./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1551184096 <...> Warning: Permanently added '10.128.1.232' (ED25519) to the list of known hosts. execve("./syz-executor1551184096", ["./syz-executor1551184096"], 0x7ffc4d956740 /* 10 vars */) = 0 brk(NULL) = 0x55555ee9a000 brk(0x55555ee9ad40) = 0x55555ee9ad40 arch_prctl(ARCH_SET_FS, 0x55555ee9a3c0) = 0 set_tid_address(0x55555ee9a690) = 289 set_robust_list(0x55555ee9a6a0, 24) = 0 rseq(0x55555ee9ace0, 0x20, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1551184096", 4096) = 28 getrandom("\x29\x80\x7a\x51\x0b\x66\xb0\x31", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55555ee9ad40 brk(0x55555eebbd40) = 0x55555eebbd40 brk(0x55555eebc000) = 0x55555eebc000 mprotect(0x7f1443f8f000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee9a690) = 290 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee9a690) = 291 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee9a690) = 292 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee9a690) = 293 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee9a690) = 294 ./strace-static-x86_64: Process 294 attached [pid 294] set_robust_list(0x55555ee9a6a0, 24) = 0 [pid 294] mkdir("./syzkaller.uZxOAd", 0700) = 0 [pid 294] chmod("./syzkaller.uZxOAd", 0777) = 0 [pid 294] chdir("./syzkaller.uZxOAd") = 0 [pid 294] mkdir("./0", 0777) = 0 [pid 294] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 294] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 294] close(3) = 0 [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee9a690) = 296 ./strace-static-x86_64: Process 296 attached ./strace-static-x86_64: Process 290 attached ./strace-static-x86_64: Process 291 attached [pid 296] set_robust_list(0x55555ee9a6a0, 24./strace-static-x86_64: Process 293 attached ./strace-static-x86_64: Process 292 attached ) = 0 [pid 296] chdir("./0") = 0 [pid 296] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 296] setpgid(0, 0) = 0 [pid 296] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 296] write(3, "1000", 4) = 4 [pid 296] close(3) = 0 [pid 296] symlink("/dev/binderfs", "./binderfs") = 0 [pid 296] write(1, "executing program\n", 18executing program ) = 18 [pid 296] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 296] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, NULL, 8) = 0 [pid 296] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 296] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443ea4000 [pid 296] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 296] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 296] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} => {parent_tid=[297]}, 88) = 297 [pid 296] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 296] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 296] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 297 attached [pid 297] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 297] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 297] memfd_create("syzkaller", 0) = 3 [pid 297] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 [pid 290] set_robust_list(0x55555ee9a6a0, 24 [pid 293] set_robust_list(0x55555ee9a6a0, 24 [pid 292] set_robust_list(0x55555ee9a6a0, 24 [pid 291] set_robust_list(0x55555ee9a6a0, 24 [pid 292] <... set_robust_list resumed>) = 0 [pid 293] <... set_robust_list resumed>) = 0 [pid 291] <... set_robust_list resumed>) = 0 [pid 290] <... set_robust_list resumed>) = 0 [pid 293] mkdir("./syzkaller.K7lTzF", 0700 [pid 292] mkdir("./syzkaller.WQ9atb", 0700 [pid 291] mkdir("./syzkaller.qN6boW", 0700 [pid 290] mkdir("./syzkaller.zU9qPT", 0700 [pid 293] <... mkdir resumed>) = 0 [pid 291] <... mkdir resumed>) = 0 [pid 290] <... mkdir resumed>) = 0 [pid 292] <... mkdir resumed>) = 0 [pid 293] chmod("./syzkaller.K7lTzF", 0777 [pid 291] chmod("./syzkaller.qN6boW", 0777 [pid 290] chmod("./syzkaller.zU9qPT", 0777 [pid 293] <... chmod resumed>) = 0 [pid 292] chmod("./syzkaller.WQ9atb", 0777 [pid 291] <... chmod resumed>) = 0 [pid 293] chdir("./syzkaller.K7lTzF" [pid 292] <... chmod resumed>) = 0 [pid 291] chdir("./syzkaller.qN6boW" [pid 290] <... chmod resumed>) = 0 [pid 293] <... chdir resumed>) = 0 [pid 292] chdir("./syzkaller.WQ9atb" [pid 291] <... chdir resumed>) = 0 [pid 290] chdir("./syzkaller.zU9qPT") = 0 [pid 291] mkdir("./0", 0777 [pid 290] mkdir("./0", 0777 [pid 292] <... chdir resumed>) = 0 [pid 291] <... mkdir resumed>) = 0 [pid 292] mkdir("./0", 0777 [pid 290] <... mkdir resumed>) = 0 [pid 292] <... mkdir resumed>) = 0 [pid 293] mkdir("./0", 0777) = 0 [pid 292] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 290] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 292] <... openat resumed>) = 3 [pid 290] <... openat resumed>) = 3 [pid 293] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 291] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 292] ioctl(3, LOOP_CLR_FD [pid 290] ioctl(3, LOOP_CLR_FD [pid 293] <... openat resumed>) = 3 [pid 292] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 291] <... openat resumed>) = 3 [pid 290] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 290] close(3 [pid 292] close(3 [pid 293] ioctl(3, LOOP_CLR_FD [pid 291] ioctl(3, LOOP_CLR_FD [pid 292] <... close resumed>) = 0 [pid 290] <... close resumed>) = 0 [pid 293] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] close(3) = 0 [pid 293] close(3 [pid 292] <... clone resumed>, child_tidptr=0x55555ee9a690) = 300 [pid 290] <... clone resumed>, child_tidptr=0x55555ee9a690) = 299 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 293] <... close resumed>) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] <... clone resumed>, child_tidptr=0x55555ee9a690) = 301 [pid 293] <... clone resumed>, child_tidptr=0x55555ee9a690) = 302 ./strace-static-x86_64: Process 301 attached ./strace-static-x86_64: Process 299 attached [pid 301] set_robust_list(0x55555ee9a6a0, 24) = 0 [pid 299] set_robust_list(0x55555ee9a6a0, 24) = 0 [pid 301] chdir("./0" [ 24.700613][ T28] audit: type=1400 audit(1752593654.345:64): avc: denied { execmem } for pid=289 comm="syz-executor155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 24.720726][ T28] audit: type=1400 audit(1752593654.345:65): avc: denied { read write } for pid=294 comm="syz-executor155" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [pid 299] chdir("./0"executing program executing program [pid 301] <... chdir resumed>) = 0 [pid 299] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 300 attached [pid 300] set_robust_list(0x55555ee9a6a0, 24) = 0 [pid 300] chdir("./0"./strace-static-x86_64: Process 302 attached [pid 302] set_robust_list(0x55555ee9a6a0, 24) = 0 [pid 300] <... chdir resumed>) = 0 [pid 302] chdir("./0" [pid 300] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 300] setpgid(0, 0) = 0 [pid 300] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 302] <... chdir resumed>) = 0 [pid 302] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 302] setpgid(0, 0) = 0 [pid 302] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 300] <... openat resumed>) = 3 [pid 302] <... openat resumed>) = 3 [pid 302] write(3, "1000", 4) = 4 [pid 302] close(3) = 0 [pid 300] write(3, "1000", 4) = 4 [pid 300] close(3 [pid 302] symlink("/dev/binderfs", "./binderfs" [pid 300] <... close resumed>) = 0 [pid 302] <... symlink resumed>) = 0 [pid 300] symlink("/dev/binderfs", "./binderfs") = 0 [pid 300] write(1, "executing program\n", 18) = 18 [pid 300] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 300] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, [pid 302] write(1, "executing program\n", 18) = 18 [pid 302] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... rt_sigaction resumed>NULL, 8) = 0 [pid 300] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 302] <... futex resumed>) = 0 [pid 300] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 302] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, [pid 300] <... mmap resumed>) = 0x7f1443ea4000 [pid 302] <... rt_sigaction resumed>NULL, 8) = 0 [pid 300] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE [pid 302] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 300] <... mprotect resumed>) = 0 [pid 302] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443ea4000 [pid 302] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 300] rt_sigprocmask(SIG_BLOCK, ~[], [pid 302] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 300] <... rt_sigprocmask resumed>[], 8) = 0 [pid 302] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} [pid 300] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} => {parent_tid=[304]}, 88) = 304 [pid 300] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 300] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 300] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 302] <... clone3 resumed> => {parent_tid=[303]}, 88) = 303 [pid 302] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 302] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 302] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 299] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 301] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 304 attached [pid 304] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 304] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 299] <... prctl resumed>) = 0 [pid 301] <... prctl resumed>) = 0 [pid 301] setpgid(0, 0 [pid 299] setpgid(0, 0./strace-static-x86_64: Process 303 attached [pid 303] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 303] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 301] <... setpgid resumed>) = 0 [pid 299] <... setpgid resumed>) = 0 [pid 303] memfd_create("syzkaller", 0 [pid 299] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 301] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 303] <... memfd_create resumed>) = 3 [pid 301] <... openat resumed>) = 3 [pid 299] <... openat resumed>) = 3 [pid 303] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 299] write(3, "1000", 4 [pid 301] write(3, "1000", 4 [pid 303] <... mmap resumed>) = 0x7f143baa4000 [pid 299] <... write resumed>) = 4 [pid 301] <... write resumed>) = 4 [pid 304] memfd_create("syzkaller", 0 [pid 299] close(3 [pid 301] close(3) = 0 [pid 299] <... close resumed>) = 0 [pid 304] <... memfd_create resumed>) = 3 [pid 301] symlink("/dev/binderfs", "./binderfs" [pid 299] symlink("/dev/binderfs", "./binderfs" [pid 304] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 [pid 299] <... symlink resumed>) = 0 [pid 301] <... symlink resumed>) = 0 executing program [pid 299] write(1, "executing program\n", 18 [pid 301] write(1, "executing program\n", 18executing program [pid 299] <... write resumed>) = 18 [pid 301] <... write resumed>) = 18 [pid 301] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... futex resumed>) = 0 [pid 299] <... futex resumed>) = 0 [pid 301] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, [pid 299] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, [pid 301] <... rt_sigaction resumed>NULL, 8) = 0 [pid 299] <... rt_sigaction resumed>NULL, 8) = 0 [pid 301] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 299] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 301] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 299] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 301] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 299] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 301] <... mmap resumed>) = 0x7f1443ea4000 [pid 299] <... mmap resumed>) = 0x7f1443ea4000 [pid 301] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE [pid 299] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE [pid 301] <... mprotect resumed>) = 0 [pid 299] <... mprotect resumed>) = 0 [pid 301] rt_sigprocmask(SIG_BLOCK, ~[], [pid 299] rt_sigprocmask(SIG_BLOCK, ~[], [pid 301] <... rt_sigprocmask resumed>[], 8) = 0 [pid 299] <... rt_sigprocmask resumed>[], 8) = 0 [pid 301] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} [pid 299] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} [pid 301] <... clone3 resumed> => {parent_tid=[305]}, 88) = 305 [pid 299] <... clone3 resumed> => {parent_tid=[306]}, 88) = 306 [pid 301] rt_sigprocmask(SIG_SETMASK, [], [pid 299] rt_sigprocmask(SIG_SETMASK, [], [pid 301] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 299] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 301] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... futex resumed>) = 0 [pid 299] <... futex resumed>) = 0 [pid 301] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 299] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 305 attached [pid 305] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 305] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 305] memfd_create("syzkaller", 0) = 3 [pid 305] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 ./strace-static-x86_64: Process 306 attached [pid 306] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 306] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 306] memfd_create("syzkaller", 0) = 3 [pid 306] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 [ 24.746184][ T28] audit: type=1400 audit(1752593654.345:66): avc: denied { open } for pid=294 comm="syz-executor155" path="/dev/loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 24.788836][ T28] audit: type=1400 audit(1752593654.345:67): avc: denied { ioctl } for pid=294 comm="syz-executor155" path="/dev/loop4" dev="devtmpfs" ino=122 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [pid 297] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 305] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 303] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 297] <... write resumed>) = 20699119 [pid 304] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 306] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 297] munmap(0x7f143baa4000, 138412032) = 0 [pid 297] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 297] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 297] close(3) = 0 [pid 297] close(4) = 0 [pid 297] mkdir("./file0", 0777) = 0 [ 25.133274][ T297] loop4: detected capacity change from 0 to 40427 [pid 297] mount("/dev/loop4", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 305] <... write resumed>) = 20699119 [pid 305] munmap(0x7f143baa4000, 138412032) = 0 [pid 305] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 305] ioctl(4, LOOP_SET_FD, 3 [pid 306] <... write resumed>) = 20699119 [pid 306] munmap(0x7f143baa4000, 138412032 [pid 305] <... ioctl resumed>) = 0 [ 25.159255][ T28] audit: type=1400 audit(1752593654.805:68): avc: denied { mounton } for pid=296 comm="syz-executor155" path="/root/syzkaller.uZxOAd/0/file0" dev="sda1" ino=2039 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 25.185911][ T297] F2FS-fs (loop4): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 305] close(3) = 0 [pid 305] close(4) = 0 [pid 305] mkdir("./file0", 0777) = 0 [pid 305] mount("/dev/loop1", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 306] <... munmap resumed>) = 0 [pid 306] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 306] ioctl(4, LOOP_SET_FD, 3 [pid 304] <... write resumed>) = 20699119 [pid 304] munmap(0x7f143baa4000, 138412032) = 0 [pid 304] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 304] ioctl(4, LOOP_SET_FD, 3 [pid 306] <... ioctl resumed>) = 0 [ 25.234237][ T297] F2FS-fs (loop4): Found nat_bits in checkpoint [ 25.258168][ T305] loop1: detected capacity change from 0 to 40427 [pid 306] close(3) = 0 [pid 304] <... ioctl resumed>) = 0 [pid 304] close(3) = 0 [pid 304] close(4 [pid 306] close(4 [pid 304] <... close resumed>) = 0 [pid 304] mkdir("./file0", 0777) = 0 [pid 306] <... close resumed>) = 0 [pid 306] mkdir("./file0", 0777) = 0 [pid 306] mount("/dev/loop0", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [ 25.278733][ T305] F2FS-fs (loop1): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 25.282708][ T306] loop0: detected capacity change from 0 to 40427 [ 25.311314][ T304] loop2: detected capacity change from 0 to 40427 [ 25.320583][ T305] F2FS-fs (loop1): Found nat_bits in checkpoint [pid 304] mount("/dev/loop2", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 297] <... mount resumed>) = 0 [pid 297] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 303] <... write resumed>) = 20699119 [pid 297] <... openat resumed>) = 3 [pid 303] munmap(0x7f143baa4000, 138412032 [pid 297] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 303] <... munmap resumed>) = 0 [pid 297] ioctl(4, LOOP_CLR_FD [pid 303] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 297] <... ioctl resumed>) = 0 [pid 303] <... openat resumed>) = 4 [pid 297] close(4 [pid 303] ioctl(4, LOOP_SET_FD, 3 [pid 297] <... close resumed>) = 0 [pid 297] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 296] <... futex resumed>) = 0 [ 25.323956][ T297] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 25.340358][ T306] F2FS-fs (loop0): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 25.350613][ T304] F2FS-fs (loop2): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 25.360618][ T28] audit: type=1400 audit(1752593655.005:69): avc: denied { mount } for pid=296 comm="syz-executor155" name="/" dev="loop4" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [pid 297] fspick(AT_FDCWD, "./file0", 0 [pid 296] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... fspick resumed>) = 4 [pid 296] <... futex resumed>) = 0 [pid 297] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 296] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] <... futex resumed>) = 0 [pid 296] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 297] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 296] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 296] <... futex resumed>) = 0 [pid 297] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 296] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... mount resumed>) = 0 [pid 305] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 305] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 305] ioctl(4, LOOP_CLR_FD) = 0 [pid 305] close(4) = 0 [pid 305] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... futex resumed>) = 0 [pid 301] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 301] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... futex resumed>) = 1 [pid 305] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 305] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... futex resumed>) = 0 [pid 301] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 301] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... futex resumed>) = 1 [pid 305] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 303] <... ioctl resumed>) = 0 [pid 303] close(3) = 0 [pid 303] close(4) = 0 [pid 303] mkdir("./file0", 0777) = 0 [pid 303] mount("/dev/loop3", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 305] <... fsconfig resumed>) = 0 [pid 305] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 301] <... futex resumed>) = 0 [pid 301] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 301] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] openat(AT_FDCWD, "./file0", O_RDONLY) = 5 [pid 305] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 301] <... futex resumed>) = 0 [pid 301] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 301] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 297] <... fsconfig resumed>) = 0 [pid 297] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 296] <... futex resumed>) = 0 [pid 297] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 296] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 296] <... futex resumed>) = 0 [pid 297] openat(AT_FDCWD, "./file0", O_RDONLY) = 5 [pid 296] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 296] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 297] <... futex resumed>) = 0 [pid 296] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 296] <... futex resumed>) = 0 [pid 297] <... ioctl resumed>) = 0 [pid 296] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 296] <... futex resumed>) = 0 [pid 296] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... ioctl resumed>) = 0 [pid 297] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 296] <... futex resumed>) = 0 [pid 296] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... prlimit64 resumed>NULL) = 0 [pid 305] <... futex resumed>) = 1 [pid 301] <... futex resumed>) = 0 [pid 297] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 301] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... futex resumed>) = 1 [pid 296] <... futex resumed>) = 0 [pid 305] <... prlimit64 resumed>NULL) = 0 [pid 301] <... futex resumed>) = 0 [pid 297] sched_setscheduler(0, SCHED_FIFO, [7] [pid 296] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] <... sched_setscheduler resumed>) = 0 [pid 296] <... futex resumed>) = 0 [pid 305] <... futex resumed>) = 0 [pid 301] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 297] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] sched_setscheduler(0, SCHED_FIFO, [7] [pid 301] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... futex resumed>) = 0 [pid 296] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... sched_setscheduler resumed>) = 0 [pid 301] <... futex resumed>) = 0 [pid 297] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 305] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 296] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 305] <... futex resumed>) = 0 [pid 301] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 296] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 301] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 301] <... futex resumed>) = 0 [pid 297] <... futex resumed>) = 0 [pid 296] <... futex resumed>) = 1 [ 25.388732][ T305] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 25.397189][ T306] F2FS-fs (loop0): Found nat_bits in checkpoint [ 25.406452][ T304] F2FS-fs (loop2): Found nat_bits in checkpoint [ 25.414677][ T303] loop3: detected capacity change from 0 to 40427 [pid 305] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 301] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 296] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... mmap resumed>) = 0x200000000000 [pid 305] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 301] <... futex resumed>) = 0 [pid 305] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 301] exit_group(0 [pid 305] <... futex resumed>) = ? [pid 301] <... exit_group resumed>) = ? [pid 305] +++ exited with 0 +++ [pid 297] <... mmap resumed>) = 0x200000000000 [pid 297] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 296] <... futex resumed>) = 0 [pid 297] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 296] exit_group(0 [pid 297] <... futex resumed>) = ? [pid 296] <... exit_group resumed>) = ? [pid 297] +++ exited with 0 +++ [pid 301] +++ exited with 0 +++ [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=301, si_uid=0, si_status=0, si_utime=7, si_stime=22} --- [ 25.454614][ T303] F2FS-fs (loop3): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 291] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 291] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 291] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 304] <... mount resumed>) = 0 [pid 304] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 304] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 304] ioctl(4, LOOP_CLR_FD) = 0 [pid 304] close(4) = 0 [pid 304] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 304] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 306] <... mount resumed>) = 0 [pid 306] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 306] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 306] ioctl(4, LOOP_CLR_FD) = 0 [pid 306] close(4) = 0 [pid 306] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... futex resumed>) = 0 [pid 299] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 299] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] <... futex resumed>) = 1 [pid 306] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 306] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... futex resumed>) = 0 [pid 299] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 299] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] <... futex resumed>) = 1 [pid 306] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 300] <... futex resumed>) = 0 [pid 296] +++ exited with 0 +++ [pid 294] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=296, si_uid=0, si_status=0, si_utime=11, si_stime=16} --- [pid 294] restart_syscall(<... resuming interrupted clone ...> [pid 300] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 294] <... restart_syscall resumed>) = 0 [pid 300] <... futex resumed>) = 1 [pid 304] <... futex resumed>) = 0 [pid 300] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 304] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 294] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 304] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 304] <... futex resumed>) = 1 [pid 300] <... futex resumed>) = 0 [pid 294] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 300] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 300] <... futex resumed>) = 0 [pid 294] <... openat resumed>) = 3 [pid 300] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 294] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] getdents64(3, 0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 294] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 299] futex(0x7f1443f956dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 299] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443e83000 [pid 299] mprotect(0x7f1443e84000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 299] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 299] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ea3990, parent_tid=0x7f1443ea3990, exit_signal=0, stack=0x7f1443e83000, stack_size=0x20300, tls=0x7f1443ea36c0} => {parent_tid=[327]}, 88) = 327 [pid 299] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 299] futex(0x7f1443f956d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 299] futex(0x7f1443f956dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 327 attached [ 25.550004][ T304] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 25.551436][ T306] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 25.565506][ T28] audit: type=1400 audit(1752593655.205:70): avc: denied { unmount } for pid=291 comm="syz-executor155" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 25.591352][ T303] F2FS-fs (loop3): Found nat_bits in checkpoint [pid 327] set_robust_list(0x7f1443ea39a0, 24) = 0 [pid 327] rt_sigprocmask(SIG_SETMASK, [], [pid 306] <... fsconfig resumed>) = 0 [pid 304] <... fsconfig resumed>) = 0 [pid 327] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 327] openat(AT_FDCWD, "./file0", O_RDONLY [pid 306] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 327] <... openat resumed>) = 5 [pid 327] futex(0x7f1443f956dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... futex resumed>) = 0 [pid 304] <... futex resumed>) = 1 [pid 300] <... futex resumed>) = 0 [pid 327] <... futex resumed>) = 1 [pid 306] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 304] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 300] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... futex resumed>) = 0 [pid 327] futex(0x7f1443f956d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 300] <... futex resumed>) = 0 [pid 304] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 300] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... futex resumed>) = 0 [pid 304] openat(AT_FDCWD, "./file0", O_RDONLY [pid 299] <... futex resumed>) = 1 [pid 306] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 304] <... openat resumed>) = 5 [pid 299] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 304] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 304] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 300] <... futex resumed>) = 0 [pid 300] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... ioctl resumed>) = 0 [pid 304] <... futex resumed>) = 0 [pid 300] <... futex resumed>) = 1 [pid 306] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 300] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] <... futex resumed>) = 1 [pid 299] <... futex resumed>) = 0 [pid 306] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 299] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... prlimit64 resumed>NULL) = 0 [pid 299] <... futex resumed>) = 0 [pid 306] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] <... futex resumed>) = 0 [pid 299] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 306] sched_setscheduler(0, SCHED_FIFO, [7] [pid 299] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... sched_setscheduler resumed>) = 0 [pid 299] <... futex resumed>) = 0 [pid 306] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 299] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 299] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 299] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... futex resumed>) = 0 [pid 299] <... futex resumed>) = 1 [pid 306] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0) = 0x200000000000 [pid 304] <... ioctl resumed>) = 0 [pid 299] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... futex resumed>) = 0 [pid 304] <... futex resumed>) = 1 [pid 306] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 304] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 299] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 300] <... futex resumed>) = 0 [pid 300] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] exit_group(0 [pid 300] <... futex resumed>) = 1 [pid 327] <... futex resumed>) = ? [pid 306] <... futex resumed>) = ? [pid 304] <... futex resumed>) = 0 [pid 300] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... exit_group resumed>) = ? [pid 327] +++ exited with 0 +++ [pid 306] +++ exited with 0 +++ [pid 304] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, NULL) = 0 [pid 304] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 304] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 300] <... futex resumed>) = 0 [pid 300] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] <... futex resumed>) = 0 [pid 300] <... futex resumed>) = 1 [pid 304] sched_setscheduler(0, SCHED_FIFO, [7] [pid 300] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 304] <... sched_setscheduler resumed>) = 0 [pid 304] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 304] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 300] <... futex resumed>) = 0 [pid 303] <... mount resumed>) = 0 [pid 303] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 303] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 303] ioctl(4, LOOP_CLR_FD) = 0 [pid 303] close(4 [pid 291] <... umount2 resumed>) = 0 [pid 291] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 291] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(4, 0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 291] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 291] close(4) = 0 [pid 291] rmdir("./0/file0") = 0 [pid 291] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./0/binderfs") = 0 [pid 291] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./0") = 0 [pid 291] mkdir("./1", 0777) = 0 [pid 291] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 291] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 291] close(3) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee9a690) = 328 ./strace-static-x86_64: Process 328 attached [pid 328] set_robust_list(0x55555ee9a6a0, 24) = 0 [pid 328] chdir("./1") = 0 [pid 328] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 328] setpgid(0, 0) = 0 [pid 328] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 328] write(3, "1000", 4) = 4 [pid 328] close(3) = 0 [pid 328] symlink("/dev/binderfs", "./binderfs") = 0 [pid 328] write(1, "executing program\n", 18executing program ) = 18 [pid 328] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 328] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, NULL, 8) = 0 [pid 328] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 328] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443ea4000 [pid 328] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 328] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 328] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} => {parent_tid=[329]}, 88) = 329 [pid 328] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 328] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 328] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 329 attached [pid 329] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 329] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 329] memfd_create("syzkaller", 0) = 3 [pid 329] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 [pid 303] <... close resumed>) = 0 [pid 303] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 302] <... futex resumed>) = 0 [pid 303] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 302] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] fspick(AT_FDCWD, "./file0", 0 [pid 302] <... futex resumed>) = 0 [pid 302] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 303] <... fspick resumed>) = 4 [pid 303] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 302] <... futex resumed>) = 0 [pid 303] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 302] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 302] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 303] <... fsconfig resumed>) = 0 [pid 303] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 302] <... futex resumed>) = 0 [pid 303] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 302] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] openat(AT_FDCWD, "./file0", O_RDONLY [pid 302] <... futex resumed>) = 0 [pid 303] <... openat resumed>) = 5 [pid 302] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 303] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 303] <... futex resumed>) = 0 [pid 303] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 302] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 302] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 303] <... ioctl resumed>) = 0 [pid 303] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 302] <... futex resumed>) = 0 [pid 303] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 302] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 302] <... futex resumed>) = 0 [pid 303] <... prlimit64 resumed>NULL) = 0 [pid 302] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 303] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 303] <... futex resumed>) = 0 [pid 302] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] sched_setscheduler(0, SCHED_FIFO, [7] [pid 302] <... futex resumed>) = 0 [pid 303] <... sched_setscheduler resumed>) = 0 [pid 302] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 303] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 303] <... futex resumed>) = 0 [pid 302] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 302] <... futex resumed>) = 0 [ 25.693501][ T303] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [pid 300] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] <... futex resumed>) = 0 [pid 304] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0) = 0x200000000000 [pid 304] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 304] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 303] <... mmap resumed>) = 0x200000000000 [pid 302] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 303] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 302] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 303] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 302] exit_group(0 [pid 303] <... futex resumed>) = ? [pid 302] <... exit_group resumed>) = ? [pid 303] +++ exited with 0 +++ [pid 300] <... futex resumed>) = 1 [pid 300] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 300] exit_group(0 [pid 304] <... futex resumed>) = ? [pid 304] +++ exited with 0 +++ [pid 300] <... exit_group resumed>) = ? [pid 299] +++ exited with 0 +++ [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=299, si_uid=0, si_status=0, si_utime=4, si_stime=28} --- [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 294] <... umount2 resumed>) = 0 [pid 294] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 294] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] getdents64(4, 0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 290] <... restart_syscall resumed>) = 0 [pid 294] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 294] close(4) = 0 [pid 290] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 294] rmdir("./0/file0" [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 294] <... rmdir resumed>) = 0 [pid 290] <... openat resumed>) = 3 [pid 294] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] newfstatat(3, "", [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 294] newfstatat(AT_FDCWD, "./0/binderfs", [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] unlink("./0/binderfs" [pid 290] getdents64(3, [pid 294] <... unlink resumed>) = 0 [pid 290] <... getdents64 resumed>0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 294] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 290] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 294] close(3) = 0 [pid 294] rmdir("./0") = 0 [pid 294] mkdir("./1", 0777) = 0 [pid 294] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 294] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 294] close(3) = 0 [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee9a690) = 333 ./strace-static-x86_64: Process 333 attached [pid 333] set_robust_list(0x55555ee9a6a0, 24) = 0 [pid 333] chdir("./1") = 0 [pid 333] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 333] setpgid(0, 0) = 0 [pid 333] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 333] write(3, "1000", 4) = 4 [pid 333] close(3) = 0 [pid 333] symlink("/dev/binderfs", "./binderfs") = 0 [pid 302] +++ exited with 0 +++ executing program [pid 333] write(1, "executing program\n", 18) = 18 [pid 333] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 333] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=302, si_uid=0, si_status=0, si_utime=9, si_stime=23} --- [pid 333] <... rt_sigaction resumed>NULL, 8) = 0 [pid 333] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 333] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 333] <... mmap resumed>) = 0x7f1443ea4000 [pid 333] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 333] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 333] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} => {parent_tid=[334]}, 88) = 334 [pid 333] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 333] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 333] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 334 attached [pid 334] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 334] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 334] memfd_create("syzkaller", 0) = 3 [pid 334] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 [pid 293] <... restart_syscall resumed>) = 0 [pid 293] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 293] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 300] +++ exited with 0 +++ [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=300, si_uid=0, si_status=0, si_utime=9, si_stime=21} --- [pid 292] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 292] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 292] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... umount2 resumed>) = 0 [pid 290] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 290] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(4, 0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 290] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 290] close(4) = 0 [pid 290] rmdir("./0/file0") = 0 [pid 290] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./0/binderfs") = 0 [pid 290] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./0") = 0 [pid 290] mkdir("./1", 0777) = 0 [pid 290] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 290] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 290] close(3) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee9a690) = 335 [pid 293] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 335 attached [pid 335] set_robust_list(0x55555ee9a6a0, 24) = 0 [pid 335] chdir("./1") = 0 [pid 335] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 335] setpgid(0, 0) = 0 [pid 335] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 335] write(3, "1000", 4) = 4 [pid 335] close(3) = 0 [pid 335] symlink("/dev/binderfs", "./binderfs") = 0 [pid 335] write(1, "executing program\n", 18executing program ) = 18 [pid 335] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 335] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, NULL, 8) = 0 [pid 335] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 335] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443ea4000 [pid 335] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 335] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 335] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} => {parent_tid=[336]}, 88) = 336 [pid 293] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 335] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 335] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 335] <... futex resumed>) = 0 [pid 293] newfstatat(AT_FDCWD, "./0/file0", [pid 335] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 293] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(4, 0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 293] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 293] close(4) = 0 [pid 293] rmdir("./0/file0") = 0 [pid 293] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./0/binderfs", ./strace-static-x86_64: Process 336 attached [pid 336] set_robust_list(0x7f1443ec49a0, 24 [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 336] <... set_robust_list resumed>) = 0 [pid 336] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 293] unlink("./0/binderfs") = 0 [pid 293] getdents64(3, [pid 336] memfd_create("syzkaller", 0 [pid 293] <... getdents64 resumed>0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 293] close(3 [pid 336] <... memfd_create resumed>) = 3 [pid 336] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 293] <... close resumed>) = 0 [pid 336] <... mmap resumed>) = 0x7f143baa4000 [pid 293] rmdir("./0") = 0 [pid 293] mkdir("./1", 0777) = 0 [pid 293] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 293] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 293] close(3) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee9a690) = 337 ./strace-static-x86_64: Process 337 attached [pid 337] set_robust_list(0x55555ee9a6a0, 24) = 0 [pid 337] chdir("./1") = 0 [pid 292] <... umount2 resumed>) = 0 [pid 292] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 337] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 292] newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 337] <... prctl resumed>) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 292] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(4, [pid 337] setpgid(0, 0) = 0 [pid 337] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 292] <... getdents64 resumed>0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 292] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 292] close(4) = 0 [pid 292] rmdir("./0/file0" [pid 337] write(3, "1000", 4) = 4 [pid 337] close(3) = 0 [pid 337] symlink("/dev/binderfs", "./binderfs") = 0 [pid 292] <... rmdir resumed>) = 0 [pid 337] write(1, "executing program\n", 18executing program ) = 18 [pid 292] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./0/binderfs", [pid 337] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./0/binderfs" [pid 337] <... futex resumed>) = 0 [pid 337] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, NULL, 8) = 0 [pid 337] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 337] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 292] <... unlink resumed>) = 0 [pid 292] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 292] close(3 [pid 337] <... mmap resumed>) = 0x7f1443ea4000 [pid 292] <... close resumed>) = 0 [pid 292] rmdir("./0" [pid 337] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 337] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 337] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} => {parent_tid=[338]}, 88) = 338 [pid 292] <... rmdir resumed>) = 0 [pid 337] rt_sigprocmask(SIG_SETMASK, [], [pid 292] mkdir("./1", 0777 [pid 337] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 337] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 337] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 292] <... mkdir resumed>) = 0 [pid 292] openat(AT_FDCWD, "/dev/loop2", O_RDWR./strace-static-x86_64: Process 338 attached [pid 329] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 292] <... openat resumed>) = 3 [pid 292] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 292] close(3 [pid 338] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 338] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 338] memfd_create("syzkaller", 0) = 3 [pid 338] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 [pid 292] <... close resumed>) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee9a690) = 339 ./strace-static-x86_64: Process 339 attached [pid 339] set_robust_list(0x55555ee9a6a0, 24) = 0 [pid 339] chdir("./1") = 0 [pid 339] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 339] setpgid(0, 0) = 0 [pid 339] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 339] write(3, "1000", 4) = 4 [pid 339] close(3) = 0 [pid 339] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 339] write(1, "executing program\n", 18) = 18 [pid 339] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 339] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, NULL, 8) = 0 [pid 339] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 339] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443ea4000 [pid 339] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 339] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 339] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} => {parent_tid=[340]}, 88) = 340 [pid 339] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 339] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 339] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 340 attached [pid 340] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 340] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 340] memfd_create("syzkaller", 0) = 3 [pid 340] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 [pid 334] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 329] <... write resumed>) = 20699119 [pid 329] munmap(0x7f143baa4000, 138412032) = 0 [pid 329] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 329] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 329] close(3) = 0 [pid 329] close(4) = 0 [pid 329] mkdir("./file0", 0777) = 0 [ 26.215323][ T329] loop1: detected capacity change from 0 to 40427 [ 26.237474][ T329] F2FS-fs (loop1): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 329] mount("/dev/loop1", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 338] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 336] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 329] <... mount resumed>) = 0 [pid 329] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 329] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 329] ioctl(4, LOOP_CLR_FD) = 0 [ 26.263375][ T329] F2FS-fs (loop1): Found nat_bits in checkpoint [pid 329] close(4) = 0 [pid 329] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 328] <... futex resumed>) = 0 [pid 329] fspick(AT_FDCWD, "./file0", 0 [pid 328] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 329] <... fspick resumed>) = 4 [pid 328] <... futex resumed>) = 0 [pid 329] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 328] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 329] <... futex resumed>) = 0 [pid 328] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 329] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 328] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 328] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 329] <... fsconfig resumed>) = 0 [pid 329] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 328] <... futex resumed>) = 0 [pid 329] openat(AT_FDCWD, "./file0", O_RDONLY [pid 328] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 329] <... openat resumed>) = 5 [pid 328] <... futex resumed>) = 0 [pid 329] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 328] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 329] <... futex resumed>) = 0 [pid 328] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 329] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 328] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 329] <... ioctl resumed>) = 0 [pid 328] <... futex resumed>) = 0 [pid 329] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 328] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 329] <... futex resumed>) = 0 [pid 328] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 329] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 328] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 329] <... prlimit64 resumed>NULL) = 0 [pid 328] <... futex resumed>) = 0 [pid 329] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 328] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 329] <... futex resumed>) = 0 [pid 328] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 329] sched_setscheduler(0, SCHED_FIFO, [7] [pid 328] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 329] <... sched_setscheduler resumed>) = 0 [pid 328] <... futex resumed>) = 0 [pid 340] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 329] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 328] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 329] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 328] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 328] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 329] <... futex resumed>) = 0 [pid 328] <... futex resumed>) = 1 [pid 329] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 334] <... write resumed>) = 20699119 [pid 328] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 334] munmap(0x7f143baa4000, 138412032) = 0 [pid 334] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 26.332856][ T329] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [pid 334] ioctl(4, LOOP_SET_FD, 3 [pid 329] <... mmap resumed>) = 0x200000000000 [pid 329] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 328] <... futex resumed>) = 0 [pid 329] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 328] exit_group(0 [pid 329] <... futex resumed>) = ? [pid 328] <... exit_group resumed>) = ? [pid 329] +++ exited with 0 +++ [pid 334] <... ioctl resumed>) = 0 [pid 334] close(3) = 0 [pid 334] close(4) = 0 [pid 334] mkdir("./file0", 0777) = 0 [pid 334] mount("/dev/loop4", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 340] <... write resumed>) = 20699119 [pid 340] munmap(0x7f143baa4000, 138412032) = 0 [pid 340] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 340] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 340] close(3) = 0 [pid 340] close(4) = 0 [pid 340] mkdir("./file0", 0777) = 0 [pid 340] mount("/dev/loop2", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 328] +++ exited with 0 +++ [pid 338] <... write resumed>) = 20699119 [pid 338] munmap(0x7f143baa4000, 138412032) = 0 [ 26.425975][ T334] loop4: detected capacity change from 0 to 40427 [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=328, si_uid=0, si_status=0, si_utime=11, si_stime=18} --- [pid 291] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 291] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 291] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 338] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 338] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 338] close(3) = 0 [pid 338] close(4) = 0 [pid 338] mkdir("./file0", 0777) = 0 [pid 338] mount("/dev/loop3", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 336] <... write resumed>) = 20699119 [pid 336] munmap(0x7f143baa4000, 138412032) = 0 [pid 336] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 336] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 336] close(3) = 0 [pid 336] close(4) = 0 [pid 336] mkdir("./file0", 0777) = 0 [ 26.486765][ T334] F2FS-fs (loop4): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 26.496818][ T340] loop2: detected capacity change from 0 to 40427 [ 26.518137][ T340] F2FS-fs (loop2): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 26.532501][ T338] loop3: detected capacity change from 0 to 40427 [ 26.546854][ T334] F2FS-fs (loop4): Found nat_bits in checkpoint [ 26.551704][ T336] loop0: detected capacity change from 0 to 40427 [ 26.554424][ T338] F2FS-fs (loop3): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 336] mount("/dev/loop0", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 334] <... mount resumed>) = 0 [pid 334] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 334] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 334] ioctl(4, LOOP_CLR_FD) = 0 [pid 334] close(4) = 0 [pid 334] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 333] <... futex resumed>) = 0 [pid 333] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 333] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 334] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 334] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 334] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 333] <... futex resumed>) = 0 [pid 333] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 334] <... futex resumed>) = 0 [pid 333] <... futex resumed>) = 1 [pid 334] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [ 26.587431][ T336] F2FS-fs (loop0): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 26.597792][ T340] F2FS-fs (loop2): Found nat_bits in checkpoint [ 26.612403][ T338] F2FS-fs (loop3): Found nat_bits in checkpoint [pid 333] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 338] <... mount resumed>) = 0 [pid 338] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 334] <... fsconfig resumed>) = 0 [pid 338] <... openat resumed>) = 3 [pid 334] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 338] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 334] <... futex resumed>) = 1 [pid 333] <... futex resumed>) = 0 [pid 334] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 338] <... openat resumed>) = 4 [pid 333] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 338] ioctl(4, LOOP_CLR_FD [pid 334] <... futex resumed>) = 0 [pid 333] <... futex resumed>) = 1 [pid 338] <... ioctl resumed>) = 0 [pid 334] openat(AT_FDCWD, "./file0", O_RDONLY [pid 338] close(4 [pid 334] <... openat resumed>) = 5 [pid 333] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 334] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 338] <... close resumed>) = 0 [pid 334] <... futex resumed>) = 1 [pid 333] <... futex resumed>) = 0 [pid 334] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 333] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 338] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 334] <... futex resumed>) = 0 [pid 333] <... futex resumed>) = 1 [pid 337] <... futex resumed>) = 0 [pid 334] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 338] <... futex resumed>) = 1 [pid 337] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 333] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 337] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 338] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 338] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 337] <... futex resumed>) = 0 [pid 338] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 337] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 338] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 337] <... futex resumed>) = 0 [pid 338] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 337] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 334] <... ioctl resumed>) = 0 [pid 334] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 333] <... futex resumed>) = 0 [pid 334] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 333] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 334] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 333] <... futex resumed>) = 0 [pid 334] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 333] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 334] <... prlimit64 resumed>NULL) = 0 [pid 334] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 333] <... futex resumed>) = 0 [pid 334] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 333] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 334] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 333] <... futex resumed>) = 0 [pid 334] sched_setscheduler(0, SCHED_FIFO, [7] [pid 333] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 334] <... sched_setscheduler resumed>) = 0 [pid 334] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 333] <... futex resumed>) = 0 [pid 334] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [ 26.630380][ T334] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [pid 333] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 334] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 333] <... futex resumed>) = 0 [pid 334] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 333] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 340] <... mount resumed>) = 0 [pid 291] <... umount2 resumed>) = 0 [pid 340] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 291] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 340] <... openat resumed>) = 3 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 340] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 291] newfstatat(AT_FDCWD, "./1/file0", [pid 340] <... openat resumed>) = 4 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 340] ioctl(4, LOOP_CLR_FD [pid 291] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 340] <... ioctl resumed>) = 0 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 340] close(4 [pid 291] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 340] <... close resumed>) = 0 [pid 337] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 291] <... openat resumed>) = 4 [pid 340] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 337] futex(0x7f1443f956dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 291] newfstatat(4, "", [pid 340] <... futex resumed>) = 1 [pid 337] <... futex resumed>) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 340] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 337] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 291] getdents64(4, [pid 337] <... mmap resumed>) = 0x7f1443e83000 [pid 291] <... getdents64 resumed>0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 337] mprotect(0x7f1443e84000, 131072, PROT_READ|PROT_WRITE [pid 291] getdents64(4, [pid 337] <... mprotect resumed>) = 0 [pid 291] <... getdents64 resumed>0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 337] rt_sigprocmask(SIG_BLOCK, ~[], [pid 291] close(4 [pid 337] <... rt_sigprocmask resumed>[], 8) = 0 [pid 291] <... close resumed>) = 0 [pid 337] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ea3990, parent_tid=0x7f1443ea3990, exit_signal=0, stack=0x7f1443e83000, stack_size=0x20300, tls=0x7f1443ea36c0} [pid 291] rmdir("./1/file0") = 0 [pid 337] <... clone3 resumed> => {parent_tid=[357]}, 88) = 357 [pid 291] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 337] rt_sigprocmask(SIG_SETMASK, [], [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 337] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 291] newfstatat(AT_FDCWD, "./1/binderfs", [pid 337] futex(0x7f1443f956d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 337] <... futex resumed>) = 0 [pid 291] unlink("./1/binderfs" [pid 337] futex(0x7f1443f956dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 291] <... unlink resumed>) = 0 [pid 291] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./1") = 0 [pid 291] mkdir("./2", 0777) = 0 [pid 291] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 291] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 291] close(3./strace-static-x86_64: Process 357 attached [pid 339] <... futex resumed>) = 0 [pid 334] <... mmap resumed>) = 0x200000000000 [pid 291] <... close resumed>) = 0 [pid 357] set_robust_list(0x7f1443ea39a0, 24 [pid 339] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 334] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 357] <... set_robust_list resumed>) = 0 [pid 340] <... futex resumed>) = 0 [pid 339] <... futex resumed>) = 1 [pid 338] <... fsconfig resumed>) = 0 [pid 336] <... mount resumed>) = 0 [pid 334] <... futex resumed>) = 1 [pid 333] <... futex resumed>) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 357] rt_sigprocmask(SIG_SETMASK, [], [pid 340] fspick(AT_FDCWD, "./file0", 0 [pid 339] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 338] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 336] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 334] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 333] exit_group(0./strace-static-x86_64: Process 359 attached [pid 357] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 340] <... fspick resumed>) = 4 [pid 338] <... futex resumed>) = 0 [pid 336] <... openat resumed>) = 3 [pid 334] <... futex resumed>) = ? [pid 333] <... exit_group resumed>) = ? [pid 359] set_robust_list(0x55555ee9a6a0, 24 [pid 357] openat(AT_FDCWD, "./file0", O_RDONLY [pid 340] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 338] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 334] +++ exited with 0 +++ [pid 291] <... clone resumed>, child_tidptr=0x55555ee9a690) = 359 [pid 359] <... set_robust_list resumed>) = 0 [pid 340] <... futex resumed>) = 1 [pid 359] chdir("./2" [pid 340] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 359] <... chdir resumed>) = 0 [pid 359] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 359] setpgid(0, 0) = 0 [pid 359] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 359] write(3, "1000", 4) = 4 [pid 359] close(3) = 0 [pid 359] symlink("/dev/binderfs", "./binderfs") = 0 [pid 359] write(1, "executing program\n", 18executing program ) = 18 [pid 359] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 359] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, NULL, 8) = 0 [pid 359] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 359] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443ea4000 [pid 359] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 359] rt_sigprocmask(SIG_BLOCK, ~[], [pid 357] <... openat resumed>) = 5 [pid 339] <... futex resumed>) = 0 [pid 357] futex(0x7f1443f956dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 339] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 359] <... rt_sigprocmask resumed>[], 8) = 0 [pid 357] <... futex resumed>) = 1 [pid 337] <... futex resumed>) = 0 [pid 359] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} [pid 357] futex(0x7f1443f956d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 340] <... futex resumed>) = 0 [pid 339] <... futex resumed>) = 1 [pid 337] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 340] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 339] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 338] <... futex resumed>) = 0 [pid 337] <... futex resumed>) = 1 [pid 359] <... clone3 resumed> => {parent_tid=[360]}, 88) = 360 [pid 338] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 337] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 359] rt_sigprocmask(SIG_SETMASK, [], [pid 336] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 359] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 338] <... ioctl resumed>) = 0 [pid 336] <... openat resumed>) = 4 [pid 359] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 338] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 359] <... futex resumed>) = 0 [pid 338] <... futex resumed>) = 1 [pid 337] <... futex resumed>) = 0 [pid 336] ioctl(4, LOOP_CLR_FD [pid 359] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 338] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 337] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 338] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 337] <... futex resumed>) = 0 [pid 336] <... ioctl resumed>) = 0 [pid 338] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 337] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 338] <... prlimit64 resumed>NULL) = 0 [pid 338] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 337] <... futex resumed>) = 0 [pid 338] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 337] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 338] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 337] <... futex resumed>) = 0 [pid 338] sched_setscheduler(0, SCHED_FIFO, [7] [pid 337] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 338] <... sched_setscheduler resumed>) = 0 [pid 338] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 337] <... futex resumed>) = 0 [pid 338] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [ 26.668498][ T336] F2FS-fs (loop0): Found nat_bits in checkpoint [ 26.676674][ T338] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 26.698645][ T340] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [pid 337] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 338] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 337] <... futex resumed>) = 0 [pid 338] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 337] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 360 attached [pid 336] close(4 [pid 333] +++ exited with 0 +++ [pid 360] set_robust_list(0x7f1443ec49a0, 24 [pid 336] <... close resumed>) = 0 [pid 360] <... set_robust_list resumed>) = 0 [pid 336] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 360] rt_sigprocmask(SIG_SETMASK, [], [pid 336] <... futex resumed>) = 1 [pid 360] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 336] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 360] memfd_create("syzkaller", 0) = 3 [pid 360] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 [pid 339] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 339] futex(0x7f1443f956dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 339] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443e83000 [pid 339] mprotect(0x7f1443e84000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 339] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 339] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ea3990, parent_tid=0x7f1443ea3990, exit_signal=0, stack=0x7f1443e83000, stack_size=0x20300, tls=0x7f1443ea36c0} => {parent_tid=[362]}, 88) = 362 [pid 339] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 339] futex(0x7f1443f956d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 339] futex(0x7f1443f956dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 338] <... mmap resumed>) = 0x200000000000 [pid 338] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 337] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 338] <... futex resumed>) = 0 [pid 338] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 335] <... futex resumed>) = 0 [pid 294] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=333, si_uid=0, si_status=0, si_utime=10, si_stime=19} --- [pid 337] exit_group(0./strace-static-x86_64: Process 362 attached [pid 340] <... fsconfig resumed>) = 0 [pid 338] <... futex resumed>) = ? [pid 337] <... exit_group resumed>) = ? [pid 335] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 362] set_robust_list(0x7f1443ea39a0, 24 [pid 340] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 338] +++ exited with 0 +++ [pid 362] <... set_robust_list resumed>) = 0 [pid 357] <... futex resumed>) = ? [pid 340] <... futex resumed>) = 0 [pid 336] <... futex resumed>) = 0 [pid 335] <... futex resumed>) = 1 [pid 362] rt_sigprocmask(SIG_SETMASK, [], [pid 340] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 335] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 294] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 362] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 362] openat(AT_FDCWD, "./file0", O_RDONLY [pid 336] fspick(AT_FDCWD, "./file0", 0 [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 362] <... openat resumed>) = 5 [pid 294] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 362] futex(0x7f1443f956dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 294] <... openat resumed>) = 3 [pid 362] <... futex resumed>) = 1 [pid 294] newfstatat(3, "", [pid 362] futex(0x7f1443f956d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 339] <... futex resumed>) = 0 [pid 336] <... fspick resumed>) = 4 [pid 294] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 339] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 336] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 294] getdents64(3, [pid 340] <... futex resumed>) = 0 [pid 339] <... futex resumed>) = 1 [pid 336] <... futex resumed>) = 1 [pid 335] <... futex resumed>) = 0 [pid 294] <... getdents64 resumed>0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 340] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 335] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [ 26.762683][ T336] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [pid 294] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 339] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 336] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 335] <... futex resumed>) = 0 [pid 335] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 340] <... ioctl resumed>) = 0 [pid 340] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 339] <... futex resumed>) = 0 [pid 340] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 339] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 340] <... prlimit64 resumed>NULL) = 0 [pid 339] <... futex resumed>) = 0 [pid 340] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 339] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 340] <... futex resumed>) = 0 [pid 339] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 340] sched_setscheduler(0, SCHED_FIFO, [7] [pid 339] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 340] <... sched_setscheduler resumed>) = 0 [pid 339] <... futex resumed>) = 0 [pid 340] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 339] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 340] <... futex resumed>) = 0 [pid 339] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 340] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 339] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 340] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 339] <... futex resumed>) = 0 [pid 340] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 339] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 340] <... mmap resumed>) = 0x200000000000 [pid 335] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 340] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 339] <... futex resumed>) = 0 [pid 340] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 339] exit_group(0 [pid 362] <... futex resumed>) = ? [pid 340] <... futex resumed>) = ? [pid 339] <... exit_group resumed>) = ? [pid 335] futex(0x7f1443f956dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 362] +++ exited with 0 +++ [pid 340] +++ exited with 0 +++ [pid 335] <... futex resumed>) = 0 [pid 335] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 336] <... fsconfig resumed>) = 0 [pid 336] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 336] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 335] <... mmap resumed>) = 0x7f1443e83000 [pid 335] mprotect(0x7f1443e84000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 335] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 335] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ea3990, parent_tid=0x7f1443ea3990, exit_signal=0, stack=0x7f1443e83000, stack_size=0x20300, tls=0x7f1443ea36c0} => {parent_tid=[366]}, 88) = 366 [pid 335] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 335] futex(0x7f1443f956d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 335] futex(0x7f1443f956dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 366 attached [pid 366] set_robust_list(0x7f1443ea39a0, 24) = 0 [pid 366] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 366] openat(AT_FDCWD, "./file0", O_RDONLY) = 5 [pid 366] futex(0x7f1443f956dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 335] <... futex resumed>) = 0 [pid 366] futex(0x7f1443f956d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 335] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 336] <... futex resumed>) = 0 [pid 335] <... futex resumed>) = 1 [pid 336] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 335] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 336] <... ioctl resumed>) = 0 [pid 336] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 335] <... futex resumed>) = 0 [pid 336] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 335] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 336] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 335] <... futex resumed>) = 0 [pid 336] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 335] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 336] <... prlimit64 resumed>NULL) = 0 [pid 336] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 335] <... futex resumed>) = 0 [pid 336] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 335] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 336] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 335] <... futex resumed>) = 0 [pid 336] sched_setscheduler(0, SCHED_FIFO, [7] [pid 335] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 336] <... sched_setscheduler resumed>) = 0 [pid 336] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 335] <... futex resumed>) = 0 [pid 336] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 335] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 336] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 335] <... futex resumed>) = 0 [pid 336] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 335] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 360] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 336] <... mmap resumed>) = 0x200000000000 [pid 336] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 336] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 335] <... futex resumed>) = 0 [pid 335] exit_group(0 [pid 336] <... futex resumed>) = ? [pid 366] <... futex resumed>) = ? [pid 336] +++ exited with 0 +++ [pid 335] <... exit_group resumed>) = ? [pid 366] +++ exited with 0 +++ [pid 335] +++ exited with 0 +++ [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=335, si_uid=0, si_status=0, si_utime=9, si_stime=19} --- [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 357] +++ exited with 0 +++ [pid 337] +++ exited with 0 +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=337, si_uid=0, si_status=0, si_utime=10, si_stime=22} --- [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 290] <... restart_syscall resumed>) = 0 [pid 290] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 290] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] <... restart_syscall resumed>) = 0 [pid 293] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 293] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 339] +++ exited with 0 +++ [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=339, si_uid=0, si_status=0, si_utime=11, si_stime=22} --- [pid 292] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 292] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 292] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 360] <... write resumed>) = 20699119 [pid 360] munmap(0x7f143baa4000, 138412032) = 0 [pid 360] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 360] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 360] close(3) = 0 [pid 360] close(4) = 0 [pid 360] mkdir("./file0", 0777) = 0 [pid 360] mount("/dev/loop1", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 294] <... umount2 resumed>) = 0 [pid 290] <... umount2 resumed>) = 0 [pid 294] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] newfstatat(AT_FDCWD, "./1/file0", [pid 290] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 294] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 294] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] newfstatat(AT_FDCWD, "./1/file0", [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 294] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] <... openat resumed>) = 4 [pid 290] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 294] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 294] getdents64(4, [pid 290] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 294] <... getdents64 resumed>0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 294] getdents64(4, [pid 290] <... openat resumed>) = 4 [pid 294] <... getdents64 resumed>0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 294] close(4 [pid 290] newfstatat(4, "", [pid 294] <... close resumed>) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] rmdir("./1/file0") = 0 [pid 290] getdents64(4, [pid 294] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] <... getdents64 resumed>0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 294] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] getdents64(4, [pid 294] unlink("./1/binderfs") = 0 [pid 290] <... getdents64 resumed>0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 294] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 290] close(4 [pid 294] close(3) = 0 [pid 290] <... close resumed>) = 0 [pid 294] rmdir("./1") = 0 [pid 290] rmdir("./1/file0" [pid 294] mkdir("./2", 0777 [pid 290] <... rmdir resumed>) = 0 [pid 294] <... mkdir resumed>) = 0 [pid 290] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 294] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 294] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 290] newfstatat(AT_FDCWD, "./1/binderfs", [pid 294] close(3 [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] <... close resumed>) = 0 [pid 290] unlink("./1/binderfs" [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] <... unlink resumed>) = 0 [pid 294] <... clone resumed>, child_tidptr=0x55555ee9a690) = 369 ./strace-static-x86_64: Process 369 attached [pid 290] getdents64(3, [pid 369] set_robust_list(0x55555ee9a6a0, 24 [pid 290] <... getdents64 resumed>0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 369] <... set_robust_list resumed>) = 0 [pid 290] close(3 [pid 369] chdir("./2" [pid 290] <... close resumed>) = 0 [pid 290] rmdir("./1" [pid 369] <... chdir resumed>) = 0 [pid 369] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 290] <... rmdir resumed>) = 0 [pid 369] <... prctl resumed>) = 0 [pid 290] mkdir("./2", 0777 [pid 369] setpgid(0, 0) = 0 [pid 290] <... mkdir resumed>) = 0 [pid 369] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 290] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 369] <... openat resumed>) = 3 [pid 290] <... openat resumed>) = 3 [pid 369] write(3, "1000", 4 [pid 290] ioctl(3, LOOP_CLR_FD [pid 369] <... write resumed>) = 4 [pid 290] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 369] close(3 [pid 290] close(3 [pid 369] <... close resumed>) = 0 [pid 369] symlink("/dev/binderfs", "./binderfs" [pid 292] <... umount2 resumed>) = 0 [pid 290] <... close resumed>) = 0 [pid 293] <... umount2 resumed>) = 0 [pid 293] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./1/file0", [pid 369] <... symlink resumed>) = 0 ./strace-static-x86_64: Process 370 attached [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... clone resumed>, child_tidptr=0x55555ee9a690) = 370 [pid 369] write(1, "executing program\n", 18 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) executing program [pid 369] <... write resumed>) = 18 [pid 292] newfstatat(AT_FDCWD, "./1/file0", [pid 369] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 369] <... futex resumed>) = 0 [pid 292] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 369] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 369] <... rt_sigaction resumed>NULL, 8) = 0 [pid 292] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 369] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 292] <... openat resumed>) = 4 [pid 369] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 292] newfstatat(4, "", [pid 369] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 369] <... mmap resumed>) = 0x7f1443ea4000 [pid 292] getdents64(4, [pid 369] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE [pid 292] <... getdents64 resumed>0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 293] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 369] <... mprotect resumed>) = 0 [pid 292] getdents64(4, [pid 369] rt_sigprocmask(SIG_BLOCK, ~[], [pid 292] <... getdents64 resumed>0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 369] <... rt_sigprocmask resumed>[], 8) = 0 [pid 292] close(4 [pid 369] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} [pid 292] <... close resumed>) = 0 [pid 292] rmdir("./1/file0" [pid 370] set_robust_list(0x55555ee9a6a0, 24 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 370] <... set_robust_list resumed>) = 0 [pid 369] <... clone3 resumed> => {parent_tid=[371]}, 88) = 371 [pid 293] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] <... rmdir resumed>) = 0 [pid 369] rt_sigprocmask(SIG_SETMASK, [], [pid 292] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 369] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 369] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] newfstatat(AT_FDCWD, "./1/binderfs", [pid 369] <... futex resumed>) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 369] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 292] unlink("./1/binderfs") = 0 [pid 292] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./1" [pid 293] <... openat resumed>) = 4 [pid 292] <... rmdir resumed>) = 0 [pid 292] mkdir("./2", 0777 [pid 370] chdir("./2" [pid 293] newfstatat(4, "", [pid 370] <... chdir resumed>) = 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] <... mkdir resumed>) = 0 [pid 292] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 292] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 292] close(3) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee9a690) = 372 ./strace-static-x86_64: Process 371 attached [pid 371] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 371] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 371] memfd_create("syzkaller", 0) = 3 [pid 371] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 [pid 293] getdents64(4, 0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 293] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 370] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 293] close(4 [pid 370] <... prctl resumed>) = 0 [pid 293] <... close resumed>) = 0 [pid 370] setpgid(0, 0 [pid 293] rmdir("./1/file0") = 0 [pid 370] <... setpgid resumed>) = 0 [pid 293] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 370] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 370] <... openat resumed>) = 3 [pid 293] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 370] write(3, "1000", 4 [pid 293] unlink("./1/binderfs" [pid 370] <... write resumed>) = 4 [pid 293] <... unlink resumed>) = 0 [pid 370] close(3 [pid 293] getdents64(3, [pid 370] <... close resumed>) = 0 [pid 293] <... getdents64 resumed>0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 370] symlink("/dev/binderfs", "./binderfs" [pid 293] close(3 [pid 370] <... symlink resumed>) = 0 [pid 293] <... close resumed>) = 0 executing program [pid 370] write(1, "executing program\n", 18 [pid 293] rmdir("./1" [pid 370] <... write resumed>) = 18 [pid 293] <... rmdir resumed>) = 0 [pid 370] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 293] mkdir("./2", 0777) = 0 [pid 370] <... futex resumed>) = 0 [pid 293] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 370] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, [pid 293] <... openat resumed>) = 3 [pid 370] <... rt_sigaction resumed>NULL, 8) = 0 [pid 293] ioctl(3, LOOP_CLR_FD [pid 370] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 293] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 27.104119][ T360] loop1: detected capacity change from 0 to 40427 [ 27.118004][ T360] F2FS-fs (loop1): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 293] close(3 [pid 370] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 293] <... close resumed>) = 0 [pid 370] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 370] <... mmap resumed>) = 0x7f1443ea4000 [pid 293] <... clone resumed>, child_tidptr=0x55555ee9a690) = 373 [pid 370] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 370] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 370] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} => {parent_tid=[374]}, 88) = 374 [pid 370] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 370] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 370] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 372 attached [pid 372] set_robust_list(0x55555ee9a6a0, 24./strace-static-x86_64: Process 374 attached ./strace-static-x86_64: Process 373 attached [pid 373] set_robust_list(0x55555ee9a6a0, 24 [pid 372] <... set_robust_list resumed>) = 0 [pid 374] set_robust_list(0x7f1443ec49a0, 24 [pid 372] chdir("./2" [pid 373] <... set_robust_list resumed>) = 0 [pid 374] <... set_robust_list resumed>) = 0 [pid 373] chdir("./2" [pid 374] rt_sigprocmask(SIG_SETMASK, [], [pid 372] <... chdir resumed>) = 0 [pid 373] <... chdir resumed>) = 0 [pid 373] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 372] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 374] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 373] <... prctl resumed>) = 0 [pid 372] <... prctl resumed>) = 0 [pid 373] setpgid(0, 0 [pid 372] setpgid(0, 0) = 0 [pid 373] <... setpgid resumed>) = 0 [pid 372] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 373] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 372] <... openat resumed>) = 3 [pid 373] <... openat resumed>) = 3 [pid 372] write(3, "1000", 4 [pid 373] write(3, "1000", 4 [pid 372] <... write resumed>) = 4 [pid 372] close(3 [pid 373] <... write resumed>) = 4 [pid 373] close(3 [pid 372] <... close resumed>) = 0 [pid 374] memfd_create("syzkaller", 0 [pid 373] <... close resumed>) = 0 [pid 372] symlink("/dev/binderfs", "./binderfs" [pid 374] <... memfd_create resumed>) = 3 [pid 373] symlink("/dev/binderfs", "./binderfs" [pid 360] <... mount resumed>) = 0 [pid 360] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 372] <... symlink resumed>) = 0 [pid 360] <... openat resumed>) = 3 [pid 360] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 360] ioctl(4, LOOP_CLR_FD) = 0 [pid 373] <... symlink resumed>) = 0 [pid 374] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 372] write(1, "executing program\n", 18 [pid 360] close(4executing program [pid 374] <... mmap resumed>) = 0x7f143baa4000 [pid 373] write(1, "executing program\n", 18 [pid 372] <... write resumed>) = 18 executing program [pid 373] <... write resumed>) = 18 [pid 372] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 360] <... close resumed>) = 0 [pid 360] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 359] <... futex resumed>) = 0 [pid 359] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 359] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 360] <... futex resumed>) = 1 [pid 360] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 360] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 359] <... futex resumed>) = 0 [pid 359] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 359] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 360] <... futex resumed>) = 1 [pid 360] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0) = 0 [pid 360] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 359] <... futex resumed>) = 0 [pid 359] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 359] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 360] openat(AT_FDCWD, "./file0", O_RDONLY) = 5 [pid 360] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 359] <... futex resumed>) = 0 [pid 359] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 359] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 360] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140) = 0 [pid 360] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 359] <... futex resumed>) = 0 [pid 359] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 359] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 360] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, NULL) = 0 [pid 360] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 359] <... futex resumed>) = 0 [pid 359] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 359] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 360] sched_setscheduler(0, SCHED_FIFO, [7]) = 0 [pid 360] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 359] <... futex resumed>) = 0 [pid 360] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 359] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 360] <... futex resumed>) = 0 [pid 359] <... futex resumed>) = 1 [ 27.168515][ T360] F2FS-fs (loop1): Found nat_bits in checkpoint [pid 360] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 373] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... futex resumed>) = 0 [pid 359] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... futex resumed>) = 0 [pid 372] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, [pid 373] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, [pid 372] <... rt_sigaction resumed>NULL, 8) = 0 [pid 373] <... rt_sigaction resumed>NULL, 8) = 0 [pid 372] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 373] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 372] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 373] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 372] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 373] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 372] <... mmap resumed>) = 0x7f1443ea4000 [pid 373] <... mmap resumed>) = 0x7f1443ea4000 [pid 372] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE [pid 373] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE [pid 372] <... mprotect resumed>) = 0 [pid 360] <... mmap resumed>) = 0x200000000000 [pid 373] <... mprotect resumed>) = 0 [pid 372] rt_sigprocmask(SIG_BLOCK, ~[], [pid 373] rt_sigprocmask(SIG_BLOCK, ~[], [pid 372] <... rt_sigprocmask resumed>[], 8) = 0 [pid 360] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... rt_sigprocmask resumed>[], 8) = 0 [pid 372] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} [pid 373] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} [pid 360] <... futex resumed>) = 1 [pid 359] <... futex resumed>) = 0 [pid 372] <... clone3 resumed> => {parent_tid=[377]}, 88) = 377 [pid 360] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 359] exit_group(0 [pid 373] <... clone3 resumed> => {parent_tid=[378]}, 88) = 378 [pid 372] rt_sigprocmask(SIG_SETMASK, [], [pid 360] <... futex resumed>) = ? [pid 359] <... exit_group resumed>) = ? [pid 373] rt_sigprocmask(SIG_SETMASK, [], [pid 372] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 360] +++ exited with 0 +++ [pid 373] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 372] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... futex resumed>) = 0 [pid 373] <... futex resumed>) = 0 [pid 372] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [ 27.220491][ T360] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [pid 373] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 377 attached [pid 377] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 377] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 378 attached [pid 377] memfd_create("syzkaller", 0) = 3 [pid 377] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 [pid 378] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 378] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 378] memfd_create("syzkaller", 0) = 3 [pid 378] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 [pid 359] +++ exited with 0 +++ [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=359, si_uid=0, si_status=0, si_utime=10, si_stime=21} --- [pid 291] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 291] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 291] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 371] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 291] <... umount2 resumed>) = 0 [pid 291] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 291] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(4, 0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 291] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 291] close(4) = 0 [pid 291] rmdir("./2/file0") = 0 [pid 291] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./2/binderfs") = 0 [pid 291] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./2") = 0 [pid 291] mkdir("./3", 0777) = 0 [pid 291] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 291] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 291] close(3 [pid 374] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 291] <... close resumed>) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee9a690) = 379 ./strace-static-x86_64: Process 379 attached [pid 379] set_robust_list(0x55555ee9a6a0, 24) = 0 [pid 379] chdir("./3") = 0 [pid 379] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 379] setpgid(0, 0) = 0 [pid 379] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 379] write(3, "1000", 4) = 4 [pid 379] close(3) = 0 [pid 379] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 379] write(1, "executing program\n", 18) = 18 [pid 379] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 379] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, NULL, 8) = 0 [pid 379] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 379] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443ea4000 [pid 379] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 379] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 379] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} => {parent_tid=[380]}, 88) = 380 [pid 379] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 379] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 379] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 380 attached [pid 380] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 380] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 380] memfd_create("syzkaller", 0) = 3 [pid 380] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 [pid 377] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 371] <... write resumed>) = 20699119 [pid 371] munmap(0x7f143baa4000, 138412032) = 0 [pid 371] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 371] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 371] close(3) = 0 [pid 371] close(4) = 0 [pid 371] mkdir("./file0", 0777) = 0 [pid 371] mount("/dev/loop4", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 378] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 374] <... write resumed>) = 20699119 [pid 374] munmap(0x7f143baa4000, 138412032) = 0 [pid 374] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 374] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 374] close(3) = 0 [pid 374] close(4) = 0 [pid 374] mkdir("./file0", 0777) = 0 [ 27.624662][ T371] loop4: detected capacity change from 0 to 40427 [ 27.663027][ T371] F2FS-fs (loop4): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 374] mount("/dev/loop0", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 377] <... write resumed>) = 20699119 [pid 377] munmap(0x7f143baa4000, 138412032) = 0 [pid 377] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 27.684363][ T374] loop0: detected capacity change from 0 to 40427 [ 27.716981][ T374] F2FS-fs (loop0): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 27.727433][ T371] F2FS-fs (loop4): Found nat_bits in checkpoint [pid 377] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 377] close(3) = 0 [pid 377] close(4) = 0 [pid 377] mkdir("./file0", 0777) = 0 [pid 377] mount("/dev/loop2", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 378] <... write resumed>) = 20699119 [pid 378] munmap(0x7f143baa4000, 138412032) = 0 [pid 378] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 378] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 378] close(3) = 0 [pid 378] close(4) = 0 [ 27.751156][ T374] F2FS-fs (loop0): Found nat_bits in checkpoint [ 27.759750][ T377] loop2: detected capacity change from 0 to 40427 [pid 378] mkdir("./file0", 0777) = 0 [pid 378] mount("/dev/loop3", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 371] <... mount resumed>) = 0 [pid 371] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 371] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 371] ioctl(4, LOOP_CLR_FD) = 0 [pid 371] close(4) = 0 [pid 371] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 371] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 369] <... futex resumed>) = 0 [pid 369] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 369] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 371] <... futex resumed>) = 0 [pid 371] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 371] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 371] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 369] <... futex resumed>) = 0 [pid 369] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 369] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 371] <... futex resumed>) = 0 [pid 371] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 380] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 371] <... fsconfig resumed>) = 0 [pid 371] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 369] <... futex resumed>) = 0 [pid 371] openat(AT_FDCWD, "./file0", O_RDONLY [pid 369] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 371] <... openat resumed>) = 5 [pid 369] <... futex resumed>) = 0 [pid 371] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 369] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 371] <... futex resumed>) = 0 [pid 369] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 371] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 369] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 369] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 371] <... ioctl resumed>) = 0 [pid 371] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 369] <... futex resumed>) = 0 [pid 371] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 369] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 371] <... prlimit64 resumed>NULL) = 0 [pid 369] <... futex resumed>) = 0 [pid 371] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 369] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 371] <... futex resumed>) = 0 [pid 369] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 371] sched_setscheduler(0, SCHED_FIFO, [7] [pid 369] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 371] <... sched_setscheduler resumed>) = 0 [pid 369] <... futex resumed>) = 0 [pid 371] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 369] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 371] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 369] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 369] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 371] <... futex resumed>) = 0 [pid 369] <... futex resumed>) = 1 [pid 371] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [ 27.814948][ T377] F2FS-fs (loop2): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 27.832848][ T378] loop3: detected capacity change from 0 to 40427 [ 27.840813][ T377] F2FS-fs (loop2): Found nat_bits in checkpoint [ 27.853374][ T371] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [pid 369] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 380] <... write resumed>) = 20699119 [pid 380] munmap(0x7f143baa4000, 138412032) = 0 [pid 380] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 380] ioctl(4, LOOP_SET_FD, 3 [pid 371] <... mmap resumed>) = 0x200000000000 [pid 371] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 369] <... futex resumed>) = 0 [pid 371] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 369] exit_group(0 [pid 371] <... futex resumed>) = ? [pid 369] <... exit_group resumed>) = ? [pid 371] +++ exited with 0 +++ [pid 377] <... mount resumed>) = 0 [pid 374] <... mount resumed>) = 0 [pid 380] <... ioctl resumed>) = 0 [pid 377] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 380] close(3 [pid 377] <... openat resumed>) = 3 [pid 380] <... close resumed>) = 0 [pid 377] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 380] close(4) = 0 [pid 377] <... openat resumed>) = 4 [pid 380] mkdir("./file0", 0777 [pid 377] ioctl(4, LOOP_CLR_FD [pid 380] <... mkdir resumed>) = 0 [pid 377] <... ioctl resumed>) = 0 [pid 380] mount("/dev/loop1", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [ 27.875112][ T378] F2FS-fs (loop3): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 27.894742][ T374] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [pid 377] close(4) = 0 [pid 374] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 377] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 372] <... futex resumed>) = 0 [pid 377] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 372] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... futex resumed>) = 0 [pid 372] <... futex resumed>) = 1 [pid 377] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 372] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 372] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 377] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 372] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... futex resumed>) = 0 [pid 372] <... futex resumed>) = 1 [pid 377] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 372] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... openat resumed>) = 3 [pid 374] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 374] ioctl(4, LOOP_CLR_FD) = 0 [pid 374] close(4) = 0 [pid 374] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 370] <... futex resumed>) = 0 [pid 370] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 370] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... futex resumed>) = 1 [pid 374] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 374] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 370] <... futex resumed>) = 0 [pid 370] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 370] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... futex resumed>) = 1 [pid 374] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 377] <... fsconfig resumed>) = 0 [pid 377] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 372] <... futex resumed>) = 0 [pid 377] openat(AT_FDCWD, "./file0", O_RDONLY [pid 372] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... openat resumed>) = 5 [pid 372] <... futex resumed>) = 0 [pid 377] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 369] +++ exited with 0 +++ [pid 377] <... futex resumed>) = 0 [pid 372] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 377] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 372] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 294] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=369, si_uid=0, si_status=0, si_utime=10, si_stime=22} --- [pid 372] <... futex resumed>) = 0 [pid 294] restart_syscall(<... resuming interrupted clone ...> [pid 372] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 294] <... restart_syscall resumed>) = 0 [pid 294] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 294] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] getdents64(3, 0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 294] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 377] <... ioctl resumed>) = 0 [pid 377] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 372] <... futex resumed>) = 0 [pid 377] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 372] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... futex resumed>) = 0 [pid 372] <... futex resumed>) = 1 [pid 377] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 372] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... prlimit64 resumed>NULL) = 0 [pid 377] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 372] <... futex resumed>) = 0 [pid 377] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 372] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 372] <... futex resumed>) = 0 [pid 377] sched_setscheduler(0, SCHED_FIFO, [7] [pid 372] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... sched_setscheduler resumed>) = 0 [pid 377] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 372] <... futex resumed>) = 0 [pid 377] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 372] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 372] <... futex resumed>) = 0 [pid 377] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 372] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... fsconfig resumed>) = 0 [pid 374] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 370] <... futex resumed>) = 0 [pid 370] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 370] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... futex resumed>) = 1 [pid 374] openat(AT_FDCWD, "./file0", O_RDONLY) = 5 [pid 374] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 370] <... futex resumed>) = 0 [pid 370] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 370] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 27.955969][ T380] loop1: detected capacity change from 0 to 40427 [ 27.973864][ T378] F2FS-fs (loop3): Found nat_bits in checkpoint [ 27.980353][ T377] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 27.993504][ T380] F2FS-fs (loop1): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 374] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 372] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 377] <... mmap resumed>) = 0x200000000000 [pid 377] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 377] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 374] <... ioctl resumed>) = 0 [pid 370] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 374] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 370] futex(0x7f1443f956dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... futex resumed>) = 0 [pid 372] exit_group(0 [pid 370] <... futex resumed>) = 0 [pid 377] <... futex resumed>) = ? [pid 374] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 372] <... exit_group resumed>) = ? [pid 370] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 377] +++ exited with 0 +++ [pid 370] <... mmap resumed>) = 0x7f1443e83000 [pid 370] mprotect(0x7f1443e84000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 370] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 370] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ea3990, parent_tid=0x7f1443ea3990, exit_signal=0, stack=0x7f1443e83000, stack_size=0x20300, tls=0x7f1443ea36c0} => {parent_tid=[397]}, 88) = 397 [pid 370] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 370] futex(0x7f1443f956d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 28.015243][ T380] F2FS-fs (loop1): Found nat_bits in checkpoint [pid 370] futex(0x7f1443f956dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 294] <... umount2 resumed>) = 0 [pid 294] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] newfstatat(AT_FDCWD, "./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 294] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] getdents64(4, 0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 294] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 294] close(4) = 0 [pid 294] rmdir("./2/file0") = 0 [pid 294] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 397 attached [pid 294] unlink("./2/binderfs" [pid 397] set_robust_list(0x7f1443ea39a0, 24 [pid 294] <... unlink resumed>) = 0 [pid 397] <... set_robust_list resumed>) = 0 [pid 294] getdents64(3, [pid 397] rt_sigprocmask(SIG_SETMASK, [], [pid 294] <... getdents64 resumed>0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 397] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 294] close(3 [pid 397] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 294] <... close resumed>) = 0 [pid 397] <... prlimit64 resumed>NULL) = 0 [pid 294] rmdir("./2" [pid 397] futex(0x7f1443f956dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 370] <... futex resumed>) = 0 [pid 294] <... rmdir resumed>) = 0 [pid 370] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... futex resumed>) = 0 [pid 370] <... futex resumed>) = 1 [pid 374] sched_setscheduler(0, SCHED_FIFO, [7] [pid 370] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 397] futex(0x7f1443f956d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 294] mkdir("./3", 0777 [pid 374] <... sched_setscheduler resumed>) = 0 [pid 374] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 370] <... futex resumed>) = 0 [pid 294] <... mkdir resumed>) = 0 [pid 374] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 370] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... futex resumed>) = 0 [pid 370] <... futex resumed>) = 1 [pid 374] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 380] <... mount resumed>) = 0 [pid 378] <... mount resumed>) = 0 [pid 372] +++ exited with 0 +++ [pid 294] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 380] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 294] <... openat resumed>) = 3 [pid 380] <... openat resumed>) = 3 [pid 294] ioctl(3, LOOP_CLR_FD [pid 380] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 294] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 380] <... openat resumed>) = 4 [pid 294] close(3 [pid 380] ioctl(4, LOOP_CLR_FD [pid 294] <... close resumed>) = 0 [pid 380] <... ioctl resumed>) = 0 [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 380] close(4) = 0 [pid 294] <... clone resumed>, child_tidptr=0x55555ee9a690) = 398 [pid 380] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 379] <... futex resumed>) = 0 [pid 380] fspick(AT_FDCWD, "./file0", 0 [pid 379] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 380] <... fspick resumed>) = 4 [pid 379] <... futex resumed>) = 0 [pid 380] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 379] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 380] <... futex resumed>) = 0 [pid 379] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 380] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 379] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 379] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 380] <... fsconfig resumed>) = 0 [pid 380] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 379] <... futex resumed>) = 0 [pid 380] openat(AT_FDCWD, "./file0", O_RDONLY [pid 379] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 380] <... openat resumed>) = 5 [pid 379] <... futex resumed>) = 0 [pid 380] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 379] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 380] <... futex resumed>) = 0 [pid 379] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 380] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 379] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 370] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 379] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=372, si_uid=0, si_status=0, si_utime=9, si_stime=22} --- [pid 292] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 292] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 378] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 378] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 378] ioctl(4, LOOP_CLR_FD) = 0 [pid 378] close(4) = 0 [pid 378] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 378] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 374] <... mmap resumed>) = 0x200000000000 ./strace-static-x86_64: Process 398 attached [pid 374] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... futex resumed>) = 0 [pid 374] <... futex resumed>) = 1 [pid 370] <... futex resumed>) = 0 [pid 374] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 370] exit_group(0 [pid 397] <... futex resumed>) = ? [pid 374] <... futex resumed>) = ? [pid 370] <... exit_group resumed>) = ? [pid 397] +++ exited with 0 +++ [pid 374] +++ exited with 0 +++ [pid 398] set_robust_list(0x55555ee9a6a0, 24 [pid 373] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 398] <... set_robust_list resumed>) = 0 [pid 373] <... futex resumed>) = 1 [pid 398] chdir("./3" [pid 373] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 398] <... chdir resumed>) = 0 [pid 398] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 380] <... ioctl resumed>) = 0 [pid 398] <... prctl resumed>) = 0 [pid 398] setpgid(0, 0 [pid 380] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 398] <... setpgid resumed>) = 0 [pid 398] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 380] <... futex resumed>) = 1 [pid 379] <... futex resumed>) = 0 [pid 398] <... openat resumed>) = 3 [pid 380] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 379] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 398] write(3, "1000", 4) = 4 [pid 380] <... prlimit64 resumed>NULL) = 0 [pid 379] <... futex resumed>) = 0 [pid 398] close(3 [pid 380] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 379] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 398] <... close resumed>) = 0 [pid 380] <... futex resumed>) = 0 [pid 379] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 398] symlink("/dev/binderfs", "./binderfs" [pid 380] sched_setscheduler(0, SCHED_FIFO, [7] [pid 379] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 380] <... sched_setscheduler resumed>) = 0 [pid 379] <... futex resumed>) = 0 [pid 398] <... symlink resumed>) = 0 [pid 380] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000executing program [pid 398] write(1, "executing program\n", 18 [pid 380] <... futex resumed>) = 0 [pid 379] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 398] <... write resumed>) = 18 [pid 380] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 398] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 379] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 28.129434][ T378] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 28.139604][ T380] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [pid 379] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 398] <... futex resumed>) = 0 [pid 380] <... futex resumed>) = 0 [pid 379] <... futex resumed>) = 1 [pid 380] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 398] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, [pid 380] <... mmap resumed>) = 0x200000000000 [pid 379] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 378] <... futex resumed>) = 0 [pid 373] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 292] <... umount2 resumed>) = 0 [pid 380] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 380] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 398] <... rt_sigaction resumed>NULL, 8) = 0 [pid 379] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 378] fspick(AT_FDCWD, "./file0", 0 [pid 373] futex(0x7f1443f956dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 398] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 379] exit_group(0 [pid 373] <... futex resumed>) = 0 [pid 378] <... fspick resumed>) = 4 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 398] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 380] <... futex resumed>) = ? [pid 379] <... exit_group resumed>) = ? [pid 378] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 292] newfstatat(AT_FDCWD, "./2/file0", [pid 380] +++ exited with 0 +++ [pid 373] <... mmap resumed>) = 0x7f1443e83000 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 398] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 370] +++ exited with 0 +++ [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=370, si_uid=0, si_status=0, si_utime=9, si_stime=19} --- [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 378] <... futex resumed>) = 0 [pid 378] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 373] mprotect(0x7f1443e84000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 373] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 373] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ea3990, parent_tid=0x7f1443ea3990, exit_signal=0, stack=0x7f1443e83000, stack_size=0x20300, tls=0x7f1443ea36c0} => {parent_tid=[401]}, 88) = 401 [pid 373] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 373] futex(0x7f1443f956d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 373] futex(0x7f1443f956dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 292] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 292] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(4, 0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 292] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 292] close(4) = 0 [pid 292] rmdir("./2/file0") = 0 [pid 292] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./2/binderfs") = 0 [pid 292] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./2") = 0 [pid 292] mkdir("./3", 0777 [pid 398] <... mmap resumed>) = 0x7f1443ea4000 [pid 292] <... mkdir resumed>) = 0 [pid 398] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE [pid 292] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 398] <... mprotect resumed>) = 0 [pid 292] <... openat resumed>) = 3 [pid 292] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 398] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 292] close(3 [pid 398] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} [pid 292] <... close resumed>) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] <... restart_syscall resumed>) = 0 [pid 292] <... clone resumed>, child_tidptr=0x55555ee9a690) = 403 [pid 290] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 290] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 398] <... clone3 resumed> => {parent_tid=[402]}, 88) = 402 ./strace-static-x86_64: Process 402 attached ./strace-static-x86_64: Process 401 attached [pid 398] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 398] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 398] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 403 attached [pid 403] set_robust_list(0x55555ee9a6a0, 24) = 0 [pid 402] set_robust_list(0x7f1443ec49a0, 24 [pid 401] set_robust_list(0x7f1443ea39a0, 24 [pid 402] <... set_robust_list resumed>) = 0 [pid 401] <... set_robust_list resumed>) = 0 [pid 402] rt_sigprocmask(SIG_SETMASK, [], [pid 401] rt_sigprocmask(SIG_SETMASK, [], [pid 402] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 401] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 401] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 402] memfd_create("syzkaller", 0) = 3 [pid 402] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 [pid 403] chdir("./3") = 0 [pid 403] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 403] setpgid(0, 0) = 0 [pid 403] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 403] write(3, "1000", 4) = 4 [pid 403] close(3) = 0 [pid 403] symlink("/dev/binderfs", "./binderfs") = 0 [pid 403] write(1, "executing program\n", 18executing program ) = 18 [pid 403] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 403] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, NULL, 8) = 0 [pid 403] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 403] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443ea4000 [pid 403] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 403] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 403] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} => {parent_tid=[405]}, 88) = 405 [pid 403] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 403] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 403] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 405 attached [pid 405] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 405] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 405] memfd_create("syzkaller", 0) = 3 [pid 405] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 [pid 373] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 401] <... fsconfig resumed>) = 0 [pid 373] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 401] futex(0x7f1443f956dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 378] <... futex resumed>) = 0 [pid 373] <... futex resumed>) = 1 [pid 401] futex(0x7f1443f956d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 378] openat(AT_FDCWD, "./file0", O_RDONLY [pid 373] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 378] <... openat resumed>) = 5 [pid 378] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 373] <... futex resumed>) = 0 [pid 378] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 373] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 373] <... futex resumed>) = 0 [pid 378] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 373] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 378] <... ioctl resumed>) = 0 [pid 378] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 373] <... futex resumed>) = 0 [pid 378] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 373] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 373] <... futex resumed>) = 0 [pid 378] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 373] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 378] <... prlimit64 resumed>NULL) = 0 [pid 378] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 373] <... futex resumed>) = 0 [pid 378] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 373] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 373] <... futex resumed>) = 0 [pid 378] sched_setscheduler(0, SCHED_FIFO, [7] [pid 373] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 378] <... sched_setscheduler resumed>) = 0 [pid 378] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 373] <... futex resumed>) = 0 [pid 378] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 373] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 373] <... futex resumed>) = 0 [pid 378] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 373] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 379] +++ exited with 0 +++ [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=379, si_uid=0, si_status=0, si_utime=10, si_stime=21} --- [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 378] <... mmap resumed>) = 0x200000000000 [pid 378] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 378] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 373] <... futex resumed>) = 0 [pid 373] exit_group(0 [pid 401] <... futex resumed>) = ? [pid 378] <... futex resumed>) = ? [pid 373] <... exit_group resumed>) = ? [pid 378] +++ exited with 0 +++ [pid 291] <... restart_syscall resumed>) = 0 [pid 291] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 291] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 401] +++ exited with 0 +++ [pid 373] +++ exited with 0 +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=373, si_uid=0, si_status=0, si_utime=10, si_stime=21} --- [pid 293] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 293] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 293] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... umount2 resumed>) = 0 [pid 290] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 290] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(4, 0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 290] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 290] close(4) = 0 [pid 290] rmdir("./2/file0") = 0 [pid 290] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./2/binderfs") = 0 [pid 290] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./2") = 0 [pid 290] mkdir("./3", 0777) = 0 [pid 290] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 290] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 290] close(3) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee9a690) = 407 ./strace-static-x86_64: Process 407 attached [pid 407] set_robust_list(0x55555ee9a6a0, 24) = 0 [pid 407] chdir("./3") = 0 [pid 407] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 407] setpgid(0, 0) = 0 [pid 407] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 407] write(3, "1000", 4) = 4 [pid 407] close(3) = 0 [pid 407] symlink("/dev/binderfs", "./binderfs") = 0 [pid 407] write(1, "executing program\n", 18executing program ) = 18 [pid 407] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 407] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, NULL, 8) = 0 [pid 407] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 407] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443ea4000 [pid 407] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 407] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 407] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} => {parent_tid=[408]}, 88) = 408 [pid 407] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 407] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 407] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 408 attached [pid 408] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 408] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 408] memfd_create("syzkaller", 0) = 3 [pid 408] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 [pid 293] <... umount2 resumed>) = 0 [pid 405] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 291] <... umount2 resumed>) = 0 [pid 291] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 291] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(4, 0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 291] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 291] close(4) = 0 [pid 291] rmdir("./3/file0") = 0 [pid 291] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] unlink("./3/binderfs") = 0 [pid 291] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./3") = 0 [pid 291] mkdir("./4", 0777) = 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 293] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(4, 0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 293] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 293] close(4) = 0 [pid 293] rmdir("./2/file0") = 0 [pid 291] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 293] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./2/binderfs") = 0 [pid 293] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./2") = 0 [pid 291] <... openat resumed>) = 3 [pid 293] mkdir("./3", 0777 [pid 291] ioctl(3, LOOP_CLR_FD [pid 293] <... mkdir resumed>) = 0 [pid 293] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 293] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 293] close(3) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee9a690) = 409 [pid 291] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 291] close(3./strace-static-x86_64: Process 409 attached ) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee9a690) = 410 [pid 409] set_robust_list(0x55555ee9a6a0, 24) = 0 [pid 409] chdir("./3") = 0 [pid 409] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 409] setpgid(0, 0) = 0 [pid 409] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 409] write(3, "1000", 4) = 4 [pid 409] close(3) = 0 [pid 409] symlink("/dev/binderfs", "./binderfs") = 0 [pid 409] write(1, "executing program\n", 18executing program ) = 18 [pid 409] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 410 attached [pid 409] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, NULL, 8) = 0 [pid 410] set_robust_list(0x55555ee9a6a0, 24 [pid 409] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 410] <... set_robust_list resumed>) = 0 [pid 409] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443ea4000 [pid 410] chdir("./4" [pid 409] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 410] <... chdir resumed>) = 0 [pid 409] rt_sigprocmask(SIG_BLOCK, ~[], [pid 410] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 409] <... rt_sigprocmask resumed>[], 8) = 0 [pid 410] <... prctl resumed>) = 0 [pid 409] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} => {parent_tid=[411]}, 88) = 411 [pid 410] setpgid(0, 0 [pid 409] rt_sigprocmask(SIG_SETMASK, [], [pid 410] <... setpgid resumed>) = 0 [pid 409] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 409] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 410] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 409] <... futex resumed>) = 0 [pid 410] <... openat resumed>) = 3 [pid 409] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 410] write(3, "1000", 4) = 4 [pid 410] close(3) = 0 [pid 410] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 410] write(1, "executing program\n", 18) = 18 [pid 410] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 410] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, NULL, 8) = 0 [pid 410] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 410] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 411 attached ) = 0x7f1443ea4000 [pid 410] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 410] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 410] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} => {parent_tid=[412]}, 88) = 412 [pid 410] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 410] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 410] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 411] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 411] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 411] memfd_create("syzkaller", 0) = 3 [pid 411] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 ./strace-static-x86_64: Process 412 attached [pid 412] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 412] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 412] memfd_create("syzkaller", 0) = 3 [pid 412] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 [pid 405] <... write resumed>) = 20699119 [pid 402] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 405] munmap(0x7f143baa4000, 138412032) = 0 [pid 405] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 405] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 405] close(3) = 0 [pid 405] close(4) = 0 [pid 405] mkdir("./file0", 0777) = 0 [ 28.696804][ T405] loop2: detected capacity change from 0 to 40427 [ 28.719562][ T405] F2FS-fs (loop2): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 405] mount("/dev/loop2", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 408] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 402] <... write resumed>) = 20699119 [pid 402] munmap(0x7f143baa4000, 138412032) = 0 [pid 402] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 402] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 402] close(3) = 0 [pid 402] close(4) = 0 [pid 402] mkdir("./file0", 0777) = 0 [ 28.757408][ T405] F2FS-fs (loop2): Found nat_bits in checkpoint [pid 402] mount("/dev/loop4", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 412] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 411] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 405] <... mount resumed>) = 0 [pid 405] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 405] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 405] ioctl(4, LOOP_CLR_FD) = 0 [pid 405] close(4) = 0 [pid 405] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 403] <... futex resumed>) = 0 [pid 403] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 403] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 405] <... futex resumed>) = 1 [pid 405] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 405] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 403] <... futex resumed>) = 0 [pid 403] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 403] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 405] <... futex resumed>) = 1 [pid 405] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0) = 0 [pid 405] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 403] <... futex resumed>) = 0 [pid 405] openat(AT_FDCWD, "./file0", O_RDONLY [pid 403] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 405] <... openat resumed>) = 5 [pid 403] <... futex resumed>) = 0 [pid 405] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 403] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 405] <... futex resumed>) = 0 [pid 403] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 405] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 403] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 403] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 405] <... ioctl resumed>) = 0 [pid 405] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 403] <... futex resumed>) = 0 [pid 405] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 403] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 405] <... prlimit64 resumed>NULL) = 0 [pid 403] <... futex resumed>) = 0 [pid 405] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 403] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 405] <... futex resumed>) = 0 [pid 403] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 405] sched_setscheduler(0, SCHED_FIFO, [7] [pid 403] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 405] <... sched_setscheduler resumed>) = 0 [pid 403] <... futex resumed>) = 0 [pid 405] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 403] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 405] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 403] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 403] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 405] <... futex resumed>) = 0 [ 28.833262][ T402] loop4: detected capacity change from 0 to 40427 [ 28.854658][ T402] F2FS-fs (loop4): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 28.870557][ T405] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [pid 403] <... futex resumed>) = 1 [pid 405] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 403] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 405] <... mmap resumed>) = 0x200000000000 [pid 405] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 403] <... futex resumed>) = 0 [pid 405] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 403] exit_group(0 [pid 405] <... futex resumed>) = ? [pid 403] <... exit_group resumed>) = ? [pid 405] +++ exited with 0 +++ [ 28.909924][ T402] F2FS-fs (loop4): Found nat_bits in checkpoint [pid 408] <... write resumed>) = 20699119 [pid 408] munmap(0x7f143baa4000, 138412032) = 0 [pid 408] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 408] ioctl(4, LOOP_SET_FD, 3 [pid 402] <... mount resumed>) = 0 [pid 402] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 402] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 402] ioctl(4, LOOP_CLR_FD) = 0 [pid 402] close(4) = 0 [pid 402] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 402] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 398] <... futex resumed>) = 0 [pid 398] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 398] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 402] <... futex resumed>) = 0 [pid 402] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 402] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 398] <... futex resumed>) = 0 [pid 398] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 402] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 398] <... futex resumed>) = 0 [pid 398] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 403] +++ exited with 0 +++ [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=403, si_uid=0, si_status=0, si_utime=6, si_stime=22} --- [pid 292] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 292] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 292] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 408] <... ioctl resumed>) = 0 [pid 402] <... fsconfig resumed>) = 0 [pid 402] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 398] <... futex resumed>) = 0 [pid 408] close(3 [pid 398] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 408] <... close resumed>) = 0 [pid 402] openat(AT_FDCWD, "./file0", O_RDONLY [pid 398] <... futex resumed>) = 0 [pid 408] close(4 [pid 402] <... openat resumed>) = 5 [pid 398] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 408] <... close resumed>) = 0 [pid 402] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 398] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 408] mkdir("./file0", 0777 [pid 402] <... futex resumed>) = 0 [pid 398] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 402] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 398] <... futex resumed>) = 0 [pid 408] <... mkdir resumed>) = 0 [pid 398] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 408] mount("/dev/loop0", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 402] <... ioctl resumed>) = 0 [pid 402] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 398] <... futex resumed>) = 0 [pid 398] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 402] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 398] <... futex resumed>) = 0 [pid 398] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 402] <... prlimit64 resumed>NULL) = 0 [pid 402] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 398] <... futex resumed>) = 0 [pid 402] sched_setscheduler(0, SCHED_FIFO, [7] [pid 398] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 402] <... sched_setscheduler resumed>) = 0 [pid 398] <... futex resumed>) = 0 [pid 402] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 398] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 402] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 411] <... write resumed>) = 20699119 [pid 411] munmap(0x7f143baa4000, 138412032) = 0 [pid 411] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 411] ioctl(4, LOOP_SET_FD, 3 [pid 412] <... write resumed>) = 20699119 [pid 398] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 412] munmap(0x7f143baa4000, 138412032 [pid 398] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 412] <... munmap resumed>) = 0 [pid 402] <... futex resumed>) = 0 [ 29.002731][ T402] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 29.024555][ T408] loop0: detected capacity change from 0 to 40427 [pid 398] <... futex resumed>) = 1 [pid 412] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 402] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 398] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 412] <... openat resumed>) = 4 [pid 411] <... ioctl resumed>) = 0 [pid 292] <... umount2 resumed>) = 0 [pid 412] ioctl(4, LOOP_SET_FD, 3 [pid 411] close(3 [pid 292] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 411] <... close resumed>) = 0 [pid 402] <... mmap resumed>) = 0x200000000000 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 411] close(4 [pid 292] newfstatat(AT_FDCWD, "./3/file0", [pid 402] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 402] <... futex resumed>) = 1 [pid 402] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 398] <... futex resumed>) = 0 [pid 292] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 398] exit_group(0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 402] <... futex resumed>) = ? [pid 398] <... exit_group resumed>) = ? [pid 292] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 402] +++ exited with 0 +++ [pid 292] <... openat resumed>) = 4 [pid 292] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(4, 0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 292] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 292] close(4) = 0 [pid 292] rmdir("./3/file0") = 0 [pid 292] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./3/binderfs") = 0 [pid 292] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./3") = 0 [pid 292] mkdir("./4", 0777) = 0 [pid 292] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 292] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 292] close(3) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee9a690) = 423 ./strace-static-x86_64: Process 423 attached [pid 412] <... ioctl resumed>) = 0 [pid 423] set_robust_list(0x55555ee9a6a0, 24 [pid 412] close(3 [pid 423] <... set_robust_list resumed>) = 0 [pid 412] <... close resumed>) = 0 [pid 423] chdir("./4" [ 29.066838][ T408] F2FS-fs (loop0): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 29.071735][ T411] loop3: detected capacity change from 0 to 40427 [pid 412] close(4 [pid 423] <... chdir resumed>) = 0 [pid 412] <... close resumed>) = 0 [pid 423] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 412] mkdir("./file0", 0777 [pid 423] <... prctl resumed>) = 0 [pid 423] setpgid(0, 0) = 0 [pid 412] <... mkdir resumed>) = 0 [pid 423] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 412] mount("/dev/loop1", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 423] <... openat resumed>) = 3 [pid 423] write(3, "1000", 4) = 4 [pid 423] close(3) = 0 [pid 423] symlink("/dev/binderfs", "./binderfs") = 0 [pid 423] write(1, "executing program\n", 18 [pid 411] <... close resumed>) = 0 [pid 411] mkdir("./file0", 0777) = 0 [pid 411] mount("/dev/loop3", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"...executing program [pid 423] <... write resumed>) = 18 [pid 423] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 423] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, NULL, 8) = 0 [pid 423] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 423] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443ea4000 [pid 423] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 423] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 423] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} => {parent_tid=[424]}, 88) = 424 [pid 423] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 423] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 423] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 424 attached [pid 398] +++ exited with 0 +++ [pid 294] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=398, si_uid=0, si_status=0, si_utime=12, si_stime=17} --- [pid 294] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 294] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 294] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] getdents64(3, 0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 294] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 424] set_robust_list(0x7f1443ec49a0, 24 [pid 408] <... mount resumed>) = 0 [pid 424] <... set_robust_list resumed>) = 0 [pid 424] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 424] memfd_create("syzkaller", 0) = 3 [pid 424] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 [ 29.130580][ T412] loop1: detected capacity change from 0 to 40427 [ 29.134652][ T408] F2FS-fs (loop0): Found nat_bits in checkpoint [pid 408] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 408] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 408] ioctl(4, LOOP_CLR_FD) = 0 [pid 408] close(4) = 0 [pid 408] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 407] <... futex resumed>) = 0 [pid 408] fspick(AT_FDCWD, "./file0", 0 [pid 407] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 408] <... fspick resumed>) = 4 [pid 407] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 408] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 407] <... futex resumed>) = 0 [pid 408] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 407] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 408] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 407] <... futex resumed>) = 0 [pid 407] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 29.172466][ T412] F2FS-fs (loop1): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 29.188918][ T411] F2FS-fs (loop3): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 29.197654][ T408] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 29.201307][ T411] F2FS-fs (loop3): Found nat_bits in checkpoint [pid 408] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0) = 0 [pid 408] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 407] <... futex resumed>) = 0 [pid 408] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 407] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 408] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 407] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 408] openat(AT_FDCWD, "./file0", O_RDONLY) = 5 [pid 408] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 407] <... futex resumed>) = 0 [pid 408] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 407] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 408] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 408] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 407] <... futex resumed>) = 0 [pid 407] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 408] <... ioctl resumed>) = 0 [pid 408] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 407] <... futex resumed>) = 0 [pid 408] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 407] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 408] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 407] <... futex resumed>) = 0 [pid 408] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 407] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 408] <... prlimit64 resumed>NULL) = 0 [pid 408] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 407] <... futex resumed>) = 0 [pid 408] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 407] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 408] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 408] sched_setscheduler(0, SCHED_FIFO, [7] [pid 407] <... futex resumed>) = 0 [pid 408] <... sched_setscheduler resumed>) = 0 [pid 407] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 408] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 408] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 407] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 407] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 408] <... futex resumed>) = 0 [pid 407] <... futex resumed>) = 1 [pid 408] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 407] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 294] <... umount2 resumed>) = 0 [pid 294] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] newfstatat(AT_FDCWD, "./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 294] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] getdents64(4, 0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 294] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 294] close(4) = 0 [pid 294] rmdir("./3/file0") = 0 [pid 294] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] unlink("./3/binderfs") = 0 [pid 294] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 294] close(3) = 0 [pid 294] rmdir("./3") = 0 [pid 294] mkdir("./4", 0777) = 0 [pid 294] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 294] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 294] close(3) = 0 [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee9a690) = 431 ./strace-static-x86_64: Process 431 attached [ 29.227402][ T412] F2FS-fs (loop1): Found nat_bits in checkpoint [pid 431] set_robust_list(0x55555ee9a6a0, 24) = 0 [pid 431] chdir("./4") = 0 [pid 431] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 431] setpgid(0, 0) = 0 [pid 431] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 431] write(3, "1000", 4) = 4 [pid 431] close(3) = 0 [pid 431] symlink("/dev/binderfs", "./binderfs") = 0 [pid 431] write(1, "executing program\n", 18executing program ) = 18 [pid 431] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 431] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, NULL, 8) = 0 [pid 431] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 431] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443ea4000 [pid 431] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 431] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 431] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} => {parent_tid=[432]}, 88) = 432 [pid 431] rt_sigprocmask(SIG_SETMASK, [], [pid 408] <... mmap resumed>) = 0x200000000000 [pid 408] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 407] <... futex resumed>) = 0 [pid 408] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 407] exit_group(0 [pid 408] <... futex resumed>) = ? [pid 407] <... exit_group resumed>) = ? [pid 408] +++ exited with 0 +++ [pid 431] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 431] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 431] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 411] <... mount resumed>) = 0 [pid 411] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 411] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 411] ioctl(4, LOOP_CLR_FD) = 0 [pid 411] close(4) = 0 ./strace-static-x86_64: Process 432 attached [pid 432] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 432] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 432] memfd_create("syzkaller", 0) = 3 [pid 432] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 [pid 411] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 409] <... futex resumed>) = 0 [pid 411] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 409] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 411] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 409] <... futex resumed>) = 0 [pid 411] fspick(AT_FDCWD, "./file0", 0 [pid 409] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 411] <... fspick resumed>) = 4 [pid 411] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 409] <... futex resumed>) = 0 [pid 411] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 409] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 411] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 409] <... futex resumed>) = 0 [pid 411] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 409] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 412] <... mount resumed>) = 0 [pid 412] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 412] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 412] ioctl(4, LOOP_CLR_FD) = 0 [pid 412] close(4) = 0 [pid 412] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 410] <... futex resumed>) = 0 [pid 410] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 410] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 412] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 412] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 410] <... futex resumed>) = 0 [pid 410] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 412] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 410] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 411] <... fsconfig resumed>) = 0 [pid 411] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 409] <... futex resumed>) = 0 [pid 411] openat(AT_FDCWD, "./file0", O_RDONLY [pid 409] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 411] <... openat resumed>) = 5 [pid 409] <... futex resumed>) = 0 [pid 411] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 409] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 411] <... futex resumed>) = 0 [pid 409] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 411] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 409] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 409] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 411] <... ioctl resumed>) = 0 [pid 411] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 409] <... futex resumed>) = 0 [pid 411] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 409] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 411] <... prlimit64 resumed>NULL) = 0 [pid 409] <... futex resumed>) = 0 [pid 411] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 409] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 411] <... futex resumed>) = 0 [pid 409] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 411] sched_setscheduler(0, SCHED_FIFO, [7] [pid 409] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 411] <... sched_setscheduler resumed>) = 0 [pid 409] <... futex resumed>) = 0 [pid 411] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 409] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 411] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 409] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 409] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 411] <... futex resumed>) = 0 [pid 409] <... futex resumed>) = 1 [ 29.354180][ T411] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 29.362250][ T412] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [pid 411] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0) = 0x200000000000 [pid 410] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 409] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 411] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 411] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 410] futex(0x7f1443f956dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 409] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 410] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 409] exit_group(0 [pid 410] <... mmap resumed>) = 0x7f1443e83000 [pid 410] mprotect(0x7f1443e84000, 131072, PROT_READ|PROT_WRITE [pid 411] <... futex resumed>) = ? [pid 409] <... exit_group resumed>) = ? [pid 411] +++ exited with 0 +++ [pid 410] <... mprotect resumed>) = 0 [pid 410] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 407] +++ exited with 0 +++ [pid 410] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ea3990, parent_tid=0x7f1443ea3990, exit_signal=0, stack=0x7f1443e83000, stack_size=0x20300, tls=0x7f1443ea36c0} [pid 412] <... fsconfig resumed>) = 0 [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=407, si_uid=0, si_status=0, si_utime=13, si_stime=22} --- [pid 412] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 412] <... futex resumed>) = 0 [pid 410] <... clone3 resumed> => {parent_tid=[437]}, 88) = 437 [pid 412] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 410] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 410] futex(0x7f1443f956d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 410] futex(0x7f1443f956dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 437 attached [pid 290] <... restart_syscall resumed>) = 0 [pid 437] set_robust_list(0x7f1443ea39a0, 24) = 0 [pid 437] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 437] openat(AT_FDCWD, "./file0", O_RDONLY) = 5 [pid 437] futex(0x7f1443f956dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 437] futex(0x7f1443f956d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 410] <... futex resumed>) = 0 [pid 410] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 290] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW [pid 412] <... futex resumed>) = 0 [pid 410] <... futex resumed>) = 1 [pid 412] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 410] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 412] <... ioctl resumed>) = 0 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 412] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 290] getdents64(3, [pid 412] <... futex resumed>) = 1 [pid 410] <... futex resumed>) = 0 [pid 410] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 412] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 290] <... getdents64 resumed>0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 410] <... futex resumed>) = 0 [pid 412] <... prlimit64 resumed>NULL) = 0 [pid 290] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 410] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 412] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 410] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 412] <... futex resumed>) = 0 [pid 410] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 412] sched_setscheduler(0, SCHED_FIFO, [7] [pid 410] <... futex resumed>) = 0 [pid 412] <... sched_setscheduler resumed>) = 0 [pid 410] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 412] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 410] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 412] <... futex resumed>) = 0 [pid 410] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 412] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 410] <... futex resumed>) = 0 [pid 412] <... mmap resumed>) = 0x200000000000 [pid 412] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 410] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 412] <... futex resumed>) = 0 [pid 410] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 412] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 410] exit_group(0 [pid 437] <... futex resumed>) = ? [pid 412] <... futex resumed>) = ? [pid 410] <... exit_group resumed>) = ? [pid 437] +++ exited with 0 +++ [pid 412] +++ exited with 0 +++ [pid 410] +++ exited with 0 +++ [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=410, si_uid=0, si_status=0, si_utime=11, si_stime=20} --- [pid 291] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 291] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 291] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 409] +++ exited with 0 +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=409, si_uid=0, si_status=0, si_utime=8, si_stime=18} --- [pid 293] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 293] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 293] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 432] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 290] <... umount2 resumed>) = 0 [pid 290] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 290] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(4, 0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 290] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 290] close(4) = 0 [pid 290] rmdir("./3/file0") = 0 [pid 290] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./3/binderfs") = 0 [pid 290] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./3") = 0 [pid 290] mkdir("./4", 0777) = 0 [pid 290] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 290] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 290] close(3) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee9a690) = 438 ./strace-static-x86_64: Process 438 attached [pid 438] set_robust_list(0x55555ee9a6a0, 24) = 0 [pid 438] chdir("./4") = 0 [pid 438] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 438] setpgid(0, 0) = 0 [pid 438] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 438] write(3, "1000", 4) = 4 [pid 438] close(3) = 0 [pid 438] symlink("/dev/binderfs", "./binderfs") = 0 [pid 438] write(1, "executing program\n", 18executing program ) = 18 [pid 438] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 438] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, NULL, 8) = 0 [pid 438] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 438] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443ea4000 [pid 438] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 438] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 438] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} => {parent_tid=[439]}, 88) = 439 [pid 438] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 438] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 438] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 291] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 439 attached [pid 439] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 439] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 439] memfd_create("syzkaller", 0) = 3 [pid 439] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 [pid 291] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 291] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(4, 0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 291] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 291] close(4) = 0 [pid 291] rmdir("./4/file0") = 0 [pid 291] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./4/binderfs") = 0 [pid 291] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 424] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 291] close(3 [pid 293] <... umount2 resumed>) = 0 [pid 293] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... close resumed>) = 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] rmdir("./4") = 0 [pid 293] newfstatat(AT_FDCWD, "./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] mkdir("./5", 0777 [pid 293] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... mkdir resumed>) = 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 293] <... openat resumed>) = 4 [pid 291] <... openat resumed>) = 3 [pid 293] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] ioctl(3, LOOP_CLR_FD [pid 293] getdents64(4, [pid 291] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 293] <... getdents64 resumed>0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 291] close(3 [pid 293] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 291] <... close resumed>) = 0 [pid 293] close(4 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 293] <... close resumed>) = 0 [pid 291] <... clone resumed>, child_tidptr=0x55555ee9a690) = 440 [pid 293] rmdir("./3/file0") = 0 [pid 293] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./3/binderfs") = 0 [pid 293] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./3") = 0 [pid 293] mkdir("./4", 0777) = 0 [pid 293] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 293] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 293] close(3) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee9a690) = 441 ./strace-static-x86_64: Process 440 attached [pid 440] set_robust_list(0x55555ee9a6a0, 24) = 0 [pid 440] chdir("./5") = 0 [pid 440] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 440] setpgid(0, 0) = 0 [pid 440] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 ./strace-static-x86_64: Process 441 attached [pid 440] write(3, "1000", 4) = 4 [pid 440] close(3) = 0 [pid 440] symlink("/dev/binderfs", "./binderfs" [pid 441] set_robust_list(0x55555ee9a6a0, 24 [pid 440] <... symlink resumed>) = 0 [pid 440] write(1, "executing program\n", 18 [pid 441] <... set_robust_list resumed>) = 0 executing program [pid 440] <... write resumed>) = 18 [pid 440] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 440] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, NULL, 8) = 0 [pid 440] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 440] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443ea4000 [pid 440] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 440] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 440] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} [pid 441] chdir("./4" [pid 440] <... clone3 resumed> => {parent_tid=[442]}, 88) = 442 [pid 440] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 440] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 440] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 441] <... chdir resumed>) = 0 [pid 441] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 441] setpgid(0, 0) = 0 [pid 441] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 441] write(3, "1000", 4) = 4 [pid 441] close(3) = 0 [pid 441] symlink("/dev/binderfs", "./binderfs") = 0 ./strace-static-x86_64: Process 442 attached [pid 441] write(1, "executing program\n", 18 [pid 442] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 442] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 executing program [pid 441] <... write resumed>) = 18 [pid 441] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 432] <... write resumed>) = 20699119 [pid 441] <... futex resumed>) = 0 [pid 442] memfd_create("syzkaller", 0) = 3 [pid 442] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 441] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, [pid 442] <... mmap resumed>) = 0x7f143baa4000 [pid 441] <... rt_sigaction resumed>NULL, 8) = 0 [pid 432] munmap(0x7f143baa4000, 138412032 [pid 441] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 441] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443ea4000 [pid 441] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE [pid 432] <... munmap resumed>) = 0 [pid 441] <... mprotect resumed>) = 0 [pid 441] rt_sigprocmask(SIG_BLOCK, ~[], [pid 432] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 441] <... rt_sigprocmask resumed>[], 8) = 0 [pid 441] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} [pid 432] <... openat resumed>) = 4 [pid 441] <... clone3 resumed> => {parent_tid=[443]}, 88) = 443 [pid 432] ioctl(4, LOOP_SET_FD, 3 [pid 441] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 441] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 443 attached [pid 443] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 443] rt_sigprocmask(SIG_SETMASK, [], [pid 441] <... futex resumed>) = 0 [pid 443] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 441] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 443] memfd_create("syzkaller", 0) = 3 [pid 443] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 [pid 432] <... ioctl resumed>) = 0 [pid 432] close(3) = 0 [pid 432] close(4) = 0 [pid 432] mkdir("./file0", 0777) = 0 [pid 432] mount("/dev/loop4", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 424] <... write resumed>) = 20699119 [pid 424] munmap(0x7f143baa4000, 138412032) = 0 [pid 424] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 424] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 424] close(3) = 0 [pid 424] close(4) = 0 [pid 424] mkdir("./file0", 0777) = 0 [ 29.763517][ T432] loop4: detected capacity change from 0 to 40427 [ 29.802740][ T432] F2FS-fs (loop4): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 29.814966][ T424] loop2: detected capacity change from 0 to 40427 [ 29.836888][ T424] F2FS-fs (loop2): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 29.846600][ T432] F2FS-fs (loop4): Found nat_bits in checkpoint [ 29.863440][ T424] F2FS-fs (loop2): Found nat_bits in checkpoint [pid 424] mount("/dev/loop2", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"...) = 0 [pid 424] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 424] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 424] ioctl(4, LOOP_CLR_FD) = 0 [pid 424] close(4) = 0 [pid 432] <... mount resumed>) = 0 [pid 432] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 432] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 432] ioctl(4, LOOP_CLR_FD) = 0 [pid 432] close(4) = 0 [pid 432] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 432] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 431] <... futex resumed>) = 0 [pid 431] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 432] <... futex resumed>) = 0 [pid 431] <... futex resumed>) = 1 [pid 432] fspick(AT_FDCWD, "./file0", 0 [pid 431] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 432] <... fspick resumed>) = 4 [pid 432] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 432] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 431] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 431] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 432] <... futex resumed>) = 0 [pid 431] <... futex resumed>) = 1 [pid 432] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 431] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 424] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 423] <... futex resumed>) = 0 [pid 423] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 423] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 424] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 424] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 423] <... futex resumed>) = 0 [pid 423] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 423] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 424] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0) = 0 [pid 424] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 423] <... futex resumed>) = 0 [pid 423] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 423] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 424] openat(AT_FDCWD, "./file0", O_RDONLY) = 5 [pid 424] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 423] <... futex resumed>) = 0 [pid 423] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 423] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 424] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140) = 0 [pid 424] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 423] <... futex resumed>) = 0 [pid 423] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 423] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 432] <... fsconfig resumed>) = 0 [pid 424] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 432] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 432] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 424] <... prlimit64 resumed>NULL) = 0 [pid 431] <... futex resumed>) = 0 [pid 431] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 424] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 432] <... futex resumed>) = 0 [pid 431] <... futex resumed>) = 1 [pid 424] <... futex resumed>) = 1 [pid 432] openat(AT_FDCWD, "./file0", O_RDONLY [pid 423] <... futex resumed>) = 0 [pid 432] <... openat resumed>) = 5 [pid 423] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 431] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 424] sched_setscheduler(0, SCHED_FIFO, [7] [pid 432] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 423] <... futex resumed>) = 0 [pid 432] <... futex resumed>) = 0 [pid 423] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 432] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 424] <... sched_setscheduler resumed>) = 0 [pid 431] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 424] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 431] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 424] <... futex resumed>) = 1 [pid 424] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 431] <... futex resumed>) = 1 [pid 432] <... futex resumed>) = 0 [pid 423] <... futex resumed>) = 0 [pid 432] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [ 29.936069][ T424] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 29.944915][ T432] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [pid 423] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 431] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 424] <... futex resumed>) = 0 [pid 423] <... futex resumed>) = 1 [pid 424] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 423] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 432] <... ioctl resumed>) = 0 [pid 432] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 432] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 439] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 423] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 423] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 424] <... mmap resumed>) = 0x200000000000 [pid 431] <... futex resumed>) = 0 [pid 424] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 431] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 424] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 431] <... futex resumed>) = 1 [pid 431] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 432] <... futex resumed>) = 0 [pid 432] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, NULL) = 0 [pid 423] exit_group(0 [pid 432] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 424] <... futex resumed>) = ? [pid 423] <... exit_group resumed>) = ? [pid 432] <... futex resumed>) = 1 [pid 431] <... futex resumed>) = 0 [pid 424] +++ exited with 0 +++ [pid 432] sched_setscheduler(0, SCHED_FIFO, [7] [pid 431] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 432] <... sched_setscheduler resumed>) = 0 [pid 431] <... futex resumed>) = 0 [pid 432] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 432] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 431] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 431] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 432] <... futex resumed>) = 0 [pid 431] <... futex resumed>) = 1 [pid 432] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 443] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 442] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 432] <... mmap resumed>) = 0x200000000000 [pid 431] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 432] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 432] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 431] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 431] exit_group(0 [pid 432] <... futex resumed>) = ? [pid 431] <... exit_group resumed>) = ? [pid 432] +++ exited with 0 +++ [pid 423] +++ exited with 0 +++ [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=423, si_uid=0, si_status=0, si_utime=9, si_stime=20} --- [pid 292] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 292] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 292] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 439] <... write resumed>) = 20699119 [pid 431] +++ exited with 0 +++ [pid 439] munmap(0x7f143baa4000, 138412032 [pid 294] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=431, si_uid=0, si_status=0, si_utime=11, si_stime=20} --- [pid 294] restart_syscall(<... resuming interrupted clone ...> [pid 439] <... munmap resumed>) = 0 [pid 439] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 439] ioctl(4, LOOP_SET_FD, 3 [pid 294] <... restart_syscall resumed>) = 0 [pid 294] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 294] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] getdents64(3, 0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 294] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 439] <... ioctl resumed>) = 0 [pid 439] close(3) = 0 [pid 439] close(4) = 0 [pid 439] mkdir("./file0", 0777) = 0 [pid 439] mount("/dev/loop0", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 442] <... write resumed>) = 20699119 [pid 442] munmap(0x7f143baa4000, 138412032) = 0 [pid 442] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 442] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 442] close(3) = 0 [pid 442] close(4) = 0 [pid 442] mkdir("./file0", 0777) = 0 [ 30.191500][ T439] loop0: detected capacity change from 0 to 40427 [ 30.208638][ T439] F2FS-fs (loop0): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 30.234600][ T442] loop1: detected capacity change from 0 to 40427 [pid 442] mount("/dev/loop1", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 292] <... umount2 resumed>) = 0 [pid 439] <... mount resumed>) = 0 [pid 439] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 292] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 439] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 439] ioctl(4, LOOP_CLR_FD) = 0 [pid 439] close(4) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 439] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 439] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 438] <... futex resumed>) = 0 [pid 292] newfstatat(AT_FDCWD, "./4/file0", [pid 438] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 438] <... futex resumed>) = 1 [pid 292] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 438] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 439] <... futex resumed>) = 0 [pid 439] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 439] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 30.243185][ T439] F2FS-fs (loop0): Found nat_bits in checkpoint [ 30.254198][ T442] F2FS-fs (loop1): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 439] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 438] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 438] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 439] <... futex resumed>) = 0 [pid 439] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 438] <... futex resumed>) = 1 [pid 438] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 292] <... openat resumed>) = 4 [pid 292] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(4, 0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 292] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 292] close(4) = 0 [pid 292] rmdir("./4/file0") = 0 [pid 292] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./4/binderfs") = 0 [pid 292] getdents64(3, [pid 439] <... fsconfig resumed>) = 0 [pid 439] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] <... getdents64 resumed>0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 439] <... futex resumed>) = 1 [pid 439] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 442] <... mount resumed>) = 0 [pid 438] <... futex resumed>) = 0 [pid 442] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 438] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] close(3 [pid 438] <... futex resumed>) = 1 [pid 439] <... futex resumed>) = 0 [pid 439] openat(AT_FDCWD, "./file0", O_RDONLY) = 5 [pid 439] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 439] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 442] <... openat resumed>) = 3 [pid 442] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 442] ioctl(4, LOOP_CLR_FD) = 0 [pid 442] close(4 [pid 438] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 292] <... close resumed>) = 0 [pid 442] <... close resumed>) = 0 [pid 442] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 440] <... futex resumed>) = 0 [pid 440] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 440] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 442] <... futex resumed>) = 1 [pid 442] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 442] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 440] <... futex resumed>) = 0 [pid 440] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 440] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 442] <... futex resumed>) = 1 [pid 442] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 443] <... write resumed>) = 20699119 [pid 443] munmap(0x7f143baa4000, 138412032) = 0 [pid 443] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 443] ioctl(4, LOOP_SET_FD, 3 [pid 438] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 292] rmdir("./4" [pid 438] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 443] <... ioctl resumed>) = 0 [pid 443] close(3) = 0 [pid 443] close(4 [pid 439] <... futex resumed>) = 0 [pid 438] <... futex resumed>) = 1 [pid 292] <... rmdir resumed>) = 0 [pid 439] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140) = 0 [pid 439] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 439] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 443] <... close resumed>) = 0 [pid 438] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 292] mkdir("./5", 0777 [pid 443] mkdir("./file0", 0777 [pid 438] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 443] <... mkdir resumed>) = 0 [pid 443] mount("/dev/loop3", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 292] <... mkdir resumed>) = 0 [pid 438] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 439] <... futex resumed>) = 0 [pid 438] <... futex resumed>) = 1 [pid 292] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 439] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, NULL) = 0 [pid 439] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 439] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 438] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 292] <... openat resumed>) = 3 [pid 438] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 292] ioctl(3, LOOP_CLR_FD [pid 438] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 439] <... futex resumed>) = 0 [pid 439] sched_setscheduler(0, SCHED_FIFO, [7] [pid 438] <... futex resumed>) = 1 [pid 292] close(3 [pid 439] <... sched_setscheduler resumed>) = 0 [pid 439] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 439] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 438] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 292] <... close resumed>) = 0 [pid 438] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 439] <... futex resumed>) = 0 [pid 438] <... futex resumed>) = 1 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [ 30.284511][ T442] F2FS-fs (loop1): Found nat_bits in checkpoint [ 30.293701][ T439] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [pid 439] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0./strace-static-x86_64: Process 460 attached [pid 438] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 294] <... umount2 resumed>) = 0 [pid 460] set_robust_list(0x55555ee9a6a0, 24 [pid 292] <... clone resumed>, child_tidptr=0x55555ee9a690) = 460 [pid 460] <... set_robust_list resumed>) = 0 [pid 460] chdir("./5") = 0 [pid 460] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 460] setpgid(0, 0) = 0 [pid 460] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 460] write(3, "1000", 4) = 4 [pid 460] close(3) = 0 [pid 460] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 460] write(1, "executing program\n", 18) = 18 [pid 460] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 460] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, NULL, 8) = 0 [pid 460] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 460] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443ea4000 [pid 460] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 460] rt_sigprocmask(SIG_BLOCK, ~[], [pid 442] <... fsconfig resumed>) = 0 [pid 439] <... mmap resumed>) = 0x200000000000 [pid 460] <... rt_sigprocmask resumed>[], 8) = 0 [pid 442] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 440] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 439] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 294] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 439] <... futex resumed>) = 1 [pid 438] <... futex resumed>) = 0 [pid 460] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} [pid 439] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 442] <... futex resumed>) = 0 [pid 440] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 442] openat(AT_FDCWD, "./file0", O_RDONLY [pid 440] <... futex resumed>) = 0 [pid 442] <... openat resumed>) = 5 [pid 440] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 442] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 440] <... futex resumed>) = 0 [pid 442] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 440] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 440] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 438] exit_group(0 [pid 439] <... futex resumed>) = ? [pid 438] <... exit_group resumed>) = ? [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 439] +++ exited with 0 +++ [pid 294] newfstatat(AT_FDCWD, "./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 294] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] getdents64(4, 0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 294] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 294] close(4) = 0 [pid 294] rmdir("./4/file0") = 0 [pid 294] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] unlink("./4/binderfs") = 0 [pid 294] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 294] close(3) = 0 [pid 294] rmdir("./4") = 0 [pid 294] mkdir("./5", 0777) = 0 [pid 294] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 294] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 294] close(3) = 0 [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee9a690) = 462 [pid 460] <... clone3 resumed> => {parent_tid=[461]}, 88) = 461 ./strace-static-x86_64: Process 462 attached [pid 462] set_robust_list(0x55555ee9a6a0, 24) = 0 [pid 462] chdir("./5") = 0 [pid 462] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 462] setpgid(0, 0) = 0 [pid 462] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 462] write(3, "1000", 4) = 4 [pid 462] close(3) = 0 [pid 462] symlink("/dev/binderfs", "./binderfs" [pid 442] <... ioctl resumed>) = 0 [pid 442] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 440] <... futex resumed>) = 0 [pid 442] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 440] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 442] <... prlimit64 resumed>NULL) = 0 [pid 440] <... futex resumed>) = 0 [pid 442] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 440] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 442] <... futex resumed>) = 0 [pid 440] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 442] sched_setscheduler(0, SCHED_FIFO, [7] [pid 440] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 442] <... sched_setscheduler resumed>) = 0 [pid 440] <... futex resumed>) = 0 [pid 442] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 440] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 442] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 440] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 440] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 442] <... futex resumed>) = 0 [pid 440] <... futex resumed>) = 1 [ 30.330444][ T442] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 30.349489][ T443] loop3: detected capacity change from 0 to 40427 [pid 442] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0./strace-static-x86_64: Process 461 attached [pid 462] <... symlink resumed>) = 0 [pid 460] rt_sigprocmask(SIG_SETMASK, [], [pid 440] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 438] +++ exited with 0 +++ executing program [pid 462] write(1, "executing program\n", 18 [pid 461] set_robust_list(0x7f1443ec49a0, 24 [pid 460] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=438, si_uid=0, si_status=0, si_utime=4, si_stime=20} --- [pid 462] <... write resumed>) = 18 [pid 461] <... set_robust_list resumed>) = 0 [pid 460] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 462] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 461] rt_sigprocmask(SIG_SETMASK, [], [pid 460] <... futex resumed>) = 0 [pid 462] <... futex resumed>) = 0 [pid 461] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 460] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 290] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 462] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, [pid 461] memfd_create("syzkaller", 0 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 462] <... rt_sigaction resumed>NULL, 8) = 0 [pid 461] <... memfd_create resumed>) = 3 [pid 290] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 462] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 461] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 290] <... openat resumed>) = 3 [pid 462] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 461] <... mmap resumed>) = 0x7f143baa4000 [pid 290] newfstatat(3, "", [pid 462] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 462] <... mmap resumed>) = 0x7f1443ea4000 [pid 442] <... mmap resumed>) = 0x200000000000 [pid 290] getdents64(3, [pid 462] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE [pid 442] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 462] <... mprotect resumed>) = 0 [pid 442] <... futex resumed>) = 1 [pid 440] <... futex resumed>) = 0 [pid 290] <... getdents64 resumed>0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 462] rt_sigprocmask(SIG_BLOCK, ~[], [pid 442] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 440] exit_group(0 [pid 290] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 462] <... rt_sigprocmask resumed>[], 8) = 0 [pid 442] <... futex resumed>) = ? [pid 440] <... exit_group resumed>) = ? [pid 462] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} [pid 442] +++ exited with 0 +++ [pid 462] <... clone3 resumed> => {parent_tid=[465]}, 88) = 465 [pid 462] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 462] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 462] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 465 attached [pid 465] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 465] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 465] memfd_create("syzkaller", 0) = 3 [pid 465] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 [pid 440] +++ exited with 0 +++ [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=440, si_uid=0, si_status=0, si_utime=10, si_stime=21} --- [pid 291] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 291] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x55555ee9b730 /* 4 entries */, 32768) = 112 [ 30.425468][ T443] F2FS-fs (loop3): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 30.464104][ T443] F2FS-fs (loop3): Found nat_bits in checkpoint [pid 291] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... umount2 resumed>) = 0 [pid 290] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 290] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(4, 0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 290] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 290] close(4) = 0 [pid 290] rmdir("./4/file0") = 0 [pid 290] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./4/binderfs") = 0 [pid 290] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./4") = 0 [pid 290] mkdir("./5", 0777) = 0 [pid 290] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 290] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 290] close(3 [pid 443] <... mount resumed>) = 0 [pid 443] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 443] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 443] ioctl(4, LOOP_CLR_FD) = 0 [pid 443] close(4) = 0 [pid 443] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 443] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 441] <... futex resumed>) = 0 [pid 441] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 443] <... futex resumed>) = 0 [pid 441] <... futex resumed>) = 1 [pid 443] fspick(AT_FDCWD, "./file0", 0 [pid 441] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 443] <... fspick resumed>) = 4 [pid 443] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 441] <... futex resumed>) = 0 [pid 443] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 441] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 443] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 441] <... futex resumed>) = 0 [pid 443] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 441] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 290] <... close resumed>) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee9a690) = 467 ./strace-static-x86_64: Process 467 attached [pid 467] set_robust_list(0x55555ee9a6a0, 24 [pid 443] <... fsconfig resumed>) = 0 [pid 467] <... set_robust_list resumed>) = 0 [pid 443] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 467] chdir("./5" [pid 443] <... futex resumed>) = 1 [pid 441] <... futex resumed>) = 0 [pid 467] <... chdir resumed>) = 0 [pid 443] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 467] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 441] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 467] <... prctl resumed>) = 0 [pid 443] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 441] <... futex resumed>) = 0 [pid 467] setpgid(0, 0 [pid 443] openat(AT_FDCWD, "./file0", O_RDONLY [pid 467] <... setpgid resumed>) = 0 [pid 441] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 443] <... openat resumed>) = 5 [pid 467] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 443] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 467] <... openat resumed>) = 3 [pid 443] <... futex resumed>) = 1 [pid 441] <... futex resumed>) = 0 [pid 467] write(3, "1000", 4 [pid 443] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 441] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 467] <... write resumed>) = 4 [pid 443] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 441] <... futex resumed>) = 0 [pid 467] close(3 [pid 443] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 441] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 467] <... close resumed>) = 0 [pid 467] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 467] write(1, "executing program\n", 18 [pid 443] <... ioctl resumed>) = 0 [pid 467] <... write resumed>) = 18 [pid 443] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 467] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 443] <... futex resumed>) = 1 [pid 441] <... futex resumed>) = 0 [pid 467] <... futex resumed>) = 0 [pid 443] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 441] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 467] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, [pid 443] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 441] <... futex resumed>) = 0 [pid 467] <... rt_sigaction resumed>NULL, 8) = 0 [pid 443] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 441] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 467] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 443] <... prlimit64 resumed>NULL) = 0 [pid 467] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 443] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 467] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 443] <... futex resumed>) = 1 [pid 441] <... futex resumed>) = 0 [pid 467] <... mmap resumed>) = 0x7f1443ea4000 [pid 443] sched_setscheduler(0, SCHED_FIFO, [7] [pid 441] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 467] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE [pid 443] <... sched_setscheduler resumed>) = 0 [pid 441] <... futex resumed>) = 0 [pid 443] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 467] <... mprotect resumed>) = 0 [pid 441] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 443] <... futex resumed>) = 0 [pid 467] rt_sigprocmask(SIG_BLOCK, ~[], [pid 443] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 441] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 467] <... rt_sigprocmask resumed>[], 8) = 0 [pid 441] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 467] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} [pid 443] <... futex resumed>) = 0 [pid 441] <... futex resumed>) = 1 [pid 443] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 291] <... umount2 resumed>) = 0 [pid 291] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 291] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(4, 0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 291] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 291] close(4) = 0 [pid 291] rmdir("./5/file0") = 0 [pid 291] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./5/binderfs") = 0 [pid 291] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./5") = 0 [pid 291] mkdir("./6", 0777) = 0 [pid 291] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 291] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 291] close(3) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee9a690) = 469 ./strace-static-x86_64: Process 469 attached [pid 469] set_robust_list(0x55555ee9a6a0, 24) = 0 [pid 469] chdir("./6") = 0 [pid 469] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 469] setpgid(0, 0) = 0 [pid 469] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 469] write(3, "1000", 4) = 4 [pid 469] close(3) = 0 [pid 469] symlink("/dev/binderfs", "./binderfs") = 0 [pid 469] write(1, "executing program\n", 18executing program ) = 18 [pid 469] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 469] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, NULL, 8) = 0 [pid 469] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 469] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443ea4000 [pid 469] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 469] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 469] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} => {parent_tid=[470]}, 88) = 470 [ 30.586375][ T443] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [pid 469] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 469] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 469] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 470 attached [pid 470] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 470] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 470] memfd_create("syzkaller", 0) = 3 [pid 470] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 [pid 443] <... mmap resumed>) = 0x200000000000 [pid 441] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 443] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 467] <... clone3 resumed> => {parent_tid=[471]}, 88) = 471 [pid 441] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 443] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 467] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 441] exit_group(0 [pid 467] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 443] <... futex resumed>) = ? [pid 467] <... futex resumed>) = 0 [pid 441] <... exit_group resumed>) = ? [pid 443] +++ exited with 0 +++ [pid 467] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 461] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119./strace-static-x86_64: Process 471 attached [pid 471] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 471] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 471] memfd_create("syzkaller", 0) = 3 [pid 471] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 [pid 441] +++ exited with 0 +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=441, si_uid=0, si_status=0, si_utime=7, si_stime=23} --- [pid 293] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 293] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 293] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 465] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 461] <... write resumed>) = 20699119 [pid 293] <... umount2 resumed>) = 0 [pid 461] munmap(0x7f143baa4000, 138412032) = 0 [pid 293] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 461] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 461] <... openat resumed>) = 4 [pid 293] newfstatat(AT_FDCWD, "./4/file0", [pid 461] ioctl(4, LOOP_SET_FD, 3 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 461] <... ioctl resumed>) = 0 [pid 293] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 461] close(3 [pid 293] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 461] <... close resumed>) = 0 [pid 293] <... openat resumed>) = 4 [pid 293] newfstatat(4, "", [pid 461] close(4) = 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 461] mkdir("./file0", 0777 [pid 293] getdents64(4, [pid 461] <... mkdir resumed>) = 0 [pid 293] <... getdents64 resumed>0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 461] mount("/dev/loop2", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 293] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 293] close(4) = 0 [pid 293] rmdir("./4/file0") = 0 [pid 293] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./4/binderfs") = 0 [pid 293] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./4") = 0 [pid 293] mkdir("./5", 0777) = 0 [pid 293] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 293] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 293] close(3) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee9a690) = 472 ./strace-static-x86_64: Process 472 attached [pid 472] set_robust_list(0x55555ee9a6a0, 24) = 0 [pid 472] chdir("./5") = 0 [pid 472] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 472] setpgid(0, 0) = 0 [pid 472] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 472] write(3, "1000", 4) = 4 [pid 472] close(3) = 0 executing program [pid 472] symlink("/dev/binderfs", "./binderfs") = 0 [pid 472] write(1, "executing program\n", 18) = 18 [pid 472] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 472] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, NULL, 8) = 0 [pid 472] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 472] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443ea4000 [pid 472] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 472] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 472] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} => {parent_tid=[475]}, 88) = 475 [pid 472] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 472] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 472] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 470] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119./strace-static-x86_64: Process 475 attached [pid 475] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 475] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 475] memfd_create("syzkaller", 0) = 3 [pid 475] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 [ 30.894397][ T461] loop2: detected capacity change from 0 to 40427 [ 30.907621][ T461] F2FS-fs (loop2): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 471] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 465] <... write resumed>) = 20699119 [pid 465] munmap(0x7f143baa4000, 138412032) = 0 [pid 465] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 30.946701][ T461] F2FS-fs (loop2): Found nat_bits in checkpoint [pid 465] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 465] close(3) = 0 [pid 465] close(4) = 0 [pid 465] mkdir("./file0", 0777) = 0 [pid 465] mount("/dev/loop4", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 461] <... mount resumed>) = 0 [pid 461] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 461] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 461] ioctl(4, LOOP_CLR_FD) = 0 [pid 461] close(4) = 0 [pid 461] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 460] <... futex resumed>) = 0 [pid 461] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 460] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 461] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 460] <... futex resumed>) = 0 [pid 461] fspick(AT_FDCWD, "./file0", 0 [pid 460] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 461] <... fspick resumed>) = 4 [pid 461] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 460] <... futex resumed>) = 0 [pid 461] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 460] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 461] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 460] <... futex resumed>) = 0 [pid 461] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 460] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 470] <... write resumed>) = 20699119 [pid 470] munmap(0x7f143baa4000, 138412032 [pid 461] <... fsconfig resumed>) = 0 [pid 461] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 460] <... futex resumed>) = 0 [pid 461] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 460] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 461] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 460] <... futex resumed>) = 0 [pid 461] openat(AT_FDCWD, "./file0", O_RDONLY [pid 460] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 461] <... openat resumed>) = 5 [pid 461] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 460] <... futex resumed>) = 0 [pid 461] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 460] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 461] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 460] <... futex resumed>) = 0 [pid 461] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 460] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 461] <... ioctl resumed>) = 0 [pid 461] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 460] <... futex resumed>) = 0 [pid 461] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 460] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 461] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 460] <... futex resumed>) = 0 [pid 461] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 460] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 461] <... prlimit64 resumed>NULL) = 0 [pid 461] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 460] <... futex resumed>) = 0 [pid 461] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 460] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 461] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 460] <... futex resumed>) = 0 [pid 461] sched_setscheduler(0, SCHED_FIFO, [7] [pid 460] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 461] <... sched_setscheduler resumed>) = 0 [pid 461] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 460] <... futex resumed>) = 0 [pid 461] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 460] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 461] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 460] <... futex resumed>) = 0 [pid 461] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 460] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 470] <... munmap resumed>) = 0 [pid 470] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 470] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 470] close(3) = 0 [pid 470] close(4) = 0 [pid 470] mkdir("./file0", 0777) = 0 [ 31.019174][ T465] loop4: detected capacity change from 0 to 40427 [ 31.042722][ T461] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 31.052844][ T465] F2FS-fs (loop4): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 470] mount("/dev/loop1", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 461] <... mmap resumed>) = 0x200000000000 [pid 461] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 460] <... futex resumed>) = 0 [pid 461] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 460] exit_group(0 [pid 461] <... futex resumed>) = ? [pid 460] <... exit_group resumed>) = ? [pid 461] +++ exited with 0 +++ [pid 471] <... write resumed>) = 20699119 [pid 460] +++ exited with 0 +++ [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=460, si_uid=0, si_status=0, si_utime=7, si_stime=19} --- [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 471] munmap(0x7f143baa4000, 138412032) = 0 [pid 292] <... restart_syscall resumed>) = 0 [pid 292] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x55555ee9b730 /* 4 entries */, 32768) = 112 [ 31.103000][ T470] loop1: detected capacity change from 0 to 40427 [pid 292] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 471] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 471] ioctl(4, LOOP_SET_FD, 3 [pid 475] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 471] <... ioctl resumed>) = 0 [pid 471] close(3) = 0 [pid 471] close(4) = 0 [pid 471] mkdir("./file0", 0777) = 0 [ 31.155048][ T470] F2FS-fs (loop1): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 31.164238][ T465] F2FS-fs (loop4): Found nat_bits in checkpoint [ 31.198851][ T470] F2FS-fs (loop1): Found nat_bits in checkpoint [ 31.208054][ T471] loop0: detected capacity change from 0 to 40427 [pid 471] mount("/dev/loop0", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 465] <... mount resumed>) = 0 [pid 465] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 465] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 465] ioctl(4, LOOP_CLR_FD) = 0 [pid 465] close(4) = 0 [pid 465] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 462] <... futex resumed>) = 0 [pid 465] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 462] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 465] <... futex resumed>) = 0 [pid 462] <... futex resumed>) = 1 [pid 465] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 462] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 465] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 462] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 465] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 462] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 465] <... futex resumed>) = 0 [pid 462] <... futex resumed>) = 1 [pid 465] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 462] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 292] <... umount2 resumed>) = 0 [pid 292] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 292] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(4, 0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 292] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 292] close(4) = 0 [pid 465] <... fsconfig resumed>) = 0 [pid 465] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 465] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 462] <... futex resumed>) = 0 [pid 462] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 465] <... futex resumed>) = 0 [pid 462] <... futex resumed>) = 1 [pid 465] openat(AT_FDCWD, "./file0", O_RDONLY [pid 462] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 465] <... openat resumed>) = 5 [pid 465] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 462] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 465] <... futex resumed>) = 0 [pid 465] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 462] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 465] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 465] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 462] <... futex resumed>) = 0 [pid 462] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 292] rmdir("./5/file0" [pid 465] <... ioctl resumed>) = 0 [pid 475] <... write resumed>) = 20699119 [pid 465] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 475] munmap(0x7f143baa4000, 138412032 [pid 470] <... mount resumed>) = 0 [pid 465] <... futex resumed>) = 1 [pid 465] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 462] <... futex resumed>) = 0 [pid 462] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 465] <... futex resumed>) = 0 [pid 462] <... futex resumed>) = 1 [pid 465] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, NULL) = 0 [pid 462] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 465] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 462] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 465] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 462] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 475] <... munmap resumed>) = 0 [pid 470] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 465] sched_setscheduler(0, SCHED_FIFO, [7] [pid 475] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 470] <... openat resumed>) = 3 [pid 465] <... sched_setscheduler resumed>) = 0 [pid 462] <... futex resumed>) = 0 [pid 475] ioctl(4, LOOP_SET_FD, 3 [pid 465] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 470] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 465] <... futex resumed>) = 0 [pid 465] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 462] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 462] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 462] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 292] <... rmdir resumed>) = 0 [pid 292] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./5/binderfs") = 0 [pid 292] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./5") = 0 [pid 292] mkdir("./6", 0777) = 0 [pid 292] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 292] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 292] close(3 [pid 470] <... openat resumed>) = 4 [pid 465] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 465] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 292] <... close resumed>) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee9a690) = 486 ./strace-static-x86_64: Process 486 attached [pid 486] set_robust_list(0x55555ee9a6a0, 24) = 0 [pid 486] chdir("./6") = 0 [pid 486] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 486] setpgid(0, 0) = 0 [pid 486] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 486] write(3, "1000", 4) = 4 [pid 486] close(3) = 0 [ 31.239130][ T471] F2FS-fs (loop0): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 31.272416][ T465] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 31.281873][ T471] F2FS-fs (loop0): Found nat_bits in checkpoint [pid 486] symlink("/dev/binderfs", "./binderfs") = 0 [pid 486] write(1, "executing program\n", 18executing program ) = 18 [pid 486] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 486] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, NULL, 8) = 0 [pid 486] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 486] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443ea4000 [pid 486] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 486] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 486] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} => {parent_tid=[487]}, 88) = 487 [pid 486] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 486] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 486] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 487 attached [pid 487] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 487] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 487] memfd_create("syzkaller", 0) = 3 [pid 487] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 [pid 462] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 465] <... mmap resumed>) = 0x200000000000 [pid 470] ioctl(4, LOOP_CLR_FD [pid 465] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 470] <... ioctl resumed>) = 0 [pid 470] close(4 [pid 465] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 470] <... close resumed>) = 0 [pid 475] <... ioctl resumed>) = 0 [pid 470] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 462] exit_group(0 [pid 469] <... futex resumed>) = 0 [pid 470] <... futex resumed>) = 1 [pid 465] <... futex resumed>) = ? [pid 475] close(3 [pid 462] <... exit_group resumed>) = ? [pid 465] +++ exited with 0 +++ [pid 475] <... close resumed>) = 0 [pid 470] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 469] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 475] close(4 [pid 470] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 475] <... close resumed>) = 0 [pid 470] fspick(AT_FDCWD, "./file0", 0 [pid 469] <... futex resumed>) = 0 [pid 475] mkdir("./file0", 0777 [pid 470] <... fspick resumed>) = 4 [pid 469] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 475] <... mkdir resumed>) = 0 [pid 470] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 475] mount("/dev/loop3", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 470] <... futex resumed>) = 1 [pid 469] <... futex resumed>) = 0 [pid 469] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 470] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [ 31.308701][ T470] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 31.331835][ T475] loop3: detected capacity change from 0 to 40427 [pid 469] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 470] <... fsconfig resumed>) = 0 [pid 470] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 469] <... futex resumed>) = 0 [pid 470] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 469] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 470] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 469] <... futex resumed>) = 0 [pid 470] openat(AT_FDCWD, "./file0", O_RDONLY [pid 469] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 470] <... openat resumed>) = 5 [pid 470] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 469] <... futex resumed>) = 0 [pid 470] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 469] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 470] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 469] <... futex resumed>) = 0 [pid 470] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 469] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 470] <... ioctl resumed>) = 0 [pid 470] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 469] <... futex resumed>) = 0 [pid 470] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 469] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 470] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 469] <... futex resumed>) = 0 [pid 470] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 469] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 470] <... prlimit64 resumed>NULL) = 0 [pid 470] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 469] <... futex resumed>) = 0 [pid 470] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 469] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 470] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 469] <... futex resumed>) = 0 [pid 470] sched_setscheduler(0, SCHED_FIFO, [7] [pid 469] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 470] <... sched_setscheduler resumed>) = 0 [pid 470] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 469] <... futex resumed>) = 0 [pid 470] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 469] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 470] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 469] <... futex resumed>) = 0 [pid 470] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 469] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 471] <... mount resumed>) = 0 [pid 471] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 471] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 471] ioctl(4, LOOP_CLR_FD) = 0 [pid 471] close(4) = 0 [pid 471] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 471] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 462] +++ exited with 0 +++ [pid 294] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=462, si_uid=0, si_status=0, si_utime=10, si_stime=17} --- [pid 294] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 294] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 294] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] getdents64(3, 0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 294] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 469] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 470] <... mmap resumed>) = 0x200000000000 [pid 470] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 467] <... futex resumed>) = 0 [pid 470] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 467] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 471] <... futex resumed>) = 0 [pid 467] <... futex resumed>) = 1 [pid 471] fspick(AT_FDCWD, "./file0", 0 [pid 469] exit_group(0 [pid 467] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 471] <... fspick resumed>) = 4 [pid 470] <... futex resumed>) = ? [pid 469] <... exit_group resumed>) = ? [pid 471] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 470] +++ exited with 0 +++ [pid 471] <... futex resumed>) = 1 [pid 467] <... futex resumed>) = 0 [pid 471] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 467] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 471] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 467] <... futex resumed>) = 0 [pid 471] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 467] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 471] <... fsconfig resumed>) = 0 [pid 471] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 467] <... futex resumed>) = 0 [pid 471] openat(AT_FDCWD, "./file0", O_RDONLY [pid 467] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 471] <... openat resumed>) = 5 [pid 467] <... futex resumed>) = 0 [pid 471] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 467] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 471] <... futex resumed>) = 0 [pid 467] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 471] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 467] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 471] <... ioctl resumed>) = 0 [pid 467] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 471] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 467] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 471] <... futex resumed>) = 0 [pid 467] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 471] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 467] <... futex resumed>) = 0 [pid 471] <... prlimit64 resumed>NULL) = 0 [pid 467] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 471] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 31.403099][ T475] F2FS-fs (loop3): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 31.421358][ T471] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 31.432450][ T475] F2FS-fs (loop3): Found nat_bits in checkpoint [pid 471] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 467] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 467] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 471] <... futex resumed>) = 0 [pid 467] <... futex resumed>) = 1 [pid 467] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 471] sched_setscheduler(0, SCHED_FIFO, [7]) = 0 [pid 471] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 467] <... futex resumed>) = 0 [pid 471] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 467] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 471] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 467] <... futex resumed>) = 0 [pid 471] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 467] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 475] <... mount resumed>) = 0 [pid 471] <... mmap resumed>) = 0x200000000000 [pid 475] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 471] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 475] <... openat resumed>) = 3 [pid 471] <... futex resumed>) = 1 [pid 467] <... futex resumed>) = 0 [pid 475] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 471] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 467] exit_group(0 [pid 475] <... openat resumed>) = 4 [pid 471] <... futex resumed>) = ? [pid 467] <... exit_group resumed>) = ? [pid 475] ioctl(4, LOOP_CLR_FD [pid 471] +++ exited with 0 +++ [pid 475] <... ioctl resumed>) = 0 [pid 475] close(4) = 0 [pid 475] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 472] <... futex resumed>) = 0 [pid 475] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 472] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 475] fspick(AT_FDCWD, "./file0", 0 [pid 472] <... futex resumed>) = 0 [pid 475] <... fspick resumed>) = 4 [pid 472] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 475] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 472] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 475] <... futex resumed>) = 0 [pid 472] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 475] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 472] <... futex resumed>) = 0 [pid 472] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 31.518115][ T475] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [pid 487] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 469] +++ exited with 0 +++ [pid 475] <... fsconfig resumed>) = 0 [pid 475] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=469, si_uid=0, si_status=0, si_utime=9, si_stime=22} --- [pid 475] <... futex resumed>) = 1 [pid 472] <... futex resumed>) = 0 [pid 475] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 472] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 475] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 472] <... futex resumed>) = 0 [pid 475] openat(AT_FDCWD, "./file0", O_RDONLY [pid 472] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 475] <... openat resumed>) = 5 [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 475] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 472] <... futex resumed>) = 0 [pid 475] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 472] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 475] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 472] <... futex resumed>) = 0 [pid 475] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 472] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 291] <... restart_syscall resumed>) = 0 [pid 475] <... ioctl resumed>) = 0 [pid 475] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 472] <... futex resumed>) = 0 [pid 475] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 472] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 475] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 472] <... futex resumed>) = 0 [pid 475] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 472] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 475] <... prlimit64 resumed>NULL) = 0 [pid 475] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 291] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW [pid 475] <... futex resumed>) = 1 [pid 472] <... futex resumed>) = 0 [pid 475] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 472] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 475] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 472] <... futex resumed>) = 0 [pid 475] sched_setscheduler(0, SCHED_FIFO, [7] [pid 472] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 475] <... sched_setscheduler resumed>) = 0 [pid 475] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 475] <... futex resumed>) = 1 [pid 472] <... futex resumed>) = 0 [pid 475] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 472] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 475] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 472] <... futex resumed>) = 0 [pid 475] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 472] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 291] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 291] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 467] +++ exited with 0 +++ [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=467, si_uid=0, si_status=0, si_utime=11, si_stime=25} --- [pid 290] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 290] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 290] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 475] <... mmap resumed>) = 0x200000000000 [pid 475] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 472] <... futex resumed>) = 0 [pid 475] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 472] exit_group(0 [pid 475] <... futex resumed>) = ? [pid 472] <... exit_group resumed>) = ? [pid 475] +++ exited with 0 +++ [pid 294] <... umount2 resumed>) = 0 [pid 294] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] newfstatat(AT_FDCWD, "./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 294] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] getdents64(4, 0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 294] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 294] close(4) = 0 [pid 294] rmdir("./5/file0") = 0 [pid 294] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] unlink("./5/binderfs") = 0 [pid 294] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 294] close(3) = 0 [pid 294] rmdir("./5") = 0 [pid 472] +++ exited with 0 +++ [pid 294] mkdir("./6", 0777 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=472, si_uid=0, si_status=0, si_utime=6, si_stime=18} --- [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 294] <... mkdir resumed>) = 0 [pid 294] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 294] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 294] close(3) = 0 [pid 293] <... restart_syscall resumed>) = 0 [pid 293] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 293] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee9a690) = 496 ./strace-static-x86_64: Process 496 attached [pid 496] set_robust_list(0x55555ee9a6a0, 24) = 0 [pid 496] chdir("./6") = 0 [pid 496] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 496] setpgid(0, 0) = 0 [pid 496] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 496] write(3, "1000", 4) = 4 [pid 496] close(3) = 0 [pid 496] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 496] write(1, "executing program\n", 18) = 18 [pid 496] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 496] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, NULL, 8) = 0 [pid 496] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 496] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443ea4000 [pid 496] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 496] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 496] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} => {parent_tid=[497]}, 88) = 497 [pid 496] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 496] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 496] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 497 attached [pid 497] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 497] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 497] memfd_create("syzkaller", 0) = 3 [pid 497] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 [pid 290] <... umount2 resumed>) = 0 [pid 290] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 290] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(4, 0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 290] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 290] close(4) = 0 [pid 290] rmdir("./5/file0") = 0 [pid 290] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./5/binderfs") = 0 [pid 290] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./5") = 0 [pid 290] mkdir("./6", 0777) = 0 [pid 290] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 290] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 290] close(3) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee9a690) = 498 [pid 487] <... write resumed>) = 20699119 [pid 487] munmap(0x7f143baa4000, 138412032) = 0 [pid 487] openat(AT_FDCWD, "/dev/loop2", O_RDWR./strace-static-x86_64: Process 498 attached [pid 498] set_robust_list(0x55555ee9a6a0, 24) = 0 [pid 498] chdir("./6") = 0 [pid 498] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 498] setpgid(0, 0) = 0 [pid 498] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 498] write(3, "1000", 4) = 4 [pid 498] close(3) = 0 [pid 498] symlink("/dev/binderfs", "./binderfs"executing program [pid 487] <... openat resumed>) = 4 [pid 498] <... symlink resumed>) = 0 [pid 498] write(1, "executing program\n", 18) = 18 [pid 498] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 498] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, NULL, 8) = 0 [pid 498] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 498] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443ea4000 [pid 498] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 498] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 498] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} => {parent_tid=[499]}, 88) = 499 [pid 487] ioctl(4, LOOP_SET_FD, 3 [pid 498] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 498] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 498] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 499 attached [pid 293] <... umount2 resumed>) = 0 [pid 499] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 293] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 499] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 499] memfd_create("syzkaller", 0 [pid 293] newfstatat(AT_FDCWD, "./5/file0", [pid 499] <... memfd_create resumed>) = 3 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 499] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 293] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 499] <... mmap resumed>) = 0x7f143baa4000 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 487] <... ioctl resumed>) = 0 [pid 487] close(3) = 0 [pid 487] close(4) = 0 [pid 293] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 293] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 487] mkdir("./file0", 0777 [pid 293] getdents64(4, 0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 293] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 293] close(4) = 0 [pid 293] rmdir("./5/file0") = 0 [pid 293] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./5/binderfs") = 0 [pid 293] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 293] close(3 [pid 487] <... mkdir resumed>) = 0 [pid 293] <... close resumed>) = 0 [pid 293] rmdir("./5" [pid 487] mount("/dev/loop2", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 293] <... rmdir resumed>) = 0 [pid 293] mkdir("./6", 0777) = 0 [pid 293] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 293] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 293] close(3) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee9a690) = 500 ./strace-static-x86_64: Process 500 attached [pid 500] set_robust_list(0x55555ee9a6a0, 24) = 0 [pid 500] chdir("./6") = 0 [pid 500] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 500] setpgid(0, 0) = 0 [pid 500] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 500] write(3, "1000", 4) = 4 [pid 500] close(3) = 0 [pid 500] symlink("/dev/binderfs", "./binderfs") = 0 [pid 500] write(1, "executing program\n", 18executing program ) = 18 [pid 500] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 500] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, NULL, 8) = 0 [pid 500] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 500] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443ea4000 [pid 500] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 500] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 500] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} => {parent_tid=[501]}, 88) = 501 [pid 500] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 500] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 500] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 291] <... umount2 resumed>) = 0 [pid 291] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 291] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(4, 0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 291] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 291] close(4) = 0 [pid 291] rmdir("./6/file0") = 0 [pid 291] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./6/binderfs") = 0 [pid 291] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./6"./strace-static-x86_64: Process 501 attached [pid 501] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 501] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 501] memfd_create("syzkaller", 0) = 3 [pid 501] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 [pid 291] <... rmdir resumed>) = 0 [pid 291] mkdir("./7", 0777) = 0 [pid 291] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 291] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 291] close(3) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee9a690) = 503 ./strace-static-x86_64: Process 503 attached [pid 503] set_robust_list(0x55555ee9a6a0, 24) = 0 [pid 503] chdir("./7") = 0 [pid 503] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 503] setpgid(0, 0) = 0 [pid 503] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 503] write(3, "1000", 4) = 4 [pid 503] close(3) = 0 [pid 503] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 503] write(1, "executing program\n", 18) = 18 [pid 503] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 503] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, NULL, 8) = 0 [pid 503] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 503] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443ea4000 [pid 503] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 503] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 503] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} => {parent_tid=[505]}, 88) = 505 [pid 503] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 503] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 503] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 505 attached [ 31.796384][ T487] loop2: detected capacity change from 0 to 40427 [ 31.830275][ T487] F2FS-fs (loop2): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 505] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 505] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 505] memfd_create("syzkaller", 0) = 3 [pid 505] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 [pid 487] <... mount resumed>) = 0 [pid 487] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 487] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 487] ioctl(4, LOOP_CLR_FD) = 0 [pid 487] close(4) = 0 [pid 487] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 486] <... futex resumed>) = 0 [pid 486] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 486] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 487] <... futex resumed>) = 1 [pid 487] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 487] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 486] <... futex resumed>) = 0 [pid 486] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 486] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 487] <... futex resumed>) = 1 [ 31.871195][ T487] F2FS-fs (loop2): Found nat_bits in checkpoint [pid 487] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0) = 0 [pid 487] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 486] <... futex resumed>) = 0 [pid 487] openat(AT_FDCWD, "./file0", O_RDONLY [pid 486] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 487] <... openat resumed>) = 5 [pid 486] <... futex resumed>) = 0 [pid 487] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 486] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 487] <... futex resumed>) = 0 [pid 486] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 487] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 486] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 486] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 487] <... ioctl resumed>) = 0 [pid 487] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 486] <... futex resumed>) = 0 [pid 487] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 486] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 487] <... prlimit64 resumed>NULL) = 0 [pid 486] <... futex resumed>) = 0 [pid 487] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 486] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 487] <... futex resumed>) = 0 [pid 486] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 487] sched_setscheduler(0, SCHED_FIFO, [7] [pid 486] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 487] <... sched_setscheduler resumed>) = 0 [pid 486] <... futex resumed>) = 0 [pid 487] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 486] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 487] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 486] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 486] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 487] <... futex resumed>) = 0 [pid 486] <... futex resumed>) = 1 [ 31.922226][ T487] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [pid 487] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0) = 0x200000000000 [pid 486] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 487] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 487] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 486] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 486] exit_group(0 [pid 487] <... futex resumed>) = ? [pid 486] <... exit_group resumed>) = ? [pid 487] +++ exited with 0 +++ [pid 499] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 486] +++ exited with 0 +++ [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=486, si_uid=0, si_status=0, si_utime=10, si_stime=19} --- [pid 292] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 292] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 292] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 497] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 292] <... umount2 resumed>) = 0 [pid 292] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 292] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(4, 0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 292] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 292] close(4) = 0 [pid 292] rmdir("./6/file0") = 0 [pid 292] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./6/binderfs") = 0 [pid 292] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./6") = 0 [pid 292] mkdir("./7", 0777) = 0 [pid 292] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 292] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 292] close(3) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee9a690) = 508 [pid 499] <... write resumed>) = 20699119 [pid 501] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119./strace-static-x86_64: Process 508 attached [pid 508] set_robust_list(0x55555ee9a6a0, 24) = 0 [pid 508] chdir("./7") = 0 [pid 508] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 508] setpgid(0, 0) = 0 [pid 508] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 508] write(3, "1000", 4 [pid 499] munmap(0x7f143baa4000, 138412032 [pid 508] <... write resumed>) = 4 [pid 508] close(3) = 0 [pid 508] symlink("/dev/binderfs", "./binderfs") = 0 [pid 508] write(1, "executing program\n", 18executing program ) = 18 [pid 508] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 508] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, NULL, 8) = 0 [pid 508] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 508] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443ea4000 [pid 508] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 508] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 508] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} [pid 499] <... munmap resumed>) = 0 [pid 508] <... clone3 resumed> => {parent_tid=[509]}, 88) = 509 [pid 508] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 508] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 499] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 508] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 499] <... openat resumed>) = 4 [pid 499] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 509 attached [pid 509] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 509] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 509] memfd_create("syzkaller", 0) = 3 [pid 509] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 [pid 505] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 499] <... ioctl resumed>) = 0 [pid 499] close(3) = 0 [pid 499] close(4) = 0 [pid 499] mkdir("./file0", 0777) = 0 [pid 499] mount("/dev/loop0", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 497] <... write resumed>) = 20699119 [pid 497] munmap(0x7f143baa4000, 138412032) = 0 [pid 497] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 32.231627][ T499] loop0: detected capacity change from 0 to 40427 [ 32.261519][ T499] F2FS-fs (loop0): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 497] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 497] close(3) = 0 [pid 497] close(4) = 0 [pid 497] mkdir("./file0", 0777) = 0 [pid 497] mount("/dev/loop4", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 501] <... write resumed>) = 20699119 [pid 501] munmap(0x7f143baa4000, 138412032) = 0 [pid 505] <... write resumed>) = 20699119 [pid 505] munmap(0x7f143baa4000, 138412032 [pid 501] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 501] ioctl(4, LOOP_SET_FD, 3 [pid 505] <... munmap resumed>) = 0 [pid 505] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 32.302674][ T499] F2FS-fs (loop0): Found nat_bits in checkpoint [ 32.334987][ T497] loop4: detected capacity change from 0 to 40427 [pid 505] ioctl(4, LOOP_SET_FD, 3 [pid 501] <... ioctl resumed>) = 0 [pid 499] <... mount resumed>) = 0 [pid 501] close(3 [pid 499] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 501] <... close resumed>) = 0 [pid 499] <... openat resumed>) = 3 [pid 501] close(4 [pid 499] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 501] <... close resumed>) = 0 [pid 499] <... openat resumed>) = 4 [pid 501] mkdir("./file0", 0777 [pid 499] ioctl(4, LOOP_CLR_FD [pid 501] <... mkdir resumed>) = 0 [pid 499] <... ioctl resumed>) = 0 [pid 501] mount("/dev/loop3", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 499] close(4) = 0 [pid 499] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 498] <... futex resumed>) = 0 [pid 499] fspick(AT_FDCWD, "./file0", 0 [pid 498] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 499] <... fspick resumed>) = 4 [pid 498] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 499] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 498] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 499] <... futex resumed>) = 0 [pid 498] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 499] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 498] <... futex resumed>) = 0 [ 32.362945][ T497] F2FS-fs (loop4): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 32.382344][ T499] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 32.397553][ T501] loop3: detected capacity change from 0 to 40427 [ 32.398275][ T505] loop1: detected capacity change from 0 to 40427 [pid 498] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 505] <... ioctl resumed>) = 0 [pid 505] close(3) = 0 [pid 505] close(4) = 0 [pid 505] mkdir("./file0", 0777) = 0 [pid 505] mount("/dev/loop1", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 499] <... fsconfig resumed>) = 0 [pid 499] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 498] <... futex resumed>) = 0 [pid 499] openat(AT_FDCWD, "./file0", O_RDONLY [pid 498] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 499] <... openat resumed>) = 5 [pid 498] <... futex resumed>) = 0 [pid 499] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 498] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 499] <... futex resumed>) = 0 [pid 498] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 499] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 498] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 498] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 499] <... ioctl resumed>) = 0 [pid 499] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 498] <... futex resumed>) = 0 [pid 499] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 498] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 499] <... prlimit64 resumed>NULL) = 0 [pid 498] <... futex resumed>) = 0 [pid 499] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 498] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 499] <... futex resumed>) = 0 [pid 498] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 499] sched_setscheduler(0, SCHED_FIFO, [7] [pid 498] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 499] <... sched_setscheduler resumed>) = 0 [pid 498] <... futex resumed>) = 0 [pid 499] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 498] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 499] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 498] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 498] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 499] <... futex resumed>) = 0 [pid 498] <... futex resumed>) = 1 [pid 499] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [ 32.414375][ T497] F2FS-fs (loop4): Found nat_bits in checkpoint [ 32.433862][ T501] F2FS-fs (loop3): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 498] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 509] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 499] <... mmap resumed>) = 0x200000000000 [pid 499] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 499] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 498] <... futex resumed>) = 0 [pid 498] exit_group(0 [pid 499] <... futex resumed>) = ? [pid 498] <... exit_group resumed>) = ? [pid 499] +++ exited with 0 +++ [ 32.461620][ T501] F2FS-fs (loop3): Found nat_bits in checkpoint [ 32.463383][ T505] F2FS-fs (loop1): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 509] <... write resumed>) = 20699119 [pid 509] munmap(0x7f143baa4000, 138412032 [pid 501] <... mount resumed>) = 0 [pid 497] <... mount resumed>) = 0 [pid 509] <... munmap resumed>) = 0 [pid 501] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 497] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 498] +++ exited with 0 +++ [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=498, si_uid=0, si_status=0, si_utime=9, si_stime=20} --- [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 509] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 501] <... openat resumed>) = 3 [pid 497] <... openat resumed>) = 3 [pid 509] <... openat resumed>) = 4 [pid 501] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 497] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 509] ioctl(4, LOOP_SET_FD, 3 [pid 501] <... openat resumed>) = 4 [pid 497] <... openat resumed>) = 4 [pid 290] <... restart_syscall resumed>) = 0 [pid 290] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 290] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 509] <... ioctl resumed>) = 0 [pid 501] ioctl(4, LOOP_CLR_FD [pid 497] ioctl(4, LOOP_CLR_FD [pid 509] close(3 [pid 501] <... ioctl resumed>) = 0 [pid 509] <... close resumed>) = 0 [pid 497] <... ioctl resumed>) = 0 [pid 509] close(4 [pid 501] close(4 [pid 497] close(4 [pid 509] <... close resumed>) = 0 [pid 501] <... close resumed>) = 0 [pid 509] mkdir("./file0", 0777 [pid 501] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 497] <... close resumed>) = 0 [pid 509] <... mkdir resumed>) = 0 [pid 501] <... futex resumed>) = 1 [pid 500] <... futex resumed>) = 0 [pid 497] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 509] mount("/dev/loop2", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 501] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 497] <... futex resumed>) = 1 [pid 496] <... futex resumed>) = 0 [pid 501] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 500] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 497] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 496] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 501] fspick(AT_FDCWD, "./file0", 0 [pid 500] <... futex resumed>) = 0 [pid 497] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 496] <... futex resumed>) = 0 [pid 501] <... fspick resumed>) = 4 [pid 497] fspick(AT_FDCWD, "./file0", 0 [pid 496] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 501] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 497] <... fspick resumed>) = 4 [pid 501] <... futex resumed>) = 0 [pid 497] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 501] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 497] <... futex resumed>) = 1 [pid 496] <... futex resumed>) = 0 [pid 497] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 496] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 497] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 496] <... futex resumed>) = 0 [pid 497] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 496] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 500] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 500] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 501] <... futex resumed>) = 0 [pid 500] <... futex resumed>) = 1 [pid 501] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 500] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 501] <... fsconfig resumed>) = 0 [pid 501] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 497] <... fsconfig resumed>) = 0 [pid 501] <... futex resumed>) = 1 [pid 497] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 501] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 497] <... futex resumed>) = 1 [pid 496] <... futex resumed>) = 0 [pid 497] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 496] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 497] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 496] <... futex resumed>) = 0 [pid 497] openat(AT_FDCWD, "./file0", O_RDONLY [pid 496] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 500] <... futex resumed>) = 0 [pid 497] <... openat resumed>) = 5 [pid 500] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 497] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 501] <... futex resumed>) = 0 [pid 500] <... futex resumed>) = 1 [pid 497] <... futex resumed>) = 1 [pid 496] <... futex resumed>) = 0 [pid 501] openat(AT_FDCWD, "./file0", O_RDONLY [pid 497] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 496] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 501] <... openat resumed>) = 5 [pid 497] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 496] <... futex resumed>) = 0 [pid 501] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 497] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 496] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 501] <... futex resumed>) = 0 [pid 501] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 500] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 500] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 501] <... futex resumed>) = 0 [pid 500] <... futex resumed>) = 1 [pid 501] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 500] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 501] <... ioctl resumed>) = 0 [pid 501] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 500] <... futex resumed>) = 0 [pid 501] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 500] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 501] <... prlimit64 resumed>NULL) = 0 [pid 500] <... futex resumed>) = 0 [ 32.532270][ T497] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 32.542097][ T505] F2FS-fs (loop1): Found nat_bits in checkpoint [ 32.552917][ T501] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [pid 501] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 500] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 501] <... futex resumed>) = 0 [pid 500] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 497] <... ioctl resumed>) = 0 [pid 501] sched_setscheduler(0, SCHED_FIFO, [7] [pid 500] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 497] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 501] <... sched_setscheduler resumed>) = 0 [pid 500] <... futex resumed>) = 0 [pid 497] <... futex resumed>) = 1 [pid 496] <... futex resumed>) = 0 [pid 501] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 500] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 497] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 496] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 501] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 496] <... futex resumed>) = 0 [pid 500] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 497] <... prlimit64 resumed>NULL) = 0 [pid 496] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 500] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 497] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 501] <... futex resumed>) = 0 [pid 500] <... futex resumed>) = 1 [pid 501] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 500] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 497] <... futex resumed>) = 1 [pid 496] <... futex resumed>) = 0 [pid 496] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 496] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 501] <... mmap resumed>) = 0x200000000000 [pid 501] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 497] sched_setscheduler(0, SCHED_FIFO, [7] [pid 501] <... futex resumed>) = 1 [pid 501] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 500] <... futex resumed>) = 0 [pid 497] <... sched_setscheduler resumed>) = 0 [pid 497] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 496] <... futex resumed>) = 0 [pid 505] <... mount resumed>) = 0 [pid 500] exit_group(0 [pid 497] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 496] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 505] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 501] <... futex resumed>) = ? [pid 500] <... exit_group resumed>) = ? [pid 497] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 496] <... futex resumed>) = 0 [ 32.603288][ T509] loop2: detected capacity change from 0 to 40427 [ 32.621471][ T509] F2FS-fs (loop2): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 32.638729][ T505] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 executing program [pid 505] <... openat resumed>) = 3 [pid 501] +++ exited with 0 +++ [pid 497] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 496] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 505] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 290] <... umount2 resumed>) = 0 [pid 505] <... openat resumed>) = 4 [pid 505] ioctl(4, LOOP_CLR_FD) = 0 [pid 505] close(4) = 0 [pid 505] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 505] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 290] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 290] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(4, 0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 290] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 290] close(4) = 0 [pid 290] rmdir("./6/file0") = 0 [pid 290] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./6/binderfs") = 0 [pid 290] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./6") = 0 [pid 290] mkdir("./7", 0777) = 0 [pid 290] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 290] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 290] close(3) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee9a690) = 526 ./strace-static-x86_64: Process 526 attached [pid 526] set_robust_list(0x55555ee9a6a0, 24) = 0 [pid 526] chdir("./7") = 0 [pid 526] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 526] setpgid(0, 0) = 0 [pid 526] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 526] write(3, "1000", 4) = 4 [pid 526] close(3) = 0 [pid 526] symlink("/dev/binderfs", "./binderfs") = 0 [pid 526] write(1, "executing program\n", 18) = 18 [pid 526] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 526] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, NULL, 8) = 0 [pid 526] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 526] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443ea4000 [pid 526] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 526] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 526] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} => {parent_tid=[527]}, 88) = 527 [pid 526] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 526] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 526] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 527 attached [pid 527] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 527] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 527] memfd_create("syzkaller", 0) = 3 [pid 527] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 [pid 497] <... mmap resumed>) = 0x200000000000 [pid 503] <... futex resumed>) = 0 [pid 497] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 497] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 503] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 496] <... futex resumed>) = 0 [pid 505] <... futex resumed>) = 0 [pid 503] <... futex resumed>) = 1 [pid 496] exit_group(0 [pid 503] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 505] fspick(AT_FDCWD, "./file0", 0 [pid 497] <... futex resumed>) = ? [pid 496] <... exit_group resumed>) = ? [pid 505] <... fspick resumed>) = 4 [pid 497] +++ exited with 0 +++ [pid 505] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 505] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 503] <... futex resumed>) = 0 [pid 503] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 505] <... futex resumed>) = 0 [pid 503] <... futex resumed>) = 1 [pid 505] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 503] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 505] <... fsconfig resumed>) = 0 [pid 505] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 503] <... futex resumed>) = 0 [pid 505] openat(AT_FDCWD, "./file0", O_RDONLY [pid 503] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 505] <... openat resumed>) = 5 [pid 503] <... futex resumed>) = 0 [pid 505] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 503] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 505] <... futex resumed>) = 0 [pid 503] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 505] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 503] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 505] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 503] <... futex resumed>) = 0 [pid 503] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 505] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140) = 0 [pid 505] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 503] <... futex resumed>) = 0 [pid 505] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 503] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 505] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 503] <... futex resumed>) = 0 [pid 505] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 503] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 505] <... prlimit64 resumed>NULL) = 0 [pid 505] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 503] <... futex resumed>) = 0 [pid 505] sched_setscheduler(0, SCHED_FIFO, [7] [pid 503] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 505] <... sched_setscheduler resumed>) = 0 [pid 503] <... futex resumed>) = 0 [pid 505] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 503] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 505] <... futex resumed>) = 0 [pid 503] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 505] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 503] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [ 32.698351][ T509] F2FS-fs (loop2): Found nat_bits in checkpoint [pid 505] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 503] <... futex resumed>) = 0 [pid 500] +++ exited with 0 +++ [pid 503] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=500, si_uid=0, si_status=0, si_utime=9, si_stime=17} --- [pid 293] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 293] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 505] <... mmap resumed>) = 0x200000000000 [pid 505] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 503] <... futex resumed>) = 0 [pid 505] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 503] exit_group(0 [pid 505] <... futex resumed>) = ? [pid 503] <... exit_group resumed>) = ? [pid 505] +++ exited with 0 +++ [pid 496] +++ exited with 0 +++ [pid 294] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=496, si_uid=0, si_status=0, si_utime=13, si_stime=20} --- [pid 294] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 294] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 294] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] getdents64(3, 0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 294] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 509] <... mount resumed>) = 0 [pid 509] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 509] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 509] ioctl(4, LOOP_CLR_FD) = 0 [pid 509] close(4) = 0 [pid 509] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 508] <... futex resumed>) = 0 [pid 508] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 508] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 509] <... futex resumed>) = 1 [pid 509] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 509] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 508] <... futex resumed>) = 0 [pid 508] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 508] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 509] <... futex resumed>) = 1 [pid 509] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 503] +++ exited with 0 +++ [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=503, si_uid=0, si_status=0, si_utime=10, si_stime=19} --- [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 509] <... fsconfig resumed>) = 0 [pid 509] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 508] <... futex resumed>) = 0 [pid 509] openat(AT_FDCWD, "./file0", O_RDONLY [pid 508] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 509] <... openat resumed>) = 5 [pid 508] <... futex resumed>) = 0 [pid 509] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 508] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 509] <... futex resumed>) = 0 [pid 508] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 509] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 508] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 508] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 509] <... ioctl resumed>) = 0 [pid 509] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 508] <... futex resumed>) = 0 [pid 509] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 508] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 509] <... prlimit64 resumed>NULL) = 0 [pid 508] <... futex resumed>) = 0 [pid 509] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 508] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 509] <... futex resumed>) = 0 [pid 508] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 509] sched_setscheduler(0, SCHED_FIFO, [7] [pid 508] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 509] <... sched_setscheduler resumed>) = 0 [pid 508] <... futex resumed>) = 0 [pid 509] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 508] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 509] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 508] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 508] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 509] <... futex resumed>) = 0 [pid 508] <... futex resumed>) = 1 [pid 509] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 508] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 32.863634][ T509] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [pid 527] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 291] <... restart_syscall resumed>) = 0 [pid 291] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 291] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 509] <... mmap resumed>) = 0x200000000000 [pid 509] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 509] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 508] <... futex resumed>) = 0 [pid 508] exit_group(0 [pid 509] <... futex resumed>) = ? [pid 508] <... exit_group resumed>) = ? [pid 509] +++ exited with 0 +++ [pid 294] <... umount2 resumed>) = 0 [pid 294] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] newfstatat(AT_FDCWD, "./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 294] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] getdents64(4, 0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 294] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 294] close(4) = 0 [pid 294] rmdir("./6/file0") = 0 [pid 294] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] unlink("./6/binderfs") = 0 [pid 294] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 294] close(3) = 0 [pid 294] rmdir("./6") = 0 [pid 294] mkdir("./7", 0777) = 0 [pid 294] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 294] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 294] close(3) = 0 [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee9a690) = 532 [pid 293] <... umount2 resumed>) = 0 [pid 527] <... write resumed>) = 20699119 ./strace-static-x86_64: Process 532 attached [pid 293] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 532] set_robust_list(0x55555ee9a6a0, 24 [pid 527] munmap(0x7f143baa4000, 138412032 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 527] <... munmap resumed>) = 0 [pid 532] <... set_robust_list resumed>) = 0 [pid 293] newfstatat(AT_FDCWD, "./6/file0", [pid 532] chdir("./7" [pid 527] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 532] <... chdir resumed>) = 0 [pid 527] <... openat resumed>) = 4 [pid 293] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 532] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 527] ioctl(4, LOOP_SET_FD, 3 [pid 532] setpgid(0, 0 [pid 293] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 532] <... setpgid resumed>) = 0 [pid 293] <... openat resumed>) = 4 [pid 532] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] newfstatat(4, "", [pid 532] <... openat resumed>) = 3 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 532] write(3, "1000", 4 [pid 293] getdents64(4, [pid 532] <... write resumed>) = 4 [pid 293] <... getdents64 resumed>0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 532] close(3 [pid 293] getdents64(4, [pid 532] <... close resumed>) = 0 [pid 293] <... getdents64 resumed>0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 532] symlink("/dev/binderfs", "./binderfs" [pid 293] close(4executing program [pid 532] <... symlink resumed>) = 0 [pid 293] <... close resumed>) = 0 [pid 532] write(1, "executing program\n", 18 [pid 293] rmdir("./6/file0" [pid 532] <... write resumed>) = 18 [pid 293] <... rmdir resumed>) = 0 [pid 532] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 293] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 532] <... futex resumed>) = 0 [pid 532] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 532] <... rt_sigaction resumed>NULL, 8) = 0 [pid 293] newfstatat(AT_FDCWD, "./6/binderfs", [pid 532] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 532] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 532] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 293] unlink("./6/binderfs" [pid 532] <... mmap resumed>) = 0x7f1443ea4000 [pid 532] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE [pid 293] <... unlink resumed>) = 0 [pid 532] <... mprotect resumed>) = 0 [pid 293] getdents64(3, [pid 532] rt_sigprocmask(SIG_BLOCK, ~[], [pid 293] <... getdents64 resumed>0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 532] <... rt_sigprocmask resumed>[], 8) = 0 [pid 532] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} [pid 293] close(3) = 0 [pid 532] <... clone3 resumed> => {parent_tid=[533]}, 88) = 533 [pid 293] rmdir("./6" [pid 532] rt_sigprocmask(SIG_SETMASK, [], [pid 293] <... rmdir resumed>) = 0 [pid 532] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 532] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 293] mkdir("./7", 0777 [pid 532] <... futex resumed>) = 0 [pid 293] <... mkdir resumed>) = 0 [pid 532] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 293] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 293] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 293] close(3) = 0 [pid 527] <... ioctl resumed>) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 527] close(3) = 0 [pid 527] close(4 [pid 293] <... clone resumed>, child_tidptr=0x55555ee9a690) = 534 [pid 527] <... close resumed>) = 0 [pid 527] mkdir("./file0", 0777) = 0 [pid 527] mount("/dev/loop0", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 508] +++ exited with 0 +++ [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=508, si_uid=0, si_status=0, si_utime=10, si_stime=21} --- [pid 292] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 292] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 292] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 533 attached [pid 533] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 533] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 533] memfd_create("syzkaller", 0) = 3 [pid 533] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 ./strace-static-x86_64: Process 534 attached [pid 534] set_robust_list(0x55555ee9a6a0, 24) = 0 [pid 534] chdir("./7") = 0 [pid 534] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 534] setpgid(0, 0) = 0 [pid 534] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 534] write(3, "1000", 4) = 4 [pid 534] close(3) = 0 [pid 534] symlink("/dev/binderfs", "./binderfs") = 0 [pid 534] write(1, "executing program\n", 18executing program ) = 18 [pid 534] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 534] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, NULL, 8) = 0 [pid 534] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 534] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 291] <... umount2 resumed>) = 0 [pid 291] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./7/file0", [pid 534] <... mmap resumed>) = 0x7f1443ea4000 [pid 534] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 291] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(4, 0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 291] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 291] close(4) = 0 [pid 534] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 534] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} => {parent_tid=[537]}, 88) = 537 [pid 534] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 534] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 534] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 537 attached [pid 537] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 291] rmdir("./7/file0" [pid 537] rt_sigprocmask(SIG_SETMASK, [], [pid 291] <... rmdir resumed>) = 0 [pid 291] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./7/binderfs") = 0 [pid 291] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./7" [pid 537] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 291] <... rmdir resumed>) = 0 [pid 291] mkdir("./8", 0777) = 0 [pid 537] memfd_create("syzkaller", 0) = 3 [pid 537] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 [pid 291] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 291] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 291] close(3) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee9a690) = 538 ./strace-static-x86_64: Process 538 attached [pid 538] set_robust_list(0x55555ee9a6a0, 24) = 0 [pid 538] chdir("./8") = 0 [pid 538] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 538] setpgid(0, 0) = 0 [pid 538] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 538] write(3, "1000", 4) = 4 [pid 538] close(3) = 0 [pid 538] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 538] write(1, "executing program\n", 18) = 18 [pid 538] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 538] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, NULL, 8) = 0 [pid 538] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 538] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443ea4000 [pid 538] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 538] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 538] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} => {parent_tid=[539]}, 88) = 539 [pid 538] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 538] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 33.046558][ T527] loop0: detected capacity change from 0 to 40427 [ 33.068769][ T527] F2FS-fs (loop0): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 538] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 539 attached [pid 539] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 539] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 539] memfd_create("syzkaller", 0) = 3 [pid 539] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 [pid 292] <... umount2 resumed>) = 0 [pid 292] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 292] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(4, 0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 292] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 292] close(4) = 0 [pid 292] rmdir("./7/file0") = 0 [pid 292] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./7/binderfs") = 0 [pid 292] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./7") = 0 [pid 292] mkdir("./8", 0777) = 0 [pid 292] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 292] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 292] close(3 [pid 527] <... mount resumed>) = 0 [pid 292] <... close resumed>) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 527] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 292] <... clone resumed>, child_tidptr=0x55555ee9a690) = 540 [pid 527] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 527] ioctl(4, LOOP_CLR_FD) = 0 [pid 527] close(4) = 0 [ 33.109914][ T527] F2FS-fs (loop0): Found nat_bits in checkpoint [pid 527] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 540 attached ) = 1 [pid 540] set_robust_list(0x55555ee9a6a0, 24 [pid 527] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 540] <... set_robust_list resumed>) = 0 [pid 526] <... futex resumed>) = 0 [pid 526] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 540] chdir("./8" [pid 527] <... futex resumed>) = 0 [pid 526] <... futex resumed>) = 1 [pid 540] <... chdir resumed>) = 0 [pid 540] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 527] fspick(AT_FDCWD, "./file0", 0 [pid 526] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 540] <... prctl resumed>) = 0 [pid 527] <... fspick resumed>) = 4 [pid 540] setpgid(0, 0 [pid 527] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 540] <... setpgid resumed>) = 0 [pid 527] <... futex resumed>) = 1 [pid 526] <... futex resumed>) = 0 [pid 526] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 540] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 527] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 526] <... futex resumed>) = 0 [pid 526] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 540] <... openat resumed>) = 3 [pid 540] write(3, "1000", 4) = 4 [pid 540] close(3) = 0 [pid 540] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 540] write(1, "executing program\n", 18) = 18 [pid 540] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 540] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, NULL, 8) = 0 [pid 540] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 540] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443ea4000 [pid 540] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 540] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 540] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} => {parent_tid=[542]}, 88) = 542 [pid 540] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 540] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 540] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 542 attached [pid 542] set_robust_list(0x7f1443ec49a0, 24 [pid 527] <... fsconfig resumed>) = 0 [pid 542] <... set_robust_list resumed>) = 0 [pid 527] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 542] rt_sigprocmask(SIG_SETMASK, [], [pid 527] <... futex resumed>) = 1 [pid 526] <... futex resumed>) = 0 [pid 542] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 527] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 526] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 526] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 527] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 542] memfd_create("syzkaller", 0 [pid 527] openat(AT_FDCWD, "./file0", O_RDONLY [pid 542] <... memfd_create resumed>) = 3 [pid 527] <... openat resumed>) = 5 [pid 542] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 527] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 542] <... mmap resumed>) = 0x7f143baa4000 [pid 527] <... futex resumed>) = 1 [pid 526] <... futex resumed>) = 0 [pid 526] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 526] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 527] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140) = 0 [pid 527] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 526] <... futex resumed>) = 0 [pid 527] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 526] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 527] <... futex resumed>) = 0 [pid 526] <... futex resumed>) = 1 [pid 527] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, NULL) = 0 [pid 526] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 527] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 526] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 527] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 526] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 527] <... futex resumed>) = 0 [pid 526] <... futex resumed>) = 1 [pid 527] sched_setscheduler(0, SCHED_FIFO, [7]) = 0 [pid 526] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 527] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 526] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 527] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 526] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 527] <... futex resumed>) = 0 [pid 526] <... futex resumed>) = 1 [pid 527] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [ 33.180685][ T527] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [pid 526] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 527] <... mmap resumed>) = 0x200000000000 [pid 527] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 526] <... futex resumed>) = 0 [pid 527] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 526] exit_group(0 [pid 527] <... futex resumed>) = ? [pid 526] <... exit_group resumed>) = ? [pid 527] +++ exited with 0 +++ [pid 526] +++ exited with 0 +++ [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=526, si_uid=0, si_status=0, si_utime=8, si_stime=21} --- [pid 290] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 290] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 290] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 533] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 539] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 537] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 290] <... umount2 resumed>) = 0 [pid 290] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 290] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(4, 0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 290] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 290] close(4) = 0 [pid 290] rmdir("./7/file0") = 0 [pid 290] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./7/binderfs") = 0 [pid 290] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./7") = 0 [pid 290] mkdir("./8", 0777) = 0 [pid 290] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 290] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 290] close(3) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee9a690) = 544 ./strace-static-x86_64: Process 544 attached [pid 544] set_robust_list(0x55555ee9a6a0, 24) = 0 [pid 544] chdir("./8") = 0 [pid 544] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 544] setpgid(0, 0) = 0 [pid 544] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 544] write(3, "1000", 4) = 4 [pid 544] close(3) = 0 [pid 544] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 544] write(1, "executing program\n", 18) = 18 [pid 544] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 544] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, [pid 542] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 544] <... rt_sigaction resumed>NULL, 8) = 0 [pid 544] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 544] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443ea4000 [pid 544] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 544] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 544] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} => {parent_tid=[545]}, 88) = 545 [pid 544] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 544] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 544] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 545 attached [pid 545] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 545] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 545] memfd_create("syzkaller", 0) = 3 [pid 545] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 [pid 539] <... write resumed>) = 20699119 [pid 539] munmap(0x7f143baa4000, 138412032) = 0 [pid 539] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 539] ioctl(4, LOOP_SET_FD, 3 [pid 533] <... write resumed>) = 20699119 [pid 537] <... write resumed>) = 20699119 [pid 533] munmap(0x7f143baa4000, 138412032) = 0 [pid 533] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 533] ioctl(4, LOOP_SET_FD, 3 [pid 539] <... ioctl resumed>) = 0 [pid 539] close(3) = 0 [pid 539] close(4) = 0 [pid 539] mkdir("./file0", 0777) = 0 [pid 539] mount("/dev/loop1", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 537] munmap(0x7f143baa4000, 138412032) = 0 [pid 537] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 537] ioctl(4, LOOP_SET_FD, 3 [pid 542] <... write resumed>) = 20699119 [pid 542] munmap(0x7f143baa4000, 138412032) = 0 [pid 542] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 542] ioctl(4, LOOP_SET_FD, 3 [pid 533] <... ioctl resumed>) = 0 [pid 533] close(3) = 0 [pid 533] close(4) = 0 [pid 542] <... ioctl resumed>) = 0 [pid 542] close(3) = 0 [pid 542] close(4) = 0 [pid 542] mkdir("./file0", 0777) = 0 [pid 542] mount("/dev/loop2", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 533] mkdir("./file0", 0777) = 0 [ 33.622328][ T539] loop1: detected capacity change from 0 to 40427 [ 33.640666][ T533] loop4: detected capacity change from 0 to 40427 [ 33.652748][ T539] F2FS-fs (loop1): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 33.663324][ T537] loop3: detected capacity change from 0 to 40427 [pid 533] mount("/dev/loop4", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 537] <... ioctl resumed>) = 0 [pid 537] close(3) = 0 [pid 537] close(4) = 0 [pid 537] mkdir("./file0", 0777) = 0 [ 33.671782][ T542] loop2: detected capacity change from 0 to 40427 [ 33.694604][ T542] F2FS-fs (loop2): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 33.715303][ T539] F2FS-fs (loop1): Found nat_bits in checkpoint [ 33.725357][ T542] F2FS-fs (loop2): Found nat_bits in checkpoint [ 33.727891][ T533] F2FS-fs (loop4): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 33.751714][ T537] F2FS-fs (loop3): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 537] mount("/dev/loop3", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 545] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 539] <... mount resumed>) = 0 [pid 542] <... mount resumed>) = 0 [pid 539] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 542] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 539] <... openat resumed>) = 3 [pid 542] <... openat resumed>) = 3 [pid 539] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 542] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 539] <... openat resumed>) = 4 [pid 542] <... openat resumed>) = 4 [pid 539] ioctl(4, LOOP_CLR_FD [pid 542] ioctl(4, LOOP_CLR_FD [pid 539] <... ioctl resumed>) = 0 [pid 542] <... ioctl resumed>) = 0 [pid 539] close(4) = 0 [pid 542] close(4 [pid 539] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 542] <... close resumed>) = 0 [pid 539] <... futex resumed>) = 1 [pid 542] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 539] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 538] <... futex resumed>) = 0 [pid 542] <... futex resumed>) = 1 [pid 540] <... futex resumed>) = 0 [pid 538] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 542] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 540] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 538] <... futex resumed>) = 1 [pid 542] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 540] <... futex resumed>) = 0 [pid 539] <... futex resumed>) = 0 [pid 538] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 542] fspick(AT_FDCWD, "./file0", 0 [pid 540] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 539] fspick(AT_FDCWD, "./file0", 0 [pid 542] <... fspick resumed>) = 4 [pid 542] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 539] <... fspick resumed>) = 4 [pid 542] <... futex resumed>) = 1 [pid 540] <... futex resumed>) = 0 [pid 539] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 542] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 540] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 539] <... futex resumed>) = 1 [pid 538] <... futex resumed>) = 0 [pid 542] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 540] <... futex resumed>) = 0 [pid 539] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 538] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 542] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 540] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 539] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 538] <... futex resumed>) = 0 [pid 539] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [ 33.785075][ T537] F2FS-fs (loop3): Found nat_bits in checkpoint [ 33.813848][ T539] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 33.822349][ T533] F2FS-fs (loop4): Found nat_bits in checkpoint [pid 538] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 537] <... mount resumed>) = 0 [pid 537] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 537] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 537] ioctl(4, LOOP_CLR_FD) = 0 [pid 537] close(4) = 0 [pid 537] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 534] <... futex resumed>) = 0 [pid 534] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 534] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 537] <... futex resumed>) = 1 [pid 537] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 537] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 534] <... futex resumed>) = 0 [pid 534] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 534] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 537] <... futex resumed>) = 1 [pid 537] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 533] <... mount resumed>) = 0 [pid 542] <... fsconfig resumed>) = 0 [pid 533] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 542] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 540] <... futex resumed>) = 0 [pid 533] <... openat resumed>) = 3 [pid 542] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 540] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 542] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 540] <... futex resumed>) = 0 [pid 533] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 542] openat(AT_FDCWD, "./file0", O_RDONLY [pid 540] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 542] <... openat resumed>) = 5 [pid 533] <... openat resumed>) = 4 [pid 542] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 533] ioctl(4, LOOP_CLR_FD [pid 542] <... futex resumed>) = 1 [pid 540] <... futex resumed>) = 0 [pid 542] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 533] <... ioctl resumed>) = 0 [pid 542] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 540] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 533] close(4 [pid 542] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 540] <... futex resumed>) = 0 [pid 539] <... fsconfig resumed>) = 0 [pid 537] <... fsconfig resumed>) = 0 [pid 537] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 534] <... futex resumed>) = 0 [pid 534] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 534] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 537] <... futex resumed>) = 1 [pid 537] openat(AT_FDCWD, "./file0", O_RDONLY) = 5 [pid 537] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 534] <... futex resumed>) = 0 [pid 540] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 539] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 538] <... futex resumed>) = 0 [pid 534] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 539] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 538] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 539] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 538] <... futex resumed>) = 0 [pid 534] <... futex resumed>) = 0 [pid 539] openat(AT_FDCWD, "./file0", O_RDONLY [pid 538] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 539] <... openat resumed>) = 5 [pid 534] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 539] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 538] <... futex resumed>) = 0 [pid 539] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 538] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 539] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 538] <... futex resumed>) = 0 [pid 539] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 538] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 537] <... futex resumed>) = 1 [pid 537] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140) = 0 [pid 537] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 534] <... futex resumed>) = 0 [pid 534] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 534] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 537] <... futex resumed>) = 1 [pid 537] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, NULL) = 0 [pid 537] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 534] <... futex resumed>) = 0 [pid 534] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 534] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 537] <... futex resumed>) = 1 [pid 537] sched_setscheduler(0, SCHED_FIFO, [7]) = 0 [pid 537] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 534] <... futex resumed>) = 0 [pid 537] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 534] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 537] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 534] <... futex resumed>) = 0 [pid 537] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 534] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 542] <... ioctl resumed>) = 0 [pid 540] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 538] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 537] <... mmap resumed>) = 0x200000000000 [pid 533] <... close resumed>) = 0 [pid 542] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 540] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 538] futex(0x7f1443f956dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 537] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 533] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 542] <... futex resumed>) = 0 [pid 540] <... futex resumed>) = 0 [pid 538] <... futex resumed>) = 0 [pid 537] <... futex resumed>) = 1 [pid 534] <... futex resumed>) = 0 [pid 533] <... futex resumed>) = 1 [pid 532] <... futex resumed>) = 0 [pid 542] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 540] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 539] <... ioctl resumed>) = 0 [pid 538] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 537] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 534] exit_group(0 [pid 533] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 532] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 542] <... prlimit64 resumed>NULL) = 0 [pid 539] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 538] <... mmap resumed>) = 0x7f1443e83000 [pid 537] <... futex resumed>) = ? [ 33.829653][ T542] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 33.838785][ T537] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 33.871843][ T533] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [pid 534] <... exit_group resumed>) = ? [pid 533] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 532] <... futex resumed>) = 0 [pid 545] <... write resumed>) = 20699119 [pid 542] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 539] <... futex resumed>) = 0 [pid 538] mprotect(0x7f1443e84000, 131072, PROT_READ|PROT_WRITE [pid 537] +++ exited with 0 +++ [pid 533] fspick(AT_FDCWD, "./file0", 0 [pid 532] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 542] <... futex resumed>) = 1 [pid 540] <... futex resumed>) = 0 [pid 539] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 538] <... mprotect resumed>) = 0 [pid 542] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 540] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 533] <... fspick resumed>) = 4 [pid 538] rt_sigprocmask(SIG_BLOCK, ~[], [pid 542] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 540] <... futex resumed>) = 0 [pid 533] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 542] sched_setscheduler(0, SCHED_FIFO, [7] [pid 540] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 538] <... rt_sigprocmask resumed>[], 8) = 0 [pid 533] <... futex resumed>) = 1 [pid 545] munmap(0x7f143baa4000, 138412032 [pid 542] <... sched_setscheduler resumed>) = 0 [pid 538] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ea3990, parent_tid=0x7f1443ea3990, exit_signal=0, stack=0x7f1443e83000, stack_size=0x20300, tls=0x7f1443ea36c0} [pid 533] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 532] <... futex resumed>) = 0 [pid 542] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 540] <... futex resumed>) = 0 [pid 533] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 532] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 542] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 540] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 538] <... clone3 resumed> => {parent_tid=[560]}, 88) = 560 [pid 533] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 532] <... futex resumed>) = 0 [pid 542] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 540] <... futex resumed>) = 0 [pid 538] rt_sigprocmask(SIG_SETMASK, [], [pid 542] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 540] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 538] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 532] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 545] <... munmap resumed>) = 0 [pid 545] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 545] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 545] close(3) = 0 [pid 545] close(4) = 0 [pid 545] mkdir("./file0", 0777) = 0 [pid 545] mount("/dev/loop0", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"..../strace-static-x86_64: Process 560 attached [pid 560] set_robust_list(0x7f1443ea39a0, 24) = 0 [pid 560] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 560] futex(0x7f1443f956d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 534] +++ exited with 0 +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=534, si_uid=0, si_status=0, si_utime=8, si_stime=19} --- [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 538] futex(0x7f1443f956d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 560] <... futex resumed>) = 0 [pid 538] <... futex resumed>) = 1 [pid 560] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 538] futex(0x7f1443f956dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 560] <... prlimit64 resumed>NULL) = 0 [pid 560] futex(0x7f1443f956dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 538] <... futex resumed>) = 0 [pid 560] futex(0x7f1443f956d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 538] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 538] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 293] <... restart_syscall resumed>) = 0 [pid 293] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 293] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 542] <... mmap resumed>) = 0x200000000000 [pid 539] <... futex resumed>) = 0 [pid 533] <... fsconfig resumed>) = 0 [pid 542] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 539] sched_setscheduler(0, SCHED_FIFO, [7] [pid 533] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 542] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 539] <... sched_setscheduler resumed>) = 0 [pid 533] <... futex resumed>) = 1 [pid 540] <... futex resumed>) = 0 [pid 539] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] <... futex resumed>) = 0 [pid 539] <... futex resumed>) = 1 [pid 533] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 539] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 532] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 540] exit_group(0 [pid 533] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 533] openat(AT_FDCWD, "./file0", O_RDONLY [pid 542] <... futex resumed>) = ? [pid 540] <... exit_group resumed>) = ? [pid 538] <... futex resumed>) = 0 [pid 532] <... futex resumed>) = 0 [pid 542] +++ exited with 0 +++ [pid 533] <... openat resumed>) = 5 [pid 532] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 533] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 533] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 538] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 532] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 539] <... futex resumed>) = 0 [pid 538] <... futex resumed>) = 1 [pid 539] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 540] +++ exited with 0 +++ [pid 539] <... mmap resumed>) = 0x200000000000 [pid 538] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 533] <... futex resumed>) = 0 [pid 532] <... futex resumed>) = 1 [pid 539] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 533] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 539] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 538] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 532] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=540, si_uid=0, si_status=0, si_utime=9, si_stime=22} --- [pid 538] exit_group(0 [pid 539] <... futex resumed>) = ? [pid 560] <... futex resumed>) = ? [pid 538] <... exit_group resumed>) = ? [pid 539] +++ exited with 0 +++ [pid 560] +++ exited with 0 +++ [pid 292] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 33.965346][ T545] loop0: detected capacity change from 0 to 40427 [ 34.000943][ T545] F2FS-fs (loop0): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 292] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 533] <... ioctl resumed>) = 0 [pid 292] getdents64(3, [pid 533] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 532] <... futex resumed>) = 0 [pid 292] <... getdents64 resumed>0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 533] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 532] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 533] <... prlimit64 resumed>NULL) = 0 [pid 532] <... futex resumed>) = 0 [pid 292] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 533] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 533] <... futex resumed>) = 0 [pid 533] sched_setscheduler(0, SCHED_FIFO, [7] [pid 532] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 533] <... sched_setscheduler resumed>) = 0 [pid 532] <... futex resumed>) = 0 [pid 533] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 executing program [pid 532] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 533] <... futex resumed>) = 0 [pid 532] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 533] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 532] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 533] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 532] <... futex resumed>) = 0 [pid 533] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 532] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 293] <... umount2 resumed>) = 0 [pid 293] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 293] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(4, 0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 293] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 293] close(4) = 0 [pid 293] rmdir("./7/file0") = 0 [pid 293] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./7/binderfs") = 0 [pid 293] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./7") = 0 [pid 293] mkdir("./8", 0777) = 0 [pid 293] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 293] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 293] close(3) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee9a690) = 565 ./strace-static-x86_64: Process 565 attached [pid 565] set_robust_list(0x55555ee9a6a0, 24) = 0 [pid 565] chdir("./8") = 0 [pid 565] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 565] setpgid(0, 0) = 0 [pid 565] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 565] write(3, "1000", 4) = 4 [pid 565] close(3) = 0 [pid 565] symlink("/dev/binderfs", "./binderfs") = 0 [pid 565] write(1, "executing program\n", 18) = 18 [pid 565] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 565] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, NULL, 8) = 0 [pid 565] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 565] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443ea4000 [pid 565] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 565] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 565] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} => {parent_tid=[566]}, 88) = 566 [pid 565] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 565] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 565] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 566 attached [pid 566] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 566] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 566] memfd_create("syzkaller", 0) = 3 [pid 566] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 [pid 533] <... mmap resumed>) = 0x200000000000 [pid 533] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 533] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 532] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 532] exit_group(0 [pid 533] <... futex resumed>) = ? [pid 532] <... exit_group resumed>) = ? [pid 533] +++ exited with 0 +++ [pid 538] +++ exited with 0 +++ [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=538, si_uid=0, si_status=0, si_utime=9, si_stime=21} --- [ 34.085095][ T545] F2FS-fs (loop0): Found nat_bits in checkpoint [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 532] +++ exited with 0 +++ [pid 294] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=532, si_uid=0, si_status=0, si_utime=8, si_stime=21} --- [pid 294] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 291] <... restart_syscall resumed>) = 0 [pid 294] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 294] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 294] <... openat resumed>) = 3 [pid 291] <... openat resumed>) = 3 [pid 294] newfstatat(3, "", [pid 291] newfstatat(3, "", [pid 294] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] getdents64(3, [pid 291] getdents64(3, [pid 294] <... getdents64 resumed>0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 291] <... getdents64 resumed>0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 294] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 545] <... mount resumed>) = 0 [pid 545] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 545] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 545] ioctl(4, LOOP_CLR_FD) = 0 [pid 545] close(4) = 0 [pid 545] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 544] <... futex resumed>) = 0 [pid 292] <... umount2 resumed>) = 0 [pid 544] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 544] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 545] <... futex resumed>) = 1 [pid 545] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 545] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 544] <... futex resumed>) = 0 [pid 544] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 544] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 545] <... futex resumed>) = 1 [pid 545] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 292] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./8/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 292] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(4, 0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 292] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 292] close(4) = 0 [pid 292] rmdir("./8/file0") = 0 [pid 292] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./8/binderfs") = 0 [pid 292] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./8") = 0 [pid 292] mkdir("./9", 0777) = 0 [pid 292] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 292] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 292] close(3) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee9a690) = 569 [pid 545] <... fsconfig resumed>) = 0 [pid 545] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 544] <... futex resumed>) = 0 [pid 545] openat(AT_FDCWD, "./file0", O_RDONLY [pid 544] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 545] <... openat resumed>) = 5 [pid 544] <... futex resumed>) = 0 [pid 545] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 544] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 545] <... futex resumed>) = 0 [pid 544] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 545] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 544] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 544] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 545] <... ioctl resumed>) = 0 [pid 545] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 544] <... futex resumed>) = 0 [pid 545] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 544] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 545] <... prlimit64 resumed>NULL) = 0 [pid 544] <... futex resumed>) = 0 [pid 545] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 544] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 545] <... futex resumed>) = 0 [pid 544] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 545] sched_setscheduler(0, SCHED_FIFO, [7] [pid 544] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 545] <... sched_setscheduler resumed>) = 0 [pid 544] <... futex resumed>) = 0 [pid 545] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 544] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 545] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 544] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 544] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 545] <... futex resumed>) = 0 [pid 544] <... futex resumed>) = 1 [pid 545] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0./strace-static-x86_64: Process 569 attached [pid 544] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 294] <... umount2 resumed>) = 0 [pid 291] <... umount2 resumed>) = 0 [pid 569] set_robust_list(0x55555ee9a6a0, 24 [pid 294] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 569] <... set_robust_list resumed>) = 0 [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 569] chdir("./9" [pid 294] newfstatat(AT_FDCWD, "./7/file0", [pid 291] newfstatat(AT_FDCWD, "./8/file0", [pid 569] <... chdir resumed>) = 0 [pid 294] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 569] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 294] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 569] <... prctl resumed>) = 0 [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 569] setpgid(0, 0 [pid 294] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 569] <... setpgid resumed>) = 0 [pid 294] <... openat resumed>) = 4 [ 34.246339][ T545] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [pid 291] <... openat resumed>) = 4 [pid 569] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 294] newfstatat(4, "", [pid 291] newfstatat(4, "", [pid 569] <... openat resumed>) = 3 [pid 294] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 569] write(3, "1000", 4 [pid 294] getdents64(4, [pid 291] getdents64(4, [pid 569] <... write resumed>) = 4 [pid 294] <... getdents64 resumed>0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 291] <... getdents64 resumed>0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 569] close(3 [pid 294] getdents64(4, [pid 291] getdents64(4, [pid 569] <... close resumed>) = 0 [pid 294] <... getdents64 resumed>0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 291] <... getdents64 resumed>0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 569] symlink("/dev/binderfs", "./binderfs" [pid 294] close(4 [pid 291] close(4 [pid 569] <... symlink resumed>) = 0 [pid 294] <... close resumed>) = 0 [pid 291] <... close resumed>) = 0 executing program [pid 569] write(1, "executing program\n", 18 [pid 294] rmdir("./7/file0" [pid 291] rmdir("./8/file0" [pid 569] <... write resumed>) = 18 [pid 294] <... rmdir resumed>) = 0 [pid 291] <... rmdir resumed>) = 0 [pid 569] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 294] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 569] <... futex resumed>) = 0 [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 569] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, [pid 294] newfstatat(AT_FDCWD, "./7/binderfs", [pid 291] newfstatat(AT_FDCWD, "./8/binderfs", [pid 569] <... rt_sigaction resumed>NULL, 8) = 0 [pid 294] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 569] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 294] unlink("./7/binderfs" [pid 291] unlink("./8/binderfs" [pid 569] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 294] <... unlink resumed>) = 0 [pid 291] <... unlink resumed>) = 0 [pid 569] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 294] getdents64(3, [pid 291] getdents64(3, [pid 569] <... mmap resumed>) = 0x7f1443ea4000 [pid 294] <... getdents64 resumed>0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 291] <... getdents64 resumed>0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 569] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE [pid 294] close(3 [pid 291] close(3 [pid 569] <... mprotect resumed>) = 0 [pid 294] <... close resumed>) = 0 [pid 291] <... close resumed>) = 0 [pid 569] rt_sigprocmask(SIG_BLOCK, ~[], [pid 294] rmdir("./7" [pid 291] rmdir("./8" [pid 569] <... rt_sigprocmask resumed>[], 8) = 0 [pid 294] <... rmdir resumed>) = 0 [pid 291] <... rmdir resumed>) = 0 [pid 569] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} [pid 294] mkdir("./8", 0777 [pid 291] mkdir("./9", 0777 [pid 294] <... mkdir resumed>) = 0 [pid 291] <... mkdir resumed>) = 0 [pid 569] <... clone3 resumed> => {parent_tid=[570]}, 88) = 570 [pid 294] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 291] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 569] rt_sigprocmask(SIG_SETMASK, [], [pid 294] <... openat resumed>) = 3 [pid 291] <... openat resumed>) = 3 ./strace-static-x86_64: Process 570 attached [pid 569] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 545] <... mmap resumed>) = 0x200000000000 [pid 294] ioctl(3, LOOP_CLR_FD [pid 291] ioctl(3, LOOP_CLR_FD [pid 570] set_robust_list(0x7f1443ec49a0, 24 [pid 569] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 545] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 294] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 291] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 570] <... set_robust_list resumed>) = 0 [pid 569] <... futex resumed>) = 0 [pid 545] <... futex resumed>) = 1 [pid 544] <... futex resumed>) = 0 [pid 294] close(3 [pid 291] close(3 [pid 570] rt_sigprocmask(SIG_SETMASK, [], [pid 569] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 545] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 544] exit_group(0 [pid 294] <... close resumed>) = 0 [pid 291] <... close resumed>) = 0 [pid 570] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 566] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 545] <... futex resumed>) = ? [pid 544] <... exit_group resumed>) = ? [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 570] memfd_create("syzkaller", 0 [pid 545] +++ exited with 0 +++ [pid 570] <... memfd_create resumed>) = 3 [pid 294] <... clone resumed>, child_tidptr=0x55555ee9a690) = 571 [pid 291] <... clone resumed>, child_tidptr=0x55555ee9a690) = 572 [pid 570] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 ./strace-static-x86_64: Process 572 attached [pid 572] set_robust_list(0x55555ee9a6a0, 24) = 0 [pid 572] chdir("./9") = 0 [pid 572] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 572] setpgid(0, 0) = 0 [pid 572] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 572] write(3, "1000", 4) = 4 [pid 572] close(3) = 0 [pid 572] symlink("/dev/binderfs", "./binderfs") = 0 [pid 572] write(1, "executing program\n", 18executing program ) = 18 [pid 572] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 572] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, NULL, 8) = 0 [pid 572] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 572] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443ea4000 [pid 572] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 572] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 572] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} => {parent_tid=[573]}, 88) = 573 [pid 572] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 572] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 572] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 573 attached [pid 573] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 573] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 573] memfd_create("syzkaller", 0) = 3 [pid 573] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 ./strace-static-x86_64: Process 571 attached [pid 571] set_robust_list(0x55555ee9a6a0, 24) = 0 [pid 571] chdir("./8") = 0 [pid 571] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 571] setpgid(0, 0) = 0 [pid 571] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 571] write(3, "1000", 4) = 4 [pid 571] close(3) = 0 [pid 571] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 571] write(1, "executing program\n", 18) = 18 [pid 571] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 571] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, NULL, 8) = 0 [pid 571] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 571] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443ea4000 [pid 571] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 571] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 571] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} => {parent_tid=[574]}, 88) = 574 [pid 571] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 571] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 571] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 544] +++ exited with 0 +++ [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=544, si_uid=0, si_status=0, si_utime=8, si_stime=16} --- [pid 290] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 290] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 290] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 574 attached [pid 574] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 574] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 574] memfd_create("syzkaller", 0) = 3 [pid 574] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 [pid 566] <... write resumed>) = 20699119 [pid 566] munmap(0x7f143baa4000, 138412032) = 0 [pid 566] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 566] ioctl(4, LOOP_SET_FD, 3 [pid 290] <... umount2 resumed>) = 0 [pid 566] <... ioctl resumed>) = 0 [pid 290] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 566] close(3) = 0 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 566] close(4) = 0 [pid 290] newfstatat(AT_FDCWD, "./8/file0", [pid 566] mkdir("./file0", 0777 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 566] <... mkdir resumed>) = 0 [pid 290] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 566] mount("/dev/loop3", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 290] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(4, 0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 290] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 290] close(4) = 0 [pid 290] rmdir("./8/file0") = 0 [pid 290] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./8/binderfs") = 0 [pid 290] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./8") = 0 [pid 290] mkdir("./9", 0777) = 0 [pid 290] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 290] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 290] close(3) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee9a690) = 577 ./strace-static-x86_64: Process 577 attached [pid 577] set_robust_list(0x55555ee9a6a0, 24) = 0 [pid 577] chdir("./9") = 0 [pid 577] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 577] setpgid(0, 0) = 0 [pid 577] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 577] write(3, "1000", 4) = 4 [pid 577] close(3) = 0 [pid 577] symlink("/dev/binderfs", "./binderfs") = 0 [pid 577] write(1, "executing program\n", 18executing program ) = 18 [pid 577] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 577] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, NULL, 8) = 0 [pid 577] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 577] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443ea4000 [pid 577] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 577] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 577] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} => {parent_tid=[578]}, 88) = 578 [pid 577] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 577] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 577] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 578 attached [pid 578] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 578] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 578] memfd_create("syzkaller", 0) = 3 [pid 578] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 [ 34.526918][ T566] loop3: detected capacity change from 0 to 40427 [ 34.556053][ T566] F2FS-fs (loop3): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 34.587290][ T566] F2FS-fs (loop3): Found nat_bits in checkpoint [pid 570] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 573] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 566] <... mount resumed>) = 0 [pid 566] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 566] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 566] ioctl(4, LOOP_CLR_FD) = 0 [pid 566] close(4) = 0 [pid 566] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 565] <... futex resumed>) = 0 [pid 566] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 565] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 566] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 565] <... futex resumed>) = 0 [pid 566] fspick(AT_FDCWD, "./file0", 0 [pid 565] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 566] <... fspick resumed>) = 4 [pid 566] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 565] <... futex resumed>) = 0 [pid 566] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 565] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 565] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 574] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 566] <... fsconfig resumed>) = 0 [pid 566] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 565] <... futex resumed>) = 0 [pid 566] openat(AT_FDCWD, "./file0", O_RDONLY [pid 565] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 566] <... openat resumed>) = 5 [pid 565] <... futex resumed>) = 0 [pid 566] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 565] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 566] <... futex resumed>) = 0 [pid 565] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 566] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 565] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 565] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 566] <... ioctl resumed>) = 0 [pid 566] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 565] <... futex resumed>) = 0 [pid 566] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 565] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 566] <... prlimit64 resumed>NULL) = 0 [pid 565] <... futex resumed>) = 0 [pid 566] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 565] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 566] <... futex resumed>) = 0 [pid 565] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 566] sched_setscheduler(0, SCHED_FIFO, [7] [pid 565] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 566] <... sched_setscheduler resumed>) = 0 [pid 565] <... futex resumed>) = 0 [pid 566] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 565] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 566] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 565] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 34.679995][ T566] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [pid 565] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 566] <... futex resumed>) = 0 [pid 565] <... futex resumed>) = 1 [pid 566] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 565] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 566] <... mmap resumed>) = 0x200000000000 [pid 566] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 566] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 565] <... futex resumed>) = 0 [pid 565] exit_group(0 [pid 566] <... futex resumed>) = ? [pid 565] <... exit_group resumed>) = ? [pid 566] +++ exited with 0 +++ [pid 574] <... write resumed>) = 20699119 [pid 574] munmap(0x7f143baa4000, 138412032) = 0 [pid 574] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 574] ioctl(4, LOOP_SET_FD, 3 [pid 565] +++ exited with 0 +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=565, si_uid=0, si_status=0, si_utime=10, si_stime=22} --- [pid 293] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 293] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 293] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 574] <... ioctl resumed>) = 0 [pid 574] close(3) = 0 [pid 574] close(4) = 0 [pid 574] mkdir("./file0", 0777 [pid 573] <... write resumed>) = 20699119 [pid 573] munmap(0x7f143baa4000, 138412032) = 0 [pid 573] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 573] ioctl(4, LOOP_SET_FD, 3 [pid 574] <... mkdir resumed>) = 0 [pid 574] mount("/dev/loop4", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 573] <... ioctl resumed>) = 0 [pid 573] close(3) = 0 [pid 573] close(4) = 0 [pid 573] mkdir("./file0", 0777) = 0 [ 34.836270][ T574] loop4: detected capacity change from 0 to 40427 [pid 573] mount("/dev/loop1", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 578] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 570] <... write resumed>) = 20699119 [pid 570] munmap(0x7f143baa4000, 138412032) = 0 [pid 570] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 570] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 570] close(3) = 0 [pid 570] close(4) = 0 [pid 570] mkdir("./file0", 0777) = 0 [ 34.884833][ T573] loop1: detected capacity change from 0 to 40427 [ 34.896449][ T574] F2FS-fs (loop4): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 34.918704][ T573] F2FS-fs (loop1): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 570] mount("/dev/loop2", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 293] <... umount2 resumed>) = 0 [pid 293] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./8/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 293] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(4, 0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 293] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 293] close(4) = 0 [pid 293] rmdir("./8/file0") = 0 [pid 293] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./8/binderfs") = 0 [pid 293] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./8") = 0 [pid 293] mkdir("./9", 0777) = 0 [pid 293] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 293] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 293] close(3) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee9a690) = 587 ./strace-static-x86_64: Process 587 attached [pid 587] set_robust_list(0x55555ee9a6a0, 24) = 0 [pid 587] chdir("./9") = 0 [pid 587] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 587] setpgid(0, 0) = 0 [pid 587] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 587] write(3, "1000", 4) = 4 [pid 587] close(3) = 0 [pid 587] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 587] write(1, "executing program\n", 18) = 18 [pid 587] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 587] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, NULL, 8) = 0 [pid 587] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 587] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443ea4000 [pid 587] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 587] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 587] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} => {parent_tid=[588]}, 88) = 588 [pid 587] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 587] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 587] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 588 attached [pid 588] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 588] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 588] memfd_create("syzkaller", 0) = 3 [pid 588] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 [ 34.931237][ T573] F2FS-fs (loop1): Found nat_bits in checkpoint [ 34.938639][ T570] loop2: detected capacity change from 0 to 40427 [ 34.948918][ T574] F2FS-fs (loop4): Found nat_bits in checkpoint [ 34.968783][ T570] F2FS-fs (loop2): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 578] <... write resumed>) = 20699119 [pid 578] munmap(0x7f143baa4000, 138412032) = 0 [pid 578] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 578] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 578] close(3) = 0 [pid 578] close(4) = 0 [pid 578] mkdir("./file0", 0777) = 0 [ 34.989401][ T570] F2FS-fs (loop2): Found nat_bits in checkpoint [pid 578] mount("/dev/loop0", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 573] <... mount resumed>) = 0 [pid 573] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 573] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 574] <... mount resumed>) = 0 [pid 573] ioctl(4, LOOP_CLR_FD) = 0 [pid 573] close(4) = 0 [pid 574] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 573] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 574] <... openat resumed>) = 3 [pid 572] <... futex resumed>) = 0 [pid 572] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 572] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 573] <... futex resumed>) = 1 [pid 573] fspick(AT_FDCWD, "./file0", 0 [pid 574] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 573] <... fspick resumed>) = 4 [pid 574] ioctl(4, LOOP_CLR_FD) = 0 [pid 573] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 574] close(4 [pid 572] <... futex resumed>) = 0 [pid 572] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 572] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 573] <... futex resumed>) = 1 [pid 574] <... close resumed>) = 0 [pid 573] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 574] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 571] <... futex resumed>) = 0 [pid 571] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 571] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 574] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 574] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 571] <... futex resumed>) = 0 [pid 571] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 571] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 574] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 573] <... fsconfig resumed>) = 0 [pid 573] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 572] <... futex resumed>) = 0 [pid 572] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 572] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 573] openat(AT_FDCWD, "./file0", O_RDONLY) = 5 [pid 573] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 572] <... futex resumed>) = 0 [pid 572] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 572] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 573] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140) = 0 [pid 573] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 572] <... futex resumed>) = 0 [pid 572] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 572] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 573] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, NULL) = 0 [pid 573] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 572] <... futex resumed>) = 0 [pid 572] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 572] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 573] sched_setscheduler(0, SCHED_FIFO, [7]) = 0 [ 35.046485][ T578] loop0: detected capacity change from 0 to 40427 [ 35.068071][ T578] F2FS-fs (loop0): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 35.077854][ T573] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [pid 573] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 572] <... futex resumed>) = 0 [pid 573] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 572] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 573] <... futex resumed>) = 0 [pid 572] <... futex resumed>) = 1 [pid 573] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 574] <... fsconfig resumed>) = 0 [pid 573] <... mmap resumed>) = 0x200000000000 [pid 572] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 571] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 574] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 573] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 574] <... futex resumed>) = 0 [pid 573] <... futex resumed>) = 0 [pid 574] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 573] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 572] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 571] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 574] <... futex resumed>) = 0 [pid 571] <... futex resumed>) = 1 [pid 572] exit_group(0 [pid 571] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 574] openat(AT_FDCWD, "./file0", O_RDONLY) = 5 [pid 573] <... futex resumed>) = ? [pid 572] <... exit_group resumed>) = ? [pid 570] <... mount resumed>) = 0 [pid 573] +++ exited with 0 +++ [pid 574] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 574] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 571] <... futex resumed>) = 0 [pid 571] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 570] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 578] <... mount resumed>) = 0 [pid 574] <... futex resumed>) = 0 [pid 571] <... futex resumed>) = 1 [pid 570] <... openat resumed>) = 3 [pid 578] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 574] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 571] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 570] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 578] <... openat resumed>) = 3 [pid 574] <... ioctl resumed>) = 0 [pid 570] <... openat resumed>) = 4 [pid 578] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 574] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 570] ioctl(4, LOOP_CLR_FD [pid 578] <... openat resumed>) = 4 [pid 574] <... futex resumed>) = 1 [pid 571] <... futex resumed>) = 0 [pid 570] <... ioctl resumed>) = 0 [pid 578] ioctl(4, LOOP_CLR_FD [pid 574] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 571] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [ 35.093195][ T574] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 35.106212][ T578] F2FS-fs (loop0): Found nat_bits in checkpoint [ 35.125279][ T570] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [pid 570] close(4 [pid 578] <... ioctl resumed>) = 0 [pid 574] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 571] <... futex resumed>) = 0 [pid 570] <... close resumed>) = 0 [pid 571] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 570] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 578] close(4 [pid 574] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 570] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 569] <... futex resumed>) = 0 [pid 578] <... close resumed>) = 0 [pid 574] <... prlimit64 resumed>NULL) = 0 [pid 569] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 578] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 574] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 569] <... futex resumed>) = 1 [pid 570] <... futex resumed>) = 0 [pid 570] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 570] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 570] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 574] <... futex resumed>) = 1 [pid 571] <... futex resumed>) = 0 [pid 578] <... futex resumed>) = 1 [pid 577] <... futex resumed>) = 0 [pid 574] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 569] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 571] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 571] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 578] fspick(AT_FDCWD, "./file0", 0 [pid 577] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 574] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 569] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 578] <... fspick resumed>) = 4 [pid 577] <... futex resumed>) = 0 [pid 574] sched_setscheduler(0, SCHED_FIFO, [7] [pid 569] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 570] <... futex resumed>) = 0 [pid 577] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 569] <... futex resumed>) = 1 [pid 574] <... sched_setscheduler resumed>) = 0 [pid 578] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 577] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 574] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 577] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 574] <... futex resumed>) = 1 [pid 571] <... futex resumed>) = 0 [pid 578] <... futex resumed>) = 0 [pid 570] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 569] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 577] <... futex resumed>) = 0 [pid 574] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 578] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 577] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 571] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 574] <... futex resumed>) = 0 [pid 571] <... futex resumed>) = 1 [pid 574] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 571] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 572] +++ exited with 0 +++ [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=572, si_uid=0, si_status=0, si_utime=11, si_stime=25} --- [pid 291] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 291] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 291] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 588] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 574] <... mmap resumed>) = 0x200000000000 [pid 574] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 571] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 569] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 574] <... futex resumed>) = 0 [pid 569] futex(0x7f1443f956dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 574] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 571] exit_group(0 [pid 569] <... futex resumed>) = 0 [ 35.193154][ T578] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [pid 569] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 574] <... futex resumed>) = ? [pid 571] <... exit_group resumed>) = ? [pid 569] <... mmap resumed>) = 0x7f1443e83000 [pid 574] +++ exited with 0 +++ [pid 569] mprotect(0x7f1443e84000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 569] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 569] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ea3990, parent_tid=0x7f1443ea3990, exit_signal=0, stack=0x7f1443e83000, stack_size=0x20300, tls=0x7f1443ea36c0} => {parent_tid=[599]}, 88) = 599 [pid 569] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 569] futex(0x7f1443f956d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 569] futex(0x7f1443f956dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 578] <... fsconfig resumed>) = 0 [pid 570] <... fsconfig resumed>) = 0 [pid 578] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 577] <... futex resumed>) = 0 [pid 570] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 578] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 577] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 570] <... futex resumed>) = 0 [pid 578] <... futex resumed>) = 0 [pid 577] <... futex resumed>) = 1 [pid 570] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 578] openat(AT_FDCWD, "./file0", O_RDONLY) = 5 [pid 577] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 578] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 577] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 578] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 577] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 578] <... futex resumed>) = 0 [pid 577] <... futex resumed>) = 1 [pid 578] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 577] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 578] <... ioctl resumed>) = 0 [pid 578] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 577] <... futex resumed>) = 0 [pid 578] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 577] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 578] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 577] <... futex resumed>) = 0 [pid 578] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 577] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 578] <... prlimit64 resumed>NULL) = 0 [pid 578] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 577] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 578] <... futex resumed>) = 0 [pid 578] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 577] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 578] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 577] <... futex resumed>) = 0 [pid 578] sched_setscheduler(0, SCHED_FIFO, [7] [pid 577] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 578] <... sched_setscheduler resumed>) = 0 [pid 578] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 577] <... futex resumed>) = 0 [pid 578] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 577] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 578] <... futex resumed>) = 0 [pid 577] <... futex resumed>) = 1 [pid 578] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0./strace-static-x86_64: Process 599 attached [pid 588] <... write resumed>) = 20699119 [pid 571] +++ exited with 0 +++ [pid 569] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 291] <... umount2 resumed>) = 0 [pid 599] set_robust_list(0x7f1443ea39a0, 24 [pid 588] munmap(0x7f143baa4000, 138412032 [pid 569] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 599] <... set_robust_list resumed>) = 0 [pid 588] <... munmap resumed>) = 0 [pid 569] <... futex resumed>) = 1 [pid 599] rt_sigprocmask(SIG_SETMASK, [], [pid 588] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 569] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 599] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 588] <... openat resumed>) = 4 [pid 599] openat(AT_FDCWD, "./file0", O_RDONLY) = 5 [pid 588] ioctl(4, LOOP_SET_FD, 3 [pid 599] futex(0x7f1443f956dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 578] <... mmap resumed>) = 0x200000000000 [pid 577] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 570] <... futex resumed>) = 0 [pid 291] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 578] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 577] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 570] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 294] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=571, si_uid=0, si_status=0, si_utime=8, si_stime=20} --- [pid 578] <... futex resumed>) = 0 [pid 577] exit_group(0) = ? [pid 599] futex(0x7f1443f956d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 578] +++ exited with 0 +++ [pid 294] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW [pid 588] <... ioctl resumed>) = 0 [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 294] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 294] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] getdents64(3, 0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 588] close(3 [pid 294] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] newfstatat(AT_FDCWD, "./9/file0", [pid 588] <... close resumed>) = 0 [pid 588] close(4 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 588] <... close resumed>) = 0 [pid 588] mkdir("./file0", 0777 [pid 291] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 588] <... mkdir resumed>) = 0 [pid 291] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 588] mount("/dev/loop3", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 291] <... openat resumed>) = 4 [pid 291] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(4, 0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 291] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 291] close(4) = 0 [pid 291] rmdir("./9/file0" [pid 570] <... ioctl resumed>) = 0 [pid 291] <... rmdir resumed>) = 0 [pid 570] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 569] <... futex resumed>) = 0 [pid 291] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 570] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 569] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 570] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 569] <... futex resumed>) = 0 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 570] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 569] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 291] newfstatat(AT_FDCWD, "./9/binderfs", [pid 570] <... prlimit64 resumed>NULL) = 0 [pid 570] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 569] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 570] <... futex resumed>) = 0 [pid 569] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 570] sched_setscheduler(0, SCHED_FIFO, [7] [pid 569] <... futex resumed>) = 0 [pid 291] unlink("./9/binderfs" [pid 570] <... sched_setscheduler resumed>) = 0 [pid 569] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 570] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 570] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 569] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 291] <... unlink resumed>) = 0 [pid 569] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 291] getdents64(3, [pid 570] <... futex resumed>) = 0 [pid 569] <... futex resumed>) = 1 [pid 570] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 291] <... getdents64 resumed>0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 570] <... mmap resumed>) = 0x200000000000 [pid 569] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 291] close(3 [pid 570] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 569] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 291] <... close resumed>) = 0 [pid 570] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 569] exit_group(0 [pid 291] rmdir("./9" [pid 599] <... futex resumed>) = ? [pid 570] <... futex resumed>) = ? [pid 569] <... exit_group resumed>) = ? [pid 570] +++ exited with 0 +++ [pid 291] <... rmdir resumed>) = 0 [pid 599] +++ exited with 0 +++ [pid 291] mkdir("./10", 0777) = 0 [pid 291] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 291] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 291] close(3) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee9a690) = 602 ./strace-static-x86_64: Process 602 attached [pid 602] set_robust_list(0x55555ee9a6a0, 24) = 0 [pid 602] chdir("./10") = 0 [pid 602] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 602] setpgid(0, 0) = 0 [pid 602] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 602] write(3, "1000", 4) = 4 [pid 602] close(3) = 0 [pid 602] symlink("/dev/binderfs", "./binderfs") = 0 [pid 602] write(1, "executing program\n", 18executing program ) = 18 [pid 602] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 602] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, NULL, 8) = 0 [pid 602] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 602] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443ea4000 [pid 602] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 602] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 602] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} => {parent_tid=[603]}, 88) = 603 [pid 602] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 602] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 35.375558][ T588] loop3: detected capacity change from 0 to 40427 [ 35.394669][ T588] F2FS-fs (loop3): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 602] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 577] +++ exited with 0 +++ [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=577, si_uid=0, si_status=0, si_utime=9, si_stime=16} --- [pid 290] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 290] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 290] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 603 attached [pid 603] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 603] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 603] memfd_create("syzkaller", 0) = 3 [pid 603] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 [pid 294] <... umount2 resumed>) = 0 [pid 294] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 569] +++ exited with 0 +++ [pid 294] newfstatat(AT_FDCWD, "./8/file0", [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=569, si_uid=0, si_status=0, si_utime=9, si_stime=24} --- [pid 294] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 294] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 294] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] getdents64(4, 0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 294] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 294] close(4) = 0 [pid 294] rmdir("./8/file0") = 0 [pid 294] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] unlink("./8/binderfs") = 0 [pid 294] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 294] close(3) = 0 [pid 294] rmdir("./8") = 0 [pid 294] mkdir("./9", 0777) = 0 [pid 294] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 292] <... restart_syscall resumed>) = 0 [pid 294] <... openat resumed>) = 3 [pid 294] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 294] close(3 [pid 292] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW [pid 294] <... close resumed>) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", [pid 294] <... clone resumed>, child_tidptr=0x55555ee9a690) = 604 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x55555ee9b730 /* 4 entries */, 32768) = 112 [ 35.449162][ T588] F2FS-fs (loop3): Found nat_bits in checkpoint [pid 292] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 604 attached [pid 604] set_robust_list(0x55555ee9a6a0, 24) = 0 [pid 604] chdir("./9") = 0 [pid 604] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 604] setpgid(0, 0) = 0 [pid 604] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 604] write(3, "1000", 4) = 4 [pid 604] close(3) = 0 [pid 604] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 604] write(1, "executing program\n", 18) = 18 [pid 604] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 604] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, NULL, 8) = 0 [pid 604] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 604] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443ea4000 [pid 604] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 604] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} => {parent_tid=[605]}, 88) = 605 [pid 604] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 604] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 604] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 588] <... mount resumed>) = 0 [pid 588] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 588] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 588] ioctl(4, LOOP_CLR_FD) = 0 [pid 588] close(4) = 0 [pid 588] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 587] <... futex resumed>) = 0 [pid 587] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 587] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 588] <... futex resumed>) = 1 [pid 588] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 588] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 587] <... futex resumed>) = 0 [pid 587] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 587] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 588] <... futex resumed>) = 1 [pid 588] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 290] <... umount2 resumed>) = 0 [pid 290] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 290] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(4, 0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 290] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 290] close(4) = 0 [pid 290] rmdir("./9/file0") = 0 [pid 290] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./9/binderfs") = 0 [pid 290] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./9") = 0 [pid 290] mkdir("./10", 0777) = 0 ./strace-static-x86_64: Process 605 attached [pid 605] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 290] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 605] rt_sigprocmask(SIG_SETMASK, [], [pid 290] <... openat resumed>) = 3 [pid 605] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 605] memfd_create("syzkaller", 0 [pid 290] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 290] close(3) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 605] <... memfd_create resumed>) = 3 [pid 605] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 [pid 290] <... clone resumed>, child_tidptr=0x55555ee9a690) = 607 ./strace-static-x86_64: Process 607 attached [pid 607] set_robust_list(0x55555ee9a6a0, 24) = 0 [pid 607] chdir("./10") = 0 [pid 607] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 607] setpgid(0, 0) = 0 [pid 607] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 607] write(3, "1000", 4) = 4 [pid 607] close(3) = 0 [pid 607] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 607] write(1, "executing program\n", 18) = 18 [pid 607] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 607] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, NULL, 8) = 0 [pid 607] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 607] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443ea4000 [pid 607] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 607] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 607] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} => {parent_tid=[609]}, 88) = 609 [pid 607] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 607] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 607] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 588] <... fsconfig resumed>) = 0 [pid 588] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 587] <... futex resumed>) = 0 [pid 588] openat(AT_FDCWD, "./file0", O_RDONLY [pid 587] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 588] <... openat resumed>) = 5 [pid 587] <... futex resumed>) = 0 [pid 588] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 587] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 588] <... futex resumed>) = 0 [pid 587] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 588] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 587] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 588] <... ioctl resumed>) = 0 [pid 587] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 588] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 587] <... futex resumed>) = 0 [pid 588] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 587] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 588] <... prlimit64 resumed>NULL) = 0 [pid 587] <... futex resumed>) = 0 [pid 588] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 587] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 588] <... futex resumed>) = 0 [pid 587] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 588] sched_setscheduler(0, SCHED_FIFO, [7] [pid 587] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 588] <... sched_setscheduler resumed>) = 0 [pid 587] <... futex resumed>) = 0 [pid 588] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 587] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 588] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 587] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 587] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 588] <... futex resumed>) = 0 [pid 587] <... futex resumed>) = 1 [pid 588] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [ 35.553092][ T588] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [pid 587] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 292] <... umount2 resumed>) = 0 [pid 292] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 292] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(4, 0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 292] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 292] close(4) = 0 [pid 292] rmdir("./9/file0" [pid 588] <... mmap resumed>) = 0x200000000000 ./strace-static-x86_64: Process 609 attached [pid 588] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 609] set_robust_list(0x7f1443ec49a0, 24 [pid 588] <... futex resumed>) = 1 [pid 609] <... set_robust_list resumed>) = 0 [pid 609] rt_sigprocmask(SIG_SETMASK, [], [pid 588] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 609] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 587] <... futex resumed>) = 0 [pid 587] exit_group(0 [pid 588] <... futex resumed>) = ? [pid 587] <... exit_group resumed>) = ? [pid 609] memfd_create("syzkaller", 0 [pid 588] +++ exited with 0 +++ [pid 609] <... memfd_create resumed>) = 3 [pid 609] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 [pid 292] <... rmdir resumed>) = 0 [pid 292] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./9/binderfs") = 0 [pid 292] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./9") = 0 [pid 292] mkdir("./10", 0777) = 0 [pid 292] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 292] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 292] close(3) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee9a690) = 610 ./strace-static-x86_64: Process 610 attached [pid 610] set_robust_list(0x55555ee9a6a0, 24) = 0 [pid 610] chdir("./10") = 0 [pid 610] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 610] setpgid(0, 0) = 0 [pid 610] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 610] write(3, "1000", 4) = 4 [pid 610] close(3) = 0 [pid 610] symlink("/dev/binderfs", "./binderfs") = 0 [pid 610] write(1, "executing program\n", 18executing program ) = 18 [pid 610] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 610] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, NULL, 8) = 0 [pid 610] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 610] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443ea4000 [pid 610] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 610] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 610] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} => {parent_tid=[611]}, 88) = 611 [pid 610] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 610] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 610] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 611 attached [pid 611] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 611] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 611] memfd_create("syzkaller", 0) = 3 [pid 611] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 [pid 587] +++ exited with 0 +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=587, si_uid=0, si_status=0, si_utime=13, si_stime=20} --- [pid 293] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 293] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 293] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 603] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 293] <... umount2 resumed>) = 0 [pid 293] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 293] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(4, 0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 293] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 293] close(4) = 0 [pid 293] rmdir("./9/file0") = 0 [pid 293] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./9/binderfs") = 0 [pid 293] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./9") = 0 [pid 293] mkdir("./10", 0777) = 0 [pid 293] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 293] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 293] close(3) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee9a690) = 612 ./strace-static-x86_64: Process 612 attached [pid 612] set_robust_list(0x55555ee9a6a0, 24) = 0 [pid 612] chdir("./10") = 0 [pid 612] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 612] setpgid(0, 0) = 0 [pid 612] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 612] write(3, "1000", 4) = 4 [pid 612] close(3) = 0 [pid 612] symlink("/dev/binderfs", "./binderfs") = 0 [pid 612] write(1, "executing program\n", 18executing program ) = 18 [pid 612] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 612] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, NULL, 8) = 0 [pid 612] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 612] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443ea4000 [pid 605] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 612] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 612] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 612] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} => {parent_tid=[613]}, 88) = 613 [pid 612] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 612] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 613 attached [pid 613] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 612] <... futex resumed>) = 0 [pid 612] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 613] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 613] memfd_create("syzkaller", 0) = 3 [pid 613] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 [pid 609] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 611] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 603] <... write resumed>) = 20699119 [pid 603] munmap(0x7f143baa4000, 138412032) = 0 [pid 603] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 603] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 603] close(3) = 0 [pid 603] close(4) = 0 [pid 603] mkdir("./file0", 0777) = 0 [pid 603] mount("/dev/loop1", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 605] <... write resumed>) = 20699119 [pid 605] munmap(0x7f143baa4000, 138412032) = 0 [pid 605] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 605] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 605] close(3) = 0 [pid 605] close(4) = 0 [pid 605] mkdir("./file0", 0777) = 0 [ 35.989654][ T603] loop1: detected capacity change from 0 to 40427 [ 36.019944][ T603] F2FS-fs (loop1): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 605] mount("/dev/loop4", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 611] <... write resumed>) = 20699119 [pid 611] munmap(0x7f143baa4000, 138412032) = 0 [pid 611] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 611] ioctl(4, LOOP_SET_FD, 3 [pid 609] <... write resumed>) = 20699119 [pid 611] <... ioctl resumed>) = 0 [pid 611] close(3) = 0 [ 36.064584][ T603] F2FS-fs (loop1): Found nat_bits in checkpoint [ 36.084417][ T605] loop4: detected capacity change from 0 to 40427 [pid 611] close(4) = 0 [pid 611] mkdir("./file0", 0777) = 0 [pid 611] mount("/dev/loop2", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 609] munmap(0x7f143baa4000, 138412032) = 0 [pid 609] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 609] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 609] close(3) = 0 [pid 609] close(4) = 0 [pid 613] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 609] mkdir("./file0", 0777) = 0 [ 36.112405][ T605] F2FS-fs (loop4): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 36.138368][ T611] loop2: detected capacity change from 0 to 40427 [ 36.153398][ T605] F2FS-fs (loop4): Found nat_bits in checkpoint [pid 609] mount("/dev/loop0", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 603] <... mount resumed>) = 0 [pid 603] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 603] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 603] ioctl(4, LOOP_CLR_FD) = 0 [pid 603] close(4) = 0 [pid 603] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 603] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 602] <... futex resumed>) = 0 [pid 602] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 602] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 603] <... futex resumed>) = 0 [pid 603] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 603] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 602] <... futex resumed>) = 0 [pid 602] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 602] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 603] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0) = 0 [pid 603] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 602] <... futex resumed>) = 0 [pid 603] openat(AT_FDCWD, "./file0", O_RDONLY [pid 602] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 603] <... openat resumed>) = 5 [pid 602] <... futex resumed>) = 0 [pid 603] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 602] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 603] <... futex resumed>) = 0 [pid 602] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 603] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 602] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 602] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 603] <... ioctl resumed>) = 0 [pid 603] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 602] <... futex resumed>) = 0 [pid 603] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 602] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 603] <... prlimit64 resumed>NULL) = 0 [pid 602] <... futex resumed>) = 0 [pid 603] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 602] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 603] <... futex resumed>) = 0 [pid 602] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 603] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 602] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 602] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 603] <... futex resumed>) = 0 [pid 603] sched_setscheduler(0, SCHED_FIFO, [7]) = 0 [pid 603] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 602] <... futex resumed>) = 0 [pid 603] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [ 36.164816][ T603] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 36.174444][ T611] F2FS-fs (loop2): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 36.184400][ T609] loop0: detected capacity change from 0 to 40427 [ 36.205277][ T609] F2FS-fs (loop0): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 602] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 603] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 602] <... futex resumed>) = 0 [pid 613] <... write resumed>) = 20699119 [pid 605] <... mount resumed>) = 0 [pid 613] munmap(0x7f143baa4000, 138412032 [pid 605] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 602] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 613] <... munmap resumed>) = 0 [pid 605] <... openat resumed>) = 3 [pid 613] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 605] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 613] <... openat resumed>) = 4 [pid 605] <... openat resumed>) = 4 [pid 613] ioctl(4, LOOP_SET_FD, 3 [pid 605] ioctl(4, LOOP_CLR_FD) = 0 [pid 603] <... mmap resumed>) = 0x200000000000 [pid 605] close(4 [pid 603] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 605] <... close resumed>) = 0 [pid 603] <... futex resumed>) = 1 [pid 602] <... futex resumed>) = 0 [pid 603] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 605] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 602] exit_group(0 [pid 605] <... futex resumed>) = 1 [pid 604] <... futex resumed>) = 0 [pid 603] <... futex resumed>) = ? [pid 602] <... exit_group resumed>) = ? [pid 604] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 603] +++ exited with 0 +++ [pid 605] fspick(AT_FDCWD, "./file0", 0 [pid 604] <... futex resumed>) = 0 [pid 605] <... fspick resumed>) = 4 [pid 605] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 605] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 611] <... mount resumed>) = 0 [pid 604] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 611] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 604] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 605] <... futex resumed>) = 0 [pid 604] <... futex resumed>) = 1 [pid 605] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 604] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 611] <... openat resumed>) = 3 [pid 611] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 611] ioctl(4, LOOP_CLR_FD) = 0 [pid 611] close(4) = 0 [pid 611] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 610] <... futex resumed>) = 0 [pid 611] fspick(AT_FDCWD, "./file0", 0 [pid 610] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 611] <... fspick resumed>) = 4 [pid 610] <... futex resumed>) = 0 [pid 611] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 610] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 611] <... futex resumed>) = 0 [pid 610] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 611] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 610] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 36.245254][ T611] F2FS-fs (loop2): Found nat_bits in checkpoint [ 36.254222][ T609] F2FS-fs (loop0): Found nat_bits in checkpoint [ 36.265188][ T605] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [pid 610] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 613] <... ioctl resumed>) = 0 [pid 613] close(3) = 0 [pid 613] close(4) = 0 [pid 613] mkdir("./file0", 0777 [pid 611] <... fsconfig resumed>) = 0 [pid 611] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 613] <... mkdir resumed>) = 0 [pid 611] <... futex resumed>) = 1 [pid 610] <... futex resumed>) = 0 [pid 613] mount("/dev/loop3", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 611] openat(AT_FDCWD, "./file0", O_RDONLY [pid 610] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 611] <... openat resumed>) = 5 [pid 610] <... futex resumed>) = 0 [pid 610] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 611] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 610] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 611] <... futex resumed>) = 0 [pid 611] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 610] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 611] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 610] <... futex resumed>) = 0 [pid 611] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 610] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 611] <... ioctl resumed>) = 0 [pid 611] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 611] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 610] <... futex resumed>) = 0 [pid 610] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 611] <... futex resumed>) = 0 [pid 610] <... futex resumed>) = 1 [pid 611] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, NULL) = 0 [pid 611] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 611] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 610] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 610] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 611] <... futex resumed>) = 0 [pid 610] <... futex resumed>) = 1 [pid 611] sched_setscheduler(0, SCHED_FIFO, [7]) = 0 [pid 611] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 611] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 610] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 610] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 611] <... futex resumed>) = 0 [pid 610] <... futex resumed>) = 1 [pid 611] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 610] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 602] +++ exited with 0 +++ [pid 604] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=602, si_uid=0, si_status=0, si_utime=9, si_stime=20} --- [pid 604] futex(0x7f1443f956dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 604] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 291] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW [pid 604] <... mmap resumed>) = 0x7f1443e83000 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 604] mprotect(0x7f1443e84000, 131072, PROT_READ|PROT_WRITE [pid 291] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 604] <... mprotect resumed>) = 0 [pid 291] <... openat resumed>) = 3 [pid 604] rt_sigprocmask(SIG_BLOCK, ~[], [pid 291] newfstatat(3, "", [pid 604] <... rt_sigprocmask resumed>[], 8) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 604] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ea3990, parent_tid=0x7f1443ea3990, exit_signal=0, stack=0x7f1443e83000, stack_size=0x20300, tls=0x7f1443ea36c0} [pid 291] getdents64(3, 0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 604] <... clone3 resumed> => {parent_tid=[627]}, 88) = 627 [ 36.326186][ T613] loop3: detected capacity change from 0 to 40427 [ 36.341029][ T611] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [pid 291] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 611] <... mmap resumed>) = 0x200000000000 [pid 604] rt_sigprocmask(SIG_SETMASK, [], [pid 611] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 611] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 627 attached [pid 627] set_robust_list(0x7f1443ea39a0, 24) = 0 [pid 627] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 627] futex(0x7f1443f956d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 605] <... fsconfig resumed>) = 0 [pid 605] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 605] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 609] <... mount resumed>) = 0 [pid 609] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 609] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 609] ioctl(4, LOOP_CLR_FD) = 0 [pid 609] close(4 [pid 610] <... futex resumed>) = 0 [pid 604] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 609] <... close resumed>) = 0 [pid 609] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 607] <... futex resumed>) = 0 [pid 607] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 607] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 609] <... futex resumed>) = 1 [pid 609] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 609] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 607] <... futex resumed>) = 0 [pid 607] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 607] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 609] <... futex resumed>) = 1 [pid 609] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 610] exit_group(0 [pid 604] futex(0x7f1443f956d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 627] <... futex resumed>) = 0 [pid 611] <... futex resumed>) = ? [pid 610] <... exit_group resumed>) = ? [pid 611] +++ exited with 0 +++ [pid 627] openat(AT_FDCWD, "./file0", O_RDONLY [pid 604] futex(0x7f1443f956dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 627] <... openat resumed>) = 5 [pid 627] futex(0x7f1443f956dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 604] <... futex resumed>) = 0 [pid 627] futex(0x7f1443f956d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 604] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 605] <... futex resumed>) = 0 [pid 604] <... futex resumed>) = 1 [pid 605] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 604] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 605] <... ioctl resumed>) = 0 [pid 605] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 605] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 604] <... futex resumed>) = 0 [pid 604] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 605] <... futex resumed>) = 0 [pid 604] <... futex resumed>) = 1 [pid 605] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, NULL) = 0 [pid 605] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 605] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 604] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 604] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 605] <... futex resumed>) = 0 [pid 604] <... futex resumed>) = 1 [pid 605] sched_setscheduler(0, SCHED_FIFO, [7]) = 0 [pid 605] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 605] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 604] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 604] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 605] <... futex resumed>) = 0 [pid 604] <... futex resumed>) = 1 [pid 605] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 610] +++ exited with 0 +++ [pid 604] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 291] <... umount2 resumed>) = 0 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=610, si_uid=0, si_status=0, si_utime=9, si_stime=20} --- [pid 292] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 292] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 605] <... mmap resumed>) = 0x200000000000 [pid 609] <... fsconfig resumed>) = 0 [pid 607] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 605] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 609] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 607] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 605] <... futex resumed>) = 1 [pid 609] <... futex resumed>) = 0 [pid 607] <... futex resumed>) = 0 [pid 605] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 609] openat(AT_FDCWD, "./file0", O_RDONLY [pid 607] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 609] <... openat resumed>) = 5 [pid 604] <... futex resumed>) = 0 [ 36.416777][ T609] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 36.432850][ T613] F2FS-fs (loop3): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 609] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 607] <... futex resumed>) = 0 [pid 604] exit_group(0 [pid 609] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 607] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 609] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 607] <... futex resumed>) = 0 [pid 609] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 607] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 627] <... futex resumed>) = ? [pid 605] <... futex resumed>) = ? [pid 604] <... exit_group resumed>) = ? [pid 627] +++ exited with 0 +++ [pid 291] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 291] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(4, 0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 291] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 291] close(4) = 0 [pid 291] rmdir("./10/file0") = 0 [pid 291] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./10/binderfs") = 0 [pid 291] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./10") = 0 [pid 291] mkdir("./11", 0777) = 0 [pid 291] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 291] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 291] close(3 [pid 605] +++ exited with 0 +++ [pid 604] +++ exited with 0 +++ [pid 294] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=604, si_uid=0, si_status=0, si_utime=12, si_stime=17} --- [pid 294] restart_syscall(<... resuming interrupted clone ...> [pid 291] <... close resumed>) = 0 [pid 609] <... ioctl resumed>) = 0 [pid 609] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 607] <... futex resumed>) = 0 [pid 609] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 607] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 609] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 607] <... futex resumed>) = 0 [pid 609] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 607] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 609] <... prlimit64 resumed>NULL) = 0 [pid 609] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 607] <... futex resumed>) = 0 [pid 609] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 607] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 609] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 607] <... futex resumed>) = 0 [pid 609] sched_setscheduler(0, SCHED_FIFO, [7] [pid 607] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 609] <... sched_setscheduler resumed>) = 0 [pid 609] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 607] <... futex resumed>) = 0 [pid 609] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 607] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 609] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 607] <... futex resumed>) = 0 [pid 609] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 607] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 294] <... restart_syscall resumed>) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 294] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 294] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] getdents64(3, 0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 294] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... clone resumed>, child_tidptr=0x55555ee9a690) = 633 ./strace-static-x86_64: Process 633 attached [pid 633] set_robust_list(0x55555ee9a6a0, 24) = 0 [pid 633] chdir("./11") = 0 [pid 633] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 633] setpgid(0, 0) = 0 [pid 633] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 633] write(3, "1000", 4) = 4 [pid 633] close(3) = 0 [pid 633] symlink("/dev/binderfs", "./binderfs") = 0 [pid 633] write(1, "executing program\n", 18executing program ) = 18 [pid 633] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 633] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, NULL, 8) = 0 [pid 633] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 633] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443ea4000 [pid 633] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 633] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 633] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} => {parent_tid=[634]}, 88) = 634 [pid 633] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 633] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 633] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 634 attached [pid 634] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 634] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 634] memfd_create("syzkaller", 0) = 3 [pid 634] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 [pid 609] <... mmap resumed>) = 0x200000000000 [pid 609] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 607] <... futex resumed>) = 0 [pid 609] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 607] exit_group(0 [pid 609] <... futex resumed>) = ? [pid 607] <... exit_group resumed>) = ? [pid 609] +++ exited with 0 +++ [ 36.517965][ T613] F2FS-fs (loop3): Found nat_bits in checkpoint [pid 613] <... mount resumed>) = 0 [pid 613] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 613] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 613] ioctl(4, LOOP_CLR_FD) = 0 [pid 613] close(4) = 0 [pid 613] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 612] <... futex resumed>) = 0 [pid 612] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 612] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 613] <... futex resumed>) = 1 [pid 613] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 613] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 612] <... futex resumed>) = 0 [pid 612] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 612] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 613] <... futex resumed>) = 1 [pid 613] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0) = 0 [pid 613] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 612] <... futex resumed>) = 0 [pid 613] openat(AT_FDCWD, "./file0", O_RDONLY [pid 612] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 613] <... openat resumed>) = 5 [pid 612] <... futex resumed>) = 0 [pid 613] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 612] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 613] <... futex resumed>) = 0 [pid 612] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 613] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 612] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 613] <... ioctl resumed>) = 0 [pid 612] <... futex resumed>) = 0 [pid 613] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 612] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 613] <... futex resumed>) = 0 [pid 612] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 613] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 612] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 613] <... prlimit64 resumed>NULL) = 0 [pid 612] <... futex resumed>) = 0 [pid 613] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 612] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 292] <... umount2 resumed>) = 0 [pid 613] <... futex resumed>) = 0 [pid 612] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 613] sched_setscheduler(0, SCHED_FIFO, [7] [pid 612] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 613] <... sched_setscheduler resumed>) = 0 [pid 612] <... futex resumed>) = 0 [pid 613] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 612] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 613] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 612] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 612] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 613] <... futex resumed>) = 0 [ 36.615391][ T613] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [pid 612] <... futex resumed>) = 1 [pid 613] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0) = 0x200000000000 [pid 612] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 607] +++ exited with 0 +++ [pid 292] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 634] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 613] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 612] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=607, si_uid=0, si_status=0, si_utime=5, si_stime=19} --- [pid 613] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 292] newfstatat(AT_FDCWD, "./10/file0", [pid 612] exit_group(0 [pid 613] <... futex resumed>) = ? [pid 612] <... exit_group resumed>) = ? [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 613] +++ exited with 0 +++ [pid 292] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 292] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(4, 0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 292] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 292] close(4) = 0 [pid 292] rmdir("./10/file0") = 0 [pid 292] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./10/binderfs") = 0 [pid 292] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./10") = 0 [pid 292] mkdir("./11", 0777) = 0 [pid 292] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 292] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 292] close(3) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee9a690) = 637 [pid 290] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 290] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 637 attached [pid 637] set_robust_list(0x55555ee9a6a0, 24) = 0 [pid 637] chdir("./11") = 0 [pid 637] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 637] setpgid(0, 0) = 0 [pid 637] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 637] write(3, "1000", 4) = 4 [pid 637] close(3) = 0 [pid 637] symlink("/dev/binderfs", "./binderfs") = 0 [pid 637] write(1, "executing program\n", 18executing program ) = 18 [pid 637] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 637] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, NULL, 8) = 0 [pid 637] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 637] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443ea4000 [pid 637] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 637] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} => {parent_tid=[638]}, 88) = 638 [pid 637] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 637] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 637] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 638 attached [pid 638] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 638] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 638] memfd_create("syzkaller", 0) = 3 [pid 638] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 [pid 294] <... umount2 resumed>) = 0 [pid 294] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] newfstatat(AT_FDCWD, "./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 294] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] getdents64(4, 0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 294] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 294] close(4) = 0 [pid 294] rmdir("./9/file0") = 0 [pid 294] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] unlink("./9/binderfs") = 0 [pid 294] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 294] close(3) = 0 [pid 294] rmdir("./9") = 0 [pid 294] mkdir("./10", 0777) = 0 [pid 294] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 294] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 294] close(3) = 0 [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee9a690) = 639 ./strace-static-x86_64: Process 639 attached [pid 639] set_robust_list(0x55555ee9a6a0, 24) = 0 [pid 639] chdir("./10") = 0 [pid 639] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 639] setpgid(0, 0) = 0 [pid 639] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 612] +++ exited with 0 +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=612, si_uid=0, si_status=0, si_utime=12, si_stime=21} --- [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 639] <... openat resumed>) = 3 [pid 639] write(3, "1000", 4) = 4 [pid 639] close(3) = 0 [pid 639] symlink("/dev/binderfs", "./binderfs") = 0 [pid 639] write(1, "executing program\n", 18executing program ) = 18 [pid 639] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 639] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, NULL, 8) = 0 [pid 639] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 639] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443ea4000 [pid 639] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 639] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 639] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} => {parent_tid=[640]}, 88) = 640 [pid 639] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 639] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 639] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 293] <... restart_syscall resumed>) = 0 [pid 293] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x55555ee9b730 /* 4 entries */, 32768) = 112 ./strace-static-x86_64: Process 640 attached [pid 293] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 640] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 640] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 640] memfd_create("syzkaller", 0) = 3 [pid 640] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 [pid 290] <... umount2 resumed>) = 0 [pid 290] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 290] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(4, 0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 290] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 290] close(4) = 0 [pid 290] rmdir("./10/file0") = 0 [pid 290] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./10/binderfs") = 0 [pid 290] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./10") = 0 [pid 290] mkdir("./11", 0777) = 0 [pid 290] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 290] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 290] close(3) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee9a690) = 641 ./strace-static-x86_64: Process 641 attached [pid 641] set_robust_list(0x55555ee9a6a0, 24) = 0 [pid 641] chdir("./11") = 0 [pid 641] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 641] setpgid(0, 0) = 0 [pid 641] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 641] write(3, "1000", 4) = 4 [pid 641] close(3) = 0 [pid 641] symlink("/dev/binderfs", "./binderfs") = 0 [pid 641] write(1, "executing program\n", 18executing program ) = 18 [pid 641] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 641] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, NULL, 8) = 0 [pid 641] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 641] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443ea4000 [pid 641] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 641] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 641] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} => {parent_tid=[642]}, 88) = 642 [pid 641] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 641] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 641] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 642 attached [pid 642] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 642] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 642] memfd_create("syzkaller", 0 [pid 293] <... umount2 resumed>) = 0 [pid 642] <... memfd_create resumed>) = 3 [pid 642] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 [pid 293] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 293] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(4, 0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 293] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 293] close(4) = 0 [pid 293] rmdir("./10/file0") = 0 [pid 293] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./10/binderfs") = 0 [pid 293] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./10") = 0 [pid 293] mkdir("./11", 0777) = 0 [pid 293] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 293] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 293] close(3) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee9a690) = 643 [pid 634] <... write resumed>) = 20699119 [pid 634] munmap(0x7f143baa4000, 138412032) = 0 [pid 634] openat(AT_FDCWD, "/dev/loop1", O_RDWR./strace-static-x86_64: Process 643 attached [pid 643] set_robust_list(0x55555ee9a6a0, 24) = 0 [pid 643] chdir("./11") = 0 [pid 643] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 643] setpgid(0, 0) = 0 [pid 643] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 634] <... openat resumed>) = 4 [pid 643] <... openat resumed>) = 3 [pid 634] ioctl(4, LOOP_SET_FD, 3 [pid 643] write(3, "1000", 4) = 4 [pid 643] close(3) = 0 [pid 643] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 643] write(1, "executing program\n", 18) = 18 [pid 643] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 643] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, NULL, 8) = 0 [pid 643] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 643] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443ea4000 [pid 643] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 643] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 643] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} => {parent_tid=[644]}, 88) = 644 [pid 643] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 643] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 643] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 644 attached [pid 644] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 644] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 644] memfd_create("syzkaller", 0) = 3 [pid 644] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 [pid 634] <... ioctl resumed>) = 0 [pid 634] close(3) = 0 [pid 634] close(4) = 0 [pid 634] mkdir("./file0", 0777) = 0 [pid 634] mount("/dev/loop1", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [ 36.953331][ T634] loop1: detected capacity change from 0 to 40427 [ 36.991715][ T634] F2FS-fs (loop1): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 640] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [ 37.042557][ T634] F2FS-fs (loop1): Found nat_bits in checkpoint [pid 638] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 634] <... mount resumed>) = 0 [pid 634] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 634] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 634] ioctl(4, LOOP_CLR_FD) = 0 [pid 634] close(4) = 0 [pid 634] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 633] <... futex resumed>) = 0 [pid 634] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 633] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 634] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 633] <... futex resumed>) = 0 [pid 634] fspick(AT_FDCWD, "./file0", 0 [pid 633] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 634] <... fspick resumed>) = 4 [pid 634] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 633] <... futex resumed>) = 0 [pid 634] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 633] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 634] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 633] <... futex resumed>) = 0 [pid 634] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 633] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 640] <... write resumed>) = 20699119 [pid 634] <... fsconfig resumed>) = 0 [pid 634] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 633] <... futex resumed>) = 0 [pid 634] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 633] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 634] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 633] <... futex resumed>) = 0 [pid 634] openat(AT_FDCWD, "./file0", O_RDONLY [pid 633] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 634] <... openat resumed>) = 5 [pid 634] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 633] <... futex resumed>) = 0 [pid 634] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 633] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 634] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 633] <... futex resumed>) = 0 [pid 634] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 633] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 634] <... ioctl resumed>) = 0 [pid 634] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 633] <... futex resumed>) = 0 [pid 634] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 633] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 634] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 633] <... futex resumed>) = 0 [pid 634] <... prlimit64 resumed>NULL) = 0 [pid 634] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 633] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 634] <... futex resumed>) = 0 [pid 633] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 634] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 633] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 634] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 633] <... futex resumed>) = 0 [pid 634] sched_setscheduler(0, SCHED_FIFO, [7] [pid 633] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 634] <... sched_setscheduler resumed>) = 0 [pid 634] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 633] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 634] <... futex resumed>) = 0 [pid 633] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [ 37.132163][ T634] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [pid 634] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 633] <... futex resumed>) = 0 [pid 644] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 640] munmap(0x7f143baa4000, 138412032) = 0 [pid 633] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 640] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 640] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 640] close(3) = 0 [pid 640] close(4) = 0 [pid 640] mkdir("./file0", 0777) = 0 [pid 634] <... mmap resumed>) = 0x200000000000 [pid 634] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 633] <... futex resumed>) = 0 [pid 634] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 633] exit_group(0 [pid 634] <... futex resumed>) = ? [pid 633] <... exit_group resumed>) = ? [pid 634] +++ exited with 0 +++ [pid 640] mount("/dev/loop4", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 633] +++ exited with 0 +++ [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=633, si_uid=0, si_status=0, si_utime=9, si_stime=21} --- [pid 291] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 642] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [ 37.235145][ T640] loop4: detected capacity change from 0 to 40427 [pid 291] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 291] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 638] <... write resumed>) = 20699119 [pid 638] munmap(0x7f143baa4000, 138412032) = 0 [pid 638] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 638] ioctl(4, LOOP_SET_FD, 3 [pid 644] <... write resumed>) = 20699119 [pid 638] <... ioctl resumed>) = 0 [pid 638] close(3) = 0 [pid 638] close(4) = 0 [pid 638] mkdir("./file0", 0777) = 0 [ 37.282969][ T640] F2FS-fs (loop4): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 37.316403][ T640] F2FS-fs (loop4): Found nat_bits in checkpoint [pid 638] mount("/dev/loop2", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 644] munmap(0x7f143baa4000, 138412032) = 0 [pid 644] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 644] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 644] close(3) = 0 [pid 644] close(4) = 0 [pid 644] mkdir("./file0", 0777) = 0 [pid 644] mount("/dev/loop3", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 291] <... umount2 resumed>) = 0 [pid 291] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 291] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(4, 0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 291] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 291] close(4) = 0 [pid 291] rmdir("./11/file0") = 0 [pid 640] <... mount resumed>) = 0 [pid 291] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 640] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 291] unlink("./11/binderfs" [pid 640] <... openat resumed>) = 3 [pid 291] <... unlink resumed>) = 0 [pid 640] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 640] ioctl(4, LOOP_CLR_FD) = 0 [pid 640] close(4) = 0 [pid 291] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 640] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 291] close(3 [pid 640] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 291] <... close resumed>) = 0 [ 37.364992][ T638] loop2: detected capacity change from 0 to 40427 [ 37.393545][ T638] F2FS-fs (loop2): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 291] rmdir("./11") = 0 [pid 291] mkdir("./12", 0777 [pid 639] <... futex resumed>) = 0 [pid 639] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 640] <... futex resumed>) = 0 [pid 639] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 291] <... mkdir resumed>) = 0 [pid 640] fspick(AT_FDCWD, "./file0", 0 [pid 291] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 642] <... write resumed>) = 20699119 [pid 642] munmap(0x7f143baa4000, 138412032 [pid 640] <... fspick resumed>) = 4 [pid 291] <... openat resumed>) = 3 [pid 640] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 291] ioctl(3, LOOP_CLR_FD [pid 640] <... futex resumed>) = 1 [pid 291] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 640] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 639] <... futex resumed>) = 0 [pid 291] close(3 [pid 640] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 639] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 639] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 642] <... munmap resumed>) = 0 [pid 642] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 642] ioctl(4, LOOP_SET_FD, 3 [pid 640] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 291] <... close resumed>) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee9a690) = 655 ./strace-static-x86_64: Process 655 attached [pid 640] <... fsconfig resumed>) = 0 [pid 640] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 639] <... futex resumed>) = 0 [pid 640] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 639] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 640] <... futex resumed>) = 0 [pid 639] <... futex resumed>) = 1 [pid 640] openat(AT_FDCWD, "./file0", O_RDONLY) = 5 [pid 639] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 640] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 639] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 640] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 639] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 640] <... futex resumed>) = 0 [pid 639] <... futex resumed>) = 1 [pid 640] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 639] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 655] set_robust_list(0x55555ee9a6a0, 24) = 0 [pid 655] chdir("./12" [pid 640] <... ioctl resumed>) = 0 [pid 640] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 639] <... futex resumed>) = 0 [pid 640] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 639] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 640] <... futex resumed>) = 0 [pid 639] <... futex resumed>) = 1 [pid 640] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 639] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 640] <... prlimit64 resumed>NULL) = 0 [pid 640] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 639] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 640] <... futex resumed>) = 0 [pid 640] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 639] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 640] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 640] sched_setscheduler(0, SCHED_FIFO, [7] [pid 639] <... futex resumed>) = 0 [pid 640] <... sched_setscheduler resumed>) = 0 [pid 640] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 639] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 640] <... futex resumed>) = 0 [pid 640] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 639] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 639] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 640] <... futex resumed>) = 0 [pid 639] <... futex resumed>) = 1 [pid 640] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 655] <... chdir resumed>) = 0 [pid 642] <... ioctl resumed>) = 0 [pid 639] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 638] <... mount resumed>) = 0 [pid 638] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 638] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 638] ioctl(4, LOOP_CLR_FD) = 0 [pid 638] close(4) = 0 [pid 638] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 638] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 642] close(3) = 0 [pid 642] close(4) = 0 [pid 655] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 655] setpgid(0, 0 [pid 642] mkdir("./file0", 0777) = 0 [pid 655] <... setpgid resumed>) = 0 [pid 655] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 655] write(3, "1000", 4) = 4 [pid 655] close(3) = 0 [pid 655] symlink("/dev/binderfs", "./binderfs") = 0 [pid 642] mount("/dev/loop0", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 655] write(1, "executing program\n", 18executing program ) = 18 [pid 655] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 655] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, NULL, 8) = 0 [pid 655] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 655] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443ea4000 [pid 655] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 655] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 655] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} => {parent_tid=[658]}, 88) = 658 [pid 655] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 655] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 37.410883][ T644] loop3: detected capacity change from 0 to 40427 [ 37.414897][ T640] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 37.429816][ T644] F2FS-fs (loop3): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 37.439443][ T638] F2FS-fs (loop2): Found nat_bits in checkpoint [pid 655] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 640] <... mmap resumed>) = 0x200000000000 [pid 637] <... futex resumed>) = 0 [pid 640] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 639] <... futex resumed>) = 0 [pid 637] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 640] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 639] exit_group(0 [pid 638] <... futex resumed>) = 0 [pid 637] <... futex resumed>) = 1 [pid 640] <... futex resumed>) = ? [pid 639] <... exit_group resumed>) = ? [pid 638] fspick(AT_FDCWD, "./file0", 0 [pid 637] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 640] +++ exited with 0 +++ [pid 638] <... fspick resumed>) = 4 [pid 638] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 658 attached ) = 1 [pid 637] <... futex resumed>) = 0 [pid 658] set_robust_list(0x7f1443ec49a0, 24 [pid 637] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 658] <... set_robust_list resumed>) = 0 [pid 638] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 637] <... futex resumed>) = 0 [pid 658] rt_sigprocmask(SIG_SETMASK, [], [pid 637] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 658] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 658] memfd_create("syzkaller", 0) = 3 [pid 658] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 [ 37.474496][ T642] loop0: detected capacity change from 0 to 40427 [ 37.483449][ T644] F2FS-fs (loop3): Found nat_bits in checkpoint [ 37.494249][ T638] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 37.515074][ T642] F2FS-fs (loop0): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 638] <... fsconfig resumed>) = 0 [pid 638] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 637] <... futex resumed>) = 0 [pid 638] openat(AT_FDCWD, "./file0", O_RDONLY [pid 637] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 638] <... openat resumed>) = 5 [pid 637] <... futex resumed>) = 0 [pid 638] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 637] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 638] <... futex resumed>) = 0 [pid 637] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 638] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 637] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 637] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 638] <... ioctl resumed>) = 0 [pid 638] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 637] <... futex resumed>) = 0 [pid 638] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 637] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 638] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 637] <... futex resumed>) = 0 [pid 638] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 637] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 638] <... prlimit64 resumed>NULL) = 0 [pid 638] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 637] <... futex resumed>) = 0 [pid 638] sched_setscheduler(0, SCHED_FIFO, [7] [pid 637] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 638] <... sched_setscheduler resumed>) = 0 [pid 637] <... futex resumed>) = 0 [pid 638] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 637] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 638] <... futex resumed>) = 0 [pid 637] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 638] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 637] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 638] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 637] <... futex resumed>) = 0 [pid 638] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 637] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 639] +++ exited with 0 +++ [pid 638] <... mmap resumed>) = 0x200000000000 [pid 638] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 294] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=639, si_uid=0, si_status=0, si_utime=7, si_stime=20} --- [pid 638] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 637] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 637] exit_group(0 [pid 638] <... futex resumed>) = ? [pid 637] <... exit_group resumed>) = ? [pid 638] +++ exited with 0 +++ [pid 644] <... mount resumed>) = 0 [pid 644] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 294] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW [pid 644] <... openat resumed>) = 3 [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 294] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 644] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 294] <... openat resumed>) = 3 [pid 644] <... openat resumed>) = 4 [pid 294] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 644] ioctl(4, LOOP_CLR_FD) = 0 [pid 294] getdents64(3, [pid 644] close(4 [pid 294] <... getdents64 resumed>0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 644] <... close resumed>) = 0 [pid 644] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 294] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 644] <... futex resumed>) = 1 [pid 643] <... futex resumed>) = 0 [pid 644] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 643] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 644] fspick(AT_FDCWD, "./file0", 0 [pid 643] <... futex resumed>) = 0 [ 37.554336][ T642] F2FS-fs (loop0): Found nat_bits in checkpoint [ 37.587992][ T644] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [pid 644] <... fspick resumed>) = 4 [pid 643] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 644] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 643] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 643] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 644] <... futex resumed>) = 0 [pid 643] <... futex resumed>) = 0 [pid 644] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 643] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 642] <... mount resumed>) = 0 [pid 642] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 642] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 642] ioctl(4, LOOP_CLR_FD) = 0 [pid 642] close(4) = 0 [pid 642] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 641] <... futex resumed>) = 0 [pid 641] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 641] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 642] <... futex resumed>) = 1 [pid 642] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 642] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 641] <... futex resumed>) = 0 [pid 641] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 641] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 642] <... futex resumed>) = 1 [pid 642] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 644] <... fsconfig resumed>) = 0 [pid 644] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 643] <... futex resumed>) = 0 [pid 643] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 644] openat(AT_FDCWD, "./file0", O_RDONLY) = 5 [pid 643] <... futex resumed>) = 0 [pid 643] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 644] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 643] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 644] <... futex resumed>) = 0 [pid 643] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 644] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 643] <... futex resumed>) = 0 [pid 643] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 644] <... ioctl resumed>) = 0 [pid 644] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 643] <... futex resumed>) = 0 [pid 643] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 644] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 643] <... futex resumed>) = 0 [pid 644] <... prlimit64 resumed>NULL) = 0 [pid 643] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 644] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 643] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 644] <... futex resumed>) = 0 [pid 643] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 644] sched_setscheduler(0, SCHED_FIFO, [7] [pid 643] <... futex resumed>) = 0 [pid 644] <... sched_setscheduler resumed>) = 0 [pid 644] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 643] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 644] <... futex resumed>) = 0 [pid 644] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 643] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 642] <... fsconfig resumed>) = 0 [pid 642] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 641] <... futex resumed>) = 0 [pid 642] openat(AT_FDCWD, "./file0", O_RDONLY [pid 641] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 642] <... openat resumed>) = 5 [pid 641] <... futex resumed>) = 0 [pid 642] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 641] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 642] <... futex resumed>) = 0 [pid 641] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 642] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [ 37.641534][ T642] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [pid 641] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 643] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 641] <... futex resumed>) = 0 [pid 644] <... futex resumed>) = 0 [pid 643] <... futex resumed>) = 1 [pid 644] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 643] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 642] <... ioctl resumed>) = 0 [pid 641] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 642] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 641] <... futex resumed>) = 0 [pid 642] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 641] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 642] <... prlimit64 resumed>NULL) = 0 [pid 641] <... futex resumed>) = 0 [pid 642] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 641] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 642] <... futex resumed>) = 0 [pid 641] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 642] sched_setscheduler(0, SCHED_FIFO, [7] [pid 641] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 642] <... sched_setscheduler resumed>) = 0 [pid 641] <... futex resumed>) = 0 [pid 642] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 641] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 642] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 641] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 641] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 642] <... futex resumed>) = 0 [pid 641] <... futex resumed>) = 1 [pid 642] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 644] <... mmap resumed>) = 0x200000000000 [pid 642] <... mmap resumed>) = 0x200000000000 [pid 641] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 644] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 642] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 644] <... futex resumed>) = 1 [pid 643] <... futex resumed>) = 0 [pid 642] <... futex resumed>) = 0 [pid 641] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 644] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 643] exit_group(0 [pid 642] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 644] <... futex resumed>) = ? [pid 643] <... exit_group resumed>) = ? [pid 641] exit_group(0 [pid 644] +++ exited with 0 +++ [pid 642] <... futex resumed>) = ? [pid 641] <... exit_group resumed>) = ? [pid 642] +++ exited with 0 +++ [pid 637] +++ exited with 0 +++ [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=637, si_uid=0, si_status=0, si_utime=4, si_stime=25} --- [pid 292] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 292] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 292] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 643] +++ exited with 0 +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=643, si_uid=0, si_status=0, si_utime=9, si_stime=19} --- [pid 293] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 293] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 293] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 641] +++ exited with 0 +++ [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=641, si_uid=0, si_status=0, si_utime=6, si_stime=18} --- [pid 290] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 290] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 290] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 294] <... umount2 resumed>) = 0 [pid 658] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 294] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] newfstatat(AT_FDCWD, "./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 294] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] getdents64(4, 0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 294] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 294] close(4) = 0 [pid 294] rmdir("./10/file0") = 0 [pid 294] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] unlink("./10/binderfs") = 0 [pid 294] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 294] close(3) = 0 [pid 294] rmdir("./10") = 0 [pid 294] mkdir("./11", 0777) = 0 [pid 294] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 294] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 294] close(3) = 0 [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee9a690) = 667 ./strace-static-x86_64: Process 667 attached [pid 667] set_robust_list(0x55555ee9a6a0, 24) = 0 [pid 667] chdir("./11") = 0 [pid 667] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 667] setpgid(0, 0) = 0 [pid 667] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 667] write(3, "1000", 4) = 4 [pid 667] close(3) = 0 [pid 667] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 667] write(1, "executing program\n", 18) = 18 [pid 667] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 667] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, NULL, 8) = 0 [pid 667] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 667] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443ea4000 [pid 667] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 667] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 667] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} => {parent_tid=[668]}, 88) = 668 [pid 667] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 667] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 667] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 668 attached [pid 668] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 668] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 668] memfd_create("syzkaller", 0) = 3 [pid 668] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 [pid 293] <... umount2 resumed>) = 0 [pid 293] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 293] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(4, 0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 293] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 293] close(4) = 0 [pid 293] rmdir("./11/file0") = 0 [pid 293] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./11/binderfs") = 0 [pid 293] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./11") = 0 [pid 293] mkdir("./12", 0777) = 0 [pid 293] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 293] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 293] close(3) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee9a690) = 669 ./strace-static-x86_64: Process 669 attached [pid 669] set_robust_list(0x55555ee9a6a0, 24) = 0 [pid 669] chdir("./12" [pid 292] <... umount2 resumed>) = 0 [pid 669] <... chdir resumed>) = 0 [pid 669] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 669] setpgid(0, 0 [pid 292] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 669] <... setpgid resumed>) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 669] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 292] newfstatat(AT_FDCWD, "./11/file0", [pid 669] write(3, "1000", 4) = 4 [pid 669] close(3) = 0 [pid 669] symlink("/dev/binderfs", "./binderfs" [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 executing program [pid 669] <... symlink resumed>) = 0 [pid 669] write(1, "executing program\n", 18) = 18 [pid 669] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 669] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, NULL, 8) = 0 [pid 669] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 669] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443ea4000 [pid 669] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 669] rt_sigprocmask(SIG_BLOCK, ~[], [pid 292] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 669] <... rt_sigprocmask resumed>[], 8) = 0 [pid 669] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} => {parent_tid=[670]}, 88) = 670 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 669] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 669] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 669] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 292] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 292] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(4, 0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 292] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 292] close(4) = 0 [pid 292] rmdir("./11/file0") = 0 [pid 292] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./11/binderfs") = 0 [pid 292] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./11") = 0 [pid 292] mkdir("./12", 0777) = 0 [pid 292] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 292] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 292] close(3) = 0 ./strace-static-x86_64: Process 670 attached [pid 670] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 670] rt_sigprocmask(SIG_SETMASK, [], [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 670] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 670] memfd_create("syzkaller", 0 [pid 292] <... clone resumed>, child_tidptr=0x55555ee9a690) = 671 [pid 670] <... memfd_create resumed>) = 3 [pid 670] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 ./strace-static-x86_64: Process 671 attached [pid 671] set_robust_list(0x55555ee9a6a0, 24) = 0 [pid 671] chdir("./12") = 0 [pid 671] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 671] setpgid(0, 0) = 0 [pid 671] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 671] write(3, "1000", 4) = 4 [pid 671] close(3) = 0 [pid 671] symlink("/dev/binderfs", "./binderfs") = 0 [pid 671] write(1, "executing program\n", 18executing program ) = 18 [pid 671] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 671] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, NULL, 8) = 0 [pid 671] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 290] <... umount2 resumed>) = 0 [pid 671] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443ea4000 [pid 290] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 671] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 290] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(4, 0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 671] <... mprotect resumed>) = 0 [pid 290] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 290] close(4) = 0 [pid 290] rmdir("./11/file0" [pid 671] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 671] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} [pid 290] <... rmdir resumed>) = 0 [pid 290] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 671] <... clone3 resumed> => {parent_tid=[672]}, 88) = 672 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./11/binderfs" [pid 671] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 671] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 671] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 290] <... unlink resumed>) = 0 [pid 290] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./11") = 0 [pid 290] mkdir("./12", 0777) = 0 [pid 290] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 290] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 290] close(3./strace-static-x86_64: Process 672 attached [pid 672] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 672] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 672] memfd_create("syzkaller", 0) = 3 [pid 672] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 [pid 290] <... close resumed>) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee9a690) = 673 ./strace-static-x86_64: Process 673 attached [pid 673] set_robust_list(0x55555ee9a6a0, 24) = 0 [pid 673] chdir("./12") = 0 [pid 673] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 673] setpgid(0, 0) = 0 [pid 673] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 673] write(3, "1000", 4) = 4 [pid 673] close(3) = 0 [pid 673] symlink("/dev/binderfs", "./binderfs") = 0 [pid 673] write(1, "executing program\n", 18executing program ) = 18 [pid 673] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 673] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, NULL, 8) = 0 [pid 673] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 673] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443ea4000 [pid 673] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 673] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 673] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} => {parent_tid=[674]}, 88) = 674 [pid 673] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 673] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 673] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 674 attached [pid 674] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 674] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 674] memfd_create("syzkaller", 0) = 3 [pid 674] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 [pid 658] <... write resumed>) = 20699119 [pid 658] munmap(0x7f143baa4000, 138412032) = 0 [pid 658] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 658] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 658] close(3) = 0 [pid 658] close(4) = 0 [pid 658] mkdir("./file0", 0777) = 0 [ 38.045674][ T658] loop1: detected capacity change from 0 to 40427 [ 38.074454][ T658] F2FS-fs (loop1): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 658] mount("/dev/loop1", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"...) = 0 [pid 658] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 658] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 658] ioctl(4, LOOP_CLR_FD) = 0 [pid 658] close(4) = 0 [pid 658] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 658] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 655] <... futex resumed>) = 0 [pid 655] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 658] <... futex resumed>) = 0 [pid 658] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 655] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 658] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 658] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 655] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 655] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 658] <... futex resumed>) = 0 [pid 658] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [ 38.113378][ T658] F2FS-fs (loop1): Found nat_bits in checkpoint [pid 655] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 668] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 658] <... fsconfig resumed>) = 0 [pid 658] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 658] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 655] <... futex resumed>) = 0 [pid 655] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 658] <... futex resumed>) = 0 [pid 655] <... futex resumed>) = 1 [pid 658] openat(AT_FDCWD, "./file0", O_RDONLY) = 5 [pid 658] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 658] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 655] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 655] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 658] <... futex resumed>) = 0 [pid 655] <... futex resumed>) = 1 [pid 658] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 655] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 658] <... ioctl resumed>) = 0 [pid 658] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 658] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 655] <... futex resumed>) = 0 [pid 655] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 658] <... futex resumed>) = 0 [pid 655] <... futex resumed>) = 1 [pid 658] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, NULL) = 0 [pid 658] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 658] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 655] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 655] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 658] <... futex resumed>) = 0 [pid 655] <... futex resumed>) = 1 [pid 658] sched_setscheduler(0, SCHED_FIFO, [7]) = 0 [pid 658] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 658] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 655] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 655] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 658] <... futex resumed>) = 0 [pid 655] <... futex resumed>) = 1 [ 38.171698][ T658] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [pid 658] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 655] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 670] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 658] <... mmap resumed>) = 0x200000000000 [pid 658] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 658] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 655] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 655] exit_group(0 [pid 658] <... futex resumed>) = ? [pid 655] <... exit_group resumed>) = ? [pid 658] +++ exited with 0 +++ [pid 672] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 655] +++ exited with 0 +++ [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=655, si_uid=0, si_status=0, si_utime=13, si_stime=24} --- [pid 291] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 291] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 291] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 672] <... write resumed>) = 20699119 [pid 672] munmap(0x7f143baa4000, 138412032) = 0 [pid 672] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 672] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 674] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 672] close(3) = 0 [pid 672] close(4) = 0 [pid 672] mkdir("./file0", 0777) = 0 [pid 672] mount("/dev/loop2", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 668] <... write resumed>) = 20699119 [pid 668] munmap(0x7f143baa4000, 138412032) = 0 [pid 668] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 668] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 668] close(3) = 0 [ 38.368113][ T672] loop2: detected capacity change from 0 to 40427 [ 38.398306][ T672] F2FS-fs (loop2): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 668] close(4) = 0 [pid 668] mkdir("./file0", 0777) = 0 [pid 668] mount("/dev/loop4", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 291] <... umount2 resumed>) = 0 [pid 291] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./12/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 291] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(4, 0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 291] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 291] close(4) = 0 [pid 291] rmdir("./12/file0") = 0 [pid 291] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./12/binderfs") = 0 [pid 291] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./12") = 0 [pid 291] mkdir("./13", 0777) = 0 [pid 291] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 291] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 291] close(3) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee9a690) = 681 [pid 670] <... write resumed>) = 20699119 [pid 670] munmap(0x7f143baa4000, 138412032./strace-static-x86_64: Process 681 attached ) = 0 [pid 681] set_robust_list(0x55555ee9a6a0, 24 [pid 670] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 681] <... set_robust_list resumed>) = 0 [pid 670] <... openat resumed>) = 4 [pid 681] chdir("./13" [pid 670] ioctl(4, LOOP_SET_FD, 3 [pid 681] <... chdir resumed>) = 0 [pid 672] <... mount resumed>) = 0 [ 38.433450][ T672] F2FS-fs (loop2): Found nat_bits in checkpoint [ 38.461965][ T668] loop4: detected capacity change from 0 to 40427 [pid 672] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 672] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 672] ioctl(4, LOOP_CLR_FD) = 0 [pid 672] close(4) = 0 [pid 672] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 672] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 671] <... futex resumed>) = 0 [pid 671] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 672] <... futex resumed>) = 0 [pid 671] <... futex resumed>) = 1 [pid 681] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 672] fspick(AT_FDCWD, "./file0", 0 [pid 681] <... prctl resumed>) = 0 [pid 672] <... fspick resumed>) = 4 [pid 671] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 672] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 671] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 681] setpgid(0, 0 [pid 671] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 681] <... setpgid resumed>) = 0 [pid 672] <... futex resumed>) = 0 [pid 672] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 671] <... futex resumed>) = 0 [pid 671] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 681] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 681] write(3, "1000", 4) = 4 [pid 681] close(3) = 0 [pid 681] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 681] write(1, "executing program\n", 18) = 18 [pid 681] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 681] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, NULL, 8) = 0 [pid 681] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 681] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 674] <... write resumed>) = 20699119 [pid 674] munmap(0x7f143baa4000, 138412032 [pid 681] <... mmap resumed>) = 0x7f1443ea4000 [pid 681] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 681] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 670] <... ioctl resumed>) = 0 [pid 681] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} [pid 670] close(3) = 0 [pid 681] <... clone3 resumed> => {parent_tid=[685]}, 88) = 685 [pid 681] rt_sigprocmask(SIG_SETMASK, [], [pid 670] close(4 [pid 681] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 670] <... close resumed>) = 0 [pid 681] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 681] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 670] mkdir("./file0", 0777) = 0 [pid 670] mount("/dev/loop3", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 674] <... munmap resumed>) = 0 [ 38.476787][ T668] F2FS-fs (loop4): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 674] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 674] ioctl(4, LOOP_SET_FD, 3 [pid 672] <... fsconfig resumed>) = 0 [pid 672] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 672] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 671] <... futex resumed>) = 0 [pid 671] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 672] <... futex resumed>) = 0 [pid 671] <... futex resumed>) = 1 [pid 672] openat(AT_FDCWD, "./file0", O_RDONLY) = 5 [pid 672] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 672] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 685 attached [pid 685] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 685] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 685] memfd_create("syzkaller", 0) = 3 [pid 685] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 [pid 671] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 671] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 672] <... futex resumed>) = 0 [pid 671] <... futex resumed>) = 1 [pid 672] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 671] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 672] <... ioctl resumed>) = 0 [pid 672] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 672] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 671] <... futex resumed>) = 0 [pid 671] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 672] <... futex resumed>) = 0 [pid 671] <... futex resumed>) = 1 [pid 672] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 671] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 672] <... prlimit64 resumed>NULL) = 0 [pid 672] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 672] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 671] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 671] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 672] <... futex resumed>) = 0 [pid 671] <... futex resumed>) = 1 [pid 672] sched_setscheduler(0, SCHED_FIFO, [7]) = 0 [pid 672] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 672] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 671] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 671] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 672] <... futex resumed>) = 0 [pid 671] <... futex resumed>) = 1 [ 38.507891][ T672] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 38.521170][ T670] loop3: detected capacity change from 0 to 40427 [ 38.529099][ T668] F2FS-fs (loop4): Found nat_bits in checkpoint [ 38.548764][ T674] loop0: detected capacity change from 0 to 40427 [pid 672] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 674] <... ioctl resumed>) = 0 [pid 672] <... mmap resumed>) = 0x200000000000 [pid 671] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 672] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 672] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 674] close(3 [pid 671] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 671] exit_group(0 [pid 672] <... futex resumed>) = ? [pid 671] <... exit_group resumed>) = ? [pid 674] <... close resumed>) = 0 [pid 672] +++ exited with 0 +++ [pid 674] close(4) = 0 [pid 674] mkdir("./file0", 0777) = 0 [ 38.556822][ T670] F2FS-fs (loop3): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 674] mount("/dev/loop0", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 668] <... mount resumed>) = 0 [pid 668] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 668] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 668] ioctl(4, LOOP_CLR_FD) = 0 [pid 668] close(4) = 0 [pid 668] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 667] <... futex resumed>) = 0 [pid 667] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 667] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 668] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 668] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 667] <... futex resumed>) = 0 [pid 667] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 668] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 667] <... futex resumed>) = 0 [pid 667] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 668] <... fsconfig resumed>) = 0 [pid 668] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 667] <... futex resumed>) = 0 [pid 667] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 668] <... futex resumed>) = 1 [pid 667] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 668] openat(AT_FDCWD, "./file0", O_RDONLY) = 5 [pid 668] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 667] <... futex resumed>) = 0 [pid 667] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 667] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 668] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140) = 0 [pid 668] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 667] <... futex resumed>) = 0 [pid 667] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 667] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 668] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, NULL) = 0 [pid 668] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 667] <... futex resumed>) = 0 [pid 667] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 667] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 668] sched_setscheduler(0, SCHED_FIFO, [7]) = 0 [pid 668] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 667] <... futex resumed>) = 0 [pid 668] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 667] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 668] <... futex resumed>) = 0 [pid 667] <... futex resumed>) = 1 [pid 668] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 671] +++ exited with 0 +++ [pid 670] <... mount resumed>) = 0 [pid 668] <... mmap resumed>) = 0x200000000000 [pid 667] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 668] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 668] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 667] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=671, si_uid=0, si_status=0, si_utime=7, si_stime=22} --- [pid 667] exit_group(0 [pid 668] <... futex resumed>) = ? [pid 667] <... exit_group resumed>) = ? [pid 668] +++ exited with 0 +++ [ 38.621719][ T670] F2FS-fs (loop3): Found nat_bits in checkpoint [ 38.644896][ T674] F2FS-fs (loop0): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 38.654309][ T668] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [pid 292] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 292] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 685] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 670] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 670] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 670] ioctl(4, LOOP_CLR_FD) = 0 [pid 670] close(4) = 0 [pid 670] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 669] <... futex resumed>) = 0 [pid 669] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 669] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 670] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 670] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 670] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 669] <... futex resumed>) = 0 [pid 669] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 669] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 670] <... futex resumed>) = 0 [pid 670] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0) = 0 [pid 670] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 669] <... futex resumed>) = 0 [pid 670] openat(AT_FDCWD, "./file0", O_RDONLY [pid 669] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 670] <... openat resumed>) = 5 [pid 669] <... futex resumed>) = 0 [pid 670] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 669] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 670] <... futex resumed>) = 0 [pid 669] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 669] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 670] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 669] <... futex resumed>) = 0 [pid 669] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 670] <... ioctl resumed>) = 0 [pid 670] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 669] <... futex resumed>) = 0 [pid 670] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 669] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 670] <... prlimit64 resumed>NULL) = 0 [pid 669] <... futex resumed>) = 0 [pid 670] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 669] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 670] <... futex resumed>) = 0 [pid 669] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 670] sched_setscheduler(0, SCHED_FIFO, [7] [pid 669] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 670] <... sched_setscheduler resumed>) = 0 [pid 669] <... futex resumed>) = 0 [pid 670] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 669] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 670] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 669] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 669] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 670] <... futex resumed>) = 0 [pid 669] <... futex resumed>) = 1 [pid 670] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [ 38.709913][ T670] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 38.733361][ T674] F2FS-fs (loop0): Found nat_bits in checkpoint [pid 669] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 667] +++ exited with 0 +++ [pid 294] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=667, si_uid=0, si_status=0, si_utime=6, si_stime=18} --- [pid 294] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 294] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 294] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] getdents64(3, 0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 294] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 674] <... mount resumed>) = 0 [pid 670] <... mmap resumed>) = 0x200000000000 [pid 674] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 670] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 669] <... futex resumed>) = 0 [pid 670] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 674] <... openat resumed>) = 3 [pid 669] exit_group(0 [pid 674] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 670] <... futex resumed>) = ? [pid 669] <... exit_group resumed>) = ? [pid 670] +++ exited with 0 +++ [pid 674] <... openat resumed>) = 4 [pid 674] ioctl(4, LOOP_CLR_FD) = 0 [pid 674] close(4) = 0 [pid 674] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 673] <... futex resumed>) = 0 [pid 674] <... futex resumed>) = 1 [pid 673] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 674] fspick(AT_FDCWD, "./file0", 0 [pid 673] <... futex resumed>) = 0 [pid 674] <... fspick resumed>) = 4 [pid 673] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 674] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 673] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 674] <... futex resumed>) = 0 [pid 673] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 674] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 673] <... futex resumed>) = 0 [pid 673] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 292] <... umount2 resumed>) = 0 [pid 292] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 674] <... fsconfig resumed>) = 0 [pid 674] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 673] <... futex resumed>) = 0 [pid 674] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 673] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 674] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 673] <... futex resumed>) = 0 [pid 674] openat(AT_FDCWD, "./file0", O_RDONLY [pid 673] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 674] <... openat resumed>) = 5 [pid 674] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 673] <... futex resumed>) = 0 [pid 674] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 673] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 674] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 673] <... futex resumed>) = 0 [pid 674] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 673] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 674] <... ioctl resumed>) = 0 [pid 674] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 673] <... futex resumed>) = 0 [pid 674] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 673] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 674] <... prlimit64 resumed>NULL) = 0 [pid 673] <... futex resumed>) = 0 [pid 674] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 673] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 674] <... futex resumed>) = 0 [pid 673] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 674] sched_setscheduler(0, SCHED_FIFO, [7] [pid 673] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 674] <... sched_setscheduler resumed>) = 0 [pid 673] <... futex resumed>) = 0 [pid 674] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 673] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 674] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 673] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 673] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 674] <... futex resumed>) = 0 [pid 673] <... futex resumed>) = 1 [pid 674] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 673] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 669] +++ exited with 0 +++ [pid 685] <... write resumed>) = 20699119 [pid 685] munmap(0x7f143baa4000, 138412032) = 0 [pid 685] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 685] ioctl(4, LOOP_SET_FD, 3 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=669, si_uid=0, si_status=0, si_utime=9, si_stime=22} --- [pid 293] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 293] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./12/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 38.847978][ T674] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [pid 292] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 685] <... ioctl resumed>) = 0 [pid 685] close(3) = 0 [pid 292] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 685] close(4 [pid 292] <... openat resumed>) = 4 [pid 685] <... close resumed>) = 0 [pid 685] mkdir("./file0", 0777 [pid 292] newfstatat(4, "", [pid 685] <... mkdir resumed>) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(4, 0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 292] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 292] close(4) = 0 [pid 292] rmdir("./12/file0") = 0 [pid 685] mount("/dev/loop1", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 292] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./12/binderfs") = 0 [pid 292] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./12") = 0 [pid 292] mkdir("./13", 0777) = 0 [pid 292] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 292] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 292] close(3 [pid 674] <... mmap resumed>) = 0x200000000000 [pid 674] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 673] <... futex resumed>) = 0 [pid 674] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 673] exit_group(0 [pid 674] <... futex resumed>) = ? [pid 673] <... exit_group resumed>) = ? [pid 674] +++ exited with 0 +++ [pid 294] <... umount2 resumed>) = 0 [pid 292] <... close resumed>) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 673] +++ exited with 0 +++ [pid 294] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 697 attached [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=673, si_uid=0, si_status=0, si_utime=10, si_stime=23} --- [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 697] set_robust_list(0x55555ee9a6a0, 24 [pid 294] newfstatat(AT_FDCWD, "./11/file0", [pid 697] <... set_robust_list resumed>) = 0 [pid 294] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 697] chdir("./13" [pid 294] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 697] <... chdir resumed>) = 0 [pid 697] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 697] <... prctl resumed>) = 0 [pid 294] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 697] setpgid(0, 0) = 0 [pid 294] <... openat resumed>) = 4 [pid 697] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 294] newfstatat(4, "", [pid 697] <... openat resumed>) = 3 [pid 294] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 697] write(3, "1000", 4 [pid 294] getdents64(4, [pid 697] <... write resumed>) = 4 [pid 697] close(3 [pid 294] <... getdents64 resumed>0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 697] <... close resumed>) = 0 [pid 294] getdents64(4, [pid 697] symlink("/dev/binderfs", "./binderfs" [pid 294] <... getdents64 resumed>0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 697] <... symlink resumed>) = 0 [pid 294] close(4 [pid 697] write(1, "executing program\n", 18executing program ) = 18 [pid 294] <... close resumed>) = 0 [pid 697] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 294] rmdir("./11/file0" [pid 697] <... futex resumed>) = 0 [pid 294] <... rmdir resumed>) = 0 [pid 697] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, [pid 294] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 697] <... rt_sigaction resumed>NULL, 8) = 0 [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 697] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 294] newfstatat(AT_FDCWD, "./11/binderfs", [pid 697] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 697] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 294] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] <... restart_syscall resumed>) = 0 [pid 697] <... mmap resumed>) = 0x7f1443ea4000 [pid 294] unlink("./11/binderfs" [pid 697] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE [pid 294] <... unlink resumed>) = 0 [pid 290] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW [pid 697] <... mprotect resumed>) = 0 [pid 294] getdents64(3, [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 697] rt_sigprocmask(SIG_BLOCK, ~[], [pid 290] <... openat resumed>) = 3 [pid 697] <... rt_sigprocmask resumed>[], 8) = 0 [pid 294] <... getdents64 resumed>0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 290] newfstatat(3, "", [pid 697] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} [pid 294] close(3 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, [pid 294] <... close resumed>) = 0 [pid 290] <... getdents64 resumed>0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 697] <... clone3 resumed> => {parent_tid=[699]}, 88) = 699 [pid 294] rmdir("./11" [pid 290] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 697] rt_sigprocmask(SIG_SETMASK, [], [pid 294] <... rmdir resumed>) = 0 [pid 697] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 697] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 294] mkdir("./12", 0777 [pid 697] <... futex resumed>) = 0 [pid 697] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 294] <... mkdir resumed>) = 0 [ 38.936047][ T685] loop1: detected capacity change from 0 to 40427 [pid 294] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 294] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 294] close(3) = 0 [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] <... clone resumed>, child_tidptr=0x55555ee9a690) = 697 [pid 294] <... clone resumed>, child_tidptr=0x55555ee9a690) = 700 ./strace-static-x86_64: Process 699 attached [pid 699] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 699] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 699] memfd_create("syzkaller", 0) = 3 [pid 699] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 ./strace-static-x86_64: Process 700 attached [pid 700] set_robust_list(0x55555ee9a6a0, 24) = 0 [pid 700] chdir("./12") = 0 [pid 700] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 700] setpgid(0, 0) = 0 [pid 700] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 700] write(3, "1000", 4) = 4 [pid 700] close(3) = 0 [pid 700] symlink("/dev/binderfs", "./binderfs") = 0 [pid 700] write(1, "executing program\n", 18executing program ) = 18 [pid 700] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 700] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, NULL, 8) = 0 [pid 700] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 700] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443ea4000 [pid 700] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 700] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 700] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} => {parent_tid=[702]}, 88) = 702 [pid 700] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 700] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 700] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 702 attached [pid 702] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 702] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 702] memfd_create("syzkaller", 0) = 3 [pid 702] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 [pid 293] <... umount2 resumed>) = 0 [ 38.984457][ T685] F2FS-fs (loop1): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 293] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./12/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 293] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(4, 0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 293] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 293] close(4) = 0 [pid 293] rmdir("./12/file0") = 0 [pid 293] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./12/binderfs") = 0 [pid 293] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./12") = 0 [pid 293] mkdir("./13", 0777) = 0 [pid 293] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 293] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 293] close(3) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee9a690) = 703 ./strace-static-x86_64: Process 703 attached [pid 703] set_robust_list(0x55555ee9a6a0, 24 [pid 685] <... mount resumed>) = 0 [pid 703] <... set_robust_list resumed>) = 0 [pid 685] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 703] chdir("./13" [pid 685] <... openat resumed>) = 3 [pid 703] <... chdir resumed>) = 0 [pid 685] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 703] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 685] <... openat resumed>) = 4 [pid 703] setpgid(0, 0 [pid 685] ioctl(4, LOOP_CLR_FD [pid 703] <... setpgid resumed>) = 0 [pid 703] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 685] <... ioctl resumed>) = 0 [pid 703] <... openat resumed>) = 3 [pid 685] close(4 [pid 703] write(3, "1000", 4) = 4 [pid 703] close(3 [pid 685] <... close resumed>) = 0 [pid 703] <... close resumed>) = 0 [pid 703] symlink("/dev/binderfs", "./binderfs" [pid 685] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000executing program [pid 703] <... symlink resumed>) = 0 [pid 685] <... futex resumed>) = 1 [pid 681] <... futex resumed>) = 0 [pid 703] write(1, "executing program\n", 18 [pid 681] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 703] <... write resumed>) = 18 [pid 685] fspick(AT_FDCWD, "./file0", 0 [pid 681] <... futex resumed>) = 0 [pid 703] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 681] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 703] <... futex resumed>) = 0 [pid 703] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, [pid 685] <... fspick resumed>) = 4 [pid 703] <... rt_sigaction resumed>NULL, 8) = 0 [pid 685] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 703] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 685] <... futex resumed>) = 1 [pid 681] <... futex resumed>) = 0 [pid 703] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 685] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 681] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 703] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 681] <... futex resumed>) = 0 [pid 703] <... mmap resumed>) = 0x7f1443ea4000 [pid 681] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 703] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 703] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 703] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} => {parent_tid=[705]}, 88) = 705 [pid 703] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 703] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 703] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 705 attached [pid 705] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 705] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 705] memfd_create("syzkaller", 0) = 3 [ 39.039805][ T685] F2FS-fs (loop1): Found nat_bits in checkpoint [pid 705] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 [pid 685] <... fsconfig resumed>) = 0 [pid 685] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 681] <... futex resumed>) = 0 [pid 685] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 681] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 685] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 681] <... futex resumed>) = 0 [pid 685] openat(AT_FDCWD, "./file0", O_RDONLY [pid 681] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 685] <... openat resumed>) = 5 [pid 685] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 681] <... futex resumed>) = 0 [pid 685] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 681] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 685] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 681] <... futex resumed>) = 0 [pid 685] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 681] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 685] <... ioctl resumed>) = 0 [pid 685] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 681] <... futex resumed>) = 0 [pid 685] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 681] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 685] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 681] <... futex resumed>) = 0 [pid 685] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 681] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 685] <... prlimit64 resumed>NULL) = 0 [pid 685] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 685] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 681] <... futex resumed>) = 0 [pid 681] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 685] <... futex resumed>) = 0 [pid 681] <... futex resumed>) = 1 [pid 685] sched_setscheduler(0, SCHED_FIFO, [7] [pid 681] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 685] <... sched_setscheduler resumed>) = 0 [pid 685] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 681] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 685] <... futex resumed>) = 0 [pid 685] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 681] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 685] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 685] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 681] <... futex resumed>) = 0 [pid 290] <... umount2 resumed>) = 0 [pid 681] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 290] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 685] <... mmap resumed>) = 0x200000000000 [pid 685] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 685] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 681] <... futex resumed>) = 0 [ 39.101463][ T685] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [pid 681] exit_group(0 [pid 685] <... futex resumed>) = ? [pid 681] <... exit_group resumed>) = ? [pid 685] +++ exited with 0 +++ [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./12/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 290] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(4, 0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 290] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 290] close(4) = 0 [pid 290] rmdir("./12/file0") = 0 [pid 290] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./12/binderfs") = 0 [pid 290] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./12") = 0 [pid 290] mkdir("./13", 0777) = 0 [pid 290] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 290] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 290] close(3) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee9a690) = 707 ./strace-static-x86_64: Process 707 attached [pid 707] set_robust_list(0x55555ee9a6a0, 24) = 0 [pid 707] chdir("./13") = 0 [pid 707] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 707] setpgid(0, 0) = 0 [pid 707] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 707] write(3, "1000", 4) = 4 [pid 707] close(3) = 0 [pid 707] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 707] write(1, "executing program\n", 18) = 18 [pid 707] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 707] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, NULL, 8) = 0 [pid 707] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 707] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443ea4000 [pid 707] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 707] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 707] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} => {parent_tid=[708]}, 88) = 708 [pid 707] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 707] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 707] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 681] +++ exited with 0 +++ [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=681, si_uid=0, si_status=0, si_utime=8, si_stime=23} --- [pid 291] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 708 attached [pid 708] set_robust_list(0x7f1443ec49a0, 24 [pid 291] <... restart_syscall resumed>) = 0 [pid 291] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 291] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 708] <... set_robust_list resumed>) = 0 [pid 708] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 708] memfd_create("syzkaller", 0) = 3 [pid 708] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 [pid 699] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 291] <... umount2 resumed>) = 0 [pid 291] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./13/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 291] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(4, 0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 291] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 705] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 291] close(4) = 0 [pid 291] rmdir("./13/file0") = 0 [pid 291] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./13/binderfs") = 0 [pid 291] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./13") = 0 [pid 291] mkdir("./14", 0777) = 0 [pid 291] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 291] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 291] close(3) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee9a690) = 709 ./strace-static-x86_64: Process 709 attached [pid 709] set_robust_list(0x55555ee9a6a0, 24) = 0 [pid 709] chdir("./14") = 0 [pid 709] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 709] setpgid(0, 0) = 0 [pid 709] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 709] write(3, "1000", 4) = 4 [pid 709] close(3) = 0 [pid 709] symlink("/dev/binderfs", "./binderfs") = 0 [pid 709] write(1, "executing program\n", 18executing program ) = 18 [pid 709] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 709] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, [pid 702] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 709] <... rt_sigaction resumed>NULL, 8) = 0 [pid 709] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 709] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443ea4000 [pid 709] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 709] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 709] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} => {parent_tid=[710]}, 88) = 710 [pid 709] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 709] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 709] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 710 attached [pid 710] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 710] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 710] memfd_create("syzkaller", 0) = 3 [pid 710] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 [pid 708] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 699] <... write resumed>) = 20699119 [pid 699] munmap(0x7f143baa4000, 138412032) = 0 [pid 699] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 699] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 699] close(3) = 0 [pid 699] close(4) = 0 [pid 699] mkdir("./file0", 0777) = 0 [pid 699] mount("/dev/loop2", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 705] <... write resumed>) = 20699119 [pid 705] munmap(0x7f143baa4000, 138412032) = 0 [pid 705] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 705] ioctl(4, LOOP_SET_FD, 3 [pid 702] <... write resumed>) = 20699119 [pid 702] munmap(0x7f143baa4000, 138412032) = 0 [pid 702] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 702] ioctl(4, LOOP_SET_FD, 3 [pid 705] <... ioctl resumed>) = 0 [pid 705] close(3) = 0 [pid 705] close(4) = 0 [pid 705] mkdir("./file0", 0777) = 0 [ 39.580113][ T699] loop2: detected capacity change from 0 to 40427 [ 39.608431][ T699] F2FS-fs (loop2): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 705] mount("/dev/loop3", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 702] <... ioctl resumed>) = 0 [pid 702] close(3) = 0 [pid 702] close(4) = 0 [pid 702] mkdir("./file0", 0777) = 0 [pid 702] mount("/dev/loop4", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 708] <... write resumed>) = 20699119 [pid 708] munmap(0x7f143baa4000, 138412032) = 0 [pid 708] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 39.629114][ T705] loop3: detected capacity change from 0 to 40427 [ 39.652290][ T702] loop4: detected capacity change from 0 to 40427 [ 39.652432][ T699] F2FS-fs (loop2): Found nat_bits in checkpoint [ 39.669582][ T705] F2FS-fs (loop3): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 708] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 708] close(3) = 0 [pid 708] close(4) = 0 [pid 708] mkdir("./file0", 0777) = 0 [ 39.687441][ T702] F2FS-fs (loop4): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 39.699408][ T708] loop0: detected capacity change from 0 to 40427 [ 39.707388][ T705] F2FS-fs (loop3): Found nat_bits in checkpoint [pid 708] mount("/dev/loop0", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 699] <... mount resumed>) = 0 [pid 699] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 699] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 699] ioctl(4, LOOP_CLR_FD) = 0 [pid 699] close(4) = 0 [pid 699] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 697] <... futex resumed>) = 0 [pid 697] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 699] fspick(AT_FDCWD, "./file0", 0 [pid 697] <... futex resumed>) = 0 [pid 697] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 699] <... fspick resumed>) = 4 [pid 699] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 697] <... futex resumed>) = 0 [pid 697] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 699] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 705] <... mount resumed>) = 0 [pid 697] <... futex resumed>) = 0 [pid 697] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 705] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 705] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 705] ioctl(4, LOOP_CLR_FD) = 0 [pid 705] close(4) = 0 [pid 705] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 703] <... futex resumed>) = 0 [pid 703] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 705] fspick(AT_FDCWD, "./file0", 0 [pid 703] <... futex resumed>) = 0 [pid 703] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 705] <... fspick resumed>) = 4 [pid 705] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 703] <... futex resumed>) = 0 [pid 705] <... futex resumed>) = 1 [pid 703] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 705] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 703] <... futex resumed>) = 0 [pid 703] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 699] <... fsconfig resumed>) = 0 [pid 699] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 697] <... futex resumed>) = 0 [pid 697] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 699] openat(AT_FDCWD, "./file0", O_RDONLY) = 5 [pid 697] <... futex resumed>) = 0 [pid 697] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 699] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 697] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 699] <... futex resumed>) = 0 [ 39.736971][ T702] F2FS-fs (loop4): Found nat_bits in checkpoint [ 39.743211][ T708] F2FS-fs (loop0): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 39.763121][ T699] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 39.776857][ T708] F2FS-fs (loop0): Found nat_bits in checkpoint [pid 697] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 699] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 697] <... futex resumed>) = 0 [pid 699] <... ioctl resumed>) = 0 [pid 697] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 699] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 697] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 710] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 699] <... futex resumed>) = 0 [pid 697] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 699] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 705] <... fsconfig resumed>) = 0 [pid 697] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 705] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 699] <... prlimit64 resumed>NULL) = 0 [pid 705] <... futex resumed>) = 1 [pid 699] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 703] <... futex resumed>) = 0 [pid 699] <... futex resumed>) = 1 [pid 703] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 705] openat(AT_FDCWD, "./file0", O_RDONLY [pid 697] <... futex resumed>) = 0 [pid 697] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 703] <... futex resumed>) = 0 [pid 705] <... openat resumed>) = 5 [pid 703] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 699] sched_setscheduler(0, SCHED_FIFO, [7] [pid 697] <... futex resumed>) = 0 [pid 699] <... sched_setscheduler resumed>) = 0 [pid 705] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 697] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 699] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 705] <... futex resumed>) = 1 [pid 703] <... futex resumed>) = 0 [pid 699] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 697] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 705] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 703] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 697] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 703] <... futex resumed>) = 0 [pid 699] <... futex resumed>) = 0 [ 39.802065][ T705] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [pid 699] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 708] <... mount resumed>) = 0 [pid 703] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 702] <... mount resumed>) = 0 [pid 699] <... mmap resumed>) = 0x200000000000 [pid 697] <... futex resumed>) = 1 [pid 699] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 699] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 708] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 702] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 697] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 705] <... ioctl resumed>) = 0 [pid 702] <... openat resumed>) = 3 [pid 708] <... openat resumed>) = 3 [pid 705] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 708] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 702] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 697] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 705] <... futex resumed>) = 1 [pid 703] <... futex resumed>) = 0 [pid 703] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 705] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 708] <... openat resumed>) = 4 [pid 705] <... prlimit64 resumed>NULL) = 0 [pid 703] <... futex resumed>) = 0 [pid 702] <... openat resumed>) = 4 [pid 697] exit_group(0 [pid 708] ioctl(4, LOOP_CLR_FD [pid 705] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 703] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 702] ioctl(4, LOOP_CLR_FD [pid 699] <... futex resumed>) = ? [pid 697] <... exit_group resumed>) = ? [pid 705] <... futex resumed>) = 0 [pid 703] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 699] +++ exited with 0 +++ [pid 708] <... ioctl resumed>) = 0 [pid 702] <... ioctl resumed>) = 0 [pid 708] close(4 [pid 705] sched_setscheduler(0, SCHED_FIFO, [7] [pid 703] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [ 39.843134][ T702] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 39.847091][ T708] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [pid 702] close(4 [pid 705] <... sched_setscheduler resumed>) = 0 [pid 703] <... futex resumed>) = 0 [pid 702] <... close resumed>) = 0 [pid 708] <... close resumed>) = 0 [pid 705] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 703] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 702] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 708] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 705] <... futex resumed>) = 0 [pid 705] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 703] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 708] <... futex resumed>) = 1 [pid 702] <... futex resumed>) = 1 [pid 700] <... futex resumed>) = 0 [pid 707] <... futex resumed>) = 0 [pid 707] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 707] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 710] <... write resumed>) = 20699119 [pid 710] munmap(0x7f143baa4000, 138412032) = 0 [pid 710] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 710] ioctl(4, LOOP_SET_FD, 3 [pid 708] fspick(AT_FDCWD, "./file0", 0 [pid 703] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 702] fspick(AT_FDCWD, "./file0", 0 [pid 700] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 705] <... futex resumed>) = 0 [pid 705] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 700] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 708] <... fspick resumed>) = 4 [pid 703] <... futex resumed>) = 1 [pid 702] <... fspick resumed>) = 4 [pid 708] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 703] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 702] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 708] <... futex resumed>) = 1 [pid 702] <... futex resumed>) = 1 [pid 700] <... futex resumed>) = 0 [pid 708] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 702] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 700] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 700] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 702] <... fsconfig resumed>) = 0 [pid 702] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 700] <... futex resumed>) = 0 [pid 702] openat(AT_FDCWD, "./file0", O_RDONLY [pid 700] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 702] <... openat resumed>) = 5 [pid 700] <... futex resumed>) = 0 [pid 702] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 700] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 702] <... futex resumed>) = 0 [pid 700] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 702] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 700] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 700] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 702] <... ioctl resumed>) = 0 [pid 702] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 700] <... futex resumed>) = 0 [pid 702] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 700] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 702] <... prlimit64 resumed>NULL) = 0 [pid 700] <... futex resumed>) = 0 [pid 702] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 700] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 702] <... futex resumed>) = 0 [pid 700] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 702] sched_setscheduler(0, SCHED_FIFO, [7] [pid 700] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 702] <... sched_setscheduler resumed>) = 0 [pid 700] <... futex resumed>) = 0 [pid 702] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 700] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 702] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 700] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 700] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 707] <... futex resumed>) = 0 [pid 702] <... futex resumed>) = 0 [pid 700] <... futex resumed>) = 1 [pid 707] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 702] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 710] <... ioctl resumed>) = 0 [pid 705] <... mmap resumed>) = 0x200000000000 [pid 697] +++ exited with 0 +++ [pid 705] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 705] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 710] close(3) = 0 [pid 710] close(4) = 0 [pid 710] mkdir("./file0", 0777) = 0 [pid 710] mount("/dev/loop1", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 700] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=697, si_uid=0, si_status=0, si_utime=9, si_stime=23} --- [pid 292] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 292] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 707] <... futex resumed>) = 1 [pid 707] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 703] <... futex resumed>) = 0 [pid 703] exit_group(0 [pid 705] <... futex resumed>) = ? [pid 703] <... exit_group resumed>) = ? [pid 705] +++ exited with 0 +++ [pid 708] <... futex resumed>) = 0 [pid 702] <... mmap resumed>) = 0x200000000000 [pid 708] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 702] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 702] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 700] <... futex resumed>) = 0 [pid 700] exit_group(0 [pid 702] <... futex resumed>) = ? [ 39.940700][ T710] loop1: detected capacity change from 0 to 40427 [pid 700] <... exit_group resumed>) = ? [pid 702] +++ exited with 0 +++ [pid 707] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 707] futex(0x7f1443f956dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 707] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443e83000 [pid 707] mprotect(0x7f1443e84000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 707] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 707] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ea3990, parent_tid=0x7f1443ea3990, exit_signal=0, stack=0x7f1443e83000, stack_size=0x20300, tls=0x7f1443ea36c0} => {parent_tid=[729]}, 88) = 729 [pid 707] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 707] futex(0x7f1443f956d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 707] futex(0x7f1443f956dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 708] <... fsconfig resumed>) = 0 [pid 708] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 708] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 729 attached [pid 729] set_robust_list(0x7f1443ea39a0, 24) = 0 [pid 729] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 729] openat(AT_FDCWD, "./file0", O_RDONLY) = 5 [pid 729] futex(0x7f1443f956dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 707] <... futex resumed>) = 0 [pid 707] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 729] futex(0x7f1443f956d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 708] <... futex resumed>) = 0 [pid 707] <... futex resumed>) = 1 [pid 708] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 707] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 708] <... ioctl resumed>) = 0 [pid 708] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 708] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 707] <... futex resumed>) = 0 [pid 707] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 708] <... futex resumed>) = 0 [pid 707] <... futex resumed>) = 1 [pid 708] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, NULL) = 0 [pid 708] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 708] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 707] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 707] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 708] <... futex resumed>) = 0 [pid 707] <... futex resumed>) = 1 [pid 708] sched_setscheduler(0, SCHED_FIFO, [7]) = 0 [pid 708] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 708] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 707] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 707] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 708] <... futex resumed>) = 0 [pid 707] <... futex resumed>) = 1 [ 40.022408][ T710] F2FS-fs (loop1): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 40.061614][ T710] F2FS-fs (loop1): Found nat_bits in checkpoint [pid 708] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0) = 0x200000000000 [pid 707] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 703] +++ exited with 0 +++ [pid 700] +++ exited with 0 +++ [pid 292] <... umount2 resumed>) = 0 [pid 708] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 708] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 707] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 294] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=700, si_uid=0, si_status=0, si_utime=9, si_stime=21} --- [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=703, si_uid=0, si_status=0, si_utime=13, si_stime=22} --- [pid 292] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 707] exit_group(0 [pid 729] <... futex resumed>) = ? [pid 708] <... futex resumed>) = ? [pid 707] <... exit_group resumed>) = ? [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 708] +++ exited with 0 +++ [pid 729] +++ exited with 0 +++ [pid 292] newfstatat(AT_FDCWD, "./13/file0", [pid 293] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 294] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 294] <... openat resumed>) = 3 [pid 293] <... openat resumed>) = 3 [pid 292] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 294] newfstatat(3, "", [pid 293] newfstatat(3, "", [pid 292] <... openat resumed>) = 4 [pid 294] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] getdents64(3, [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] <... getdents64 resumed>0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 293] getdents64(3, [pid 292] getdents64(4, 0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 294] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] <... getdents64 resumed>0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 292] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 293] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] close(4) = 0 [pid 292] rmdir("./13/file0") = 0 [pid 292] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./13/binderfs") = 0 [pid 710] <... mount resumed>) = 0 [pid 710] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 292] getdents64(3, [pid 710] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 292] <... getdents64 resumed>0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 710] <... openat resumed>) = 4 [pid 292] close(3 [pid 710] ioctl(4, LOOP_CLR_FD) = 0 [pid 292] <... close resumed>) = 0 [pid 710] close(4 [pid 292] rmdir("./13" [pid 710] <... close resumed>) = 0 [pid 710] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 709] <... futex resumed>) = 0 [pid 710] fspick(AT_FDCWD, "./file0", 0 [pid 709] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 710] <... fspick resumed>) = 4 [pid 709] <... futex resumed>) = 0 [pid 292] <... rmdir resumed>) = 0 [pid 710] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 709] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 710] <... futex resumed>) = 0 [pid 709] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 710] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 709] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 709] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 292] mkdir("./14", 0777) = 0 [pid 292] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 292] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 292] close(3) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee9a690) = 731 ./strace-static-x86_64: Process 731 attached [pid 731] set_robust_list(0x55555ee9a6a0, 24) = 0 [pid 731] chdir("./14") = 0 [pid 731] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 731] setpgid(0, 0) = 0 [pid 731] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 731] write(3, "1000", 4) = 4 [pid 731] close(3) = 0 [pid 731] symlink("/dev/binderfs", "./binderfs") = 0 [pid 731] write(1, "executing program\n", 18executing program ) = 18 [pid 731] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 731] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, NULL, 8) = 0 [pid 731] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 731] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443ea4000 [pid 731] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 731] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 731] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} => {parent_tid=[733]}, 88) = 733 [pid 731] rt_sigprocmask(SIG_SETMASK, [], [pid 707] +++ exited with 0 +++ [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=707, si_uid=0, si_status=0, si_utime=9, si_stime=24} --- [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 710] <... fsconfig resumed>) = 0 [pid 710] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 709] <... futex resumed>) = 0 [pid 710] openat(AT_FDCWD, "./file0", O_RDONLY [pid 709] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 710] <... openat resumed>) = 5 [pid 709] <... futex resumed>) = 0 [pid 731] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 731] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 710] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 709] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 710] <... futex resumed>) = 0 [pid 709] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 710] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 709] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 709] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 710] <... ioctl resumed>) = 0 [pid 731] <... futex resumed>) = 0 [pid 710] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 709] <... futex resumed>) = 0 [pid 710] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 709] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 710] <... prlimit64 resumed>NULL) = 0 [pid 709] <... futex resumed>) = 0 [pid 710] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 709] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 710] <... futex resumed>) = 0 [pid 709] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 710] sched_setscheduler(0, SCHED_FIFO, [7] [pid 709] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 710] <... sched_setscheduler resumed>) = 0 [pid 709] <... futex resumed>) = 0 [pid 710] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 709] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 710] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 709] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 709] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 710] <... futex resumed>) = 0 [pid 709] <... futex resumed>) = 1 [pid 710] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0./strace-static-x86_64: Process 733 attached [pid 731] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 710] <... mmap resumed>) = 0x200000000000 [pid 709] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 294] <... umount2 resumed>) = 0 [pid 290] <... restart_syscall resumed>) = 0 [pid 710] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 710] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 733] set_robust_list(0x7f1443ec49a0, 24 [pid 709] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 294] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 733] <... set_robust_list resumed>) = 0 [pid 709] exit_group(0 [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 733] rt_sigprocmask(SIG_SETMASK, [], [pid 710] <... futex resumed>) = ? [pid 709] <... exit_group resumed>) = ? [pid 294] newfstatat(AT_FDCWD, "./12/file0", [pid 710] +++ exited with 0 +++ [pid 733] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 294] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 733] memfd_create("syzkaller", 0 [pid 294] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW [ 40.164657][ T710] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [pid 290] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 733] <... memfd_create resumed>) = 3 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 733] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 294] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 290] <... openat resumed>) = 3 [pid 733] <... mmap resumed>) = 0x7f143baa4000 [pid 294] newfstatat(4, "", [pid 290] newfstatat(3, "", [pid 293] <... umount2 resumed>) = 0 [pid 293] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./13/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 293] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(4, 0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 293] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 293] close(4) = 0 [pid 293] rmdir("./13/file0") = 0 [pid 293] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./13/binderfs") = 0 [pid 293] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./13") = 0 [pid 293] mkdir("./14", 0777) = 0 [pid 293] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 293] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 294] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] close(3 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] <... close resumed>) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDexecuting program , child_tidptr=0x55555ee9a690) = 734 ./strace-static-x86_64: Process 734 attached [pid 734] set_robust_list(0x55555ee9a6a0, 24) = 0 [pid 734] chdir("./14") = 0 [pid 734] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 734] setpgid(0, 0) = 0 [pid 734] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 734] write(3, "1000", 4) = 4 [pid 734] close(3) = 0 [pid 734] symlink("/dev/binderfs", "./binderfs") = 0 [pid 734] write(1, "executing program\n", 18) = 18 [pid 734] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 734] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, NULL, 8) = 0 [pid 734] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 294] getdents64(4, [pid 290] getdents64(3, [pid 734] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 734] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443ea4000 [pid 734] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 294] <... getdents64 resumed>0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 290] <... getdents64 resumed>0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 294] getdents64(4, [pid 734] rt_sigprocmask(SIG_BLOCK, ~[], [pid 294] <... getdents64 resumed>0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 290] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 734] <... rt_sigprocmask resumed>[], 8) = 0 [pid 734] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} [pid 294] close(4 [pid 734] <... clone3 resumed> => {parent_tid=[735]}, 88) = 735 [pid 734] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 734] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 734] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 735 attached [pid 735] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 735] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 735] memfd_create("syzkaller", 0 [pid 294] <... close resumed>) = 0 [pid 735] <... memfd_create resumed>) = 3 [pid 735] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 [pid 294] rmdir("./12/file0") = 0 [pid 294] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] unlink("./12/binderfs") = 0 [pid 294] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 294] close(3) = 0 [pid 294] rmdir("./12") = 0 [pid 294] mkdir("./13", 0777) = 0 [pid 294] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 294] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 294] close(3) = 0 [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee9a690) = 736 ./strace-static-x86_64: Process 736 attached [pid 736] set_robust_list(0x55555ee9a6a0, 24) = 0 [pid 736] chdir("./13") = 0 [pid 736] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 736] setpgid(0, 0) = 0 [pid 736] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 736] write(3, "1000", 4) = 4 [pid 736] close(3) = 0 [pid 736] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 736] write(1, "executing program\n", 18) = 18 [pid 736] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 736] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, NULL, 8) = 0 [pid 736] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 736] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443ea4000 [pid 736] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 736] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 736] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} => {parent_tid=[737]}, 88) = 737 [pid 736] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 736] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 736] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 737 attached [pid 737] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 737] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 737] memfd_create("syzkaller", 0) = 3 [pid 737] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 [pid 709] +++ exited with 0 +++ [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=709, si_uid=0, si_status=0, si_utime=7, si_stime=19} --- [pid 291] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 291] umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 291] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... umount2 resumed>) = 0 [pid 290] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./13/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 290] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(4, 0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 290] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 290] close(4) = 0 [pid 290] rmdir("./13/file0") = 0 [pid 290] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./13/binderfs") = 0 [pid 290] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./13") = 0 [pid 290] mkdir("./14", 0777) = 0 [pid 290] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 290] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 290] close(3) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee9a690) = 738 ./strace-static-x86_64: Process 738 attached [pid 738] set_robust_list(0x55555ee9a6a0, 24) = 0 [pid 738] chdir("./14") = 0 [pid 738] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 738] setpgid(0, 0) = 0 [pid 738] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 738] write(3, "1000", 4) = 4 [pid 738] close(3) = 0 [pid 738] symlink("/dev/binderfs", "./binderfs") = 0 [pid 738] write(1, "executing program\n", 18executing program ) = 18 [pid 738] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 738] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, NULL, 8) = 0 [pid 738] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 738] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443ea4000 [pid 738] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 738] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 738] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} => {parent_tid=[739]}, 88) = 739 [pid 738] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 738] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 738] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 291] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 739 attached [pid 739] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 739] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 739] memfd_create("syzkaller", 0) = 3 [pid 739] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 [pid 291] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./14/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 291] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(4, 0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 291] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 291] close(4) = 0 [pid 291] rmdir("./14/file0") = 0 [pid 291] umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./14/binderfs") = 0 [pid 291] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./14") = 0 [pid 291] mkdir("./15", 0777) = 0 [pid 291] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 291] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 291] close(3) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee9a690) = 740 [pid 735] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119./strace-static-x86_64: Process 740 attached [pid 740] set_robust_list(0x55555ee9a6a0, 24) = 0 [pid 740] chdir("./15") = 0 [pid 740] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 740] setpgid(0, 0) = 0 [pid 740] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 740] write(3, "1000", 4) = 4 [pid 740] close(3) = 0 [pid 740] symlink("/dev/binderfs", "./binderfs") = 0 [pid 740] write(1, "executing program\n", 18executing program ) = 18 [pid 740] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 740] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, NULL, 8) = 0 [pid 740] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 740] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443ea4000 [pid 733] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 740] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 740] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 740] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} => {parent_tid=[741]}, 88) = 741 [pid 740] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 740] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 740] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 741 attached [pid 741] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 741] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 741] memfd_create("syzkaller", 0) = 3 [pid 741] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 [pid 737] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 735] <... write resumed>) = 20699119 [pid 735] munmap(0x7f143baa4000, 138412032) = 0 [pid 735] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 735] ioctl(4, LOOP_SET_FD, 3 [pid 733] <... write resumed>) = 20699119 [pid 733] munmap(0x7f143baa4000, 138412032 [pid 735] <... ioctl resumed>) = 0 [pid 733] <... munmap resumed>) = 0 [pid 733] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 733] ioctl(4, LOOP_SET_FD, 3 [pid 735] close(3) = 0 [pid 735] close(4) = 0 [pid 735] mkdir("./file0", 0777) = 0 [pid 735] mount("/dev/loop3", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 733] <... ioctl resumed>) = 0 [pid 733] close(3) = 0 [pid 733] close(4) = 0 [pid 733] mkdir("./file0", 0777) = 0 [ 40.690683][ T735] loop3: detected capacity change from 0 to 40427 [ 40.702294][ T733] loop2: detected capacity change from 0 to 40427 [ 40.713078][ T735] F2FS-fs (loop3): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 733] mount("/dev/loop2", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 739] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 737] <... write resumed>) = 20699119 [pid 737] munmap(0x7f143baa4000, 138412032) = 0 [ 40.736179][ T733] F2FS-fs (loop2): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 40.756043][ T735] F2FS-fs (loop3): Found nat_bits in checkpoint [pid 737] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 737] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 737] close(3) = 0 [pid 737] close(4) = 0 [pid 737] mkdir("./file0", 0777) = 0 [pid 737] mount("/dev/loop4", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 735] <... mount resumed>) = 0 [ 40.793527][ T733] F2FS-fs (loop2): Found nat_bits in checkpoint [pid 741] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 735] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 735] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 735] ioctl(4, LOOP_CLR_FD) = 0 [pid 735] close(4) = 0 [pid 735] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 734] <... futex resumed>) = 0 [pid 734] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 734] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 735] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 735] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 734] <... futex resumed>) = 0 [pid 734] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 734] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 735] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 733] <... mount resumed>) = 0 [pid 733] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 733] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 733] ioctl(4, LOOP_CLR_FD) = 0 [pid 733] close(4) = 0 [pid 733] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 733] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 731] <... futex resumed>) = 0 [pid 731] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 733] <... futex resumed>) = 0 [pid 733] fspick(AT_FDCWD, "./file0", 0 [pid 731] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 733] <... fspick resumed>) = 4 [pid 733] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 731] <... futex resumed>) = 0 [pid 733] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 731] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 731] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 735] <... fsconfig resumed>) = 0 [pid 735] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 734] <... futex resumed>) = 0 [pid 734] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 734] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 735] openat(AT_FDCWD, "./file0", O_RDONLY) = 5 [pid 735] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 734] <... futex resumed>) = 0 [pid 734] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 734] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 735] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140) = 0 [pid 735] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 734] <... futex resumed>) = 0 [pid 734] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 735] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 734] <... futex resumed>) = 0 [pid 734] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 735] <... prlimit64 resumed>NULL) = 0 [pid 735] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 734] <... futex resumed>) = 0 [pid 734] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 734] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 735] sched_setscheduler(0, SCHED_FIFO, [7]) = 0 [pid 735] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 40.837592][ T737] loop4: detected capacity change from 0 to 40427 [ 40.852752][ T735] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 40.861318][ T737] F2FS-fs (loop4): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 734] <... futex resumed>) = 0 [pid 735] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 734] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 735] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 735] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 734] <... futex resumed>) = 0 [pid 734] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 739] <... write resumed>) = 20699119 [pid 739] munmap(0x7f143baa4000, 138412032) = 0 [pid 739] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 739] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 739] close(3) = 0 [pid 739] close(4) = 0 [pid 739] mkdir("./file0", 0777) = 0 [pid 739] mount("/dev/loop0", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 734] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 734] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 735] <... mmap resumed>) = 0x200000000000 [pid 735] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 731] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 735] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 734] <... futex resumed>) = 0 [pid 731] futex(0x7f1443f956dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 734] exit_group(0 [pid 731] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 735] <... futex resumed>) = ? [pid 734] <... exit_group resumed>) = ? [pid 731] <... mmap resumed>) = 0x7f1443e83000 [pid 735] +++ exited with 0 +++ [pid 731] mprotect(0x7f1443e84000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 731] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 731] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ea3990, parent_tid=0x7f1443ea3990, exit_signal=0, stack=0x7f1443e83000, stack_size=0x20300, tls=0x7f1443ea36c0} => {parent_tid=[752]}, 88) = 752 [pid 731] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 40.884799][ T733] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [pid 731] futex(0x7f1443f956d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 731] futex(0x7f1443f956dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 733] <... fsconfig resumed>) = 0 [pid 733] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 733] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 752 attached [pid 752] set_robust_list(0x7f1443ea39a0, 24) = 0 [pid 752] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 752] openat(AT_FDCWD, "./file0", O_RDONLY) = 5 [pid 752] futex(0x7f1443f956dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 731] <... futex resumed>) = 0 [pid 752] futex(0x7f1443f956d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 731] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 733] <... futex resumed>) = 0 [pid 731] <... futex resumed>) = 1 [pid 733] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 731] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 733] <... ioctl resumed>) = 0 [pid 733] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 733] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 731] <... futex resumed>) = 0 [pid 731] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 733] <... futex resumed>) = 0 [pid 731] <... futex resumed>) = 1 [pid 733] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, NULL) = 0 [pid 733] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 733] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 731] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 731] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 733] <... futex resumed>) = 0 [pid 731] <... futex resumed>) = 1 [pid 733] sched_setscheduler(0, SCHED_FIFO, [7]) = 0 [pid 733] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 733] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 731] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 731] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 733] <... futex resumed>) = 0 [pid 731] <... futex resumed>) = 1 [ 40.958272][ T739] loop0: detected capacity change from 0 to 40427 [ 40.970938][ T737] F2FS-fs (loop4): Found nat_bits in checkpoint [ 40.986263][ T739] F2FS-fs (loop0): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 733] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 741] <... write resumed>) = 20699119 [pid 733] <... mmap resumed>) = 0x200000000000 [pid 731] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 733] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 733] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 741] munmap(0x7f143baa4000, 138412032 [pid 731] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 739] <... mount resumed>) = 0 [pid 731] exit_group(0 [pid 741] <... munmap resumed>) = 0 [pid 733] <... futex resumed>) = ? [pid 731] <... exit_group resumed>) = ? [pid 733] +++ exited with 0 +++ [pid 752] <... futex resumed>) = ? [pid 752] +++ exited with 0 +++ [pid 741] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 739] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 741] <... openat resumed>) = 4 [pid 739] <... openat resumed>) = 3 [pid 741] ioctl(4, LOOP_SET_FD, 3 [pid 739] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 739] ioctl(4, LOOP_CLR_FD) = 0 [pid 739] close(4) = 0 [pid 739] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 738] <... futex resumed>) = 0 [pid 738] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 739] fspick(AT_FDCWD, "./file0", 0 [pid 738] <... futex resumed>) = 0 [pid 738] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 739] <... fspick resumed>) = 4 [pid 739] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 738] <... futex resumed>) = 0 [pid 738] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 738] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 739] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 741] <... ioctl resumed>) = 0 [pid 741] close(3) = 0 [pid 741] close(4) = 0 [pid 739] <... fsconfig resumed>) = 0 [pid 739] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 741] mkdir("./file0", 0777 [pid 739] <... futex resumed>) = 1 [pid 738] <... futex resumed>) = 0 [pid 738] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 739] openat(AT_FDCWD, "./file0", O_RDONLY [pid 738] <... futex resumed>) = 0 [pid 739] <... openat resumed>) = 5 [pid 738] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 739] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 738] <... futex resumed>) = 0 [pid 738] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 739] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 738] <... futex resumed>) = 0 [pid 738] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 741] <... mkdir resumed>) = 0 [pid 739] <... ioctl resumed>) = 0 [pid 741] mount("/dev/loop1", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 739] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 738] <... futex resumed>) = 0 [pid 739] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 738] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 739] <... prlimit64 resumed>NULL) = 0 [pid 738] <... futex resumed>) = 0 [pid 739] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 738] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 739] <... futex resumed>) = 0 [pid 738] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 739] sched_setscheduler(0, SCHED_FIFO, [7] [pid 738] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 739] <... sched_setscheduler resumed>) = 0 [pid 739] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 738] <... futex resumed>) = 0 [pid 739] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 738] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 739] <... futex resumed>) = 0 [pid 738] <... futex resumed>) = 1 [ 41.041075][ T739] F2FS-fs (loop0): Found nat_bits in checkpoint [ 41.073269][ T739] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [pid 739] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0) = 0x200000000000 [pid 738] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 734] +++ exited with 0 +++ [pid 731] +++ exited with 0 +++ [pid 739] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 739] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 738] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 738] exit_group(0 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=734, si_uid=0, si_status=0, si_utime=12, si_stime=20} --- [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=731, si_uid=0, si_status=0, si_utime=11, si_stime=18} --- [pid 739] <... futex resumed>) = ? [pid 738] <... exit_group resumed>) = ? [pid 739] +++ exited with 0 +++ [pid 737] <... mount resumed>) = 0 [pid 737] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 737] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 737] ioctl(4, LOOP_CLR_FD) = 0 [pid 737] close(4) = 0 [pid 737] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 736] <... futex resumed>) = 0 [pid 736] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 736] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 737] <... futex resumed>) = 1 [pid 737] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 737] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 736] <... futex resumed>) = 0 [pid 736] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 736] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 737] <... futex resumed>) = 1 [pid 737] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 293] umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] <... openat resumed>) = 3 [pid 292] <... openat resumed>) = 3 [pid 292] newfstatat(3, "", [pid 293] newfstatat(3, "", [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, [pid 292] getdents64(3, [pid 293] <... getdents64 resumed>0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 292] <... getdents64 resumed>0x55555ee9b730 /* 4 entries */, 32768) = 112 [ 41.093911][ T741] loop1: detected capacity change from 0 to 40427 [ 41.118950][ T737] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 41.133075][ T741] F2FS-fs (loop1): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 293] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 737] <... fsconfig resumed>) = 0 [pid 737] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 736] <... futex resumed>) = 0 [pid 736] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 736] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 737] openat(AT_FDCWD, "./file0", O_RDONLY) = 5 [pid 737] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 736] <... futex resumed>) = 0 [pid 736] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 736] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 737] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140) = 0 [pid 737] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 736] <... futex resumed>) = 0 [pid 736] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 736] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 737] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, NULL) = 0 [pid 737] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 736] <... futex resumed>) = 0 [pid 736] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 736] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 737] sched_setscheduler(0, SCHED_FIFO, [7]) = 0 [pid 737] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 736] <... futex resumed>) = 0 [ 41.165915][ T741] F2FS-fs (loop1): Found nat_bits in checkpoint [pid 737] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 736] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 737] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 736] <... futex resumed>) = 0 [pid 736] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 738] +++ exited with 0 +++ [pid 292] <... umount2 resumed>) = 0 [pid 737] <... mmap resumed>) = 0x200000000000 [pid 737] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 736] <... futex resumed>) = 0 [pid 737] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 736] exit_group(0 [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=738, si_uid=0, si_status=0, si_utime=7, si_stime=24} --- [pid 737] <... futex resumed>) = ? [pid 736] <... exit_group resumed>) = ? [pid 737] +++ exited with 0 +++ [pid 290] umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 290] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./14/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 292] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(4, 0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 292] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 292] close(4) = 0 [pid 292] rmdir("./14/file0") = 0 [pid 292] umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./14/binderfs") = 0 [pid 292] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./14") = 0 [pid 292] mkdir("./15", 0777) = 0 [pid 292] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 292] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 292] close(3) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee9a690) = 761 ./strace-static-x86_64: Process 761 attached [pid 761] set_robust_list(0x55555ee9a6a0, 24) = 0 [pid 761] chdir("./15") = 0 [pid 761] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 761] setpgid(0, 0) = 0 [pid 741] <... mount resumed>) = 0 [pid 741] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 761] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 741] <... openat resumed>) = 3 [pid 741] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 761] <... openat resumed>) = 3 [pid 741] ioctl(4, LOOP_CLR_FD) = 0 [pid 741] close(4) = 0 [pid 741] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 761] write(3, "1000", 4 [pid 741] <... futex resumed>) = 1 [pid 761] <... write resumed>) = 4 [pid 741] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 761] close(3) = 0 [pid 761] symlink("/dev/binderfs", "./binderfs" [pid 740] <... futex resumed>) = 0 [pid 740] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 741] <... futex resumed>) = 0 [pid 741] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 741] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 740] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 741] <... futex resumed>) = 0 [pid 741] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 761] <... symlink resumed>) = 0 executing program [pid 761] write(1, "executing program\n", 18) = 18 [pid 761] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 740] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 761] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, [pid 740] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 761] <... rt_sigaction resumed>NULL, 8) = 0 [pid 761] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 761] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 740] <... futex resumed>) = 1 [pid 741] <... futex resumed>) = 0 [pid 741] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 761] <... mmap resumed>) = 0x7f1443ea4000 [pid 761] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE [pid 740] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 761] <... mprotect resumed>) = 0 [pid 761] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 761] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} => {parent_tid=[763]}, 88) = 763 [pid 761] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 761] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 761] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 763 attached [pid 763] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 763] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 763] memfd_create("syzkaller", 0) = 3 [pid 763] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 [pid 741] <... fsconfig resumed>) = 0 [pid 741] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 741] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 740] <... futex resumed>) = 0 [pid 740] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 741] <... futex resumed>) = 0 [pid 740] <... futex resumed>) = 1 [pid 741] openat(AT_FDCWD, "./file0", O_RDONLY [pid 740] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 741] <... openat resumed>) = 5 [pid 741] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 740] <... futex resumed>) = 0 [pid 741] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 740] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 740] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 741] <... ioctl resumed>) = 0 [pid 741] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 740] <... futex resumed>) = 0 [pid 741] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 740] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 741] <... prlimit64 resumed>NULL) = 0 [pid 740] <... futex resumed>) = 0 [pid 741] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 740] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 741] <... futex resumed>) = 0 [pid 741] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 740] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 741] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 740] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 741] sched_setscheduler(0, SCHED_FIFO, [7] [pid 740] <... futex resumed>) = 0 [pid 741] <... sched_setscheduler resumed>) = 0 [pid 740] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 741] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 740] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 741] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 740] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 741] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 740] <... futex resumed>) = 0 [pid 736] +++ exited with 0 +++ [pid 293] <... umount2 resumed>) = 0 [pid 740] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 294] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=736, si_uid=0, si_status=0, si_utime=5, si_stime=24} --- [pid 293] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./14/file0", [pid 294] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 294] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 294] <... openat resumed>) = 3 [pid 293] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 294] newfstatat(3, "", [pid 293] <... openat resumed>) = 4 [pid 294] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] newfstatat(4, "", [pid 294] getdents64(3, [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] <... getdents64 resumed>0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 293] getdents64(4, [pid 294] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] <... getdents64 resumed>0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 293] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 293] close(4) = 0 [pid 293] rmdir("./14/file0") = 0 [pid 293] umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./14/binderfs") = 0 [pid 293] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./14") = 0 [pid 293] mkdir("./15", 0777) = 0 [ 41.296777][ T741] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [pid 293] openat(AT_FDCWD, "/dev/loop3", O_RDWRexecuting program ) = 3 [pid 293] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 293] close(3) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee9a690) = 765 [pid 290] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 765 attached [pid 765] set_robust_list(0x55555ee9a6a0, 24) = 0 [pid 765] chdir("./15") = 0 [pid 765] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 765] setpgid(0, 0) = 0 [pid 765] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 765] write(3, "1000", 4) = 4 [pid 765] close(3) = 0 [pid 765] symlink("/dev/binderfs", "./binderfs") = 0 [pid 765] write(1, "executing program\n", 18) = 18 [pid 765] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 765] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, NULL, 8) = 0 [pid 765] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 765] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443ea4000 [pid 765] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 765] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 765] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} => {parent_tid=[766]}, 88) = 766 [pid 765] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 765] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 765] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 290] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./14/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 290] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(4, 0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 290] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 290] close(4) = 0 [pid 290] rmdir("./14/file0") = 0 [pid 290] umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./14/binderfs", [pid 741] <... mmap resumed>) = 0x200000000000 [pid 741] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 740] <... futex resumed>) = 0 [pid 741] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 740] exit_group(0 [pid 741] <... futex resumed>) = ? [pid 740] <... exit_group resumed>) = ? [pid 741] +++ exited with 0 +++ [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./14/binderfs") = 0 [pid 290] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./14") = 0 [pid 290] mkdir("./15", 0777) = 0 [pid 290] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 290] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 290] close(3) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee9a690) = 767 ./strace-static-x86_64: Process 767 attached [pid 767] set_robust_list(0x55555ee9a6a0, 24) = 0 [pid 767] chdir("./15") = 0 [pid 767] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 767] setpgid(0, 0) = 0 [pid 767] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 766 attached ) = 3 [pid 767] write(3, "1000", 4) = 4 [pid 767] close(3) = 0 [pid 767] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 767] write(1, "executing program\n", 18) = 18 [pid 767] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 767] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, NULL, 8) = 0 [pid 767] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 767] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443ea4000 [pid 767] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 766] set_robust_list(0x7f1443ec49a0, 24 [pid 767] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 767] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} => {parent_tid=[768]}, 88) = 768 [pid 766] <... set_robust_list resumed>) = 0 [pid 767] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 767] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 767] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 766] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 766] memfd_create("syzkaller", 0) = 3 [pid 766] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 ./strace-static-x86_64: Process 768 attached [pid 768] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 768] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 768] memfd_create("syzkaller", 0) = 3 [pid 768] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 [pid 740] +++ exited with 0 +++ [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=740, si_uid=0, si_status=0, si_utime=8, si_stime=20} --- [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 294] <... umount2 resumed>) = 0 [pid 291] <... restart_syscall resumed>) = 0 [pid 291] umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 291] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 294] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] newfstatat(AT_FDCWD, "./13/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 294] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] getdents64(4, 0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 294] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 294] close(4) = 0 [pid 294] rmdir("./13/file0") = 0 [pid 294] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] unlink("./13/binderfs") = 0 [pid 294] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 294] close(3) = 0 [pid 294] rmdir("./13") = 0 [pid 294] mkdir("./14", 0777) = 0 [pid 294] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 294] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 294] close(3) = 0 [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee9a690) = 769 ./strace-static-x86_64: Process 769 attached [pid 769] set_robust_list(0x55555ee9a6a0, 24) = 0 [pid 769] chdir("./14") = 0 [pid 769] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 769] setpgid(0, 0) = 0 [pid 769] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 769] write(3, "1000", 4) = 4 [pid 769] close(3) = 0 [pid 769] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 769] write(1, "executing program\n", 18) = 18 [pid 769] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 769] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, NULL, 8) = 0 [pid 769] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 769] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443ea4000 [pid 769] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 769] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 769] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} => {parent_tid=[770]}, 88) = 770 [pid 769] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 769] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 769] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 770 attached [pid 770] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 770] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 770] memfd_create("syzkaller", 0) = 3 [pid 770] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 [pid 763] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 291] <... umount2 resumed>) = 0 [pid 291] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./15/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 291] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(4, 0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 291] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 291] close(4) = 0 [pid 291] rmdir("./15/file0") = 0 [pid 291] umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./15/binderfs") = 0 [pid 291] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./15") = 0 [pid 291] mkdir("./16", 0777) = 0 [pid 291] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 291] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 291] close(3) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee9a690) = 771 ./strace-static-x86_64: Process 771 attached [pid 771] set_robust_list(0x55555ee9a6a0, 24) = 0 [pid 771] chdir("./16") = 0 [pid 771] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 771] setpgid(0, 0) = 0 [pid 771] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 771] write(3, "1000", 4) = 4 [pid 771] close(3) = 0 [pid 771] symlink("/dev/binderfs", "./binderfs") = 0 [pid 771] write(1, "executing program\n", 18executing program ) = 18 [pid 771] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 771] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, NULL, 8) = 0 [pid 771] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 771] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443ea4000 [pid 771] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 771] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 771] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} => {parent_tid=[772]}, 88) = 772 [pid 771] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 771] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 771] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 763] <... write resumed>) = 20699119 [pid 763] munmap(0x7f143baa4000, 138412032) = 0 [pid 763] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 763] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 772 attached [pid 772] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 772] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 772] memfd_create("syzkaller", 0) = 3 [pid 772] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 [pid 763] <... ioctl resumed>) = 0 [pid 763] close(3) = 0 [pid 763] close(4) = 0 [pid 763] mkdir("./file0", 0777) = 0 [pid 763] mount("/dev/loop2", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [ 41.699016][ T763] loop2: detected capacity change from 0 to 40427 [ 41.717971][ T763] F2FS-fs (loop2): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 41.738320][ T763] F2FS-fs (loop2): Found nat_bits in checkpoint [pid 770] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 766] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 763] <... mount resumed>) = 0 [pid 768] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 763] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 763] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 763] ioctl(4, LOOP_CLR_FD) = 0 [pid 763] close(4) = 0 [pid 763] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 761] <... futex resumed>) = 0 [pid 763] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 761] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 763] <... futex resumed>) = 0 [pid 761] <... futex resumed>) = 1 [pid 763] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 761] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 763] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 761] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 763] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 761] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 763] <... futex resumed>) = 0 [pid 761] <... futex resumed>) = 1 [pid 763] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 761] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 763] <... fsconfig resumed>) = 0 [pid 763] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 763] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 761] <... futex resumed>) = 0 [pid 761] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 763] <... futex resumed>) = 0 [pid 761] <... futex resumed>) = 1 [pid 763] openat(AT_FDCWD, "./file0", O_RDONLY [pid 761] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 763] <... openat resumed>) = 5 [pid 763] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 761] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 763] <... futex resumed>) = 0 [pid 763] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 761] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 763] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 763] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 761] <... futex resumed>) = 0 [pid 761] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 763] <... ioctl resumed>) = 0 [pid 763] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 761] <... futex resumed>) = 0 [pid 763] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 761] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 763] <... futex resumed>) = 0 [pid 761] <... futex resumed>) = 1 [pid 763] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, NULL) = 0 [pid 761] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 763] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 761] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 763] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 761] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 763] <... futex resumed>) = 0 [pid 761] <... futex resumed>) = 1 [pid 763] sched_setscheduler(0, SCHED_FIFO, [7]) = 0 [pid 761] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 763] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 761] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 763] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 761] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 763] <... futex resumed>) = 0 [pid 761] <... futex resumed>) = 1 [pid 763] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 761] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 770] <... write resumed>) = 20699119 [pid 770] munmap(0x7f143baa4000, 138412032) = 0 [pid 770] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 41.845605][ T763] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [pid 770] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 770] close(3) = 0 [pid 770] close(4) = 0 [pid 770] mkdir("./file0", 0777) = 0 [pid 770] mount("/dev/loop4", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 763] <... mmap resumed>) = 0x200000000000 [pid 763] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 761] <... futex resumed>) = 0 [pid 763] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 761] exit_group(0 [pid 763] <... futex resumed>) = ? [pid 761] <... exit_group resumed>) = ? [pid 763] +++ exited with 0 +++ [pid 761] +++ exited with 0 +++ [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=761, si_uid=0, si_status=0, si_utime=8, si_stime=23} --- [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 772] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 768] <... write resumed>) = 20699119 [pid 768] munmap(0x7f143baa4000, 138412032) = 0 [pid 292] <... restart_syscall resumed>) = 0 [pid 292] umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 292] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 768] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 41.935134][ T770] loop4: detected capacity change from 0 to 40427 [ 41.964715][ T770] F2FS-fs (loop4): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 768] ioctl(4, LOOP_SET_FD, 3 [pid 766] <... write resumed>) = 20699119 [pid 766] munmap(0x7f143baa4000, 138412032) = 0 [pid 766] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 766] ioctl(4, LOOP_SET_FD, 3 [pid 768] <... ioctl resumed>) = 0 [pid 768] close(3) = 0 [pid 768] close(4) = 0 [pid 768] mkdir("./file0", 0777) = 0 [pid 768] mount("/dev/loop0", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 766] <... ioctl resumed>) = 0 [pid 766] close(3) = 0 [pid 766] close(4) = 0 [ 42.028291][ T770] F2FS-fs (loop4): Found nat_bits in checkpoint [ 42.051769][ T768] loop0: detected capacity change from 0 to 40427 [ 42.063074][ T766] loop3: detected capacity change from 0 to 40427 [pid 766] mkdir("./file0", 0777) = 0 [pid 766] mount("/dev/loop3", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 292] <... umount2 resumed>) = 0 [pid 292] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./15/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 292] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(4, 0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 292] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 292] close(4) = 0 [pid 292] rmdir("./15/file0") = 0 [pid 772] <... write resumed>) = 20699119 [pid 292] umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 772] munmap(0x7f143baa4000, 138412032 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./15/binderfs") = 0 [pid 292] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 772] <... munmap resumed>) = 0 [pid 772] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 292] rmdir("./15") = 0 [pid 772] <... openat resumed>) = 4 [pid 292] mkdir("./16", 0777 [pid 772] ioctl(4, LOOP_SET_FD, 3 [pid 292] <... mkdir resumed>) = 0 [ 42.081170][ T768] F2FS-fs (loop0): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 292] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 292] ioctl(3, LOOP_CLR_FD [pid 770] <... mount resumed>) = 0 [pid 770] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 770] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 770] ioctl(4, LOOP_CLR_FD) = 0 [pid 770] close(4) = 0 [pid 770] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 769] <... futex resumed>) = 0 [pid 769] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 769] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 770] <... futex resumed>) = 1 [pid 770] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 770] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 769] <... futex resumed>) = 0 [pid 769] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 769] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 770] <... futex resumed>) = 1 [pid 770] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 292] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 292] close(3 [pid 772] <... ioctl resumed>) = 0 [pid 292] <... close resumed>) = 0 [pid 772] close(3 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 772] <... close resumed>) = 0 ./strace-static-x86_64: Process 784 attached [pid 292] <... clone resumed>, child_tidptr=0x55555ee9a690) = 784 [pid 784] set_robust_list(0x55555ee9a6a0, 24) = 0 [pid 784] chdir("./16" [pid 772] close(4 [pid 784] <... chdir resumed>) = 0 [pid 784] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 784] setpgid(0, 0) = 0 [pid 784] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 784] write(3, "1000", 4) = 4 [pid 768] <... mount resumed>) = 0 [pid 784] close(3) = 0 [pid 784] symlink("/dev/binderfs", "./binderfs") = 0 [pid 768] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 768] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 770] <... fsconfig resumed>) = 0 [pid 770] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 769] <... futex resumed>) = 0 [pid 770] openat(AT_FDCWD, "./file0", O_RDONLY [pid 769] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 770] <... openat resumed>) = 5 [pid 769] <... futex resumed>) = 0 [pid 770] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 769] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 770] <... futex resumed>) = 0 [pid 769] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 770] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 769] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 769] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 772] <... close resumed>) = 0 [pid 772] mkdir("./file0", 0777 [pid 768] ioctl(4, LOOP_CLR_FD) = 0 [pid 772] <... mkdir resumed>) = 0 [pid 772] mount("/dev/loop1", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 770] <... ioctl resumed>) = 0 [pid 770] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 769] <... futex resumed>) = 0 [pid 770] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 769] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 770] <... prlimit64 resumed>NULL) = 0 [pid 769] <... futex resumed>) = 0 [pid 770] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 769] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 770] <... futex resumed>) = 0 [pid 769] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 770] sched_setscheduler(0, SCHED_FIFO, [7] [pid 769] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 770] <... sched_setscheduler resumed>) = 0 [pid 769] <... futex resumed>) = 0 [pid 770] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 769] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 770] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 769] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 769] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 770] <... futex resumed>) = 0 [pid 769] <... futex resumed>) = 1 [pid 770] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [ 42.130951][ T766] F2FS-fs (loop3): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 42.140510][ T768] F2FS-fs (loop0): Found nat_bits in checkpoint [ 42.154996][ T772] loop1: detected capacity change from 0 to 40427 [ 42.157832][ T770] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [pid 769] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}executing program [pid 784] write(1, "executing program\n", 18 [pid 770] <... mmap resumed>) = 0x200000000000 [pid 768] close(4 [pid 766] <... mount resumed>) = 0 [pid 770] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 770] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 784] <... write resumed>) = 18 [pid 784] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 784] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, NULL, 8) = 0 [pid 784] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 784] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443ea4000 [pid 784] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE [pid 769] <... futex resumed>) = 0 [pid 784] <... mprotect resumed>) = 0 [pid 784] rt_sigprocmask(SIG_BLOCK, ~[], [pid 769] exit_group(0 [pid 784] <... rt_sigprocmask resumed>[], 8) = 0 [pid 770] <... futex resumed>) = ? [pid 769] <... exit_group resumed>) = ? [pid 784] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} [pid 770] +++ exited with 0 +++ [pid 784] <... clone3 resumed> => {parent_tid=[788]}, 88) = 788 [pid 784] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 784] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 784] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 766] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 768] <... close resumed>) = 0 [pid 766] <... openat resumed>) = 3 [pid 768] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 766] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 767] <... futex resumed>) = 0 [pid 767] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 767] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 768] <... futex resumed>) = 1 [pid 768] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 768] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 767] <... futex resumed>) = 0 [pid 767] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 767] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 768] <... futex resumed>) = 1 [pid 768] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 766] ioctl(4, LOOP_CLR_FD) = 0 [pid 766] close(4) = 0 [pid 766] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 765] <... futex resumed>) = 0 [pid 766] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 765] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 765] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 766] <... futex resumed>) = 0 [pid 766] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 766] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 766] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 765] <... futex resumed>) = 0 [pid 765] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 766] <... futex resumed>) = 0 [pid 765] <... futex resumed>) = 1 [pid 766] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 765] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 769] +++ exited with 0 +++ [pid 294] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=769, si_uid=0, si_status=0, si_utime=9, si_stime=22} --- [pid 294] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 788 attached [pid 788] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 788] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 788] memfd_create("syzkaller", 0) = 3 [pid 788] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 [pid 294] <... restart_syscall resumed>) = 0 [pid 294] umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 42.186503][ T766] F2FS-fs (loop3): Found nat_bits in checkpoint [ 42.194212][ T768] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 42.210738][ T772] F2FS-fs (loop1): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 294] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] getdents64(3, 0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 294] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 767] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 767] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 767] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 767] futex(0x7f1443f956dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 767] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443e83000 [pid 767] mprotect(0x7f1443e84000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 767] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 767] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ea3990, parent_tid=0x7f1443ea3990, exit_signal=0, stack=0x7f1443e83000, stack_size=0x20300, tls=0x7f1443ea36c0} => {parent_tid=[793]}, 88) = 793 [pid 767] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 767] futex(0x7f1443f956d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 767] futex(0x7f1443f956dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 766] <... fsconfig resumed>) = 0 [pid 766] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 765] <... futex resumed>) = 0 [pid 768] <... fsconfig resumed>) = 0 [pid 766] openat(AT_FDCWD, "./file0", O_RDONLY [pid 765] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 768] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 766] <... openat resumed>) = 5 [pid 765] <... futex resumed>) = 0 [pid 768] <... futex resumed>) = 0 [pid 766] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 768] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 766] <... futex resumed>) = 0 [pid 766] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 765] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 765] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 766] <... futex resumed>) = 0 [pid 765] <... futex resumed>) = 1 [pid 766] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 765] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 766] <... ioctl resumed>) = 0 [pid 766] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 765] <... futex resumed>) = 0 [pid 766] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 765] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 766] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 765] <... futex resumed>) = 0 [pid 766] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 765] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 766] <... prlimit64 resumed>NULL) = 0 [pid 766] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 793 attached [pid 793] set_robust_list(0x7f1443ea39a0, 24 [pid 766] <... futex resumed>) = 1 [pid 765] <... futex resumed>) = 0 [pid 793] <... set_robust_list resumed>) = 0 [pid 766] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 765] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 793] rt_sigprocmask(SIG_SETMASK, [], [pid 766] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 765] <... futex resumed>) = 0 [pid 793] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 766] sched_setscheduler(0, SCHED_FIFO, [7] [pid 765] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 793] openat(AT_FDCWD, "./file0", O_RDONLY [pid 766] <... sched_setscheduler resumed>) = 0 [pid 766] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 793] <... openat resumed>) = 5 [pid 766] <... futex resumed>) = 1 [pid 765] <... futex resumed>) = 0 [pid 766] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 793] futex(0x7f1443f956dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 765] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 793] <... futex resumed>) = 1 [pid 767] <... futex resumed>) = 0 [pid 766] <... futex resumed>) = 0 [pid 765] <... futex resumed>) = 1 [pid 793] futex(0x7f1443f956d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 767] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 766] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 767] <... futex resumed>) = 1 [pid 765] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 767] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 772] <... mount resumed>) = 0 [pid 772] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 772] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 772] ioctl(4, LOOP_CLR_FD) = 0 [pid 772] close(4) = 0 [pid 772] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 771] <... futex resumed>) = 0 [pid 771] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 771] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 772] <... futex resumed>) = 1 [pid 772] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 772] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 771] <... futex resumed>) = 0 [pid 771] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 771] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 772] <... futex resumed>) = 1 [pid 772] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 766] <... mmap resumed>) = 0x200000000000 [pid 768] <... futex resumed>) = 0 [pid 766] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 765] <... futex resumed>) = 0 [pid 766] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 768] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [ 42.249595][ T766] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 42.270630][ T772] F2FS-fs (loop1): Found nat_bits in checkpoint [pid 765] exit_group(0 [pid 768] <... ioctl resumed>) = 0 [pid 766] <... futex resumed>) = ? [pid 765] <... exit_group resumed>) = ? [pid 768] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 766] +++ exited with 0 +++ [pid 768] <... futex resumed>) = 1 [pid 767] <... futex resumed>) = 0 [pid 768] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 767] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 768] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 767] <... futex resumed>) = 0 [pid 768] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 767] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 768] <... prlimit64 resumed>NULL) = 0 [pid 768] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 767] <... futex resumed>) = 0 [pid 768] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 767] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 768] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 767] <... futex resumed>) = 0 [pid 768] sched_setscheduler(0, SCHED_FIFO, [7] [pid 767] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 768] <... sched_setscheduler resumed>) = 0 [pid 768] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 767] <... futex resumed>) = 0 [pid 768] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 767] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 768] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 767] <... futex resumed>) = 0 [pid 768] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 767] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 771] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 768] <... mmap resumed>) = 0x200000000000 [pid 771] futex(0x7f1443f956dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 768] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 771] <... futex resumed>) = 0 [pid 768] <... futex resumed>) = 1 [pid 767] <... futex resumed>) = 0 [pid 771] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 768] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 767] exit_group(0 [pid 793] <... futex resumed>) = ? [ 42.336279][ T772] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [pid 771] <... mmap resumed>) = 0x7f1443e83000 [pid 768] <... futex resumed>) = ? [pid 767] <... exit_group resumed>) = ? [pid 793] +++ exited with 0 +++ [pid 771] mprotect(0x7f1443e84000, 131072, PROT_READ|PROT_WRITE [pid 768] +++ exited with 0 +++ [pid 771] <... mprotect resumed>) = 0 [pid 771] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 771] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ea3990, parent_tid=0x7f1443ea3990, exit_signal=0, stack=0x7f1443e83000, stack_size=0x20300, tls=0x7f1443ea36c0} => {parent_tid=[795]}, 88) = 795 [pid 771] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 771] futex(0x7f1443f956d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 771] futex(0x7f1443f956dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 795 attached [pid 795] set_robust_list(0x7f1443ea39a0, 24 [pid 772] <... fsconfig resumed>) = 0 [pid 772] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 772] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 795] <... set_robust_list resumed>) = 0 [pid 795] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 795] openat(AT_FDCWD, "./file0", O_RDONLY) = 5 [pid 795] futex(0x7f1443f956dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 771] <... futex resumed>) = 0 [pid 795] <... futex resumed>) = 1 [pid 771] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 795] futex(0x7f1443f956d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 772] <... futex resumed>) = 0 [pid 771] <... futex resumed>) = 1 [pid 772] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 771] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 772] <... ioctl resumed>) = 0 [pid 772] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 772] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 771] <... futex resumed>) = 0 [pid 771] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 772] <... futex resumed>) = 0 [pid 771] <... futex resumed>) = 1 [pid 772] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 771] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 772] <... prlimit64 resumed>NULL) = 0 [pid 772] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 771] <... futex resumed>) = 0 [pid 772] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 771] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 772] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 772] sched_setscheduler(0, SCHED_FIFO, [7] [pid 771] <... futex resumed>) = 0 [pid 772] <... sched_setscheduler resumed>) = 0 [pid 772] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 771] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 772] <... futex resumed>) = 0 [pid 772] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 771] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 771] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 772] <... futex resumed>) = 0 [pid 771] <... futex resumed>) = 1 [pid 772] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0) = 0x200000000000 [pid 771] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 767] +++ exited with 0 +++ [pid 765] +++ exited with 0 +++ [pid 294] <... umount2 resumed>) = 0 [pid 772] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 772] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 771] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 294] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=765, si_uid=0, si_status=0, si_utime=8, si_stime=21} --- [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=767, si_uid=0, si_status=0, si_utime=8, si_stime=19} --- [pid 771] exit_group(0 [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 795] <... futex resumed>) = ? [pid 772] <... futex resumed>) = ? [pid 771] <... exit_group resumed>) = ? [pid 772] +++ exited with 0 +++ [pid 795] +++ exited with 0 +++ [pid 294] newfstatat(AT_FDCWD, "./14/file0", [pid 293] umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW [pid 294] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 294] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] <... openat resumed>) = 3 [pid 294] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] <... openat resumed>) = 3 [pid 290] newfstatat(3, "", [pid 294] <... openat resumed>) = 4 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] newfstatat(3, "", [pid 294] newfstatat(4, "", [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, [pid 293] getdents64(3, [pid 294] getdents64(4, [pid 290] <... getdents64 resumed>0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 294] <... getdents64 resumed>0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 293] <... getdents64 resumed>0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 294] getdents64(4, [pid 290] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 294] <... getdents64 resumed>0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 294] close(4) = 0 [pid 294] rmdir("./14/file0") = 0 [pid 788] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 294] umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] unlink("./14/binderfs") = 0 [pid 294] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 294] close(3) = 0 [pid 294] rmdir("./14") = 0 [pid 294] mkdir("./15", 0777) = 0 [pid 294] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 294] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 294] close(3) = 0 [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee9a690) = 797 executing program ./strace-static-x86_64: Process 797 attached [pid 797] set_robust_list(0x55555ee9a6a0, 24) = 0 [pid 797] chdir("./15") = 0 [pid 797] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 797] setpgid(0, 0) = 0 [pid 797] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 797] write(3, "1000", 4) = 4 [pid 797] close(3) = 0 [pid 797] symlink("/dev/binderfs", "./binderfs") = 0 [pid 797] write(1, "executing program\n", 18) = 18 [pid 797] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 797] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, NULL, 8) = 0 [pid 797] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 797] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443ea4000 [pid 797] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 797] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 797] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} => {parent_tid=[798]}, 88) = 798 [pid 797] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 797] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 797] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 798 attached [pid 798] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 798] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 798] memfd_create("syzkaller", 0) = 3 [pid 798] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 [pid 788] <... write resumed>) = 20699119 [pid 788] munmap(0x7f143baa4000, 138412032) = 0 [pid 788] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 788] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 788] close(3) = 0 [pid 788] close(4) = 0 [pid 788] mkdir("./file0", 0777) = 0 [pid 788] mount("/dev/loop2", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 771] +++ exited with 0 +++ [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=771, si_uid=0, si_status=0, si_utime=10, si_stime=23} --- [pid 291] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 291] umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 291] umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] <... umount2 resumed>) = 0 [pid 290] <... umount2 resumed>) = 0 [pid 290] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./15/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 290] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(4, 0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 290] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 290] close(4) = 0 [pid 290] rmdir("./15/file0") = 0 [pid 290] umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./15/binderfs") = 0 [pid 290] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./15") = 0 [pid 290] mkdir("./16", 0777) = 0 [pid 290] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 290] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 290] close(3) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee9a690) = 801 ./strace-static-x86_64: Process 801 attached [pid 801] set_robust_list(0x55555ee9a6a0, 24) = 0 [pid 801] chdir("./16") = 0 [pid 801] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 801] setpgid(0, 0) = 0 [pid 801] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 801] write(3, "1000", 4) = 4 [pid 801] close(3) = 0 [pid 801] symlink("/dev/binderfs", "./binderfs") = 0 [ 42.585300][ T788] loop2: detected capacity change from 0 to 40427 [ 42.613436][ T788] F2FS-fs (loop2): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 801] write(1, "executing program\n", 18executing program ) = 18 [pid 801] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 801] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, NULL, 8) = 0 [pid 801] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 801] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443ea4000 [pid 801] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 801] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 801] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} => {parent_tid=[802]}, 88) = 802 [pid 801] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 801] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 801] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 293] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./15/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 293] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(4, 0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 293] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 293] close(4) = 0 [pid 293] rmdir("./15/file0") = 0 [pid 293] umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./15/binderfs") = 0 [pid 293] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./15") = 0 [pid 293] mkdir("./16", 0777) = 0 [pid 293] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 293] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 293] close(3) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee9a690) = 803 ./strace-static-x86_64: Process 803 attached [pid 803] set_robust_list(0x55555ee9a6a0, 24) = 0 [pid 803] chdir("./16") = 0 [pid 803] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 803] setpgid(0, 0executing program ) = 0 [pid 803] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 803] write(3, "1000", 4) = 4 [pid 803] close(3) = 0 [pid 803] symlink("/dev/binderfs", "./binderfs") = 0 [pid 803] write(1, "executing program\n", 18) = 18 [pid 803] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 803] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, NULL, 8) = 0 [pid 803] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 803] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443ea4000 [pid 803] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 803] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 803] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} => {parent_tid=[804]}, 88) = 804 [pid 803] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 803] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 803] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 804 attached [pid 804] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 804] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 804] memfd_create("syzkaller", 0) = 3 [pid 804] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 ./strace-static-x86_64: Process 802 attached [pid 802] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 802] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 802] memfd_create("syzkaller", 0) = 3 [pid 802] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 [ 42.653419][ T788] F2FS-fs (loop2): Found nat_bits in checkpoint [pid 788] <... mount resumed>) = 0 [pid 788] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 788] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 788] ioctl(4, LOOP_CLR_FD) = 0 [pid 788] close(4) = 0 [pid 788] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 784] <... futex resumed>) = 0 [pid 788] fspick(AT_FDCWD, "./file0", 0 [pid 784] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 784] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 788] <... fspick resumed>) = 4 [pid 788] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 784] <... futex resumed>) = 0 [pid 784] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 788] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 784] <... futex resumed>) = 0 [pid 784] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 291] <... umount2 resumed>) = 0 [pid 788] <... fsconfig resumed>) = 0 [pid 788] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 784] <... futex resumed>) = 0 [pid 784] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 788] openat(AT_FDCWD, "./file0", O_RDONLY [pid 784] <... futex resumed>) = 0 [pid 788] <... openat resumed>) = 5 [pid 784] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 788] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 784] <... futex resumed>) = 0 [pid 784] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 788] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 784] <... futex resumed>) = 0 [pid 784] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 788] <... ioctl resumed>) = 0 [pid 788] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 784] <... futex resumed>) = 0 [pid 784] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 788] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 784] <... futex resumed>) = 0 [pid 784] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 788] <... prlimit64 resumed>NULL) = 0 [pid 788] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 784] <... futex resumed>) = 0 [pid 788] sched_setscheduler(0, SCHED_FIFO, [7] [pid 784] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 788] <... sched_setscheduler resumed>) = 0 [pid 788] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 784] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 788] <... futex resumed>) = 0 [pid 788] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 784] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 784] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 788] <... futex resumed>) = 0 [pid 784] <... futex resumed>) = 1 [ 42.723860][ T788] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [pid 788] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 784] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 291] umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./16/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 291] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(4, 0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 291] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 291] close(4) = 0 [pid 291] rmdir("./16/file0") = 0 [pid 291] umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./16/binderfs") = 0 [pid 291] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./16") = 0 [pid 291] mkdir("./17", 0777) = 0 [pid 291] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 291] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 291] close(3) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee9a690) = 807 [pid 788] <... mmap resumed>) = 0x200000000000 [pid 788] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 788] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 784] <... futex resumed>) = 0 [pid 784] exit_group(0 [pid 788] <... futex resumed>) = ? [pid 784] <... exit_group resumed>) = ? [pid 788] +++ exited with 0 +++ ./strace-static-x86_64: Process 807 attached [pid 807] set_robust_list(0x55555ee9a6a0, 24) = 0 [pid 807] chdir("./17") = 0 [pid 807] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 807] setpgid(0, 0) = 0 [pid 807] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 807] write(3, "1000", 4) = 4 [pid 807] close(3) = 0 [pid 807] symlink("/dev/binderfs", "./binderfs") = 0 [pid 807] write(1, "executing program\n", 18executing program ) = 18 [pid 807] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 807] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, NULL, 8) = 0 [pid 807] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 807] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443ea4000 [pid 807] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 807] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 807] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} => {parent_tid=[808]}, 88) = 808 [pid 807] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 807] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 807] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 808 attached [pid 808] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 808] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 808] memfd_create("syzkaller", 0) = 3 [pid 808] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 [pid 784] +++ exited with 0 +++ [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=784, si_uid=0, si_status=0, si_utime=8, si_stime=17} --- [pid 292] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 292] umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 292] umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 798] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 804] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 802] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 292] <... umount2 resumed>) = 0 [pid 292] umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./16/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 292] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(4, 0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 292] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 292] close(4) = 0 [pid 292] rmdir("./16/file0") = 0 [pid 292] umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./16/binderfs") = 0 [pid 292] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./16") = 0 [pid 292] mkdir("./17", 0777) = 0 [pid 292] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 292] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 292] close(3) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee9a690) = 809 ./strace-static-x86_64: Process 809 attached [pid 809] set_robust_list(0x55555ee9a6a0, 24) = 0 [pid 809] chdir("./17") = 0 [pid 809] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 809] setpgid(0, 0) = 0 [pid 809] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 809] write(3, "1000", 4) = 4 [pid 809] close(3) = 0 [pid 809] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 809] write(1, "executing program\n", 18) = 18 [pid 809] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 809] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, NULL, 8) = 0 [pid 809] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 809] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443ea4000 [pid 809] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 809] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 809] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} => {parent_tid=[810]}, 88) = 810 [pid 809] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 809] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 809] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 810 attached [pid 798] <... write resumed>) = 20699119 [pid 798] munmap(0x7f143baa4000, 138412032 [pid 810] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 798] <... munmap resumed>) = 0 [pid 810] rt_sigprocmask(SIG_SETMASK, [], [pid 798] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 810] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 798] <... openat resumed>) = 4 [pid 810] memfd_create("syzkaller", 0 [pid 798] ioctl(4, LOOP_SET_FD, 3 [pid 810] <... memfd_create resumed>) = 3 [pid 810] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 [pid 808] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 798] <... ioctl resumed>) = 0 [pid 798] close(3) = 0 [pid 798] close(4) = 0 [pid 798] mkdir("./file0", 0777) = 0 [pid 798] mount("/dev/loop4", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 804] <... write resumed>) = 20699119 [pid 804] munmap(0x7f143baa4000, 138412032) = 0 [pid 804] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 804] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 804] close(3) = 0 [pid 804] close(4) = 0 [pid 804] mkdir("./file0", 0777) = 0 [pid 804] mount("/dev/loop3", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 802] <... write resumed>) = 20699119 [pid 802] munmap(0x7f143baa4000, 138412032) = 0 [pid 802] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 43.115137][ T798] loop4: detected capacity change from 0 to 40427 [ 43.148825][ T798] F2FS-fs (loop4): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 802] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 802] close(3) = 0 [pid 802] close(4) = 0 [pid 802] mkdir("./file0", 0777) = 0 [ 43.164023][ T804] loop3: detected capacity change from 0 to 40427 [ 43.185794][ T804] F2FS-fs (loop3): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 43.198900][ T802] loop0: detected capacity change from 0 to 40427 [ 43.220843][ T804] F2FS-fs (loop3): Found nat_bits in checkpoint [ 43.229029][ T798] F2FS-fs (loop4): Found nat_bits in checkpoint [ 43.229109][ T802] F2FS-fs (loop0): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 802] mount("/dev/loop0", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 798] <... mount resumed>) = 0 [pid 798] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 798] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 798] ioctl(4, LOOP_CLR_FD) = 0 [pid 798] close(4) = 0 [pid 798] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 797] <... futex resumed>) = 0 [pid 798] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 797] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 798] fspick(AT_FDCWD, "./file0", 0 [pid 797] <... futex resumed>) = 0 [pid 798] <... fspick resumed>) = 4 [pid 797] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 798] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 797] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 798] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 797] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 798] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 797] <... futex resumed>) = 0 [pid 798] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 797] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 804] <... mount resumed>) = 0 [pid 804] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 804] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 804] ioctl(4, LOOP_CLR_FD) = 0 [pid 804] close(4) = 0 [pid 804] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 803] <... futex resumed>) = 0 [pid 803] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 803] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 804] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 804] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 803] <... futex resumed>) = 0 [pid 803] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 804] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 803] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 804] <... fsconfig resumed>) = 0 [pid 804] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 803] <... futex resumed>) = 0 [pid 803] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 803] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 804] openat(AT_FDCWD, "./file0", O_RDONLY) = 5 [pid 804] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 803] <... futex resumed>) = 0 [pid 803] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 803] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 804] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140) = 0 [pid 804] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 803] <... futex resumed>) = 0 [pid 804] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 803] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 804] <... prlimit64 resumed>NULL) = 0 [pid 803] <... futex resumed>) = 0 [pid 798] <... fsconfig resumed>) = 0 [pid 803] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 798] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 804] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 798] <... futex resumed>) = 1 [pid 797] <... futex resumed>) = 0 [pid 798] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 797] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 798] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 797] <... futex resumed>) = 0 [pid 798] openat(AT_FDCWD, "./file0", O_RDONLY [pid 797] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 804] <... futex resumed>) = 1 [pid 803] <... futex resumed>) = 0 [pid 798] <... openat resumed>) = 5 [pid 803] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 798] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 803] <... futex resumed>) = 0 [pid 798] <... futex resumed>) = 1 [pid 803] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 797] <... futex resumed>) = 0 [pid 798] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 797] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 798] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 797] <... futex resumed>) = 0 [pid 798] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 797] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 804] sched_setscheduler(0, SCHED_FIFO, [7]) = 0 [pid 798] <... ioctl resumed>) = 0 [pid 804] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 798] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 804] <... futex resumed>) = 1 [pid 803] <... futex resumed>) = 0 [pid 798] <... futex resumed>) = 1 [pid 797] <... futex resumed>) = 0 [pid 804] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 803] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 798] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 797] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 804] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 43.300913][ T802] F2FS-fs (loop0): Found nat_bits in checkpoint [ 43.314859][ T798] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 43.325862][ T804] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [pid 803] <... futex resumed>) = 0 [pid 798] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 797] <... futex resumed>) = 0 [pid 804] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 803] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 798] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 797] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 810] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 808] <... write resumed>) = 20699119 [pid 802] <... mount resumed>) = 0 [pid 798] <... prlimit64 resumed>NULL) = 0 [pid 808] munmap(0x7f143baa4000, 138412032 [pid 804] <... mmap resumed>) = 0x200000000000 [pid 798] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 804] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 804] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 808] <... munmap resumed>) = 0 [pid 803] <... futex resumed>) = 0 [pid 808] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 798] <... futex resumed>) = 1 [pid 797] <... futex resumed>) = 0 [pid 808] <... openat resumed>) = 4 [pid 803] exit_group(0 [pid 798] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 797] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 808] ioctl(4, LOOP_SET_FD, 3 [pid 804] <... futex resumed>) = ? [pid 803] <... exit_group resumed>) = ? [pid 798] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 797] <... futex resumed>) = 0 [pid 804] +++ exited with 0 +++ [pid 802] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 802] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 802] ioctl(4, LOOP_CLR_FD) = 0 [pid 802] close(4) = 0 [pid 802] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 802] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 801] <... futex resumed>) = 0 [pid 801] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 797] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 798] sched_setscheduler(0, SCHED_FIFO, [7] [pid 802] <... futex resumed>) = 0 [pid 801] <... futex resumed>) = 1 [pid 798] <... sched_setscheduler resumed>) = 0 [pid 801] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 798] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 802] fspick(AT_FDCWD, "./file0", 0 [pid 798] <... futex resumed>) = 1 [pid 797] <... futex resumed>) = 0 [pid 798] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 797] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 798] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 797] <... futex resumed>) = 0 [pid 798] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 797] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 802] <... fspick resumed>) = 4 [pid 802] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 802] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 810] <... write resumed>) = 20699119 [pid 810] munmap(0x7f143baa4000, 138412032) = 0 [pid 810] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 798] <... mmap resumed>) = 0x200000000000 [pid 801] <... futex resumed>) = 0 [pid 798] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 797] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 801] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 798] <... futex resumed>) = 0 [ 43.430754][ T802] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 43.445580][ T808] loop1: detected capacity change from 0 to 40427 [pid 802] <... futex resumed>) = 0 [pid 801] <... futex resumed>) = 1 [pid 798] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 797] exit_group(0 [pid 801] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 798] <... futex resumed>) = ? [pid 797] <... exit_group resumed>) = ? [pid 802] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 798] +++ exited with 0 +++ [pid 810] ioctl(4, LOOP_SET_FD, 3 [pid 797] +++ exited with 0 +++ [pid 810] <... ioctl resumed>) = 0 [pid 802] <... fsconfig resumed>) = 0 [pid 810] close(3 [pid 802] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 294] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=797, si_uid=0, si_status=0, si_utime=8, si_stime=21} --- [pid 810] <... close resumed>) = 0 [pid 802] <... futex resumed>) = 1 [pid 801] <... futex resumed>) = 0 [pid 294] restart_syscall(<... resuming interrupted clone ...> [pid 801] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 810] close(4 [pid 801] <... futex resumed>) = 0 [pid 810] <... close resumed>) = 0 [pid 802] openat(AT_FDCWD, "./file0", O_RDONLY [pid 801] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 810] mkdir("./file0", 0777 [pid 802] <... openat resumed>) = 5 [pid 802] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 801] <... futex resumed>) = 0 [pid 802] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 801] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 810] <... mkdir resumed>) = 0 [pid 801] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 810] mount("/dev/loop2", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 802] <... ioctl resumed>) = 0 [pid 802] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 801] <... futex resumed>) = 0 [pid 802] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 801] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 802] <... prlimit64 resumed>NULL) = 0 [pid 801] <... futex resumed>) = 0 [pid 802] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 801] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 802] <... futex resumed>) = 0 [pid 801] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 802] sched_setscheduler(0, SCHED_FIFO, [7] [pid 801] <... futex resumed>) = 0 [pid 802] <... sched_setscheduler resumed>) = 0 [pid 801] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 802] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 802] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 294] <... restart_syscall resumed>) = 0 [pid 294] umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 808] <... ioctl resumed>) = 0 [pid 294] <... openat resumed>) = 3 [pid 294] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 808] close(3 [pid 294] getdents64(3, [pid 808] <... close resumed>) = 0 [pid 294] <... getdents64 resumed>0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 808] close(4 [pid 294] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 808] <... close resumed>) = 0 [pid 808] mkdir("./file0", 0777) = 0 [pid 808] mount("/dev/loop1", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 801] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 801] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 802] <... futex resumed>) = 0 [pid 801] <... futex resumed>) = 1 [pid 803] +++ exited with 0 +++ [pid 802] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0) = 0x200000000000 [pid 801] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 294] <... umount2 resumed>) = 0 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=803, si_uid=0, si_status=0, si_utime=9, si_stime=24} --- [pid 802] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 801] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 43.543231][ T810] loop2: detected capacity change from 0 to 40427 [ 43.563060][ T810] F2FS-fs (loop2): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 43.585780][ T810] F2FS-fs (loop2): Found nat_bits in checkpoint [pid 294] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 802] <... futex resumed>) = 0 [pid 801] exit_group(0 [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 801] <... exit_group resumed>) = ? [pid 294] newfstatat(AT_FDCWD, "./15/file0", [pid 802] +++ exited with 0 +++ [pid 293] umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW [pid 294] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 294] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] <... openat resumed>) = 3 [pid 294] openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] newfstatat(3, "", [pid 294] <... openat resumed>) = 4 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] newfstatat(4, "", [pid 293] getdents64(3, [pid 294] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] <... getdents64 resumed>0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 294] getdents64(4, [pid 293] umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 294] <... getdents64 resumed>0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 294] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 294] close(4) = 0 [pid 294] rmdir("./15/file0") = 0 [pid 294] umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] unlink("./15/binderfs") = 0 [pid 294] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 294] close(3) = 0 [pid 294] rmdir("./15") = 0 [pid 294] mkdir("./16", 0777) = 0 [pid 294] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 294] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 294] close(3) = 0 [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee9a690) = 827 ./strace-static-x86_64: Process 827 attached [pid 827] set_robust_list(0x55555ee9a6a0, 24) = 0 [pid 827] chdir("./16") = 0 [pid 827] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 827] setpgid(0, 0) = 0 [pid 827] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 827] write(3, "1000", 4) = 4 [pid 827] close(3) = 0 [pid 827] symlink("/dev/binderfs", "./binderfs") = 0 [pid 827] write(1, "executing program\n", 18executing program ) = 18 [pid 827] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 827] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, NULL, 8) = 0 [pid 827] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 827] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443ea4000 [pid 827] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 827] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 827] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} => {parent_tid=[828]}, 88) = 828 [pid 827] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 827] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 43.650164][ T808] F2FS-fs (loop1): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 827] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 828 attached [pid 828] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 801] +++ exited with 0 +++ [pid 828] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 828] memfd_create("syzkaller", 0 [pid 810] <... mount resumed>) = 0 [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=801, si_uid=0, si_status=0, si_utime=10, si_stime=24} --- [pid 828] <... memfd_create resumed>) = 3 [pid 810] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 828] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 [pid 810] <... openat resumed>) = 3 [pid 290] <... restart_syscall resumed>) = 0 [pid 290] umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 290] umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 810] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 810] ioctl(4, LOOP_CLR_FD) = 0 [pid 810] close(4) = 0 [pid 810] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 809] <... futex resumed>) = 0 [pid 809] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 810] fspick(AT_FDCWD, "./file0", 0 [pid 809] <... futex resumed>) = 0 [pid 810] <... fspick resumed>) = 4 [pid 809] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 810] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 809] <... futex resumed>) = 0 [pid 809] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 810] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 809] <... futex resumed>) = 0 [pid 809] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 810] <... fsconfig resumed>) = 0 [pid 810] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 809] <... futex resumed>) = 0 [pid 809] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 810] openat(AT_FDCWD, "./file0", O_RDONLY [pid 809] <... futex resumed>) = 0 [pid 810] <... openat resumed>) = 5 [pid 809] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 810] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 809] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 810] <... futex resumed>) = 0 [pid 810] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 809] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 809] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 810] <... ioctl resumed>) = 0 [pid 810] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 809] <... futex resumed>) = 0 [pid 809] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [ 43.695264][ T808] F2FS-fs (loop1): Found nat_bits in checkpoint [ 43.733194][ T810] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [pid 810] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 809] <... futex resumed>) = 0 [pid 810] <... prlimit64 resumed>NULL) = 0 [pid 809] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 810] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 809] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 810] <... futex resumed>) = 0 [pid 809] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 810] sched_setscheduler(0, SCHED_FIFO, [7] [pid 809] <... futex resumed>) = 0 [pid 810] <... sched_setscheduler resumed>) = 0 [pid 809] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 810] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 809] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 810] <... futex resumed>) = 0 [pid 809] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000executing program [pid 810] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 809] <... futex resumed>) = 0 [pid 293] <... umount2 resumed>) = 0 [pid 293] umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./16/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 293] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(4, 0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 293] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 293] close(4) = 0 [pid 293] rmdir("./16/file0") = 0 [pid 293] umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./16/binderfs") = 0 [pid 293] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./16") = 0 [pid 293] mkdir("./17", 0777) = 0 [pid 293] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 293] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 293] close(3) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee9a690) = 831 ./strace-static-x86_64: Process 831 attached [pid 831] set_robust_list(0x55555ee9a6a0, 24) = 0 [pid 831] chdir("./17") = 0 [pid 831] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 831] setpgid(0, 0) = 0 [pid 831] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 831] write(3, "1000", 4) = 4 [pid 831] close(3) = 0 [pid 831] symlink("/dev/binderfs", "./binderfs") = 0 [pid 831] write(1, "executing program\n", 18) = 18 [pid 831] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 831] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, NULL, 8) = 0 [pid 831] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 831] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443ea4000 [pid 831] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 831] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 831] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} => {parent_tid=[832]}, 88) = 832 [pid 831] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 831] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 831] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 832 attached [pid 832] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 832] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 832] memfd_create("syzkaller", 0) = 3 [pid 832] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 [pid 810] <... mmap resumed>) = 0x200000000000 [pid 810] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 810] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 809] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 809] exit_group(0 [pid 810] <... futex resumed>) = ? [pid 809] <... exit_group resumed>) = ? [pid 810] +++ exited with 0 +++ [pid 809] +++ exited with 0 +++ [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=809, si_uid=0, si_status=0, si_utime=13, si_stime=18} --- [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 808] <... mount resumed>) = 0 [pid 808] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 808] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 808] ioctl(4, LOOP_CLR_FD) = 0 [pid 808] close(4 [pid 292] <... restart_syscall resumed>) = 0 [pid 292] umount2("./17", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 292] umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 808] <... close resumed>) = 0 [pid 808] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 807] <... futex resumed>) = 0 [pid 807] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 807] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 808] <... futex resumed>) = 1 [pid 808] fspick(AT_FDCWD, "./file0", 0) = 4 [pid 808] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 807] <... futex resumed>) = 0 [pid 807] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 807] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 808] <... futex resumed>) = 1 [pid 808] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 290] <... umount2 resumed>) = 0 [pid 290] umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 808] <... fsconfig resumed>) = 0 [pid 808] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 807] <... futex resumed>) = 0 [pid 807] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 807] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 808] <... futex resumed>) = 1 [pid 808] openat(AT_FDCWD, "./file0", O_RDONLY) = 5 [pid 808] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 807] <... futex resumed>) = 0 [pid 807] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 807] <... futex resumed>) = 0 [pid 807] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 808] <... futex resumed>) = 1 [pid 290] newfstatat(AT_FDCWD, "./16/file0", [pid 808] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 808] <... ioctl resumed>) = 0 [pid 290] newfstatat(4, "", [pid 808] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 807] <... futex resumed>) = 0 [pid 807] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 807] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 808] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, NULL) = 0 [pid 290] getdents64(4, [pid 808] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 290] <... getdents64 resumed>0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 808] <... futex resumed>) = 1 [pid 807] <... futex resumed>) = 0 [pid 807] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 290] getdents64(4, [pid 807] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 808] sched_setscheduler(0, SCHED_FIFO, [7]) = 0 [pid 808] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 290] <... getdents64 resumed>0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 808] <... futex resumed>) = 1 [pid 807] <... futex resumed>) = 0 [pid 290] close(4 [pid 808] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 807] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 290] <... close resumed>) = 0 [pid 808] <... futex resumed>) = 0 [pid 807] <... futex resumed>) = 1 [pid 290] rmdir("./16/file0" [ 43.855614][ T808] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [pid 808] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 807] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 290] <... rmdir resumed>) = 0 [pid 290] umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./16/binderfs") = 0 [pid 290] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./16") = 0 [pid 290] mkdir("./17", 0777) = 0 [pid 290] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 290] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 290] close(3) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee9a690) = 835 [pid 808] <... mmap resumed>) = 0x200000000000 [pid 808] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 807] <... futex resumed>) = 0 [pid 808] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 807] exit_group(0 [pid 808] <... futex resumed>) = ? [pid 807] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 835 attached [pid 808] +++ exited with 0 +++ [pid 835] set_robust_list(0x55555ee9a6a0, 24) = 0 [pid 835] chdir("./17") = 0 [pid 835] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 835] setpgid(0, 0) = 0 [pid 835] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 835] write(3, "1000", 4) = 4 [pid 835] close(3) = 0 [pid 835] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 835] write(1, "executing program\n", 18) = 18 [pid 835] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 835] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, NULL, 8) = 0 [pid 835] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 835] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443ea4000 [pid 835] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 835] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 835] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} => {parent_tid=[836]}, 88) = 836 [pid 835] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 835] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 835] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 836 attached [pid 836] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 836] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 836] memfd_create("syzkaller", 0) = 3 [pid 836] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 [pid 832] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 807] +++ exited with 0 +++ [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=807, si_uid=0, si_status=0, si_utime=8, si_stime=22} --- [pid 291] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 291] umount2("./17", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 291] umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 828] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 292] <... umount2 resumed>) = 0 [pid 292] umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./17/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./17/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 292] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(4, 0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 292] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 292] close(4) = 0 [pid 292] rmdir("./17/file0") = 0 [pid 292] umount2("./17/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./17/binderfs") = 0 [pid 292] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./17") = 0 [pid 292] mkdir("./18", 0777) = 0 [pid 292] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 292] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 292] close(3) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee9a690) = 837 ./strace-static-x86_64: Process 837 attached [pid 837] set_robust_list(0x55555ee9a6a0, 24) = 0 [pid 837] chdir("./18") = 0 [pid 837] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 837] setpgid(0, 0) = 0 [pid 837] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 837] write(3, "1000", 4) = 4 [pid 837] close(3) = 0 [pid 837] symlink("/dev/binderfs", "./binderfs") = 0 [pid 837] write(1, "executing program\n", 18executing program ) = 18 [pid 837] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 837] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, NULL, 8) = 0 [pid 837] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 837] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443ea4000 [pid 837] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 837] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 837] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} => {parent_tid=[838]}, 88) = 838 [pid 837] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 837] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 837] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 838 attached [pid 838] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 838] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 838] memfd_create("syzkaller", 0) = 3 [pid 838] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 [pid 832] <... write resumed>) = 20699119 [pid 832] munmap(0x7f143baa4000, 138412032) = 0 [pid 832] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 832] ioctl(4, LOOP_SET_FD, 3 [pid 291] <... umount2 resumed>) = 0 [pid 291] umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./17/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./17/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 291] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(4, 0x55555eea3770 /* 2 entries */, 32768) = 48 [pid 291] getdents64(4, 0x55555eea3770 /* 0 entries */, 32768) = 0 [pid 291] close(4) = 0 [pid 291] rmdir("./17/file0") = 0 [pid 291] umount2("./17/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./17/binderfs") = 0 [pid 291] getdents64(3, 0x55555ee9b730 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./17") = 0 [pid 291] mkdir("./18", 0777) = 0 [pid 291] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 291] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 291] close(3 [pid 832] <... ioctl resumed>) = 0 [pid 832] close(3) = 0 [pid 832] close(4) = 0 [pid 832] mkdir("./file0", 0777) = 0 [pid 832] mount("/dev/loop3", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 291] <... close resumed>) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee9a690) = 839 [pid 828] <... write resumed>) = 20699119 ./strace-static-x86_64: Process 839 attached [pid 828] munmap(0x7f143baa4000, 138412032 [pid 839] set_robust_list(0x55555ee9a6a0, 24) = 0 [pid 839] chdir("./18") = 0 [pid 839] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 839] setpgid(0, 0) = 0 [pid 839] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 839] write(3, "1000", 4) = 4 [pid 839] close(3) = 0 [pid 839] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 828] <... munmap resumed>) = 0 [pid 839] write(1, "executing program\n", 18) = 18 [pid 828] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 839] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 839] rt_sigaction(SIGRT_1, {sa_handler=0x7f1443f2e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1443f1f350}, NULL, 8) = 0 [pid 828] <... openat resumed>) = 4 [pid 839] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 828] ioctl(4, LOOP_SET_FD, 3 [pid 839] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443ea4000 [pid 839] mprotect(0x7f1443ea5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 839] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 839] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ec4990, parent_tid=0x7f1443ec4990, exit_signal=0, stack=0x7f1443ea4000, stack_size=0x20300, tls=0x7f1443ec46c0} => {parent_tid=[842]}, 88) = 842 [pid 839] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 839] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 839] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 842 attached [pid 842] set_robust_list(0x7f1443ec49a0, 24) = 0 [pid 842] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 842] memfd_create("syzkaller", 0) = 3 [pid 842] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f143baa4000 [pid 828] <... ioctl resumed>) = 0 [pid 828] close(3) = 0 [pid 828] close(4) = 0 [pid 828] mkdir("./file0", 0777) = 0 [ 44.208017][ T832] loop3: detected capacity change from 0 to 40427 [ 44.241642][ T832] F2FS-fs (loop3): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 44.267379][ T828] loop4: detected capacity change from 0 to 40427 [ 44.283449][ T832] F2FS-fs (loop3): Found nat_bits in checkpoint [ 44.307081][ T828] F2FS-fs (loop4): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [pid 828] mount("/dev/loop4", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 832] <... mount resumed>) = 0 [pid 836] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 832] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 832] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 832] ioctl(4, LOOP_CLR_FD) = 0 [pid 832] close(4) = 0 [pid 832] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 831] <... futex resumed>) = 0 [pid 832] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 831] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 832] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 832] fspick(AT_FDCWD, "./file0", 0 [pid 831] <... futex resumed>) = 0 [pid 832] <... fspick resumed>) = 4 [pid 831] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 832] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 831] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 832] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 831] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 832] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 831] <... futex resumed>) = 0 [pid 832] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 831] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 828] <... mount resumed>) = 0 [pid 828] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 828] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 828] ioctl(4, LOOP_CLR_FD) = 0 [pid 828] close(4) = 0 [pid 838] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 832] <... fsconfig resumed>) = 0 [pid 828] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 832] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 828] <... futex resumed>) = 1 [pid 827] <... futex resumed>) = 0 [pid 832] <... futex resumed>) = 1 [pid 831] <... futex resumed>) = 0 [pid 832] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 828] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 827] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 832] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 831] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 828] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 827] <... futex resumed>) = 0 [pid 832] openat(AT_FDCWD, "./file0", O_RDONLY [pid 831] <... futex resumed>) = 0 [pid 828] fspick(AT_FDCWD, "./file0", 0 [pid 827] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 832] <... openat resumed>) = 5 [pid 831] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 828] <... fspick resumed>) = 4 [pid 832] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 828] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 832] <... futex resumed>) = 1 [pid 831] <... futex resumed>) = 0 [pid 832] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 828] <... futex resumed>) = 1 [pid 827] <... futex resumed>) = 0 [pid 832] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 831] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 828] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 827] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 832] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [pid 831] <... futex resumed>) = 0 [pid 827] <... futex resumed>) = 0 [pid 831] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 827] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 832] <... ioctl resumed>) = 0 [pid 832] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 831] <... futex resumed>) = 0 [pid 832] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 831] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 832] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 831] <... futex resumed>) = 0 [pid 832] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, [pid 831] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 832] <... prlimit64 resumed>NULL) = 0 [pid 832] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 831] <... futex resumed>) = 0 [pid 832] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 831] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 832] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 831] <... futex resumed>) = 0 [pid 832] sched_setscheduler(0, SCHED_FIFO, [7] [pid 831] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 832] <... sched_setscheduler resumed>) = 0 [pid 832] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 831] <... futex resumed>) = 0 [pid 832] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 831] futex(0x7f1443f956c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 832] <... futex resumed>) = 0 [ 44.355079][ T828] F2FS-fs (loop4): Found nat_bits in checkpoint [ 44.375647][ T832] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [pid 831] <... futex resumed>) = 1 [pid 832] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 831] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 827] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 827] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 827] futex(0x7f1443f956cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 827] futex(0x7f1443f956dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 827] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1443e83000 [pid 827] mprotect(0x7f1443e84000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 827] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 827] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1443ea3990, parent_tid=0x7f1443ea3990, exit_signal=0, stack=0x7f1443e83000, stack_size=0x20300, tls=0x7f1443ea36c0} => {parent_tid=[848]}, 88) = 848 [pid 827] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 827] futex(0x7f1443f956d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 827] futex(0x7f1443f956dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 832] <... mmap resumed>) = 0x200000000000 [pid 832] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 831] <... futex resumed>) = 0 [pid 832] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 831] exit_group(0 [pid 832] <... futex resumed>) = ? [pid 831] <... exit_group resumed>) = ? [pid 832] +++ exited with 0 +++ ./strace-static-x86_64: Process 848 attached [pid 848] set_robust_list(0x7f1443ea39a0, 24) = 0 [pid 848] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 848] openat(AT_FDCWD, "./file0", O_RDONLY) = 5 [pid 848] futex(0x7f1443f956dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 827] <... futex resumed>) = 0 [pid 848] futex(0x7f1443f956d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 827] futex(0x7f1443f956d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 848] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 827] <... futex resumed>) = 0 [pid 848] ioctl(5, F2FS_IOC_SHUTDOWN, 0x200000000140 [ 44.425666][ T828] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [pid 827] futex(0x7f1443f956dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 831] +++ exited with 0 +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=831, si_uid=0, si_status=0, si_utime=9, si_stime=22} --- [pid 293] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 293] umount2("./17", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x55555ee9b730 /* 4 entries */, 32768) = 112 [pid 293] umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW [ 44.524389][ T848] ================================================================== [ 44.532568][ T848] BUG: KASAN: null-ptr-deref in kthread_stop+0x3a/0x3f0 [ 44.539708][ T848] Write of size 4 at addr 0000000000000028 by task syz-executor155/848 [ 44.548040][ T848] [ 44.550490][ T848] CPU: 0 PID: 848 Comm: syz-executor155 Not tainted 6.1.141-syzkaller-00038-ge2deb0b42a3a #0 [ 44.561701][ T848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [pid 842] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 838] <... write resumed>) = 20699119 [pid 838] munmap(0x7f143baa4000, 138412032) = 0 [pid 838] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 838] ioctl(4, LOOP_SET_FD, 3 [pid 836] <... write resumed>) = 20699119 [pid 838] <... ioctl resumed>) = 0 [pid 838] close(3) = 0 [pid 838] close(4) = 0 [pid 838] mkdir("./file0", 0777) = 0 [ 44.572132][ T848] Call Trace: [ 44.575444][ T848] [ 44.578473][ T848] __dump_stack+0x21/0x24 [ 44.583110][ T848] dump_stack_lvl+0xee/0x150 [ 44.587971][ T848] ? __cfi_dump_stack_lvl+0x8/0x8 [ 44.593267][ T848] ? __kasan_check_read+0x11/0x20 [ 44.598416][ T848] ? __sync_dirty_buffer+0x2bd/0x310 [ 44.603899][ T848] ? kthread_stop+0x3a/0x3f0 [ 44.608632][ T848] ? kthread_stop+0x3a/0x3f0 [ 44.613417][ T848] print_report+0x3d/0x60 [ 44.617860][ T848] kasan_report+0x122/0x150 [pid 838] mount("/dev/loop2", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 836] munmap(0x7f143baa4000, 138412032) = 0 [pid 836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 836] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 836] close(3) = 0 [pid 836] close(4) = 0 [pid 836] mkdir("./file0", 0777) = 0 [ 44.622566][ T848] ? kthread_stop+0x3a/0x3f0 [ 44.627249][ T848] kasan_check_range+0x280/0x290 [ 44.632290][ T848] __kasan_check_write+0x14/0x20 [ 44.634895][ T838] loop2: detected capacity change from 0 to 40427 [ 44.637233][ T848] kthread_stop+0x3a/0x3f0 [ 44.637256][ T848] f2fs_stop_gc_thread+0x65/0xb0 [ 44.637275][ T848] __f2fs_ioctl+0x5e7f/0xbd60 [ 44.637293][ T848] ? avc_has_extended_perms+0x95f/0xdc0 [ 44.663861][ T848] ? __cfi_avc_has_extended_perms+0x10/0x10 [ 44.669861][ T848] ? sched_clock_cpu+0x6e/0x250 [pid 836] mount("/dev/loop0", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 842] <... write resumed>) = 20699119 [pid 842] munmap(0x7f143baa4000, 138412032) = 0 [pid 842] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 842] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 842] close(3) = 0 [pid 842] close(4) = 0 [pid 842] mkdir("./file0", 0777) = 0 [pid 842] mount("/dev/loop1", "./file0", "f2fs", 0, "resuid=0x000000000000ee01,background_gc=off,nodiscard,grpjquota=:-(,usrjquota=\\A,jqfmt=vfsv1,active_"... [pid 828] <... fsconfig resumed>) = 0 [pid 828] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 44.674818][ T848] ? __cfi_sched_clock_cpu+0x10/0x10 [ 44.674885][ T836] loop0: detected capacity change from 0 to 40427 [ 44.680109][ T848] ? do_vfs_ioctl+0xc36/0x1c80 [ 44.680138][ T848] ? __ia32_compat_sys_ioctl+0x790/0x790 [ 44.680157][ T848] ? __switch_to+0x51f/0xe30 [ 44.702599][ T848] ? f2fs_ioctl+0x240/0x240 [ 44.707205][ T848] ? __cfi___switch_to+0x10/0x10 [ 44.712240][ T848] ? finish_task_switch+0x16b/0x7b0 [ 44.717639][ T848] ? ioctl_has_perm+0x391/0x4c0 [ 44.722771][ T848] ? has_cap_mac_admin+0x330/0x330 [ 44.728424][ T848] ? __kasan_check_write+0x14/0x20 [ 44.732112][ T842] loop1: detected capacity change from 0 to 40427 [ 44.734428][ T848] ? _raw_spin_lock_irq+0x8f/0xe0 [ 44.734455][ T848] ? __kasan_check_write+0x14/0x20 [ 44.734474][ T848] ? _raw_spin_lock_irq+0x8f/0xe0 [ 44.734492][ T848] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 44.734510][ T848] ? selinux_file_ioctl+0x377/0x480 [ 44.752084][ T836] F2FS-fs (loop0): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 44.752157][ T848] ? memset+0x35/0x40 [ 44.759488][ T838] F2FS-fs (loop2): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 44.764373][ T848] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 44.764405][ T848] ? __fget_files+0x2d5/0x330 [ 44.764427][ T848] f2fs_ioctl+0x149/0x240 [ 44.792876][ T842] F2FS-fs (loop1): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 44.798153][ T848] ? __cfi_f2fs_ioctl+0x10/0x10 [pid 828] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 838] <... mount resumed>) = 0 [pid 838] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 838] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 838] ioctl(4, LOOP_CLR_FD) = 0 [pid 838] close(4) = 0 [pid 838] futex(0x7f1443f956cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 44.822402][ T838] F2FS-fs (loop2): Found nat_bits in checkpoint [ 44.823294][ T848] __se_sys_ioctl+0x12f/0x1b0 [ 44.823323][ T848] __x64_sys_ioctl+0x7b/0x90 [ 44.839766][ T848] x64_sys_call+0x58b/0x9a0 [ 44.844544][ T848] do_syscall_64+0x4c/0xa0 [ 44.849134][ T848] ? clear_bhb_loop+0x30/0x80 [ 44.853911][ T848] ? clear_bhb_loop+0x30/0x80 [ 44.856582][ T838] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 44.859046][ T848] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [pid 838] futex(0x7f1443f956c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 836] <... mount resumed>) = 0 [pid 836] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 836] ioctl(4, LOOP_CLR_FD) = 0 [ 44.873234][ T848] RIP: 0033:0x7f1443f07d89 [ 44.878354][ T848] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 44.899089][ T848] RSP: 002b:00007f1443ea3218 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 44.902316][ T836] F2FS-fs (loop0): Found nat_bits in checkpoint [ 44.908567][ T848] RAX: ffffffffffffffda RBX: 00007f1443f956d8 RCX: 00007f1443f07d89 [pid 836] close(4 [pid 837] <... futex resumed>) = 0 [pid 827] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 44.908584][ T848] RDX: 0000200000000140 RSI: 000000008004587d RDI: 0000000000000005 [ 44.908593][ T848] RBP: 00007f1443f956d0 R08: 0000000000000000 R09: 0000000000000000 [ 44.908601][ T848] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1443f618dc [ 44.908611][ T848] R13: 3505e258dcaaa166 R14: 0000200000000000 R15: b635773f06ebbeee [ 44.953515][ T836] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 44.955691][ T848] [ 44.966433][ T848] ================================================================== [ 44.974843][ T848] Disabling lock debugging due to kernel taint [ 44.981351][ T848] BUG: kernel NULL pointer dereference, address: 0000000000000028 [ 44.985179][ T842] F2FS-fs (loop1): Found nat_bits in checkpoint [ 44.989151][ T848] #PF: supervisor write access in kernel mode [ 44.989172][ T848] #PF: error_code(0x0002) - not-present page [ 45.007637][ T848] PGD 0 P4D 0 [ 45.011001][ T848] Oops: 0002 [#1] PREEMPT SMP KASAN [ 45.016188][ T848] CPU: 0 PID: 848 Comm: syz-executor155 Tainted: G B 6.1.141-syzkaller-00038-ge2deb0b42a3a #0 [ 45.028170][ T848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 45.038729][ T848] RIP: 0010:kthread_stop+0x40/0x3f0 [ 45.044112][ T848] Code: 00 fc ff df e8 91 c8 26 00 0f 1f 44 00 00 e8 87 c8 26 00 4c 8d 73 28 4c 89 f7 be 04 00 00 00 e8 e6 24 6b 00 41 bf 01 00 00 00 44 0f c1 7b 28 31 ff 44 89 fe e8 80 cc 26 00 45 85 ff 0f 84 3e [ 45.064073][ T848] RSP: 0018:ffffc900020e78b8 EFLAGS: 00010246 [ 45.070590][ T848] RAX: ffff888115a61400 RBX: 0000000000000000 RCX: ffff888115a61440 [ 45.078645][ T848] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 45.086789][ T848] RBP: ffffc900020e78e0 R08: dffffc0000000000 R09: fffffbfff0f2ccfd [ 45.095015][ T848] R10: fffffbfff0f2ccfd R11: 1ffffffff0f2ccfc R12: 1ffff11024257135 [ 45.102973][ T848] R13: dffffc0000000000 R14: 0000000000000028 R15: 0000000000000001 [ 45.111033][ T848] FS: 00007f1443ea36c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 45.120060][ T848] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.126748][ T848] CR2: 0000000000000028 CR3: 00000001134c7000 CR4: 00000000003506b0 [ 45.135080][ T848] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 45.143492][ T848] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 45.151744][ T848] Call Trace: [ 45.155715][ T848] [ 45.158847][ T848] f2fs_stop_gc_thread+0x65/0xb0 [ 45.163792][ T848] __f2fs_ioctl+0x5e7f/0xbd60 [ 45.168633][ T848] ? avc_has_extended_perms+0x95f/0xdc0 [ 45.174609][ T848] ? __cfi_avc_has_extended_perms+0x10/0x10 [ 45.181289][ T848] ? sched_clock_cpu+0x6e/0x250 [ 45.186436][ T848] ? __cfi_sched_clock_cpu+0x10/0x10 [ 45.191965][ T848] ? do_vfs_ioctl+0xc36/0x1c80 [ 45.197053][ T848] ? __ia32_compat_sys_ioctl+0x790/0x790 [ 45.203131][ T848] ? __switch_to+0x51f/0xe30 [ 45.208045][ T848] ? f2fs_ioctl+0x240/0x240 [ 45.213244][ T848] ? __cfi___switch_to+0x10/0x10 [ 45.218429][ T848] ? finish_task_switch+0x16b/0x7b0 [ 45.223697][ T848] ? ioctl_has_perm+0x391/0x4c0 [ 45.228706][ T848] ? has_cap_mac_admin+0x330/0x330 [ 45.234036][ T848] ? __kasan_check_write+0x14/0x20 [ 45.239237][ T848] ? _raw_spin_lock_irq+0x8f/0xe0 [ 45.244460][ T848] ? __kasan_check_write+0x14/0x20 [ 45.249679][ T848] ? _raw_spin_lock_irq+0x8f/0xe0 [ 45.254800][ T848] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 45.260590][ T848] ? selinux_file_ioctl+0x377/0x480 [ 45.265864][ T848] ? memset+0x35/0x40 [ 45.269935][ T848] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 45.275673][ T848] ? __fget_files+0x2d5/0x330 [ 45.280373][ T848] f2fs_ioctl+0x149/0x240 [ 45.285333][ T848] ? __cfi_f2fs_ioctl+0x10/0x10 [ 45.290879][ T848] __se_sys_ioctl+0x12f/0x1b0 [ 45.295724][ T848] __x64_sys_ioctl+0x7b/0x90 [ 45.300744][ T848] x64_sys_call+0x58b/0x9a0 [ 45.305231][ T848] do_syscall_64+0x4c/0xa0 [ 45.309977][ T848] ? clear_bhb_loop+0x30/0x80 [ 45.315103][ T848] ? clear_bhb_loop+0x30/0x80 [ 45.320092][ T848] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 45.326779][ T848] RIP: 0033:0x7f1443f07d89 [ 45.331373][ T848] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 45.351151][ T848] RSP: 002b:00007f1443ea3218 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 45.360033][ T848] RAX: ffffffffffffffda RBX: 00007f1443f956d8 RCX: 00007f1443f07d89 [ 45.368632][ T848] RDX: 0000200000000140 RSI: 000000008004587d RDI: 0000000000000005 [ 45.377492][ T848] RBP: 00007f1443f956d0 R08: 0000000000000000 R09: 0000000000000000 [ 45.386835][ T848] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1443f618dc [ 45.395706][ T848] R13: 3505e258dcaaa166 R14: 0000200000000000 R15: b635773f06ebbeee [ 45.405282][ T848] [ 45.409452][ T848] Modules linked in: [ 45.413923][ T848] CR2: 0000000000000028 [ 45.418832][ T848] ---[ end trace 0000000000000000 ]--- [ 45.424946][ T848] RIP: 0010:kthread_stop+0x40/0x3f0 [ 45.431342][ T848] Code: 00 fc ff df e8 91 c8 26 00 0f 1f 44 00 00 e8 87 c8 26 00 4c 8d 73 28 4c 89 f7 be 04 00 00 00 e8 e6 24 6b 00 41 bf 01 00 00 00 44 0f c1 7b 28 31 ff 44 89 fe e8 80 cc 26 00 45 85 ff 0f 84 3e [ 45.454348][ T848] RSP: 0018:ffffc900020e78b8 EFLAGS: 00010246 [ 45.460943][ T848] RAX: ffff888115a61400 RBX: 0000000000000000 RCX: ffff888115a61440 [ 45.469679][ T848] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 45.478361][ T848] RBP: ffffc900020e78e0 R08: dffffc0000000000 R09: fffffbfff0f2ccfd [ 45.487738][ T848] R10: fffffbfff0f2ccfd R11: 1ffffffff0f2ccfc R12: 1ffff11024257135 [ 45.498244][ T848] R13: dffffc0000000000 R14: 0000000000000028 R15: 0000000000000001 [ 45.507311][ T848] FS: 00007f1443ea36c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 45.516951][ T848] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.523625][ T848] CR2: 0000000000000028 CR3: 00000001134c7000 CR4: 00000000003506b0 [ 45.532219][ T848] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 45.540732][ T848] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 45.549146][ T848] Kernel panic - not syncing: Fatal exception [ 45.556381][ T848] Kernel Offset: disabled [ 45.561157][ T848] Rebooting in 86400 seconds..