0 [pid 664] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 663] <... futex resumed>) = 0 [pid 664] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 663] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 664] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 663] <... futex resumed>) = 0 [pid 664] fspick(AT_FDCWD, "./file0", 0 [pid 663] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 664] <... fspick resumed>) = 4 [pid 664] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 663] <... futex resumed>) = 0 [pid 664] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 663] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 664] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 663] <... futex resumed>) = 0 [pid 664] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 663] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 664] <... fsconfig resumed>) = 0 [pid 664] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 663] <... futex resumed>) = 0 [pid 664] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 663] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 664] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 663] <... futex resumed>) = 0 [pid 664] openat(AT_FDCWD, "./file0", O_RDONLY [pid 663] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 664] <... openat resumed>) = 5 [pid 664] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 663] <... futex resumed>) = 0 [pid 664] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 663] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 664] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 663] <... futex resumed>) = 0 [pid 664] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 663] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 664] <... ioctl resumed>) = 0 [ 43.068293][ T664] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [pid 664] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 663] <... futex resumed>) = 0 [pid 664] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 663] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 664] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 663] <... futex resumed>) = 0 [pid 670] <... mount resumed>) = 0 [pid 664] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 670] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 663] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 664] <... prlimit64 resumed>NULL) = 0 [pid 670] <... openat resumed>) = 3 [pid 664] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 670] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 664] <... futex resumed>) = 1 [pid 663] <... futex resumed>) = 0 [pid 670] <... openat resumed>) = 4 [pid 664] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 663] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 670] ioctl(4, LOOP_CLR_FD [pid 664] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 663] <... futex resumed>) = 0 [pid 670] <... ioctl resumed>) = 0 [pid 664] sched_setscheduler(0, SCHED_FIFO, [7] [pid 663] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 670] close(4 [pid 664] <... sched_setscheduler resumed>) = 0 [pid 664] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 663] <... futex resumed>) = 0 [pid 664] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 663] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 664] <... futex resumed>) = 0 [pid 663] <... futex resumed>) = 1 [pid 670] <... close resumed>) = 0 [pid 664] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [ 43.116032][ T670] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [pid 663] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 664] <... mmap resumed>) = 0x200000000000 [pid 670] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 664] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 670] <... futex resumed>) = 1 [pid 664] <... futex resumed>) = 0 [pid 670] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 664] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 669] <... futex resumed>) = 0 [pid 669] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 663] exit_group(0 [pid 670] <... futex resumed>) = 0 [pid 669] <... futex resumed>) = 1 [pid 664] <... futex resumed>) = ? [pid 663] <... exit_group resumed>) = ? [pid 670] fspick(AT_FDCWD, "./file0", 0 [pid 664] +++ exited with 0 +++ [pid 670] <... fspick resumed>) = 4 [pid 669] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 670] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 669] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 670] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 669] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 670] <... futex resumed>) = 0 [pid 669] <... futex resumed>) = 1 [pid 670] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 669] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 678] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 670] <... fsconfig resumed>) = 0 [pid 670] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 669] <... futex resumed>) = 0 [pid 670] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 669] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 670] <... futex resumed>) = 0 [pid 669] <... futex resumed>) = 1 [pid 670] openat(AT_FDCWD, "./file0", O_RDONLY) = 5 [pid 669] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 670] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 670] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 669] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 669] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 670] <... futex resumed>) = 0 [pid 669] <... futex resumed>) = 1 [pid 670] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 669] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 670] <... ioctl resumed>) = 0 [pid 670] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 669] <... futex resumed>) = 0 [pid 670] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 669] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 670] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, NULL) = 0 [pid 669] <... futex resumed>) = 0 [pid 670] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 669] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 670] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 669] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 669] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 670] <... futex resumed>) = 0 [pid 669] <... futex resumed>) = 1 [pid 670] sched_setscheduler(0, SCHED_FIFO, [7]) = 0 [pid 669] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 670] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 669] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 670] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 669] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 670] <... futex resumed>) = 0 [pid 669] <... futex resumed>) = 1 [pid 670] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 669] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 680] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 663] +++ exited with 0 +++ [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=663, si_uid=0, si_status=0, si_utime=14, si_stime=22} --- [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 669] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 669] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 291] <... restart_syscall resumed>) = 0 [pid 291] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x555571073730 /* 4 entries */, 32768) = 112 [pid 291] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 670] <... mmap resumed>) = 0x200000000000 [pid 670] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 670] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 669] exit_group(0 [pid 670] <... futex resumed>) = ? [pid 669] <... exit_group resumed>) = ? [pid 670] +++ exited with 0 +++ [pid 678] <... write resumed>) = 20699119 [pid 678] munmap(0x7f3c67e39000, 138412032) = 0 [pid 678] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 678] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 678] close(3) = 0 [pid 678] close(4) = 0 [pid 678] mkdir("./file0", 0777) = 0 [ 43.350993][ T678] loop4: detected capacity change from 0 to 40427 [ 43.363386][ T678] F2FS-fs (loop4): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 678] mount("/dev/loop4", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 291] <... umount2 resumed>) = 0 [pid 291] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 291] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(4, 0x55557107b770 /* 2 entries */, 32768) = 48 [pid 291] getdents64(4, 0x55557107b770 /* 0 entries */, 32768) = 0 [pid 291] close(4) = 0 [pid 291] rmdir("./11/file0") = 0 [pid 291] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./11/binderfs") = 0 [pid 291] getdents64(3, 0x555571073730 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./11") = 0 [pid 291] mkdir("./12", 0777) = 0 [pid 291] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 291] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 291] close(3) = 0 [pid 669] +++ exited with 0 +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=669, si_uid=0, si_status=0, si_utime=9, si_stime=25} --- [pid 293] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 293] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x555571073730 /* 4 entries */, 32768) = 112 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 293] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... clone resumed>, child_tidptr=0x555571072690) = 693 ./strace-static-x86_64: Process 693 attached [pid 693] set_robust_list(0x5555710726a0, 24) = 0 [pid 693] chdir("./12") = 0 [pid 693] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 693] setpgid(0, 0) = 0 [pid 693] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 693] write(3, "1000", 4) = 4 [pid 693] close(3) = 0 [pid 693] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 693] write(1, "executing program\n", 18) = 18 [pid 693] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 693] rt_sigaction(SIGRT_1, {sa_handler=0x7f3c702c31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3c702b4350}, NULL, 8) = 0 [pid 693] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 693] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3c70239000 [pid 693] mprotect(0x7f3c7023a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 693] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 693] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70259990, parent_tid=0x7f3c70259990, exit_signal=0, stack=0x7f3c70239000, stack_size=0x20300, tls=0x7f3c702596c0} => {parent_tid=[694]}, 88) = 694 [pid 693] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 693] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 693] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 694 attached [pid 694] set_robust_list(0x7f3c702599a0, 24) = 0 [pid 694] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 694] memfd_create("syzkaller", 0) = 3 [pid 694] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3c67e39000 [ 43.398540][ T678] F2FS-fs (loop4): Found nat_bits in checkpoint [pid 678] <... mount resumed>) = 0 [pid 678] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 678] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 678] ioctl(4, LOOP_CLR_FD) = 0 [pid 678] close(4) = 0 [pid 678] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 677] <... futex resumed>) = 0 [pid 677] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 677] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 678] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 678] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 678] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 677] <... futex resumed>) = 0 [pid 677] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 678] <... futex resumed>) = 0 [pid 677] <... futex resumed>) = 1 [pid 678] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 677] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 686] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 678] <... fsconfig resumed>) = 0 [pid 678] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 677] <... futex resumed>) = 0 [pid 678] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 677] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 678] <... futex resumed>) = 0 [pid 677] <... futex resumed>) = 1 [pid 678] openat(AT_FDCWD, "./file0", O_RDONLY) = 5 [pid 677] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 678] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 677] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 678] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 677] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 678] <... futex resumed>) = 0 [pid 677] <... futex resumed>) = 1 [pid 678] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 677] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 678] <... ioctl resumed>) = 0 [pid 678] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 677] <... futex resumed>) = 0 [pid 678] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 677] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 678] <... futex resumed>) = 0 [pid 677] <... futex resumed>) = 1 [pid 678] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, NULL) = 0 [pid 677] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 678] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 677] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 678] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 677] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 678] <... futex resumed>) = 0 [pid 677] <... futex resumed>) = 1 [pid 678] sched_setscheduler(0, SCHED_FIFO, [7]) = 0 [pid 677] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 678] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 677] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 678] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 677] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 678] <... futex resumed>) = 0 [pid 677] <... futex resumed>) = 1 [pid 678] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [ 43.467688][ T678] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [pid 677] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 680] <... write resumed>) = 20699119 [pid 677] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 680] munmap(0x7f3c67e39000, 138412032) = 0 [pid 680] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 680] ioctl(4, LOOP_SET_FD, 3 [pid 678] <... mmap resumed>) = 0x200000000000 [pid 678] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 678] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 677] exit_group(0 [pid 678] <... futex resumed>) = ? [pid 677] <... exit_group resumed>) = ? [pid 678] +++ exited with 0 +++ [pid 680] <... ioctl resumed>) = 0 [pid 680] close(3) = 0 [pid 680] close(4) = 0 [pid 680] mkdir("./file0", 0777) = 0 [ 43.577235][ T680] loop2: detected capacity change from 0 to 40427 [pid 680] mount("/dev/loop2", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 293] <... umount2 resumed>) = 0 [pid 293] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./12/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 293] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(4, 0x55557107b770 /* 2 entries */, 32768) = 48 [pid 293] getdents64(4, 0x55557107b770 /* 0 entries */, 32768) = 0 [pid 293] close(4) = 0 [pid 293] rmdir("./12/file0") = 0 [pid 293] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./12/binderfs") = 0 [pid 293] getdents64(3, 0x555571073730 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./12") = 0 [pid 293] mkdir("./13", 0777) = 0 [pid 293] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 293] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 293] close(3) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571072690) = 699 [pid 677] +++ exited with 0 +++ [pid 294] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=677, si_uid=0, si_status=0, si_utime=10, si_stime=21} --- [pid 294] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 699 attached [pid 699] set_robust_list(0x5555710726a0, 24) = 0 [pid 699] chdir("./13") = 0 [pid 699] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 699] setpgid(0, 0) = 0 [pid 699] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 699] write(3, "1000", 4) = 4 [pid 699] close(3) = 0 [pid 699] symlink("/dev/binderfs", "./binderfs") = 0 [pid 699] write(1, "executing program\n", 18executing program ) = 18 [pid 699] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 699] rt_sigaction(SIGRT_1, {sa_handler=0x7f3c702c31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3c702b4350}, NULL, 8) = 0 [pid 699] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 699] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3c70239000 [pid 699] mprotect(0x7f3c7023a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 699] rt_sigprocmask(SIG_BLOCK, ~[], [pid 294] <... restart_syscall resumed>) = 0 [pid 294] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 294] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] getdents64(3, 0x555571073730 /* 4 entries */, 32768) = 112 [pid 294] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 699] <... rt_sigprocmask resumed>[], 8) = 0 [pid 699] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70259990, parent_tid=0x7f3c70259990, exit_signal=0, stack=0x7f3c70239000, stack_size=0x20300, tls=0x7f3c702596c0} => {parent_tid=[700]}, 88) = 700 [pid 699] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 699] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 686] <... write resumed>) = 20699119 [pid 699] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 700 attached [pid 694] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [ 43.637327][ T680] F2FS-fs (loop2): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 43.674682][ T680] F2FS-fs (loop2): Found nat_bits in checkpoint [pid 686] munmap(0x7f3c67e39000, 138412032 [pid 700] set_robust_list(0x7f3c702599a0, 24) = 0 [pid 686] <... munmap resumed>) = 0 [pid 700] rt_sigprocmask(SIG_SETMASK, [], [pid 686] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 700] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 686] <... openat resumed>) = 4 [pid 700] memfd_create("syzkaller", 0 [pid 686] ioctl(4, LOOP_SET_FD, 3 [pid 700] <... memfd_create resumed>) = 3 [pid 700] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 686] <... ioctl resumed>) = 0 [pid 700] <... mmap resumed>) = 0x7f3c67e39000 [pid 686] close(3) = 0 [pid 686] close(4 [pid 680] <... mount resumed>) = 0 [pid 680] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 686] <... close resumed>) = 0 [pid 686] mkdir("./file0", 0777 [pid 680] <... openat resumed>) = 3 [pid 680] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 686] <... mkdir resumed>) = 0 [pid 686] mount("/dev/loop0", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 680] <... openat resumed>) = 4 [pid 680] ioctl(4, LOOP_CLR_FD) = 0 [ 43.731070][ T686] loop0: detected capacity change from 0 to 40427 [ 43.747126][ T680] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [pid 680] close(4) = 0 [pid 680] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 680] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 679] <... futex resumed>) = 0 [pid 679] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 679] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 680] <... futex resumed>) = 0 [pid 680] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 680] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 679] <... futex resumed>) = 0 [pid 680] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 679] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 679] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 680] <... fsconfig resumed>) = 0 [pid 680] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 679] <... futex resumed>) = 0 [pid 680] openat(AT_FDCWD, "./file0", O_RDONLY [pid 679] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 680] <... openat resumed>) = 5 [pid 679] <... futex resumed>) = 0 [pid 680] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 679] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 680] <... futex resumed>) = 0 [pid 679] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 680] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 679] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 679] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 680] <... ioctl resumed>) = 0 [pid 680] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 679] <... futex resumed>) = 0 [pid 680] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 679] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 680] <... prlimit64 resumed>NULL) = 0 [pid 679] <... futex resumed>) = 0 [pid 680] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 679] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 680] <... futex resumed>) = 0 [pid 679] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 680] sched_setscheduler(0, SCHED_FIFO, [7] [pid 679] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 680] <... sched_setscheduler resumed>) = 0 [pid 679] <... futex resumed>) = 0 [pid 680] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 679] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 680] <... futex resumed>) = 0 [pid 679] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 680] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 679] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 680] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 43.777163][ T686] F2FS-fs (loop0): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 679] <... futex resumed>) = 0 [pid 680] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 679] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 294] <... umount2 resumed>) = 0 [pid 294] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] newfstatat(AT_FDCWD, "./13/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 294] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] getdents64(4, 0x55557107b770 /* 2 entries */, 32768) = 48 [pid 294] getdents64(4, 0x55557107b770 /* 0 entries */, 32768) = 0 [pid 294] close(4) = 0 [pid 294] rmdir("./13/file0") = 0 [pid 294] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] unlink("./13/binderfs") = 0 [pid 294] getdents64(3, 0x555571073730 /* 0 entries */, 32768) = 0 [pid 294] close(3) = 0 [pid 294] rmdir("./13") = 0 [pid 294] mkdir("./14", 0777) = 0 [pid 294] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 294] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 294] close(3) = 0 [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 680] <... mmap resumed>) = 0x200000000000 [pid 680] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 679] <... futex resumed>) = 0 [pid 294] <... clone resumed>, child_tidptr=0x555571072690) = 704 [pid 680] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 679] exit_group(0 [pid 680] <... futex resumed>) = ? [pid 679] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 704 attached [pid 694] <... write resumed>) = 20699119 [pid 680] +++ exited with 0 +++ [pid 704] set_robust_list(0x5555710726a0, 24 [pid 694] munmap(0x7f3c67e39000, 138412032 [pid 704] <... set_robust_list resumed>) = 0 [pid 694] <... munmap resumed>) = 0 [pid 704] chdir("./14" [pid 694] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 704] <... chdir resumed>) = 0 [pid 704] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 694] <... openat resumed>) = 4 [pid 704] <... prctl resumed>) = 0 [pid 694] ioctl(4, LOOP_SET_FD, 3 [pid 704] setpgid(0, 0) = 0 [pid 704] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 704] write(3, "1000", 4) = 4 [pid 704] close(3) = 0 [pid 704] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 704] write(1, "executing program\n", 18) = 18 [pid 704] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 704] rt_sigaction(SIGRT_1, {sa_handler=0x7f3c702c31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3c702b4350}, NULL, 8) = 0 [pid 704] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 704] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3c70239000 [pid 704] mprotect(0x7f3c7023a000, 131072, PROT_READ|PROT_WRITE [pid 694] <... ioctl resumed>) = 0 [pid 704] <... mprotect resumed>) = 0 [pid 694] close(3 [pid 704] rt_sigprocmask(SIG_BLOCK, ~[], [pid 694] <... close resumed>) = 0 [pid 704] <... rt_sigprocmask resumed>[], 8) = 0 [pid 704] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70259990, parent_tid=0x7f3c70259990, exit_signal=0, stack=0x7f3c70239000, stack_size=0x20300, tls=0x7f3c702596c0} [pid 694] close(4) = 0 [pid 704] <... clone3 resumed> => {parent_tid=[706]}, 88) = 706 [pid 704] rt_sigprocmask(SIG_SETMASK, [], [pid 694] mkdir("./file0", 0777 [pid 704] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 704] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 704] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 694] <... mkdir resumed>) = 0 [ 43.884127][ T686] F2FS-fs (loop0): Found nat_bits in checkpoint [ 43.903420][ T694] loop1: detected capacity change from 0 to 40427 [pid 694] mount("/dev/loop1", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"..../strace-static-x86_64: Process 706 attached [pid 706] set_robust_list(0x7f3c702599a0, 24) = 0 [pid 706] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 706] memfd_create("syzkaller", 0) = 3 [pid 706] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3c67e39000 [pid 700] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 679] +++ exited with 0 +++ [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=679, si_uid=0, si_status=0, si_utime=9, si_stime=23} --- [pid 292] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 292] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x555571073730 /* 4 entries */, 32768) = 112 [ 43.931958][ T694] F2FS-fs (loop1): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 43.955699][ T694] F2FS-fs (loop1): Found nat_bits in checkpoint [pid 292] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 694] <... mount resumed>) = 0 [pid 686] <... mount resumed>) = 0 [pid 694] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 694] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 686] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 694] ioctl(4, LOOP_CLR_FD [pid 686] <... openat resumed>) = 3 [pid 694] <... ioctl resumed>) = 0 [pid 694] close(4) = 0 [pid 686] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 686] ioctl(4, LOOP_CLR_FD) = 0 [pid 686] close(4) = 0 [pid 686] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 686] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 694] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 683] <... futex resumed>) = 0 [pid 694] <... futex resumed>) = 1 [pid 683] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 694] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 683] <... futex resumed>) = 1 [pid 693] <... futex resumed>) = 0 [pid 683] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 693] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 694] <... futex resumed>) = 0 [pid 693] <... futex resumed>) = 1 [pid 694] fspick(AT_FDCWD, "./file0", 0 [pid 693] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 686] <... futex resumed>) = 0 [pid 694] <... fspick resumed>) = 4 [pid 694] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 693] <... futex resumed>) = 0 [pid 694] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 693] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 694] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 694] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 693] <... futex resumed>) = 0 [pid 693] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 686] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 686] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 683] <... futex resumed>) = 0 [pid 686] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 683] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 44.043889][ T694] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 44.053209][ T686] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [pid 683] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 686] <... fsconfig resumed>) = 0 [pid 686] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 683] <... futex resumed>) = 0 [pid 686] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 694] <... fsconfig resumed>) = 0 [pid 683] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 694] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 693] <... futex resumed>) = 0 [pid 686] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 683] <... futex resumed>) = 0 [pid 694] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 683] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 693] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 686] openat(AT_FDCWD, "./file0", O_RDONLY [pid 694] <... futex resumed>) = 0 [pid 693] <... futex resumed>) = 1 [pid 686] <... openat resumed>) = 5 [pid 694] openat(AT_FDCWD, "./file0", O_RDONLY [pid 693] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 686] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 694] <... openat resumed>) = 5 [pid 694] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 686] <... futex resumed>) = 1 [pid 683] <... futex resumed>) = 0 [pid 694] <... futex resumed>) = 1 [pid 683] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 693] <... futex resumed>) = 0 [pid 686] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 694] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 693] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 683] <... futex resumed>) = 0 [pid 693] <... futex resumed>) = 0 [pid 683] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 693] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 686] <... ioctl resumed>) = 0 [pid 694] <... ioctl resumed>) = 0 [pid 686] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 694] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 693] <... futex resumed>) = 0 [pid 686] <... futex resumed>) = 1 [pid 683] <... futex resumed>) = 0 [pid 694] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 693] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 686] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 683] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 694] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 683] <... futex resumed>) = 0 [pid 694] <... prlimit64 resumed>NULL) = 0 [pid 693] <... futex resumed>) = 0 [pid 686] <... prlimit64 resumed>NULL) = 0 [pid 683] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 694] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 693] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 686] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 694] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 693] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 686] <... futex resumed>) = 1 [pid 683] <... futex resumed>) = 0 [pid 693] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 686] sched_setscheduler(0, SCHED_FIFO, [7] [pid 683] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 694] <... futex resumed>) = 0 [pid 693] <... futex resumed>) = 1 [pid 686] <... sched_setscheduler resumed>) = 0 [pid 683] <... futex resumed>) = 0 [pid 694] sched_setscheduler(0, SCHED_FIFO, [7] [pid 693] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 686] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 683] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 694] <... sched_setscheduler resumed>) = 0 [pid 686] <... futex resumed>) = 0 [pid 683] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 694] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 686] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 683] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 694] <... futex resumed>) = 1 [pid 693] <... futex resumed>) = 0 [pid 686] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 683] <... futex resumed>) = 0 [pid 694] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 693] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 686] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 683] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 700] <... write resumed>) = 20699119 [pid 694] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 693] <... futex resumed>) = 0 [pid 700] munmap(0x7f3c67e39000, 138412032 [pid 694] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 706] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 700] <... munmap resumed>) = 0 [pid 693] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 686] <... mmap resumed>) = 0x200000000000 [pid 292] <... umount2 resumed>) = 0 [pid 686] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 686] <... futex resumed>) = 1 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 686] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 292] newfstatat(AT_FDCWD, "./12/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 292] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(4, 0x55557107b770 /* 2 entries */, 32768) = 48 [pid 292] getdents64(4, 0x55557107b770 /* 0 entries */, 32768) = 0 [pid 292] close(4) = 0 [pid 292] rmdir("./12/file0") = 0 [pid 292] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./12/binderfs") = 0 [pid 292] getdents64(3, 0x555571073730 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./12") = 0 [pid 292] mkdir("./13", 0777) = 0 [pid 292] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 292] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 292] close(3) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571072690) = 713 ./strace-static-x86_64: Process 713 attached [pid 713] set_robust_list(0x5555710726a0, 24) = 0 [pid 713] chdir("./13") = 0 [pid 713] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 713] setpgid(0, 0) = 0 [pid 713] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 713] write(3, "1000", 4) = 4 [pid 713] close(3) = 0 executing program [pid 713] symlink("/dev/binderfs", "./binderfs") = 0 [pid 713] write(1, "executing program\n", 18) = 18 [pid 713] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 713] rt_sigaction(SIGRT_1, {sa_handler=0x7f3c702c31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3c702b4350}, NULL, 8) = 0 [pid 713] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 713] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3c70239000 [pid 713] mprotect(0x7f3c7023a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 713] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 713] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70259990, parent_tid=0x7f3c70259990, exit_signal=0, stack=0x7f3c70239000, stack_size=0x20300, tls=0x7f3c702596c0} => {parent_tid=[714]}, 88) = 714 [pid 713] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 713] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 713] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 714 attached [pid 714] set_robust_list(0x7f3c702599a0, 24) = 0 [pid 714] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 714] memfd_create("syzkaller", 0) = 3 [pid 714] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3c67e39000 [pid 694] <... mmap resumed>) = 0x200000000000 [pid 700] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 694] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 683] <... futex resumed>) = 0 [pid 700] <... openat resumed>) = 4 [pid 694] <... futex resumed>) = 1 [pid 693] <... futex resumed>) = 0 [pid 683] exit_group(0 [pid 700] ioctl(4, LOOP_SET_FD, 3 [pid 694] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 693] exit_group(0 [pid 686] <... futex resumed>) = ? [pid 683] <... exit_group resumed>) = ? [pid 694] <... futex resumed>) = ? [pid 693] <... exit_group resumed>) = ? [pid 686] +++ exited with 0 +++ [pid 694] +++ exited with 0 +++ [pid 700] <... ioctl resumed>) = 0 [pid 700] close(3) = 0 [pid 700] close(4) = 0 [pid 700] mkdir("./file0", 0777) = 0 [pid 683] +++ exited with 0 +++ [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=683, si_uid=0, si_status=0, si_utime=10, si_stime=22} --- [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 700] mount("/dev/loop3", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 290] <... restart_syscall resumed>) = 0 [pid 290] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x555571073730 /* 4 entries */, 32768) = 112 [ 44.242880][ T700] loop3: detected capacity change from 0 to 40427 [pid 290] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 693] +++ exited with 0 +++ [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=693, si_uid=0, si_status=0, si_utime=11, si_stime=23} --- [pid 291] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 291] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x555571073730 /* 4 entries */, 32768) = 112 [ 44.285650][ T700] F2FS-fs (loop3): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 44.325909][ T700] F2FS-fs (loop3): Found nat_bits in checkpoint [pid 291] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... umount2 resumed>) = 0 [pid 290] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./13/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 290] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(4, 0x55557107b770 /* 2 entries */, 32768) = 48 [pid 290] getdents64(4, 0x55557107b770 /* 0 entries */, 32768) = 0 [pid 290] close(4) = 0 [pid 290] rmdir("./13/file0" [pid 700] <... mount resumed>) = 0 [pid 700] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 700] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 700] ioctl(4, LOOP_CLR_FD) = 0 [pid 700] close(4) = 0 [pid 700] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 699] <... futex resumed>) = 0 [pid 700] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 699] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 700] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 699] <... futex resumed>) = 0 [pid 700] fspick(AT_FDCWD, "./file0", 0 [pid 699] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 700] <... fspick resumed>) = 4 [pid 700] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 699] <... futex resumed>) = 0 [pid 700] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 699] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 700] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 699] <... futex resumed>) = 0 [pid 700] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 699] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 290] <... rmdir resumed>) = 0 [pid 290] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./13/binderfs") = 0 [pid 290] getdents64(3, 0x555571073730 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./13") = 0 [pid 290] mkdir("./14", 0777) = 0 [pid 290] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 290] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 290] close(3) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571072690) = 718 [pid 291] <... umount2 resumed>) = 0 [pid 706] <... write resumed>) = 20699119 [pid 714] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 700] <... fsconfig resumed>) = 0 [pid 700] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 699] <... futex resumed>) = 0 [pid 700] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 699] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 700] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 699] <... futex resumed>) = 0 [pid 700] openat(AT_FDCWD, "./file0", O_RDONLY [pid 699] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 700] <... openat resumed>) = 5 [pid 700] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 700] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 699] <... futex resumed>) = 0 [pid 699] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 700] <... futex resumed>) = 0 [pid 699] <... futex resumed>) = 1 [pid 700] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 699] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 706] munmap(0x7f3c67e39000, 138412032) = 0 [pid 706] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 706] ioctl(4, LOOP_SET_FD, 3 [pid 700] <... ioctl resumed>) = 0 [pid 700] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 718 attached [ 44.432103][ T700] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 ) = 1 [pid 699] <... futex resumed>) = 0 [pid 718] set_robust_list(0x5555710726a0, 24 [pid 291] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 700] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 718] <... set_robust_list resumed>) = 0 [pid 699] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 700] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 718] chdir("./14" [pid 700] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 699] <... futex resumed>) = 0 [pid 291] newfstatat(AT_FDCWD, "./12/file0", [pid 718] <... chdir resumed>) = 0 [pid 700] <... prlimit64 resumed>NULL) = 0 [pid 699] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 718] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 700] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 699] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 718] <... prctl resumed>) = 0 [pid 700] <... futex resumed>) = 0 [pid 699] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 291] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 718] setpgid(0, 0 [pid 700] sched_setscheduler(0, SCHED_FIFO, [7] [pid 699] <... futex resumed>) = 0 [pid 718] <... setpgid resumed>) = 0 [pid 700] <... sched_setscheduler resumed>) = 0 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 699] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 700] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 718] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 700] <... futex resumed>) = 0 [pid 699] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 291] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 700] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 718] <... openat resumed>) = 3 [pid 699] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 291] <... openat resumed>) = 4 [pid 718] write(3, "1000", 4 [pid 700] <... futex resumed>) = 0 [ 44.484777][ T706] loop4: detected capacity change from 0 to 40427 [pid 699] <... futex resumed>) = 1 [pid 718] <... write resumed>) = 4 [pid 700] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 291] newfstatat(4, "", [pid 718] close(3 [pid 714] <... write resumed>) = 20699119 [pid 706] <... ioctl resumed>) = 0 [pid 700] <... mmap resumed>) = 0x200000000000 [pid 699] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 700] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 700] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 718] <... close resumed>) = 0 [pid 699] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 699] exit_group(0 [pid 718] symlink("/dev/binderfs", "./binderfs" [pid 291] getdents64(4, [pid 700] <... futex resumed>) = ? [pid 699] <... exit_group resumed>) = ? [pid 700] +++ exited with 0 +++ [pid 718] <... symlink resumed>) = 0 [pid 291] <... getdents64 resumed>0x55557107b770 /* 2 entries */, 32768) = 48 [pid 714] munmap(0x7f3c67e39000, 138412032) = 0 [pid 714] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 714] ioctl(4, LOOP_SET_FD, 3 [pid 718] write(1, "executing program\n", 18 [pid 706] close(3executing program [pid 291] getdents64(4, [pid 718] <... write resumed>) = 18 [pid 706] <... close resumed>) = 0 [pid 291] <... getdents64 resumed>0x55557107b770 /* 0 entries */, 32768) = 0 [pid 706] close(4 [pid 718] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 291] close(4 [pid 718] <... futex resumed>) = 0 [pid 706] <... close resumed>) = 0 [pid 291] <... close resumed>) = 0 [pid 718] rt_sigaction(SIGRT_1, {sa_handler=0x7f3c702c31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3c702b4350}, [pid 706] mkdir("./file0", 0777 [pid 291] rmdir("./12/file0" [pid 718] <... rt_sigaction resumed>NULL, 8) = 0 [pid 706] <... mkdir resumed>) = 0 [pid 291] <... rmdir resumed>) = 0 [pid 718] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 706] mount("/dev/loop4", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 291] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 714] <... ioctl resumed>) = 0 [pid 718] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 718] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 291] newfstatat(AT_FDCWD, "./12/binderfs", [pid 718] <... mmap resumed>) = 0x7f3c70239000 [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 718] mprotect(0x7f3c7023a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 291] unlink("./12/binderfs" [pid 718] rt_sigprocmask(SIG_BLOCK, ~[], [pid 291] <... unlink resumed>) = 0 [pid 718] <... rt_sigprocmask resumed>[], 8) = 0 [pid 291] getdents64(3, [pid 718] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70259990, parent_tid=0x7f3c70259990, exit_signal=0, stack=0x7f3c70239000, stack_size=0x20300, tls=0x7f3c702596c0} [pid 291] <... getdents64 resumed>0x555571073730 /* 0 entries */, 32768) = 0 [pid 714] close(3 [pid 291] close(3 [pid 718] <... clone3 resumed> => {parent_tid=[720]}, 88) = 720 [pid 718] rt_sigprocmask(SIG_SETMASK, [], [pid 714] <... close resumed>) = 0 [pid 291] <... close resumed>) = 0 [pid 718] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 714] close(4 [pid 291] rmdir("./12" [pid 718] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 720 attached [pid 720] set_robust_list(0x7f3c702599a0, 24) = 0 [pid 720] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 291] <... rmdir resumed>) = 0 [pid 718] <... futex resumed>) = 0 [pid 714] <... close resumed>) = 0 [pid 291] mkdir("./13", 0777 [pid 718] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 291] <... mkdir resumed>) = 0 [pid 714] mkdir("./file0", 0777 [pid 291] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 720] memfd_create("syzkaller", 0) = 3 [pid 720] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 714] <... mkdir resumed>) = 0 [pid 714] mount("/dev/loop2", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 291] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 291] close(3) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571072690) = 722 [pid 720] <... mmap resumed>) = 0x7f3c67e39000 ./strace-static-x86_64: Process 722 attached [pid 722] set_robust_list(0x5555710726a0, 24) = 0 [ 44.568836][ T714] loop2: detected capacity change from 0 to 40427 [ 44.584359][ T706] F2FS-fs (loop4): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 44.603409][ T714] F2FS-fs (loop2): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 722] chdir("./13") = 0 [pid 699] +++ exited with 0 +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=699, si_uid=0, si_status=0, si_utime=12, si_stime=22} --- [pid 293] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 293] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW [pid 722] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 722] setpgid(0, 0) = 0 [pid 722] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 722] <... openat resumed>) = 3 [pid 293] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 722] write(3, "1000", 4) = 4 [pid 722] close(3) = 0 [pid 722] symlink("/dev/binderfs", "./binderfs" [pid 293] <... openat resumed>) = 3 [pid 293] newfstatat(3, "", [pid 722] <... symlink resumed>) = 0 executing program [pid 722] write(1, "executing program\n", 18) = 18 [pid 722] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 722] <... futex resumed>) = 0 [pid 722] rt_sigaction(SIGRT_1, {sa_handler=0x7f3c702c31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3c702b4350}, NULL, 8) = 0 [pid 722] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 722] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3c70239000 [pid 722] mprotect(0x7f3c7023a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 722] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 722] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70259990, parent_tid=0x7f3c70259990, exit_signal=0, stack=0x7f3c70239000, stack_size=0x20300, tls=0x7f3c702596c0} [pid 293] getdents64(3, [pid 722] <... clone3 resumed> => {parent_tid=[725]}, 88) = 725 [pid 722] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 722] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 722] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 293] <... getdents64 resumed>0x555571073730 /* 4 entries */, 32768) = 112 [ 44.615686][ T706] F2FS-fs (loop4): Found nat_bits in checkpoint [pid 293] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 725 attached [pid 725] set_robust_list(0x7f3c702599a0, 24) = 0 [pid 725] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 725] memfd_create("syzkaller", 0) = 3 [pid 725] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3c67e39000 [ 44.643531][ T714] F2FS-fs (loop2): Found nat_bits in checkpoint [pid 293] <... umount2 resumed>) = 0 [pid 293] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./13/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 293] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(4, 0x55557107b770 /* 2 entries */, 32768) = 48 [pid 293] getdents64(4, 0x55557107b770 /* 0 entries */, 32768) = 0 [pid 293] close(4) = 0 [pid 293] rmdir("./13/file0") = 0 [pid 293] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./13/binderfs") = 0 [pid 293] getdents64(3, 0x555571073730 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./13") = 0 [pid 293] mkdir("./14", 0777) = 0 [pid 293] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 293] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 293] close(3 [pid 706] <... mount resumed>) = 0 [pid 706] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 706] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 293] <... close resumed>) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 706] <... openat resumed>) = 4 [pid 706] ioctl(4, LOOP_CLR_FD) = 0 [pid 293] <... clone resumed>, child_tidptr=0x555571072690) = 727 [pid 706] close(4) = 0 [pid 714] <... mount resumed>) = 0 [pid 706] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 704] <... futex resumed>) = 0 [pid 714] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 704] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 706] fspick(AT_FDCWD, "./file0", 0 [pid 714] <... openat resumed>) = 3 [pid 704] <... futex resumed>) = 0 [pid 706] <... fspick resumed>) = 4 [pid 704] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 714] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 706] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 714] <... openat resumed>) = 4 [pid 706] <... futex resumed>) = 1 [pid 704] <... futex resumed>) = 0 [pid 714] ioctl(4, LOOP_CLR_FD [pid 704] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 706] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 714] <... ioctl resumed>) = 0 [pid 704] <... futex resumed>) = 0 [pid 714] close(4 [pid 704] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 714] <... close resumed>) = 0 [pid 714] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 713] <... futex resumed>) = 0 [pid 713] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 713] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 714] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 714] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 713] <... futex resumed>) = 0 [pid 713] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 713] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 714] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 706] <... fsconfig resumed>) = 0 [pid 706] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 704] <... futex resumed>) = 0 [pid 704] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 706] openat(AT_FDCWD, "./file0", O_RDONLY) = 5 [pid 704] <... futex resumed>) = 0 [pid 704] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 706] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 727 attached [pid 727] set_robust_list(0x5555710726a0, 24) = 0 [pid 727] chdir("./14" [pid 706] <... futex resumed>) = 0 [pid 704] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 727] <... chdir resumed>) = 0 [pid 727] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 706] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 704] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 727] <... prctl resumed>) = 0 [pid 706] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 704] <... futex resumed>) = 0 [pid 706] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 704] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 727] setpgid(0, 0) = 0 [pid 727] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 706] <... ioctl resumed>) = 0 [pid 727] write(3, "1000", 4 [pid 706] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 727] <... write resumed>) = 4 [pid 727] close(3) = 0 [pid 727] symlink("/dev/binderfs", "./binderfs" [pid 706] <... futex resumed>) = 1 [pid 704] <... futex resumed>) = 0 [pid 706] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 704] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 706] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 704] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 706] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, NULL) = 0 [ 44.750522][ T706] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 44.783340][ T714] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [pid 706] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 704] <... futex resumed>) = 0 [pid 706] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 704] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 706] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 704] <... futex resumed>) = 0 [pid 706] sched_setscheduler(0, SCHED_FIFO, [7] [pid 704] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 706] <... sched_setscheduler resumed>) = 0 [pid 706] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 704] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 706] <... futex resumed>) = 0 [pid 704] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 706] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0executing program [pid 704] <... futex resumed>) = 0 [pid 727] <... symlink resumed>) = 0 [pid 727] write(1, "executing program\n", 18) = 18 [pid 727] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 727] rt_sigaction(SIGRT_1, {sa_handler=0x7f3c702c31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3c702b4350}, NULL, 8) = 0 [pid 727] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 727] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3c70239000 [pid 727] mprotect(0x7f3c7023a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 727] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 727] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70259990, parent_tid=0x7f3c70259990, exit_signal=0, stack=0x7f3c70239000, stack_size=0x20300, tls=0x7f3c702596c0} => {parent_tid=[731]}, 88) = 731 [pid 727] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 727] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 727] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 720] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 713] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 713] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 713] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 713] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 713] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 713] futex(0x7f3c7032a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 713] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3c70218000 [pid 713] mprotect(0x7f3c70219000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 713] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 713] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70238990, parent_tid=0x7f3c70238990, exit_signal=0, stack=0x7f3c70218000, stack_size=0x20300, tls=0x7f3c702386c0} => {parent_tid=[732]}, 88) = 732 [pid 713] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 713] futex(0x7f3c7032a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 713] futex(0x7f3c7032a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 732 attached [pid 732] set_robust_list(0x7f3c702389a0, 24) = 0 [pid 732] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 732] openat(AT_FDCWD, "./file0", O_RDONLY) = 5 [pid 732] futex(0x7f3c7032a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 713] <... futex resumed>) = 0 [pid 713] futex(0x7f3c7032a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 713] futex(0x7f3c7032a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 732] <... futex resumed>) = 1 [ 44.871585][ T732] ================================================================== [ 44.879712][ T732] BUG: KASAN: null-ptr-deref in kthread_stop+0x3a/0x3f0 [ 44.886708][ T732] Write of size 4 at addr 0000000000000028 by task syz-executor405/732 [ 44.894985][ T732] [ 44.897340][ T732] CPU: 0 PID: 732 Comm: syz-executor405 Not tainted 6.1.141-syzkaller-00039-g145c7fad733f #0 [ 44.907511][ T732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 44.917597][ T732] Call Trace: [ 44.921028][ T732] [ 44.923987][ T732] __dump_stack+0x21/0x24 [ 44.928383][ T732] dump_stack_lvl+0xee/0x150 [ 44.933006][ T732] ? __cfi_dump_stack_lvl+0x8/0x8 [ 44.938071][ T732] ? __kasan_check_read+0x11/0x20 [ 44.943146][ T732] ? __sync_dirty_buffer+0x2bd/0x310 [ 44.948480][ T732] ? kthread_stop+0x3a/0x3f0 [ 44.953101][ T732] ? kthread_stop+0x3a/0x3f0 [ 44.957747][ T732] print_report+0x3d/0x60 [ 44.962108][ T732] kasan_report+0x122/0x150 [ 44.966647][ T732] ? kthread_stop+0x3a/0x3f0 [pid 732] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140./strace-static-x86_64: Process 731 attached [pid 725] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 706] <... mmap resumed>) = 0x200000000000 [pid 704] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 731] set_robust_list(0x7f3c702599a0, 24 [pid 706] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 731] <... set_robust_list resumed>) = 0 [pid 706] <... futex resumed>) = 0 [pid 704] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 731] rt_sigprocmask(SIG_SETMASK, [], [pid 706] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 731] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 704] exit_group(0 [pid 731] memfd_create("syzkaller", 0 [pid 706] <... futex resumed>) = ? [pid 704] <... exit_group resumed>) = ? [pid 731] <... memfd_create resumed>) = 3 [pid 706] +++ exited with 0 +++ [ 44.971267][ T732] kasan_check_range+0x280/0x290 [ 44.976234][ T732] __kasan_check_write+0x14/0x20 [ 44.981293][ T732] kthread_stop+0x3a/0x3f0 [ 44.985825][ T732] f2fs_stop_gc_thread+0x65/0xb0 [ 44.990829][ T732] __f2fs_ioctl+0x5e7f/0xbd60 [ 44.995543][ T732] ? avc_has_extended_perms+0x95f/0xdc0 [ 45.001207][ T732] ? __cfi_avc_has_extended_perms+0x10/0x10 [ 45.007261][ T732] ? __this_cpu_preempt_check+0x13/0x20 [ 45.012866][ T732] ? xfd_validate_state+0x70/0x150 [pid 731] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3c67e39000 [pid 720] <... write resumed>) = 20699119 [pid 720] munmap(0x7f3c67e39000, 138412032) = 0 [pid 720] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 45.018080][ T732] ? do_vfs_ioctl+0xc36/0x1c80 [ 45.022982][ T732] ? __ia32_compat_sys_ioctl+0x790/0x790 [ 45.028755][ T732] ? __switch_to+0x51f/0xe30 [ 45.033384][ T732] ? f2fs_ioctl+0x240/0x240 [ 45.037934][ T732] ? __cfi___switch_to+0x10/0x10 [ 45.042927][ T732] ? finish_task_switch+0x16b/0x7b0 [ 45.048163][ T732] ? ioctl_has_perm+0x391/0x4c0 [ 45.051586][ T720] loop0: detected capacity change from 0 to 40427 [ 45.053131][ T732] ? has_cap_mac_admin+0x330/0x330 [ 45.064839][ T732] ? __kasan_check_write+0x14/0x20 [pid 720] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 720] close(3) = 0 [pid 720] close(4) = 0 [pid 720] mkdir("./file0", 0777) = 0 [ 45.070076][ T732] ? _raw_spin_lock_irq+0x8f/0xe0 [ 45.075136][ T732] ? __kasan_check_write+0x14/0x20 [ 45.080284][ T732] ? _raw_spin_lock_irq+0x8f/0xe0 [ 45.085341][ T732] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 45.090913][ T732] ? selinux_file_ioctl+0x377/0x480 [ 45.096143][ T732] ? memset+0x35/0x40 [ 45.100167][ T732] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 45.105759][ T732] ? __fget_files+0x2d5/0x330 [ 45.110473][ T732] f2fs_ioctl+0x149/0x240 [ 45.114828][ T732] ? __cfi_f2fs_ioctl+0x10/0x10 [pid 720] mount("/dev/loop0", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 704] +++ exited with 0 +++ [pid 294] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=704, si_uid=0, si_status=0, si_utime=9, si_stime=24} --- [pid 294] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 294] umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 294] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] getdents64(3, 0x555571073730 /* 4 entries */, 32768) = 112 [ 45.119717][ T732] __se_sys_ioctl+0x12f/0x1b0 [ 45.124428][ T732] __x64_sys_ioctl+0x7b/0x90 [ 45.129052][ T732] x64_sys_call+0x58b/0x9a0 [ 45.133587][ T732] do_syscall_64+0x4c/0xa0 [ 45.138122][ T732] ? clear_bhb_loop+0x30/0x80 [ 45.142833][ T732] ? clear_bhb_loop+0x30/0x80 [ 45.147531][ T732] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 45.153453][ T732] RIP: 0033:0x7f3c7029cd89 [ 45.157911][ T732] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 45.177715][ T732] RSP: 002b:00007f3c70238218 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 45.186424][ T732] RAX: ffffffffffffffda RBX: 00007f3c7032a6d8 RCX: 00007f3c7029cd89 [ 45.194421][ T732] RDX: 0000200000000140 RSI: 000000008004587d RDI: 0000000000000005 [ 45.202426][ T732] RBP: 00007f3c7032a6d0 R08: 0000000000000000 R09: 0000000000000000 [ 45.210617][ T732] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3c702f68dc [pid 294] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 725] <... write resumed>) = 20699119 [pid 725] munmap(0x7f3c67e39000, 138412032) = 0 [pid 725] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 725] ioctl(4, LOOP_SET_FD, 3 [pid 713] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 713] futex(0x7f3c7032a6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 713] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3c701f7000 [pid 713] mprotect(0x7f3c701f8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 713] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 713] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70217990, parent_tid=0x7f3c70217990, exit_signal=0, stack=0x7f3c701f7000, stack_size=0x20300, tls=0x7f3c702176c0} => {parent_tid=[734]}, 88) = 734 [pid 713] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 713] futex(0x7f3c7032a6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 713] futex(0x7f3c7032a6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 714] <... fsconfig resumed>) = 0 [pid 714] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 714] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 734 attached [pid 734] set_robust_list(0x7f3c702179a0, 24) = 0 [pid 734] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 734] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, NULL) = 0 [pid 734] futex(0x7f3c7032a6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 713] <... futex resumed>) = 0 [pid 713] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 714] <... futex resumed>) = 0 [pid 713] <... futex resumed>) = 1 [pid 714] sched_setscheduler(0, SCHED_FIFO, [7] [pid 713] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 714] <... sched_setscheduler resumed>) = 0 [pid 714] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 713] <... futex resumed>) = 0 [pid 714] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 713] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 714] <... futex resumed>) = 0 [ 45.218650][ T732] R13: 3505e258dcaaa166 R14: 0000200000000000 R15: b635773f06ebbeee [ 45.226663][ T732] [ 45.229715][ T732] ================================================================== [ 45.232720][ T725] loop1: detected capacity change from 0 to 40427 [ 45.249441][ T720] F2FS-fs (loop0): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 45.267972][ T732] Disabling lock debugging due to kernel taint [ 45.289372][ T732] BUG: kernel NULL pointer dereference, address: 0000000000000028 [ 45.297314][ T732] #PF: supervisor write access in kernel mode [ 45.303675][ T732] #PF: error_code(0x0002) - not-present page [ 45.309693][ T732] PGD 0 P4D 0 [ 45.313107][ T732] Oops: 0002 [#1] PREEMPT SMP KASAN [pid 713] <... futex resumed>) = 1 [pid 714] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0) = 0x200000000000 [pid 713] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 714] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 713] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 714] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 734] <... futex resumed>) = 1 [ 45.318328][ T732] CPU: 0 PID: 732 Comm: syz-executor405 Tainted: G B 6.1.141-syzkaller-00039-g145c7fad733f #0 [ 45.330056][ T732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 45.340395][ T732] RIP: 0010:kthread_stop+0x40/0x3f0 [ 45.343632][ T28] audit: type=1400 audit(1752723045.459:71): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [pid 734] futex(0x7f3c7032a6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 725] <... ioctl resumed>) = 0 [pid 725] close(3) = 0 [pid 725] close(4) = 0 [pid 725] mkdir("./file0", 0777) = 0 [ 45.345632][ T732] Code: 00 fc ff df e8 91 c8 26 00 0f 1f 44 00 00 e8 87 c8 26 00 4c 8d 73 28 4c 89 f7 be 04 00 00 00 e8 e6 24 6b 00 41 bf 01 00 00 00 44 0f c1 7b 28 31 ff 44 89 fe e8 80 cc 26 00 45 85 ff 0f 84 3e [ 45.386865][ T732] RSP: 0018:ffffc90001ad78b8 EFLAGS: 00010246 [ 45.392971][ T732] RAX: ffff888111523c00 RBX: 0000000000000000 RCX: ffff888111523cc0 [ 45.400976][ T732] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 45.408984][ T732] RBP: ffffc90001ad78e0 R08: dffffc0000000000 R09: fffffbfff0f2ccfd [ 45.409684][ T28] audit: type=1400 audit(1752723045.459:72): avc: denied { search } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.416976][ T732] R10: fffffbfff0f2ccfd R11: 1ffffffff0f2ccfc R12: 1ffff11023199935 [ 45.416995][ T732] R13: dffffc0000000000 R14: 0000000000000028 R15: 0000000000000001 [ 45.417007][ T732] FS: 00007f3c702386c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 45.417025][ T732] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [pid 725] mount("/dev/loop1", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [ 45.417038][ T732] CR2: 0000000000000028 CR3: 0000000111c51000 CR4: 00000000003506b0 [ 45.478285][ T732] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 45.486288][ T732] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 45.494394][ T732] Call Trace: [ 45.497692][ T732] [ 45.500650][ T732] f2fs_stop_gc_thread+0x65/0xb0 [ 45.505646][ T732] __f2fs_ioctl+0x5e7f/0xbd60 [pid 731] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 294] <... umount2 resumed>) = 0 [pid 294] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] newfstatat(AT_FDCWD, "./14/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 713] exit_group(0 [pid 734] <... futex resumed>) = ? [pid 714] <... futex resumed>) = ? [pid 713] <... exit_group resumed>) = ? [pid 734] +++ exited with 0 +++ [pid 714] +++ exited with 0 +++ [pid 294] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] getdents64(4, 0x55557107b770 /* 2 entries */, 32768) = 48 [pid 294] getdents64(4, 0x55557107b770 /* 0 entries */, 32768) = 0 [pid 294] close(4) = 0 [pid 294] rmdir("./14/file0") = 0 [pid 294] umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] unlink("./14/binderfs") = 0 [pid 294] getdents64(3, 0x555571073730 /* 0 entries */, 32768) = 0 [pid 294] close(3) = 0 [pid 294] rmdir("./14") = 0 [pid 294] mkdir("./15", 0777) = 0 [pid 294] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 294] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 294] close(3) = 0 [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571072690) = 737 ./strace-static-x86_64: Process 737 attached [pid 737] set_robust_list(0x5555710726a0, 24) = 0 [pid 737] chdir("./15") = 0 [pid 737] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 737] setpgid(0, 0) = 0 [pid 737] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 737] write(3, "1000", 4) = 4 [pid 737] close(3) = 0 [pid 737] symlink("/dev/binderfs", "./binderfs") = 0 [pid 737] write(1, "executing program\n", 18executing program ) = 18 [pid 737] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 737] rt_sigaction(SIGRT_1, {sa_handler=0x7f3c702c31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3c702b4350}, NULL, 8) = 0 [pid 737] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 737] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3c70239000 [pid 737] mprotect(0x7f3c7023a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 737] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 737] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3c70259990, parent_tid=0x7f3c70259990, exit_signal=0, stack=0x7f3c70239000, stack_size=0x20300, tls=0x7f3c702596c0} => {parent_tid=[738]}, 88) = 738 [pid 737] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 737] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 45.507319][ T28] audit: type=1400 audit(1752723045.459:73): avc: denied { write } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.510436][ T732] ? avc_has_extended_perms+0x95f/0xdc0 [ 45.510466][ T732] ? __cfi_avc_has_extended_perms+0x10/0x10 [ 45.543108][ T732] ? __this_cpu_preempt_check+0x13/0x20 [ 45.548715][ T732] ? xfd_validate_state+0x70/0x150 [ 45.553875][ T732] ? do_vfs_ioctl+0xc36/0x1c80 [ 45.558701][ T732] ? __ia32_compat_sys_ioctl+0x790/0x790 [ 45.564382][ T732] ? __switch_to+0x51f/0xe30 [ 45.569100][ T732] ? f2fs_ioctl+0x240/0x240 [ 45.573739][ T732] ? __cfi___switch_to+0x10/0x10 [ 45.578809][ T732] ? finish_task_switch+0x16b/0x7b0 [ 45.584055][ T732] ? ioctl_has_perm+0x391/0x4c0 [ 45.587736][ T28] audit: type=1400 audit(1752723045.459:74): avc: denied { add_name } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.588932][ T732] ? has_cap_mac_admin+0x330/0x330 [ 45.614471][ T732] ? __kasan_check_write+0x14/0x20 [ 45.617966][ T725] F2FS-fs (loop1): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 45.619623][ T732] ? _raw_spin_lock_irq+0x8f/0xe0 [ 45.633092][ T732] ? __kasan_check_write+0x14/0x20 [ 45.638248][ T732] ? _raw_spin_lock_irq+0x8f/0xe0 [ 45.643323][ T732] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 45.648919][ T732] ? selinux_file_ioctl+0x377/0x480 [ 45.654156][ T732] ? memset+0x35/0x40 [ 45.658187][ T732] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 45.663817][ T732] ? __fget_files+0x2d5/0x330 [ 45.668562][ T732] f2fs_ioctl+0x149/0x240 [pid 737] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 731] <... write resumed>) = 20699119 [ 45.670485][ T28] audit: type=1400 audit(1752723045.459:75): avc: denied { create } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 45.672936][ T732] ? __cfi_f2fs_ioctl+0x10/0x10 [ 45.672971][ T732] __se_sys_ioctl+0x12f/0x1b0 [ 45.703065][ T732] __x64_sys_ioctl+0x7b/0x90 [ 45.707716][ T732] x64_sys_call+0x58b/0x9a0 [pid 731] munmap(0x7f3c67e39000, 138412032) = 0 [pid 731] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 731] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 731] close(3) = 0 [pid 731] close(4) = 0 [pid 731] mkdir("./file0", 0777) = 0 [ 45.711545][ T28] audit: type=1400 audit(1752723045.459:76): avc: denied { append open } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 45.712265][ T732] do_syscall_64+0x4c/0xa0 [ 45.712286][ T732] ? clear_bhb_loop+0x30/0x80 [ 45.712308][ T732] ? clear_bhb_loop+0x30/0x80 [ 45.712329][ T732] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 45.712350][ T732] RIP: 0033:0x7f3c7029cd89 [ 45.739449][ T731] loop3: detected capacity change from 0 to 40427 [ 45.739594][ T732] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 45.739613][ T732] RSP: 002b:00007f3c70238218 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 45.739636][ T732] RAX: ffffffffffffffda RBX: 00007f3c7032a6d8 RCX: 00007f3c7029cd89 [ 45.739652][ T732] RDX: 0000200000000140 RSI: 000000008004587d RDI: 0000000000000005 [ 45.739665][ T732] RBP: 00007f3c7032a6d0 R08: 0000000000000000 R09: 0000000000000000 [ 45.750256][ T28] audit: type=1400 audit(1752723045.459:77): avc: denied { getattr } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 45.755096][ T732] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3c702f68dc [ 45.755113][ T732] R13: 3505e258dcaaa166 R14: 0000200000000000 R15: b635773f06ebbeee [ 45.755131][ T732] [ 45.755138][ T732] Modules linked in: [ 45.755166][ T732] CR2: 0000000000000028 [pid 731] mount("/dev/loop3", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"...) = 0 [pid 731] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 731] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 731] ioctl(4, LOOP_CLR_FD) = 0 [pid 731] close(4) = 0 [pid 731] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 45.764926][ T731] F2FS-fs (loop3): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 45.766088][ T732] ---[ end trace 0000000000000000 ]--- [ 45.838240][ T731] F2FS-fs (loop3): Found nat_bits in checkpoint [ 45.841751][ T732] RIP: 0010:kthread_stop+0x40/0x3f0 [ 45.841781][ T732] Code: 00 fc ff df e8 91 c8 26 00 0f 1f 44 00 00 e8 87 c8 26 00 4c 8d 73 28 4c 89 f7 be 04 00 00 00 e8 e6 24 6b 00 41 bf 01 00 00 00 44 0f c1 7b 28 31 ff 44 89 fe e8 80 cc 26 00 45 85 ff 0f 84 3e [ 45.841796][ T732] RSP: 0018:ffffc90001ad78b8 EFLAGS: 00010246 [ 45.841814][ T732] RAX: ffff888111523c00 RBX: 0000000000000000 RCX: ffff888111523cc0 [ 45.887813][ T731] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 45.888785][ T732] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 45.920241][ T725] F2FS-fs (loop1): Found nat_bits in checkpoint [ 45.927999][ T732] RBP: ffffc90001ad78e0 R08: dffffc0000000000 R09: fffffbfff0f2ccfd [ 45.928017][ T732] R10: fffffbfff0f2ccfd R11: 1ffffffff0f2ccfc R12: 1ffff11023199935 [ 45.928031][ T732] R13: dffffc0000000000 R14: 0000000000000028 R15: 0000000000000001 [pid 731] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 725] <... mount resumed>) = 0 [pid 725] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 725] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 725] ioctl(4, LOOP_CLR_FD) = 0 [pid 725] close(4 [pid 727] <... futex resumed>) = 0 [pid 727] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 731] <... futex resumed>) = 0 [pid 727] <... futex resumed>) = 1 [pid 731] fspick(AT_FDCWD, "./file0", 0 [pid 727] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 731] <... fspick resumed>) = 4 [pid 731] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 727] <... futex resumed>) = 0 [pid 731] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 727] futex(0x7f3c7032a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 727] futex(0x7f3c7032a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 725] <... close resumed>) = 0 [pid 725] futex(0x7f3c7032a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 725] futex(0x7f3c7032a6c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 738 attached [pid 738] set_robust_list(0x7f3c702599a0, 24) = 0 [pid 738] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 738] memfd_create("syzkaller", 0) = 3 [pid 738] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3c67e39000 [ 45.928044][ T732] FS: 00007f3c702386c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 45.928061][ T732] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.928074][ T732] CR2: 0000000000000028 CR3: 0000000111c51000 CR4: 00000000003506b0 [ 45.928091][ T732] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 45.973412][ T725] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 45.974020][ T732] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 46.021064][ T732] Kernel panic - not syncing: Fatal exception [ 46.027409][ T732] Kernel Offset: disabled [ 46.031839][ T732] Rebooting in 86400 seconds..